This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/W80Mf4_ivkezZ0bshb3ksFAV6PY.roa File: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (raw, json) Hash identifier: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk= Subject key identifier: 5B:CD:0C:7F:8F:E2:BE:47:B3:67:46:EC:85:BD:E4:B0:50:15:E8:F6 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C6783AA602BA8F59470EDE9AB4AFB6 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/W80Mf4_ivkezZ0bshb3ksFAV6PY.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198127 IP address blocks: 2a00:e200:104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:78:3a:a6:02:ba:8f:59:47:0e:de:9a:b4:af:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bcd0c7f8fe2be47b36746ec85bde4b05015e8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2d:1d:37:65:15:91:9c:31:0e:d9:ca:aa:1f: 89:8e:c5:85:12:68:88:07:9b:22:79:77:3c:01:c8: f2:2c:0c:bc:6e:0d:83:69:cb:e5:23:34:e2:f9:4f: 6d:75:3c:99:9c:b1:30:f1:0d:d6:e7:81:06:32:47: 74:cf:b4:16:df:61:8f:e5:fa:6c:99:cc:49:cc:eb: 8d:9b:1d:ff:c9:d2:65:b4:e2:fb:54:a0:ce:7b:61: b2:7a:f5:e6:ee:4f:86:fc:93:18:3f:de:1e:a9:6e: d0:dd:1c:e9:65:a1:ac:23:7b:26:a3:95:d2:1b:9b: e6:b3:40:21:b5:da:13:3f:0f:9c:d0:00:86:14:73: 2b:e2:0c:71:3a:b6:2b:a9:7c:6b:2b:1e:47:a8:e2: aa:54:6a:53:51:e9:86:a5:21:1a:19:b8:fc:40:f8: bb:a3:46:e6:21:05:85:8f:71:10:9b:f2:42:0f:4a: 48:41:0e:83:72:69:2b:01:09:ec:77:89:a8:88:42: 88:57:11:56:24:f3:a4:b4:35:45:79:f2:6c:26:e4: 66:8f:25:56:1e:e1:d5:b1:87:94:d1:be:b4:d0:83: f2:cf:9c:ad:8b:86:2d:e5:57:1a:a1:71:85:9b:47: 3a:10:2c:0d:9f:6c:96:d1:77:a8:89:a4:f1:02:68: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CD:0C:7F:8F:E2:BE:47:B3:67:46:EC:85:BD:E4:B0:50:15:E8:F6 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/W80Mf4_ivkezZ0bshb3ksFAV6PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:e200:104::/48 Signature Algorithm: sha256WithRSAEncryption 02:c0:a5:55:b8:2c:60:be:08:f6:1a:ec:14:a3:d1:5e:e5:89: 9f:6f:ad:98:57:1e:60:dd:fd:1c:8f:73:8d:67:4d:98:b3:50: e8:ae:1b:34:1e:72:a8:73:43:b5:93:45:58:3e:6d:ab:d0:3f: 51:ca:39:9c:88:15:82:42:85:70:d3:be:2c:f9:9c:51:c9:3f: 9a:74:8e:0b:78:01:1f:f4:ef:52:35:70:03:85:38:dd:1a:01: 87:c8:69:c0:3e:42:26:84:8d:29:e5:50:55:dc:8a:6e:25:99: 43:99:12:0f:c9:4d:d3:97:71:ca:f7:87:0e:8a:81:5d:03:16: 03:2f:43:f4:f8:79:b7:ce:f0:a1:b1:0c:31:75:c5:7d:1e:32: 3c:b9:a1:ba:31:79:b8:d4:24:a0:d5:0d:6e:9a:2a:52:31:c4: 04:3f:e5:d9:13:a4:0a:8b:b7:d1:9c:24:dd:eb:b6:4a:d6:31: 88:61:a7:d0:80:ff:d1:25:e1:02:c4:e7:e3:6c:31:1f:66:29: a1:72:6c:b2:6e:c1:81:b6:fc:2a:6b:42:f3:60:18:21:2b:61: 12:a9:7f:73:f4:b8:78:4f:83:97:92:26:47:ca:8a:bf:82:75: f7:34:34:58:65:07:d7:ea:84:28:e3:88:3c:96:dd:3e:7b:9e: 1c:d4:44:23 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xng6pgK6j1lHDt6atK+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmNkMGM3ZjhmZTJiZTQ3YjM2NzQ2ZWM4NWJkZTRiMDUwMTVlOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C0dN2UVkZwxDtnKqh+JjsWFEmiI B5sieXc8AcjyLAy8bg2DacvlIzTi+U9tdTyZnLEw8Q3W54EGMkd0z7QW32GP5fps mcxJzOuNmx3/ydJltOL7VKDOe2GyevXm7k+G/JMYP94eqW7Q3RzpZaGsI3smo5XS G5vms0AhtdoTPw+c0ACGFHMr4gxxOrYrqXxrKx5HqOKqVGpTUemGpSEaGbj8QPi7 o0bmIQWFj3EQm/JCD0pIQQ6DcmkrAQnsd4moiEKIVxFWJPOktDVFefJsJuRmjyVW HuHVsYeU0b600IPyz5yti4Yt5VcaoXGFm0c6ECwNn2yW0XeoiaTxAmjvQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFvNDH+P4r5Hs2dG7IW95LBQFej2MB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvVzgwTWY0X2l2a2V6WjBic2hiM2tzRkFWNlBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDiAAEE MA0GCSqGSIb3DQEBCwUAA4IBAQACwKVVuCxgvgj2GuwUo9Fe5Ymfb62YVx5g3f0c j3ONZ02Ys1Dorhs0HnKoc0O1k0VYPm2r0D9RyjmciBWCQoVw074s+ZxRyT+adI4L eAEf9O9SNXADhTjdGgGHyGnAPkImhI0p5VBV3IpuJZlDmRIPyU3Tl3HK94cOioFd AxYDL0P0+Hm3zvChsQwxdcV9HjI8uaG6MXm41CSg1Q1umipSMcQEP+XZE6QKi7fR nCTd67ZK1jGIYafQgP/RJeECxOfjbDEfZimhcmyybsGBtvwqa0LzYBghK2ESqX9z 9Lh4T4OXkiZHyoq/gnX3NDRYZQfX6oQo44g8lt0+e54c1EQj -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:35 2026 by rpki-client