This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5T12soCerDwH9fTcd_eL0jQx_Pg.roa File: 5T12soCerDwH9fTcd_eL0jQx_Pg.roa (raw, json) Hash identifier: FF9rNNvm6bvam+8hVQFa+FBKuN9UYUZBPeUFrusqZb4= Subject key identifier: E5:3D:76:B2:80:9E:AC:3C:07:F5:F4:DC:77:F7:8B:D2:34:31:FC:F8 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EADD627D580F7FB32D289FC08E1B9D Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5T12soCerDwH9fTcd_eL0jQx_Pg.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216157 IP address blocks: 2a0f:5ec0::/29 maxlen: 32 2a0f:7fc0::/29 maxlen: 32 2a0f:edc0::/29 maxlen: 32 2a0f:fb40::/29 maxlen: 32 2a11:6600::/29 maxlen: 32 2a11:6c00::/29 maxlen: 32 2a11:d400::/29 maxlen: 32 2a11:f086::/32 maxlen: 36 2a12:3c80::/29 maxlen: 32 2a12:e4c0::/29 maxlen: 32 2a13:3a80::/29 maxlen: 32 2a13:3e80::/29 maxlen: 32 2a13:4680::/29 maxlen: 32 2a13:64c0::/29 maxlen: 32 2a13:6540::/29 maxlen: 32 2a13:6840::/29 maxlen: 32 2a13:68c0::/29 maxlen: 32 2a13:69c0::/29 maxlen: 32 2a13:6a40::/29 maxlen: 32 2a13:6ac0::/29 maxlen: 32 2a13:6bc0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dd:62:7d:58:0f:7f:b3:2d:28:9f:c0:8e:1b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e53d76b2809eac3c07f5f4dc77f78bd23431fcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f7:b7:d4:56:0e:13:0e:c4:e1:1c:51:2d:70: ad:b6:cd:73:c4:df:3b:2b:ab:f4:75:ed:b2:2e:3c: 7a:2b:c0:3d:17:4e:b8:5c:60:86:8c:85:2f:4b:3a: 82:32:1a:0d:df:9c:7c:e2:6f:63:a2:20:aa:b2:c6: da:80:35:1b:c2:52:27:d9:d8:94:12:2a:57:cf:04: 29:31:55:a9:33:dd:d3:3c:34:32:26:86:57:7e:c2: c8:49:50:7a:58:51:59:4c:c9:ed:52:6c:71:f7:04: ee:15:74:1b:6c:70:c7:78:7a:4b:15:9f:9f:47:21: fd:14:61:57:63:78:59:a0:45:49:0d:93:d9:a2:1a: a4:1a:76:fc:f3:19:6d:75:9e:9f:19:df:99:da:9e: 34:3d:51:48:3c:5d:3c:b2:6b:96:13:35:80:05:c3: d9:0d:0f:3f:d2:16:d2:26:85:80:3d:ea:4d:49:db: 98:a0:23:db:ce:f3:09:10:90:e5:9d:02:89:75:50: 08:4d:78:18:af:ca:ba:70:9a:fc:09:e9:1b:c9:01: bd:7c:3c:1a:58:ca:47:e8:f0:e0:be:0e:80:58:24: b7:c4:99:bc:5f:4c:cf:c4:4d:49:c1:84:57:17:d3: e7:53:7b:41:2b:9e:72:77:ae:4f:6b:f8:c3:40:b4: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3D:76:B2:80:9E:AC:3C:07:F5:F4:DC:77:F7:8B:D2:34:31:FC:F8 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5T12soCerDwH9fTcd_eL0jQx_Pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5ec0::/29 2a0f:7fc0::/29 2a0f:edc0::/29 2a0f:fb40::/29 2a11:6600::/29 2a11:6c00::/29 2a11:d400::/29 2a11:f086::/32 2a12:3c80::/29 2a12:e4c0::/29 