This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Om0C9iQ_iiNqmm3nAiX4zslu_b4.roa File: Om0C9iQ_iiNqmm3nAiX4zslu_b4.roa (raw, json) Hash identifier: j/iMQOn2fxxWK8fsASP9V6xbuZr15pw2oIFLtVjpikU= Subject key identifier: 3A:6D:02:F6:24:3F:8A:23:6A:9A:6D:E7:02:25:F8:CE:C9:6E:FD:BE Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B4AB24EE9D30D67C1946C2F96A29 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Om0C9iQ_iiNqmm3nAiX4zslu_b4.roa Signing time: Fri 02 Jan 2026 16:20:30 +0000 ROA not before: Fri 02 Jan 2026 16:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a0b:b87:ffb0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b4:ab:24:ee:9d:30:d6:7c:19:46:c2:f9:6a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a6d02f6243f8a236a9a6de70225f8cec96efdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:8b:ff:a1:d6:95:a1:7b:d3:ed:0b:c0:e2: 48:59:d9:ec:1f:f4:eb:53:1b:7d:18:01:f2:f5:dd: c1:bb:8f:d2:78:26:a3:88:fe:c3:7b:9b:a7:c2:56: 08:16:0b:22:ae:de:29:75:ee:d4:28:75:ea:4b:fb: 3d:87:2b:f1:5c:fe:f6:ec:b3:f6:2e:9b:24:5d:9d: bc:b2:ee:d4:1c:e4:45:a9:b9:04:c0:99:c3:75:71: 89:e5:30:2c:4e:31:13:a2:41:16:ec:68:11:3c:c2: 0d:2a:f1:e0:10:50:de:84:35:19:cf:53:a5:24:a1: 90:0a:3a:4b:fc:0c:73:21:1e:5f:67:f5:ac:72:a4: e9:a2:7d:f2:b5:81:63:6d:05:ab:7e:8c:e2:9c:70: c8:4c:6e:74:51:6b:35:a0:ee:b3:7f:4e:25:40:54: 9d:0f:f5:ba:17:7d:ba:52:8c:93:18:e2:59:6b:1d: 84:56:86:82:00:56:16:89:d9:0d:be:5b:46:72:7f: 92:3b:e7:57:cc:f7:1c:26:b0:f1:52:75:22:8f:cc: e8:a9:98:15:c6:b4:be:df:05:e5:de:a7:04:1a:de: 13:1f:b8:9f:b2:8a:54:fc:39:a4:5b:63:24:da:7b: 39:8b:ae:ca:ee:61:ed:cc:fb:2c:25:da:e1:b8:07: 5b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6D:02:F6:24:3F:8A:23:6A:9A:6D:E7:02:25:F8:CE:C9:6E:FD:BE X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Om0C9iQ_iiNqmm3nAiX4zslu_b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffb0::/48 Signature Algorithm: sha256WithRSAEncryption 4e:aa:60:15:95:6e:5a:42:0a:3a:c9:06:26:0d:4a:89:ee:a0: 0a:bc:16:29:14:d6:f2:c7:6d:a6:35:6b:f3:c1:f1:01:0d:67: a8:7f:a0:ba:77:a1:80:91:1a:52:5c:9e:ed:8c:2c:98:12:e5: 1d:f6:8a:71:c7:64:90:34:bb:c3:82:07:fd:4c:4f:a8:be:f9: 00:3e:b1:b0:96:6c:c6:cd:f6:af:a1:0e:52:6f:6a:47:08:dd: 05:2d:a3:2b:b1:a4:b7:8a:2b:c1:5e:f7:ea:a5:1e:00:84:60: 74:73:bb:e2:83:15:2d:8b:86:06:0b:db:4b:b4:23:32:1b:fe: c0:55:b4:5d:ed:e4:95:50:3a:a4:d9:d0:91:1b:3e:49:50:2c: 1e:9a:d0:35:72:4a:77:08:9a:8c:69:4b:eb:9e:14:2c:94:18: ea:aa:9f:a4:b6:d0:4f:5f:91:b1:75:d7:dc:ce:60:51:e7:ea: cd:23:8e:fd:d9:f9:58:cf:93:29:be:6a:aa:33:4b:86:e9:14: ce:ec:f6:df:c2:cd:11:16:f0:7d:64:7b:d2:95:86:7a:cf:21: 2a:eb:86:f5:98:d6:7e:ce:60:60:dc:10:d8:3a:ab:c5:f4:ae: c8:c6:6f:76:ea:d4:78:91:bd:17:a4:19:2f:4f:54:db:3c:60: dd:d0:70:0a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/grSrJO6dMNZ8GUbC+WopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTZkMDJmNjI0M2Y4YTIzNmE5YTZkZTcwMjI1ZjhjZWM5NmVmZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h+L/6HWlaF70+0LwOJIWdnsH/Tr Uxt9GAHy9d3Bu4/SeCajiP7De5unwlYIFgsirt4pde7UKHXqS/s9hyvxXP727LP2 LpskXZ28su7UHORFqbkEwJnDdXGJ5TAsTjETokEW7GgRPMINKvHgEFDehDUZz1Ol JKGQCjpL/AxzIR5fZ/WscqTpon3ytYFjbQWrfozinHDITG50UWs1oO6zf04lQFSd D/W6F326UoyTGOJZax2EVoaCAFYWidkNvltGcn+SO+dXzPccJrDxUnUij8zoqZgV xrS+3wXl3qcEGt4TH7ifsopU/DmkW2Mk2ns5i67K7mHtzPssJdrhuAdbOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDptAvYkP4ojappt5wIl+M7Jbv2+MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvT20wQzlpUV9paU5xbW0zbkFpWDR6c2x1X2I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+w MA0GCSqGSIb3DQEBCwUAA4IBAQBOqmAVlW5aQgo6yQYmDUqJ7qAKvBYpFNbyx22m NWvzwfEBDWeof6C6d6GAkRpSXJ7tjCyYEuUd9opxx2SQNLvDggf9TE+ovvkAPrGw lmzGzfavoQ5Sb2pHCN0FLaMrsaS3iivBXvfqpR4AhGB0c7vigxUti4YGC9tLtCMy G/7AVbRd7eSVUDqk2dCRGz5JUCwemtA1ckp3CJqMaUvrnhQslBjqqp+kttBPX5Gx ddfczmBR5+rNI4792flYz5MpvmqqM0uG6RTO7Pbfws0RFvB9ZHvSlYZ6zyEq64b1 mNZ+zmBg3BDYOqvF9K7Ixm926tR4kb0XpBkvT1TbPGDd0HAK -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:19 2026 by rpki-client