This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/f5M-hTzNDSSqohb0b1K4vjNcyxY.roa File: f5M-hTzNDSSqohb0b1K4vjNcyxY.roa (raw, json) Hash identifier: ciY50ZlYxva7aKDHcfCcjzo6LTzr/qKlBuKYyTji90k= Subject key identifier: 7F:93:3E:85:3C:CD:0D:24:AA:A2:16:F4:6F:52:B8:BE:33:5C:CB:16 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C76D01B5B132A56E64D52371784C58 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/f5M-hTzNDSSqohb0b1K4vjNcyxY.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215290 IP address blocks: 2a12:2740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6d:01:b5:b1:32:a5:6e:64:d5:23:71:78:4c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f933e853ccd0d24aaa216f46f52b8be335ccb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:ed:81:a3:d3:56:ca:c5:13:8d:7c:21:73: f9:5f:9d:88:3a:c4:b9:0e:4a:51:d4:92:25:cf:34: a2:b3:50:8b:7f:3a:a5:47:c4:18:15:91:66:fa:e4: ad:6d:6c:cd:01:ce:fe:be:5c:9c:aa:76:fd:51:86: 8c:59:c6:41:cb:b8:e2:b8:03:3d:6e:50:9d:41:77: 27:a1:c5:dc:ee:1a:31:04:03:d0:68:aa:f2:b4:a3: 0d:eb:de:79:83:02:97:35:5b:71:27:2e:d9:dd:90: ff:12:14:3f:e0:5a:14:b5:37:66:cc:ed:0e:0b:3b: b6:d3:20:6a:21:a0:7f:ad:4e:82:2f:aa:ce:e3:15: a0:3f:80:38:98:a0:67:30:e8:b0:55:fc:ce:39:85: 3f:36:71:8a:de:d0:d9:e3:ea:2a:a8:4c:3c:ac:86: 23:91:e6:72:19:3d:9f:d5:e9:ff:71:e6:c0:22:e5: 8a:45:75:8d:77:6d:a5:76:72:ea:f1:91:e0:87:06: 69:23:a3:a2:af:c9:fd:92:f0:c4:22:80:26:e4:92: 48:66:16:de:5c:1f:39:47:37:aa:e1:a1:92:39:f3: ee:e7:c6:ee:e2:59:08:ce:77:cd:33:61:94:83:22: c1:fb:e7:44:76:2e:93:27:90:07:88:c3:34:58:d9: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:93:3E:85:3C:CD:0D:24:AA:A2:16:F4:6F:52:B8:BE:33:5C:CB:16 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/f5M-hTzNDSSqohb0b1K4vjNcyxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:2740::/29 Signature Algorithm: sha256WithRSAEncryption 68:ba:79:04:a5:df:39:6a:d4:1a:2e:7d:a9:68:cd:75:a1:92: 8d:01:10:59:31:da:bf:fc:b0:10:cb:c7:ac:f5:04:54:fc:f0: fc:80:c2:dd:66:cb:c0:48:3d:20:b4:0c:11:61:18:72:25:dd: 02:88:0d:11:68:82:bd:a8:17:52:53:46:92:2a:73:9d:f8:e4: ab:b2:af:72:7e:3b:e3:89:6b:af:85:ff:7f:05:47:5d:13:47: 63:a0:99:2e:18:fd:22:c0:fe:df:87:29:c1:d9:ec:17:73:82: 73:ce:51:b7:d8:34:a3:55:0b:d9:ed:70:51:09:27:14:4e:4a: 9f:84:8b:c2:b3:19:9b:df:aa:39:2e:e6:53:75:62:fd:d9:2e: 1d:dd:42:01:19:bd:b2:12:e7:a8:9c:b6:7c:7e:34:7d:01:48: a1:18:fa:3e:7f:ee:3b:d5:6a:bf:39:2c:0e:65:6b:89:a1:06: 8c:c6:96:7f:ee:83:01:93:a1:c1:a0:71:e0:d3:73:40:32:a8: 97:e7:87:c5:52:06:c7:fa:1c:9c:c6:ca:84:34:37:ab:a0:ce: dc:6a:e7:3e:fc:43:46:c2:3d:33:68:eb:bc:af:a4:d3:a4:38: 6b:66:c1:92:73:6e:a8:a2:ad:a7:08:dc:24:15:23:f5:dd:26: 13:cd:d9:c3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x20BtbEypW5k1SNxeExYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjkzM2U4NTNjY2QwZDI0YWFhMjE2ZjQ2ZjUyYjhiZTMzNWNjYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskTtgaPTVsrFE418IXP5X52IOsS5 DkpR1JIlzzSis1CLfzqlR8QYFZFm+uStbWzNAc7+vlycqnb9UYaMWcZBy7jiuAM9 blCdQXcnocXc7hoxBAPQaKrytKMN6955gwKXNVtxJy7Z3ZD/EhQ/4FoUtTdmzO0O Czu20yBqIaB/rU6CL6rO4xWgP4A4mKBnMOiwVfzOOYU/NnGK3tDZ4+oqqEw8rIYj keZyGT2f1en/cebAIuWKRXWNd22ldnLq8ZHghwZpI6Oir8n9kvDEIoAm5JJIZhbe XB85Rzeq4aGSOfPu58bu4lkIznfNM2GUgyLB++dEdi6TJ5AHiMM0WNniSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFH+TPoU8zQ0kqqIW9G9SuL4zXMsWMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvZjVNLWhUek5EU1Nxb2hiMGIxSzR2ak5jeXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhInQDAN BgkqhkiG9w0BAQsFAAOCAQEAaLp5BKXfOWrUGi59qWjNdaGSjQEQWTHav/ywEMvH rPUEVPzw/IDC3WbLwEg9ILQMEWEYciXdAogNEWiCvagXUlNGkipznfjkq7Kvcn47 44lrr4X/fwVHXRNHY6CZLhj9IsD+34cpwdnsF3OCc85Rt9g0o1UL2e1wUQknFE5K n4SLwrMZm9+qOS7mU3Vi/dkuHd1CARm9shLnqJy2fH40fQFIoRj6Pn/uO9Vqvzks DmVriaEGjMaWf+6DAZOhwaBx4NNzQDKol+eHxVIGx/ocnMbKhDQ3q6DO3GrnPvxD RsI9M2jrvK+k06Q4a2bBknNuqKKtpwjcJBUj9d0mE83Zww== -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:40 2026 by rpki-client