This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/N5lhzOLzb9DWld9ai9yjW2kVDLc.roa File: N5lhzOLzb9DWld9ai9yjW2kVDLc.roa (raw, json) Hash identifier: otz3WZRX38iiM+hhQYkSTpyseb/af+HU5vUy0a+fTYk= Subject key identifier: 37:99:61:CC:E2:F3:6F:D0:D6:95:DF:5A:8B:DC:A3:5B:69:15:0C:B7 Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Certificate serial: 019B791053ECEE3682D9FB08B8A3A3E5C20B Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/N5lhzOLzb9DWld9ai9yjW2kVDLc.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 224 IP address blocks: 109.105.125.64/26 maxlen: 26 109.105.127.128/26 maxlen: 26 2001:948:61:1::/64 maxlen: 64 2001:948:62:3::/64 maxlen: 64 2001:948:62:4::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:53:ec:ee:36:82:d9:fb:08:b8:a3:a3:e5:c2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=379961cce2f36fd0d695df5a8bdca35b69150cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:cf:d6:55:c1:d0:82:67:3e:3c:ad:b2:a2: 83:cd:ea:32:bc:03:57:17:8e:41:eb:ed:ad:41:6a: 9e:ba:6f:e2:df:01:a6:d1:5b:df:04:c2:0a:af:50: 81:3e:d3:ec:3b:0d:a9:23:2b:2e:ac:ab:cd:e1:ad: db:e7:e8:b8:ba:be:fb:55:b3:10:44:e2:b4:8d:f6: 20:5f:88:f6:17:61:4e:87:48:c9:b5:70:09:06:44: 54:49:5b:25:74:6f:ef:4b:88:17:94:2a:5f:93:4d: 2c:59:78:ee:cf:54:60:86:93:7f:ec:e3:4b:37:e4: 70:4c:1c:2c:a7:3d:50:3f:d4:ba:3a:4b:59:cd:33: 35:d7:cc:41:ca:70:aa:84:b8:e9:0f:c5:35:77:24: 06:bb:d6:c7:b6:7e:ef:96:bf:b2:c9:d9:ec:16:c7: 67:06:6c:fe:25:3d:87:12:6c:7d:66:fc:de:45:77: 51:83:08:3b:31:48:06:f8:8c:95:a9:7e:40:55:e9: 00:66:49:f4:ea:bb:1f:69:a4:9f:56:96:d3:34:fc: 99:df:11:64:21:b3:90:ac:9f:b4:28:86:ae:34:2a: 53:98:ef:35:5f:ee:9b:32:45:a9:67:27:a1:0a:a1: e9:28:6a:99:b5:68:c7:b1:da:80:18:58:a9:bd:46: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:61:CC:E2:F3:6F:D0:D6:95:DF:5A:8B:DC:A3:5B:69:15:0C:B7 X509v3 Authority Key Identifier: keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/N5lhzOLzb9DWld9ai9yjW2kVDLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.125.64/26 109.105.127.128/26 IPv6: 2001:948:61:1::/64 2001:948:62:3::-2001:948:62:4:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5d:c4:04:19:1b:91:21:4f:99:28:94:18:e5:cc:58:13:95:73: a3:06:db:26:99:53:ee:d4:3a:6f:8a:e6:50:e2:4d:55:e6:d3: 7d:5d:24:60:f1:2a:aa:b6:0b:12:49:21:a2:f2:d1:f0:1b:9f: 47:8e:ac:7f:d4:f2:7d:90:aa:16:69:11:9a:cd:57:ee:93:6c: 14:e6:5c:99:cb:6e:b4:c8:e9:90:5c:81:51:50:c7:a4:9d:77: 5f:c6:fa:d4:61:ee:6d:e8:1d:e5:51:1d:8d:f3:e7:ea:a6:88: 2a:62:2f:81:a5:61:94:89:0f:19:a3:9e:64:24:89:6f:8d:12: b7:9e:00:64:1e:6d:21:57:9b:07:50:08:64:f0:59:bb:d6:1d: 6c:fb:17:eb:3e:d8:85:56:c9:1c:e5:b6:fc:ec:00:c3:a1:58: e6:8e:c0:83:12:45:6d:f5:54:85:f2:8b:a3:42:13:03:cb:25: 1e:79:49:4f:be:70:7e:2f:c0:0d:b1:2c:99:e3:f9:38:23:cd: 18:db:cd:14:3c:a3:f1:b0:a0:35:82:e5:f6:7f:19:38:59:e3: e5:3e:21:95:42:51:50:95:52:c2:79:95:ee:93:6e:51:26:dc: 5d:53:63:0c:d6:9a:51:dd:dd:3f:c9:51:18:ee:41:18:e9:00: 83:ba:af:71 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt5EFPs7jaC2fsIuKOj5cILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3 M2E4ZjgwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzk5NjFjY2UyZjM2ZmQwZDY5NWRmNWE4YmRjYTM1YjY5MTUwY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMjP1lXB0IJnPjytsqKDzeoyvANX F45B6+2tQWqeum/i3wGm0VvfBMIKr1CBPtPsOw2pIysurKvN4a3b5+i4ur77VbMQ ROK0jfYgX4j2F2FOh0jJtXAJBkRUSVsldG/vS4gXlCpfk00sWXjuz1RghpN/7ONL N+RwTBwspz1QP9S6OktZzTM118xBynCqhLjpD8U1dyQGu9bHtn7vlr+yydnsFsdn Bmz+JT2HEmx9ZvzeRXdRgwg7MUgG+IyVqX5AVekAZkn06rsfaaSfVpbTNPyZ3xFk IbOQrJ+0KIauNCpTmO81X+6bMkWpZyehCqHpKGqZtWjHsdqAGFipvUZ4DwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFDeZYczi82/Q1pXfWovco1tpFQy3MB8GA1UdIwQY MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt MmVhODdlNmVhMmEwLzEvTjVsaHpPTHpiOURXbGQ5YWk5eWpXMmtWRExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAUBAIAATAOAwUGbWl9QAMF Bm1pf4AwKQQCAAIwIwMJACABCUgAYQABMBYDCQAgAQlIAGIAAwMJACABCUgAYgAE MA0GCSqGSIb3DQEBCwUAA4IBAQBdxAQZG5EhT5kolBjlzFgTlXOjBtsmmVPu1Dpv iuZQ4k1V5tN9XSRg8SqqtgsSSSGi8tHwG59Hjqx/1PJ9kKoWaRGazVfuk2wU5lyZ y260yOmQXIFRUMeknXdfxvrUYe5t6B3lUR2N8+fqpogqYi+BpWGUiQ8Zo55kJIlv jRK3ngBkHm0hV5sHUAhk8Fm71h1s+xfrPtiFVskc5bb87ADDoVjmjsCDEkVt9VSF 8oujQhMDyyUeeUlPvnB+L8ANsSyZ4/k4I80Y280UPKPxsKA1guX2fxk4WePlPiGV QlFQlVLCeZXuk25RJtxdU2MM1ppR3d0/yVEY7kEY6QCDuq9x -----END CERTIFICATE-----Generated at Thu Jan 1 15:53:49 2026 by rpki-client