This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5XaYsThQt8o93-Zb9pkEjS-v3zw.roa File: 5XaYsThQt8o93-Zb9pkEjS-v3zw.roa (raw, json) Hash identifier: 2+2DRBSLLaEWWgWy2ZJTvVFHZmzoeLqbLIsJLQP8djA= Subject key identifier: E5:76:98:B1:38:50:B7:CA:3D:DF:E6:5B:F6:99:04:8D:2F:AF:DF:3C Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB54B710CC44D70FEEB2EF0499D95 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5XaYsThQt8o93-Zb9pkEjS-v3zw.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a06:e5c0::/29 maxlen: 48 2a09:96c0::/29 maxlen: 48 2a09:ae80::/29 maxlen: 48 2a09:b440::/48 maxlen: 48 2a13:4bc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b5:4b:71:0c:c4:4d:70:fe:eb:2e:f0:49:9d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e57698b13850b7ca3ddfe65bf699048d2fafdf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:bb:dd:98:90:71:a7:d2:06:e1:4e:39:b7: 21:a2:ec:ef:0c:f5:be:c0:40:a0:0b:95:9d:eb:ae: 23:09:a7:49:97:2b:1b:67:a3:f2:eb:84:2c:81:7e: 9a:d6:8a:cd:21:f5:db:e5:94:83:23:8c:3d:13:ac: 75:29:b9:58:28:a1:a8:21:19:3f:28:c0:c5:3f:d5: d4:39:17:62:34:15:1a:af:17:9b:3a:ff:70:93:62: 30:02:cf:a1:12:37:ef:fe:89:9c:c5:69:72:5b:55: 87:19:0d:03:f4:58:0a:b1:6a:86:ac:83:fe:61:0f: 2d:7f:42:bf:71:e8:ed:fe:de:bc:5f:5c:21:a2:48: 83:88:87:f1:42:e8:98:d0:6e:d7:8c:63:47:c7:fa: a1:52:11:a8:8a:cc:68:3f:b6:0b:b0:e8:bc:19:a9: 41:16:06:bd:5d:21:23:ae:0d:4d:f0:34:ea:d7:e4: 35:1d:f7:6c:23:21:e1:19:1e:61:b7:8a:32:d1:2e: ae:da:74:d0:6e:fc:53:3a:48:99:38:23:a2:26:ad: 4e:a9:d9:46:6c:65:3b:ed:56:c7:08:e6:06:58:18: aa:2e:8c:7d:aa:ed:eb:e8:f9:cd:eb:1a:0c:6b:31: 5e:95:db:20:3e:c8:8b:ca:95:49:12:31:15:fa:fa: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:76:98:B1:38:50:B7:CA:3D:DF:E6:5B:F6:99:04:8D:2F:AF:DF:3C X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5XaYsThQt8o93-Zb9pkEjS-v3zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e5c0::/29 2a09:96c0::/29 2a09:ae80::/29 2a09:b440::/48 2a13:4bc0::/29 Signature Algorithm: sha256WithRSAEncryption 58:1f:88:d2:1b:c3:ce:54:8a:f6:d2:85:52:44:0d:74:59:78: 25:d5:09:af:89:e4:a6:0a:c5:e9:66:0d:3b:03:f7:f2:2b:36: 20:da:1f:03:f5:fd:c2:d6:ab:f2:e6:07:c8:68:79:85:25:48: a3:e4:8a:ea:22:87:8d:59:fa:16:d8:76:b2:fe:25:dc:7a:f5: 31:90:35:8a:16:a9:c3:63:01:c5:c4:d8:08:9e:ca:e6:e6:75: 07:34:17:4b:7f:a9:b9:26:a0:5f:e4:e1:b7:31:30:76:73:0c: 80:a7:15:e6:15:cd:ff:7a:d4:49:ac:18:82:f5:79:55:78:48: 2f:d3:bb:25:b5:e2:ff:54:b4:b7:32:21:a0:e1:28:fb:d8:39: cd:d7:1d:f8:09:28:62:1c:09:ed:4d:95:56:39:2d:0c:97:82: 44:84:8c:4b:0f:53:41:d0:a3:31:5a:7f:e6:78:a8:8e:1a:d2: 21:54:74:23:c5:f3:73:4c:e7:bd:4a:35:b5:32:aa:db:bf:b2: ab:fa:61:92:ce:fc:94:86:0d:5a:9c:09:3b:ea:5c:0c:ea:9e: 94:06:4a:58:1e:5c:dc:5b:e1:0e:f3:51:c9:0a:02:53:e6:2f: 44:a2:03:54:ec:72:c7:d3:88:73:1c:9e:de:be:d8:25:41:f0: 9b:b2:80:d4 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt26rVLcQzETXD+6y7wSZ2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTc2OThiMTM4NTBiN2NhM2RkZmU2NWJmNjk5MDQ4ZDJmYWZkZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07S73ZiQcafSBuFOObchouzvDPW+ wECgC5Wd664jCadJlysbZ6Py64QsgX6a1orNIfXb5ZSDI4w9E6x1KblYKKGoIRk/ KMDFP9XUORdiNBUarxebOv9wk2IwAs+hEjfv/omcxWlyW1WHGQ0D9FgKsWqGrIP+ YQ8tf0K/cejt/t68X1whokiDiIfxQuiY0G7XjGNHx/qhUhGoisxoP7YLsOi8GalB Fga9XSEjrg1N8DTq1+Q1HfdsIyHhGR5ht4oy0S6u2nTQbvxTOkiZOCOiJq1OqdlG bGU77VbHCOYGWBiqLox9qu3r6PnN6xoMazFeldsgPsiLypVJEjEV+voLYwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFOV2mLE4ULfKPd/mW/aZBI0vr988MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvNVhhWXNUaFF0OG85My1aYjlwa0VqUy12M3p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAAjAlAwUDKgblwAMF AyoJlsADBQMqCa6AAwcAKgm0QAAAAwUDKhNLwDANBgkqhkiG9w0BAQsFAAOCAQEA WB+I0hvDzlSK9tKFUkQNdFl4JdUJr4nkpgrF6WYNOwP38is2INofA/X9wtar8uYH yGh5hSVIo+SK6iKHjVn6Fth2sv4l3Hr1MZA1ihapw2MBxcTYCJ7K5uZ1BzQXS3+p uSagX+ThtzEwdnMMgKcV5hXN/3rUSawYgvV5VXhIL9O7JbXi/1S0tzIhoOEo+9g5 zdcd+AkoYhwJ7U2VVjktDJeCRISMSw9TQdCjMVp/5niojhrSIVR0I8Xzc0znvUo1 tTKq27+yq/phks78lIYNWpwJO+pcDOqelAZKWB5c3FvhDvNRyQoCU+YvRKIDVOxy x9OIcxye3r7YJUHwm7KA1A== -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:45 2026 by rpki-client