This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/c5iqUIc8noKOy7UD8GkrWGU7fj0.roa File: c5iqUIc8noKOy7UD8GkrWGU7fj0.roa (raw, json) Hash identifier: BmgZ1dArAKkBlcFVm1xs7XBPtfXSfu4Z35p4ZQFEWzI= Subject key identifier: 73:98:AA:50:87:3C:9E:82:8E:CB:B5:03:F0:69:2B:58:65:3B:7E:3D Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E08A1AA2EE206939BBF895BA2EDA Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/c5iqUIc8noKOy7UD8GkrWGU7fj0.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131668 IP address blocks: 2a0f:5707:ffa0::/46 maxlen: 48 2a0f:5707:ffa4::/46 maxlen: 48 2a0f:5707:fff2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e0:8a:1a:a2:ee:20:69:39:bb:f8:95:ba:2e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7398aa50873c9e828ecbb503f0692b58653b7e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:d7:f6:74:bb:8b:72:5a:5c:79:4d:7e:ef: 73:ea:a3:55:e0:c6:73:98:72:54:07:7a:8a:38:1e: 22:f0:80:67:11:3d:26:db:6c:48:1a:f2:cc:2d:4f: 77:71:f2:ed:2d:a8:2b:16:c9:b8:9e:13:13:c6:b1: 56:04:05:49:26:89:ef:a8:84:39:d6:ae:bf:46:3c: b1:25:4d:b9:3f:e4:c9:50:ee:69:62:a0:27:50:b2: 28:ef:5d:1c:89:55:50:03:5f:63:a2:7e:2e:57:a4: 67:b2:04:4c:4e:07:9b:c8:42:56:d1:3f:70:b0:2c: eb:48:d1:5d:57:0d:f3:ff:a2:b0:0e:49:12:63:70: bd:19:5b:54:f4:8e:a5:d6:da:fe:6b:1f:28:e1:aa: 2b:43:be:90:8c:d0:3e:12:08:77:64:84:8b:66:be: a5:8f:89:c9:4b:ae:82:c5:94:9b:11:44:b3:75:30: 5e:84:61:92:99:1b:8a:bf:48:66:ec:51:93:f1:db: b7:f6:51:19:3d:98:c6:03:0e:ec:c8:68:05:f2:65: 0c:f2:97:ac:b1:20:e0:39:32:b4:f6:31:01:ec:3c: 29:9d:6e:b7:d3:5d:d1:c3:f7:a7:fb:74:ba:ec:4a: 65:94:87:b1:19:98:66:b8:4f:48:d4:8e:c8:02:68: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:98:AA:50:87:3C:9E:82:8E:CB:B5:03:F0:69:2B:58:65:3B:7E:3D X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/c5iqUIc8noKOy7UD8GkrWGU7fj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ffa0::/45 2a0f:5707:fff2::/48 Signature Algorithm: sha256WithRSAEncryption 14:4c:88:36:4f:33:9c:25:84:72:ed:a5:19:bd:09:14:75:7c: 72:dd:89:09:ce:d6:7a:e5:26:0e:5d:bc:0f:85:d3:cd:f2:a8: ca:96:c4:8b:42:b5:9f:17:e0:97:35:c3:3a:87:d9:d4:02:24: d3:42:44:fc:df:01:54:8a:c4:8a:56:20:a3:9f:29:9f:1b:d4: 4c:4b:63:8d:95:4e:6c:04:b8:e1:0e:f0:1d:4c:02:b5:86:be: ce:3f:32:f8:42:5f:cf:4b:06:58:2c:9c:22:a7:74:1f:54:84: a9:f8:e1:87:22:dd:eb:da:c4:c9:b0:c3:c2:6e:1e:fb:5b:48: e9:67:05:76:74:f8:b7:16:61:19:dc:ca:1d:82:55:ef:c9:4d: be:58:76:4a:8e:98:10:9e:13:38:8f:5d:04:aa:d6:f0:79:01: ff:1b:f3:a1:47:49:5b:53:b1:97:9c:46:97:76:c8:fd:e7:9c: 41:3a:f0:b5:48:80:ab:1e:d9:34:e2:0c:39:9c:19:ad:a1:a2: 11:4c:bc:26:5e:a9:ad:36:63:53:99:46:63:1d:b5:ac:5b:e3: 24:8a:dc:a8:30:b2:45:ef:a7:f8:d6:9c:ae:17:ef:3a:1f:6f: 7d:f3:91:71:24:3a:40:9b:87:70:15:93:e0:b1:e2:ee:bb:64: 81:01:14:a8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WOCKGqLuIGk5u/iVui7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzk4YWE1MDg3M2M5ZTgyOGVjYmI1MDNmMDY5MmI1ODY1M2I3ZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreTX9nS7i3JaXHlNfu9z6qNV4MZz mHJUB3qKOB4i8IBnET0m22xIGvLMLU93cfLtLagrFsm4nhMTxrFWBAVJJonvqIQ5 1q6/RjyxJU25P+TJUO5pYqAnULIo710ciVVQA19jon4uV6RnsgRMTgebyEJW0T9w sCzrSNFdVw3z/6KwDkkSY3C9GVtU9I6l1tr+ax8o4aorQ76QjNA+Egh3ZISLZr6l j4nJS66CxZSbEUSzdTBehGGSmRuKv0hm7FGT8du39lEZPZjGAw7syGgF8mUM8pes sSDgOTK09jEB7DwpnW63013Rw/en+3S67EpllIexGZhmuE9I1I7IAmhqxQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHOYqlCHPJ6Cjsu1A/BpK1hlO349MB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvYzVpcVVJYzhub0tPeTdVRDhHa3JXR1U3ZmowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcDKg9XB/+g AwcAKg9XB//yMA0GCSqGSIb3DQEBCwUAA4IBAQAUTIg2TzOcJYRy7aUZvQkUdXxy 3YkJztZ65SYOXbwPhdPN8qjKlsSLQrWfF+CXNcM6h9nUAiTTQkT83wFUisSKViCj nymfG9RMS2ONlU5sBLjhDvAdTAK1hr7OPzL4Ql/PSwZYLJwip3QfVISp+OGHIt3r 2sTJsMPCbh77W0jpZwV2dPi3FmEZ3ModglXvyU2+WHZKjpgQnhM4j10EqtbweQH/ G/OhR0lbU7GXnEaXdsj955xBOvC1SICrHtk04gw5nBmtoaIRTLwmXqmtNmNTmUZj HbWsW+MkityoMLJF76f41pyuF+86H29985FxJDpAm4dwFZPgseLuu2SBARSo -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:59 2026 by rpki-client