This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/5DaV4gudkDeBpkpNjorFjKdwKas.roa File: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (raw, json) Hash identifier: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI= Subject key identifier: E4:36:95:E2:0B:9D:90:37:81:A6:4A:4D:8E:8A:C5:8C:A7:70:29:AB Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED60D407DE6569339571CC9E56F72B Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/5DaV4gudkDeBpkpNjorFjKdwKas.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213253 IP address blocks: 2a0e:e704:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:60:d4:07:de:65:69:33:95:71:cc:9e:56:f7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e43695e20b9d903781a64a4d8e8ac58ca77029ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:99:8d:fa:c1:3e:1f:34:17:e7:2c:ae:67: 08:e9:fc:e1:28:d4:e6:f5:b5:84:bb:a1:88:42:4c: 13:d0:6d:a4:85:de:1b:9c:f2:b7:d3:98:5a:dd:68: fc:aa:3e:20:f5:44:cd:68:f1:70:4c:54:26:ce:48: c7:17:52:3f:f0:1d:fb:bc:c1:f7:69:1c:6a:cd:72: 82:f4:28:3b:1d:77:d3:f4:3a:4f:74:b4:3f:da:19: e3:ca:42:73:42:15:b4:ad:7a:63:4f:d9:16:50:14: 59:15:80:48:42:5b:ca:f0:3a:b6:2a:68:1d:3a:ad: 19:a4:08:a4:09:7e:b2:c9:92:ef:6a:82:e9:a2:df: e6:42:ae:4f:b9:55:1b:f0:3d:78:23:62:49:dd:57: 46:60:2e:ff:73:95:fc:d5:7a:16:6d:62:7f:36:19: 08:f1:7a:a8:85:21:c4:3e:ec:41:5a:94:5a:80:d6: a6:b0:4b:98:2d:2f:0e:bc:a2:ef:28:72:8d:de:8a: 36:7c:1c:93:74:63:a1:63:6c:89:57:7e:11:83:46: 2b:97:4a:a8:6b:60:77:56:b7:c5:0d:44:51:9b:dc: c7:ea:3a:3a:c5:9e:dd:10:38:3e:f8:51:29:fd:21: 13:1f:c6:f1:27:d9:a7:d1:09:ec:70:1f:d8:77:07: 69:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:36:95:E2:0B:9D:90:37:81:A6:4A:4D:8E:8A:C5:8C:A7:70:29:AB X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/5DaV4gudkDeBpkpNjorFjKdwKas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:42::/48 Signature Algorithm: sha256WithRSAEncryption b1:f2:1c:8d:55:2f:af:ae:cd:21:70:49:2d:82:57:78:20:60: a6:6f:dc:44:75:e2:49:a5:dc:cb:8c:61:8e:e1:4f:a3:c1:a7: e4:0f:04:7e:d7:4b:73:ef:35:08:5a:a8:d1:7a:86:b9:ed:e1: 23:d2:b6:8b:86:43:1b:ef:20:fa:17:95:6a:b0:8f:93:e7:02: 35:1d:b7:46:cf:b2:cb:c6:93:de:9d:6f:cf:19:27:14:b3:7d: ac:bd:8e:15:e4:79:5f:c9:b1:0a:0d:23:64:d9:ec:10:f7:e4: f1:20:3c:eb:34:8c:47:d4:66:c3:87:68:41:5a:60:1e:10:79: 41:12:97:3e:e3:36:ca:24:e4:33:cb:20:23:9b:f1:3a:cd:43: 46:b3:18:8d:16:da:f8:ea:e0:4d:e8:f6:68:39:2b:97:50:1a: da:ba:88:9e:95:41:91:67:11:91:a9:3f:b0:f5:ff:d5:61:a8: df:98:44:7a:82:60:3e:bc:e7:f8:33:d4:b9:0d:3a:8f:18:ad: 1b:b8:0e:bf:9c:00:1d:59:c8:6b:32:8f:f3:ca:25:f1:5b:a8: cc:43:ce:4c:86:b4:a6:02:82:ca:d4:d8:d1:7d:f8:27:8e:db: f2:76:f1:d0:de:ea:7b:f0:e4:10:d4:36:8c:56:56:4c:bb:8e: f8:49:74:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57WDUB95laTOVccyeVvcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDM2OTVlMjBiOWQ5MDM3ODFhNjRhNGQ4ZThhYzU4Y2E3NzAyOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonKZjfrBPh80F+csrmcI6fzhKNTm 9bWEu6GIQkwT0G2khd4bnPK305ha3Wj8qj4g9UTNaPFwTFQmzkjHF1I/8B37vMH3 aRxqzXKC9Cg7HXfT9DpPdLQ/2hnjykJzQhW0rXpjT9kWUBRZFYBIQlvK8Dq2Kmgd Oq0ZpAikCX6yyZLvaoLpot/mQq5PuVUb8D14I2JJ3VdGYC7/c5X81XoWbWJ/NhkI 8XqohSHEPuxBWpRagNamsEuYLS8OvKLvKHKN3oo2fByTdGOhY2yJV34Rg0Yrl0qo a2B3VrfFDURRm9zH6jo6xZ7dEDg++FEp/SETH8bxJ9mn0QnscB/YdwdpfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOQ2leILnZA3gaZKTY6KxYyncCmrMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvNURhVjRndWRrRGVCcGtwTmpvckZqS2R3S2FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABC MA0GCSqGSIb3DQEBCwUAA4IBAQCx8hyNVS+vrs0hcEktgld4IGCmb9xEdeJJpdzL jGGO4U+jwafkDwR+10tz7zUIWqjReoa57eEj0raLhkMb7yD6F5VqsI+T5wI1HbdG z7LLxpPenW/PGScUs32svY4V5HlfybEKDSNk2ewQ9+TxIDzrNIxH1GbDh2hBWmAe EHlBEpc+4zbKJOQzyyAjm/E6zUNGsxiNFtr46uBN6PZoOSuXUBrauoielUGRZxGR qT+w9f/VYajfmER6gmA+vOf4M9S5DTqPGK0buA6/nAAdWchrMo/zyiXxW6jMQ85M hrSmAoLK1NjRffgnjtvydvHQ3up78OQQ1DaMVlZMu474SXT7 -----END CERTIFICATE-----Generated at Mon Jan 26 11:31:06 2026 by rpki-client