This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa
File: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (raw, json)
Hash identifier: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=
Subject key identifier: E5:88:34:2F:26:0F:D9:C1:B3:EA:DA:A7:1F:6B:12:33:3B:BA:62:B2
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 019B775889286F50DC0641B5701C8CD41F00
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa
Signing time: Thu 01 Jan 2026 02:17:29 +0000
ROA not before: Thu 01 Jan 2026 02:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2486
IP address blocks: 2001:660:3005::/48 maxlen: 48
2001:660:3006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:89:28:6f:50:dc:06:41:b5:70:1c:8c:d4:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 02:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e588342f260fd9c1b3eadaa71f6b12333bba62b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:c5:34:e8:20:53:33:87:24:63:20:66:55:
d7:1a:06:e7:e7:1a:f1:9f:10:53:b8:38:5d:bc:c2:
2b:81:9c:3a:b5:e9:3e:40:f8:d7:20:f5:52:53:6a:
a0:74:8a:2a:13:3c:c0:7f:53:b4:84:fa:bc:fb:7e:
8a:74:dd:09:bf:93:83:5f:89:22:70:14:27:68:96:
c2:36:30:ea:3a:54:dd:aa:02:8c:a2:db:71:05:32:
6e:f3:17:71:ae:19:aa:cb:21:b6:77:6b:53:de:03:
78:58:29:25:2f:20:cb:2e:77:09:37:c9:ac:8d:14:
8e:1e:fc:19:5d:ab:86:19:d2:50:bd:15:c3:16:05:
57:4a:e0:fb:c7:7b:1d:76:95:25:50:0d:4a:4d:f5:
9f:43:e0:18:47:ac:bc:3b:e0:4d:d9:95:ba:be:ee:
53:31:cd:d8:ff:6e:b5:29:ce:81:07:7b:e3:08:46:
06:6f:b8:c9:b0:eb:04:30:82:ba:ef:87:11:c2:dd:
df:80:a5:f5:f3:f6:49:f7:d8:a2:be:db:c5:75:a9:
69:24:93:b1:56:81:5b:dc:62:88:8f:5b:0d:66:63:
1e:20:a3:84:50:be:d6:f9:b1:47:5a:d7:d0:31:2b:
38:f8:3e:b8:40:fc:1e:c1:80:9e:f9:ba:20:48:43:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:34:2F:26:0F:D9:C1:B3:EA:DA:A7:1F:6B:12:33:3B:BA:62:B2
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:660:3005::-2001:660:3006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:7a:78:8d:b4:7a:16:46:7c:a4:ef:b9:ba:71:c4:51:4a:a2:
36:61:38:df:94:7d:fa:7f:01:53:5d:c2:bb:a9:4b:f7:ea:af:
a3:c4:97:20:45:19:32:b4:c6:22:4f:c3:0e:fc:d3:c8:52:93:
eb:82:30:79:ab:2d:30:12:b4:38:64:fd:98:39:a6:97:05:b4:
27:3a:b3:7d:10:d4:53:de:bc:33:e1:62:74:63:ca:ab:e5:2a:
25:47:61:c4:b4:76:49:b5:4a:60:6f:a8:a5:6c:3c:cf:22:a3:
8e:17:53:98:4f:74:c2:75:97:fe:6e:56:b4:9d:02:77:88:3a:
ea:ed:f7:5a:ce:bf:32:2d:3e:79:05:6d:1f:be:32:e6:42:98:
74:28:e2:62:23:5d:cf:fe:ff:b6:8d:34:9d:82:81:5c:f7:c7:
cc:bd:65:82:e3:06:9b:f6:01:b3:da:a0:c7:b1:d9:6c:2a:fd:
4b:a9:af:da:8a:41:64:46:19:8c:9a:c1:d2:b1:be:b8:0d:85:
84:de:9b:fd:22:49:4e:6a:47:00:51:15:1e:01:dd:90:b4:73:
40:86:d0:a7:59:a8:29:7e:86:2f:55:6e:bd:a2:42:54:95:80:
53:9a:d6:40:b4:02:b6:09:e1:15:80:1f:38:61:83:79:98:76:
cc:86:76:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:38:57 2026 by rpki-client