This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa File: 5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa (raw, json) Hash identifier: gMzNQr0CHei7E1lRV/ytteIthIW9m0i5qgAObYiInOc= Subject key identifier: E4:2B:09:41:B9:37:EF:18:97:A3:2D:E1:C0:7F:03:F9:81:BE:E4:AB Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Certificate serial: 019B797E621B056EC93CC8CB330B4B62878C Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 2001:67c:7ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:62:1b:05:6e:c9:3c:c8:cb:33:0b:4b:62:87:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e42b0941b937ef1897a32de1c07f03f981bee4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4b:f4:11:44:4a:c3:66:79:cb:8b:28:f3:42: 48:95:d2:00:0e:7b:50:bd:5c:a3:26:f1:44:71:1c: a7:13:50:b6:2e:86:da:df:ec:f8:40:3d:92:50:2d: 02:ff:ec:7e:72:eb:d6:a6:e5:af:2d:53:8c:cf:13: 33:06:a6:43:ce:98:ff:ce:06:a2:7c:bc:99:31:49: ab:9e:7f:69:c9:cb:9f:6c:6f:f9:ba:3e:2f:af:8b: ec:ca:72:17:f6:5b:56:6b:06:90:93:82:af:69:84: de:0d:3e:d6:3e:71:52:51:1a:99:76:b6:f4:07:11: f8:15:ff:9a:cf:a8:3e:55:c1:08:79:43:f1:84:7b: a5:fb:e3:c9:88:84:f0:4e:d9:34:2c:5c:74:e9:4c: dd:68:9a:28:ce:07:78:96:fc:2c:37:2e:1c:31:d7: a0:29:ee:fd:b6:83:e6:1e:89:52:cd:21:45:5a:de: 17:74:38:e4:bd:0b:7f:82:5f:cf:e7:de:66:4e:ac: 34:20:4c:63:02:4c:b9:c2:95:dc:70:70:f0:58:2f: 2f:d9:8c:3f:4c:42:93:20:37:23:b7:54:56:16:35: 7f:80:41:59:21:e1:cc:4f:ac:52:53:40:35:55:03: 2f:71:5a:f5:2f:ba:cb:be:ff:bf:e2:96:4e:38:75: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2B:09:41:B9:37:EF:18:97:A3:2D:E1:C0:7F:03:F9:81:BE:E4:AB X509v3 Authority Key Identifier: keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:7ac::/48 Signature Algorithm: sha256WithRSAEncryption 08:c7:de:9a:ec:95:72:34:47:5c:ac:8d:21:e9:1d:c6:f9:5f: 3e:2a:a9:e6:3c:4d:af:45:84:4d:6a:bf:87:f9:4b:a6:2d:ec: 7f:ba:ac:f0:78:78:4f:63:ee:42:ff:8c:cc:6e:e6:e8:92:4d: 34:93:0f:24:4f:27:83:6f:81:97:43:90:e5:7f:46:5f:4d:01: 11:87:b0:c7:1b:de:06:c5:13:67:1a:aa:30:1a:ae:2d:72:8f: 91:33:cb:ac:c3:2d:65:8d:b4:f0:e1:14:71:07:44:9f:1d:22: f2:9b:71:97:db:a2:11:1f:49:e1:1b:82:70:4f:c9:85:88:d0: ce:6f:41:71:8e:28:2a:58:3d:15:9c:ee:b0:ea:a0:49:73:80: 4a:7d:7a:cc:fb:a3:e8:5b:58:68:b3:e1:8f:00:cf:e3:63:28: bf:4d:8a:af:fd:73:58:b8:04:c1:77:aa:fc:2e:23:6f:33:55: 47:42:b5:28:29:4d:19:7e:ad:32:3e:c2:3a:bf:55:8f:bd:29: aa:9d:a9:a4:c7:97:5b:14:67:38:86:07:ba:be:14:3a:bd:34: be:a6:86:d1:80:3b:99:cb:86:c9:7f:d1:0e:5e:d2:c8:6d:b2: 60:59:8f:be:27:a4:d0:62:2f:43:cb:3f:64:37:9d:1a:94:8f: 4e:7d:b5:f9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fmIbBW7JPMjLMwtLYoeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5 Y2ViNmUwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDJiMDk0MWI5MzdlZjE4OTdhMzJkZTFjMDdmMDNmOTgxYmVlNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kv0EURKw2Z5y4so80JIldIADntQ vVyjJvFEcRynE1C2Loba3+z4QD2SUC0C/+x+cuvWpuWvLVOMzxMzBqZDzpj/zgai fLyZMUmrnn9pycufbG/5uj4vr4vsynIX9ltWawaQk4KvaYTeDT7WPnFSURqZdrb0 BxH4Ff+az6g+VcEIeUPxhHul++PJiITwTtk0LFx06UzdaJoozgd4lvwsNy4cMdeg Ke79toPmHolSzSFFWt4XdDjkvQt/gl/P595mTqw0IExjAky5wpXccHDwWC8v2Yw/ TEKTIDcjt1RWFjV/gEFZIeHMT6xSU0A1VQMvcVr1L7rLvv+/4pZOOHV+UwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOQrCUG5N+8Yl6Mt4cB/A/mBvuSrMB8GA1UdIwQY MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt MWIxYzgyNmU3YjhlLzEvNUNzSlFiazM3eGlYb3kzaHdIOEQtWUctNUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAes MA0GCSqGSIb3DQEBCwUAA4IBAQAIx96a7JVyNEdcrI0h6R3G+V8+KqnmPE2vRYRN ar+H+UumLex/uqzweHhPY+5C/4zMbubokk00kw8kTyeDb4GXQ5Dlf0ZfTQERh7DH G94GxRNnGqowGq4tco+RM8uswy1ljbTw4RRxB0SfHSLym3GX26IRH0nhG4JwT8mF iNDOb0FxjigqWD0VnO6w6qBJc4BKfXrM+6PoW1hos+GPAM/jYyi/TYqv/XNYuATB d6r8LiNvM1VHQrUoKU0Zfq0yPsI6v1WPvSmqnamkx5dbFGc4hge6vhQ6vTS+pobR gDuZy4bJf9EOXtLIbbJgWY++J6TQYi9Dyz9kN50alI9OfbX5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:42 2026 by rpki-client