This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/005Bqn6EcQE2kRRYutDaRw8mbu4.roa File: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (raw, json) Hash identifier: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU= Subject key identifier: D3:4E:41:AA:7E:84:71:01:36:91:14:58:BA:D0:DA:47:0F:26:6E:EE Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661 Certificate serial: 019B77C750347D0C8B436BFECE49EFB8DE67 Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/005Bqn6EcQE2kRRYutDaRw8mbu4.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212414 IP address blocks: 2a02:d0c2:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:50:34:7d:0c:8b:43:6b:fe:ce:49:ef:b8:de:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d34e41aa7e84710136911458bad0da470f266eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:f9:62:32:a6:d6:dd:88:6b:d2:31:d3:5e: d6:62:00:36:2b:bb:71:bf:91:f4:8a:49:c8:2e:48: e7:a6:e6:4e:8e:0b:7a:e4:df:55:9a:bb:c5:4e:d3: 30:b4:85:2e:63:3a:9f:03:f1:de:52:ff:7c:b6:2c: ed:a1:c5:bb:8b:62:57:a2:8a:0f:38:bf:fc:52:8d: a9:15:a9:87:ca:65:94:91:ac:26:ef:01:95:ab:03: 2b:96:d2:eb:13:40:f9:92:66:01:7e:5a:aa:58:22: fc:8e:32:84:70:23:5f:c7:e1:db:08:43:58:79:e9: 6d:67:17:ce:d7:c5:2f:84:45:1d:13:0d:80:06:21: 96:5a:00:55:dd:ac:78:d9:d1:b3:a2:82:f2:49:5d: 52:af:ca:be:30:08:61:a0:8c:b8:b9:a9:ae:a8:e3: 48:6a:05:2b:a1:2d:8f:9a:cd:9f:0b:5d:d1:4c:27: 8a:59:1f:79:5f:89:30:eb:0e:f9:c3:f5:a4:b1:de: 16:ef:46:08:da:a2:56:d8:c7:01:21:ce:e0:5c:0a: 96:d1:c4:1b:a2:20:1d:68:f1:22:7b:b1:72:6b:cd: e5:e6:42:8f:2b:2a:b0:d7:13:aa:f5:d9:71:7b:fa: b1:29:d4:c1:b8:7d:a1:6c:fd:13:a0:d3:db:85:8a: 4c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4E:41:AA:7E:84:71:01:36:91:14:58:BA:D0:DA:47:0F:26:6E:EE X509v3 Authority Key Identifier: keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/005Bqn6EcQE2kRRYutDaRw8mbu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:d0c2:2::/48 Signature Algorithm: sha256WithRSAEncryption 6b:3b:57:ed:26:45:dc:66:a6:40:2e:43:d8:7d:72:c5:1b:38: 58:a0:06:90:f0:e5:98:98:77:a4:05:fd:a0:0c:7e:6f:66:8b: 67:85:00:4a:f6:5f:6e:1a:03:b5:b4:6d:b0:d3:6b:76:03:0c: ec:90:2e:b3:8b:a7:d9:a1:b4:19:88:32:80:6f:19:ad:f8:91: 38:c7:ed:f3:f5:8c:d1:91:7a:63:2b:53:5d:dd:ea:b6:7c:ba: a2:15:74:5a:2b:0f:c8:0f:98:e5:7e:c4:f9:a2:48:8d:20:42: 4b:e1:b9:fc:4c:ed:91:ea:8d:93:b8:e0:95:81:ab:a8:47:25: c7:9b:84:75:2e:9f:7c:ae:49:d7:90:8b:f1:7e:dc:36:59:e5: 54:f5:26:2f:35:27:3f:5f:df:77:d8:b0:60:57:f1:1f:d6:41: a8:37:0c:b1:43:91:4b:be:aa:12:eb:f7:22:84:a3:02:86:38: b2:45:ec:b2:3a:ee:e0:be:cd:29:53:05:65:fd:5b:c8:6a:72: 71:54:8b:48:89:04:c7:05:ae:a8:85:c7:7b:21:4c:d9:cb:92: e9:13:40:ab:81:88:e2:32:93:9a:52:b6:13:95:df:7c:08:aa: ed:86:9f:fc:34:08:8d:bd:8f:92:e8:c3:23:77:30:21:3a:26: 1b:db:1f:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3x1A0fQyLQ2v+zknvuN5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw ZGU2NjEwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzRlNDFhYTdlODQ3MTAxMzY5MTE0NThiYWQwZGE0NzBmMjY2ZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4En5YjKm1t2Ia9Ix017WYgA2K7tx v5H0iknILkjnpuZOjgt65N9VmrvFTtMwtIUuYzqfA/HeUv98tiztocW7i2JXoooP OL/8Uo2pFamHymWUkawm7wGVqwMrltLrE0D5kmYBflqqWCL8jjKEcCNfx+HbCENY eeltZxfO18UvhEUdEw2ABiGWWgBV3ax42dGzooLySV1Sr8q+MAhhoIy4uamuqONI agUroS2Pms2fC13RTCeKWR95X4kw6w75w/Wksd4W70YI2qJW2McBIc7gXAqW0cQb oiAdaPEie7Fya83l5kKPKyqw1xOq9dlxe/qxKdTBuH2hbP0ToNPbhYpMsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNNOQap+hHEBNpEUWLrQ2kcPJm7uMB8GA1UdIwQY MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt OWMxNzRlNTNlNGZlLzEvMDA1QnFuNkVjUUUya1JSWXV0RGFSdzhtYnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLQwgAC MA0GCSqGSIb3DQEBCwUAA4IBAQBrO1ftJkXcZqZALkPYfXLFGzhYoAaQ8OWYmHek Bf2gDH5vZotnhQBK9l9uGgO1tG2w02t2AwzskC6zi6fZobQZiDKAbxmt+JE4x+3z 9YzRkXpjK1Nd3eq2fLqiFXRaKw/ID5jlfsT5okiNIEJL4bn8TO2R6o2TuOCVgauo RyXHm4R1Lp98rknXkIvxftw2WeVU9SYvNSc/X9932LBgV/Ef1kGoNwyxQ5FLvqoS 6/cihKMChjiyReyyOu7gvs0pUwVl/VvIanJxVItIiQTHBa6ohcd7IUzZy5LpE0Cr gYjiMpOaUrYTld98CKrthp/8NAiNvY+S6MMjdzAhOiYb2x/B -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:49 2026 by rpki-client