2a13:3a80::/29 2a13:3e80::/29 2a13:4680::/29 2a13:64c0::/29 2a13:6540::/29 2a13:6840::/29 2a13:68c0::/29 2a13:69c0::/29 2a13:6a40::/29 2a13:6ac0::/29 2a13:6bc0::/29 Signature Algorithm: sha256WithRSAEncryption 55:f3:9d:25:ca:59:8d:26:ee:8a:5c:26:24:ec:da:e4:aa:31: 07:e9:ab:3e:71:ab:f9:b2:3c:9d:b9:cc:9f:ac:88:9c:17:bd: bf:89:7b:d5:fa:39:ad:68:a4:6f:fb:15:0a:38:17:37:ec:f0: cc:41:d1:3e:19:0f:fb:f3:df:d7:54:bb:3e:ab:a3:90:60:74: 54:72:91:2f:c4:b4:e5:0b:d1:ff:8c:7e:64:48:6a:56:b5:dd: 81:41:06:73:57:83:02:d3:64:e9:57:df:37:cd:6e:5b:11:ef: ea:aa:06:c4:4b:06:f5:9c:1a:9c:2a:57:06:8e:4d:57:4c:54: 5e:f1:8e:bf:f3:d8:f6:a2:8b:c9:e5:62:89:c2:8b:90:fe:cf: f8:1d:4a:8d:31:b9:62:fc:61:d1:44:79:d2:a8:4e:86:0a:39: de:45:d1:dc:b0:0d:79:c4:0f:eb:92:5b:10:3b:64:13:24:74: 9d:d6:13:3f:54:7d:29:6a:6e:c2:ca:6c:3d:25:fc:d7:4f:03: d1:40:d8:5f:c0:63:96:f0:e1:07:c3:a2:26:2d:26:71:f5:c8: c0:72:8c:f2:8d:db:05:32:89:e7:14:fd:c4:83:8d:de:10:fb: 16:1f:fd:13:b8:d7:e5:e4:a2:6a:f5:5b:88:f9:63:8a:c4:fd: da:16:eb:82 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26t1ifVgPf7MtKJ/AjhudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTNkNzZiMjgwOWVhYzNjMDdmNWY0ZGM3N2Y3OGJkMjM0MzFmY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/e31FYOEw7E4RxRLXCtts1zxN87 K6v0de2yLjx6K8A9F064XGCGjIUvSzqCMhoN35x84m9joiCqssbagDUbwlIn2diU EipXzwQpMVWpM93TPDQyJoZXfsLISVB6WFFZTMntUmxx9wTuFXQbbHDHeHpLFZ+f RyH9FGFXY3hZoEVJDZPZohqkGnb88xltdZ6fGd+Z2p40PVFIPF08smuWEzWABcPZ DQ8/0hbSJoWAPepNSduYoCPbzvMJEJDlnQKJdVAITXgYr8q6cJr8CekbyQG9fDwa WMpH6PDgvg6AWCS3xJm8X0zPxE1JwYRXF9PnU3tBK55yd65Pa/jDQLSOoQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFOU9drKAnqw8B/X03Hf3i9I0Mfz4MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvNVQxMnNvQ2VyRHdIOWZUY2RfZUwwalF4X1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAIwgZMDBQMq D17AAwUDKg9/wAMFAyoP7cADBQMqD/tAAwUDKhFmAAMFAyoRbAADBQMqEdQAAwUA KhHwhgMFAyoSPIADBQMqEuTAAwUDKhM6gAMFAyoTPoADBQMqE0aAAwUDKhNkwAMF AyoTZUADBQMqE2hAAwUDKhNowAMFAyoTacADBQMqE2pAAwUDKhNqwAMFAyoTa8Aw DQYJKoZIhvcNAQELBQADggEBAFXznSXKWY0m7opcJiTs2uSqMQfpqz5xq/myPJ25 zJ+siJwXvb+Je9X6Oa1opG/7FQo4Fzfs8MxB0T4ZD/vz39dUuz6ro5BgdFRykS/E tOUL0f+MfmRIala13YFBBnNXgwLTZOlX3zfNblsR7+qqBsRLBvWcGpwqVwaOTVdM VF7xjr/z2Paii8nlYonCi5D+z/gdSo0xuWL8YdFEedKoToYKOd5F0dywDXnED+uS WxA7ZBMkdJ3WEz9UfSlqbsLKbD0l/NdPA9FA2F/AY5bw4QfDoiYtJnH1yMByjPKN 2wUyiecU/cSDjd4Q+xYf/RO41+Xkomr1W4j5Y4rE/doW64I= -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:57 2026 by rpki-client