This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5B28Ei4KPuBfMPCYz_CdjunmzfA.roa File: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (raw, json) Hash identifier: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY= Subject key identifier: E4:1D:BC:12:2E:0A:3E:E0:5F:30:F0:98:CF:F0:9D:8E:E9:E6:CD:F0 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C8033D635C82FAA1D177FBF18EDF1AB Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5B28Ei4KPuBfMPCYz_CdjunmzfA.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44928 IP address blocks: 2a00:c0c0::/32 maxlen: 32 2a02:520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:33:d6:35:c8:2f:aa:1d:17:7f:bf:18:ed:f1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e41dbc122e0a3ee05f30f098cff09d8ee9e6cdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:77:ee:70:2f:dc:4d:9e:72:25:e3:e3:ef: f2:89:a7:88:bb:b5:14:41:1e:b4:7a:34:e2:d6:14: b2:fa:3e:82:95:d9:eb:ff:c7:65:34:7d:9e:84:c3: c0:dc:d2:94:eb:c3:2a:57:7c:d2:02:d3:ad:46:0a: 86:d9:79:9d:5e:3a:0b:60:03:c6:10:77:84:bc:0b: c2:f7:a1:fe:03:86:f5:4f:f3:d3:e2:62:0a:dc:49: 48:81:61:6f:4d:d7:5c:72:48:dc:47:2f:12:06:14: 25:cd:5f:75:0d:76:e2:77:3b:fa:dc:86:be:24:23: 54:24:ad:fc:11:ed:e9:5a:d9:c3:99:7d:d0:ec:31: d0:49:96:73:61:d3:bb:92:dc:00:f5:a4:01:c7:31: 28:22:ac:1c:16:16:84:52:ba:1a:b9:01:c3:e8:6c: fd:da:8e:ec:d5:3c:d1:92:b4:2c:04:59:98:45:ff: c3:91:81:96:5d:1a:d5:46:cd:3a:9f:62:d6:d2:2f: 18:fe:ce:40:be:85:df:40:65:b3:d5:22:03:a2:3f: bb:0c:5e:ac:27:61:86:56:c0:06:b4:1f:28:8b:b9: 24:aa:a6:75:d6:00:ca:e4:7b:d8:5b:7e:02:2a:f2: d1:b1:b8:93:a8:bc:3b:b2:b2:75:d9:ec:db:ce:e8: 79:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1D:BC:12:2E:0A:3E:E0:5F:30:F0:98:CF:F0:9D:8E:E9:E6:CD:F0 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5B28Ei4KPuBfMPCYz_CdjunmzfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:c0c0::/32 2a02:520::/32 Signature Algorithm: sha256WithRSAEncryption 8f:34:ed:01:10:9d:f0:cf:4e:5a:61:7a:b1:17:b4:fb:8e:83: 4f:13:a7:15:dd:b3:81:a1:94:0b:30:e6:b6:a5:15:cf:41:26: d1:48:37:58:cf:7b:81:ca:93:37:dc:00:77:de:c9:7a:82:2c: 58:a9:4a:5b:b2:b6:8f:83:67:a2:51:89:be:35:be:61:4e:55: c0:e4:27:2a:17:27:91:94:db:5f:b6:e9:ac:d0:3d:9b:14:88: ad:cd:ab:93:55:61:55:93:b7:a8:c3:24:23:6a:a3:49:84:d1: 73:a0:eb:ea:1f:85:c2:a5:3a:06:86:26:f9:dc:8f:56:51:28: 6b:24:62:e2:c6:4e:40:b5:8e:9f:d4:e5:0d:d1:ef:54:22:52: 56:39:69:07:f3:e8:48:31:36:8a:d9:11:89:7d:3a:bf:1a:6a: d9:87:4d:c6:de:64:44:c9:af:98:8f:91:83:62:1b:a4:78:7e: 16:01:79:32:fd:b5:e0:ef:26:61:71:2a:79:0b:dc:5b:41:e8: 7e:e4:eb:c6:1e:d4:86:6a:54:0e:41:e2:a9:8b:8d:01:4d:ff: 2f:44:c6:08:51:04:10:c7:8e:c7:73:c4:1c:34:a3:e1:43:bf: 35:9a:22:65:c6:67:1b:15:99:8a:fd:f3:17:0d:c7:d4:85:4f: 61:d0:c5:74 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gDPWNcgvqh0Xf78Y7fGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDFkYmMxMjJlMGEzZWUwNWYzMGYwOThjZmYwOWQ4ZWU5ZTZjZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9l37nAv3E2eciXj4+/yiaeIu7UU QR60ejTi1hSy+j6Cldnr/8dlNH2ehMPA3NKU68MqV3zSAtOtRgqG2XmdXjoLYAPG EHeEvAvC96H+A4b1T/PT4mIK3ElIgWFvTddcckjcRy8SBhQlzV91DXbidzv63Ia+ JCNUJK38Ee3pWtnDmX3Q7DHQSZZzYdO7ktwA9aQBxzEoIqwcFhaEUroauQHD6Gz9 2o7s1TzRkrQsBFmYRf/DkYGWXRrVRs06n2LW0i8Y/s5AvoXfQGWz1SIDoj+7DF6s J2GGVsAGtB8oi7kkqqZ11gDK5HvYW34CKvLRsbiTqLw7srJ12ezbzuh5EwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOQdvBIuCj7gXzDwmM/wnY7p5s3wMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvNUIyOEVpNEtQdUJmTVBDWXpfQ2RqdW5temZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgDAwAMF ACoCBSAwDQYJKoZIhvcNAQELBQADggEBAI807QEQnfDPTlpherEXtPuOg08TpxXd s4GhlAsw5ralFc9BJtFIN1jPe4HKkzfcAHfeyXqCLFipSluyto+DZ6JRib41vmFO VcDkJyoXJ5GU21+26azQPZsUiK3Nq5NVYVWTt6jDJCNqo0mE0XOg6+ofhcKlOgaG Jvncj1ZRKGskYuLGTkC1jp/U5Q3R71QiUlY5aQfz6EgxNorZEYl9Or8aatmHTcbe ZETJr5iPkYNiG6R4fhYBeTL9teDvJmFxKnkL3FtB6H7k68Ye1IZqVA5B4qmLjQFN /y9ExghRBBDHjsdzxBw0o+FDvzWaImXGZxsVmYr98xcNx9SFT2HQxXQ= -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:41 2026 by rpki-client