This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa File: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (raw, json) Hash identifier: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8= Subject key identifier: 44:EA:2C:DF:30:6E:C5:09:31:AE:65:7E:E8:BF:CA:30:61:0E:B1:A4 Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Certificate serial: 019B7A5B525A671C5A4BF7408F40A430CA81 Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 2a12:a800:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:52:5a:67:1c:5a:4b:f7:40:8f:40:a4:30:ca:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44ea2cdf306ec50931ae657ee8bfca30610eb1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:d1:45:0a:8f:59:5c:a3:a7:e8:cc:b0:47: 1f:5d:37:fe:26:9a:d4:e2:da:47:db:fd:99:e9:61: c1:fb:95:df:c7:fd:c9:19:fa:0d:8c:fc:2e:b9:94: 4b:7f:19:ae:08:50:b6:92:63:93:ad:76:06:41:6c: 44:3a:ba:ff:13:16:49:32:dd:ff:e8:c1:a5:b4:38: 63:c8:67:f1:99:26:7d:65:55:85:bf:32:58:cc:76: 76:a9:74:e7:55:f4:e1:ab:99:51:14:4e:fb:c7:60: 6c:b0:5a:ec:c7:1f:36:98:2c:f0:76:41:fc:3d:1a: f7:ec:79:e8:cd:50:09:a6:ac:d3:5f:71:db:0f:d9: d9:9a:9f:16:9d:74:93:54:11:5e:32:74:09:f7:d8: a4:0f:34:b4:b7:85:55:8c:b3:ba:75:eb:bb:f4:fa: 92:3f:9a:82:06:3b:c2:88:9d:82:e0:e1:17:bb:2b: 0e:f9:61:4c:7f:ab:76:f1:05:af:15:ed:6f:be:04: ef:15:cf:27:8c:1c:0a:ad:36:4a:ac:4e:86:71:f7: 77:60:6b:6c:73:8e:61:fb:84:3d:62:f6:71:c6:85: 38:a4:e5:fd:15:af:a0:d3:6b:4a:30:32:30:aa:a0: a8:0c:b1:8f:ba:49:8d:9d:72:21:5e:3b:c0:fe:4d: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:2C:DF:30:6E:C5:09:31:AE:65:7E:E8:BF:CA:30:61:0E:B1:A4 X509v3 Authority Key Identifier: keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:a800:2::/48 Signature Algorithm: sha256WithRSAEncryption df:70:e1:7c:4c:fa:c1:85:65:ad:50:f8:2d:8c:2f:c6:00:9a: 5a:9d:80:f6:df:b5:f1:a7:c3:e4:7e:b5:20:e9:c7:30:a1:f3: ec:db:1e:76:08:2a:82:38:73:32:24:30:4e:7f:9f:3a:26:60: a5:c1:a3:b5:0b:30:9f:76:30:dd:3d:e7:21:74:a2:58:84:15: 85:b9:00:6c:77:d9:ca:0f:f9:1f:0f:d0:79:82:32:68:a4:db: 53:82:64:c5:0d:b1:4c:9e:49:a9:c0:ae:d2:13:48:f0:8a:73: 3c:32:ab:0a:3e:b4:e7:c4:9d:7e:b9:58:15:f1:32:2c:da:1f: 02:59:fb:63:88:bf:f9:c9:25:49:aa:aa:58:55:fe:d6:b9:1a: cf:c3:ba:48:5e:8a:76:b5:bb:df:22:92:d6:7a:09:80:83:96: a7:15:3a:57:51:f9:2e:15:79:97:b5:7c:80:9c:ee:51:42:17: 9a:a7:99:67:2e:fa:30:08:f1:cf:db:09:11:2a:23:fc:35:57: 62:31:d5:f6:90:c7:fa:8d:fa:82:ab:b8:99:ba:df:12:e6:79: 07:bd:aa:f6:c3:04:ae:45:5e:c1:36:3f:1e:d6:53:22:5c:0e: b7:e0:1e:a9:08:56:f4:08:45:d0:e6:16:dd:6a:da:b0:ed:9a: ba:77:9c:08 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W1JaZxxaS/dAj0CkMMqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4 NjU0ZDAwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGVhMmNkZjMwNmVjNTA5MzFhZTY1N2VlOGJmY2EzMDYxMGViMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7vRRQqPWVyjp+jMsEcfXTf+JprU 4tpH2/2Z6WHB+5Xfx/3JGfoNjPwuuZRLfxmuCFC2kmOTrXYGQWxEOrr/ExZJMt3/ 6MGltDhjyGfxmSZ9ZVWFvzJYzHZ2qXTnVfThq5lRFE77x2BssFrsxx82mCzwdkH8 PRr37HnozVAJpqzTX3HbD9nZmp8WnXSTVBFeMnQJ99ikDzS0t4VVjLO6deu79PqS P5qCBjvCiJ2C4OEXuysO+WFMf6t28QWvFe1vvgTvFc8njBwKrTZKrE6Gcfd3YGts c45h+4Q9YvZxxoU4pOX9Fa+g02tKMDIwqqCoDLGPukmNnXIhXjvA/k1LswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFETqLN8wbsUJMa5lfui/yjBhDrGkMB8GA1UdIwQY MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt YTU0MjU4OTc5OWJjLzEvUk9vczN6QnV4UWt4cm1WLTZMX0tNR0VPc2FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKoAAAC MA0GCSqGSIb3DQEBCwUAA4IBAQDfcOF8TPrBhWWtUPgtjC/GAJpanYD237Xxp8Pk frUg6ccwofPs2x52CCqCOHMyJDBOf586JmClwaO1CzCfdjDdPechdKJYhBWFuQBs d9nKD/kfD9B5gjJopNtTgmTFDbFMnkmpwK7SE0jwinM8MqsKPrTnxJ1+uVgV8TIs 2h8CWftjiL/5ySVJqqpYVf7WuRrPw7pIXop2tbvfIpLWegmAg5anFTpXUfkuFXmX tXyAnO5RQheap5lnLvowCPHP2wkRKiP8NVdiMdX2kMf6jfqCq7iZut8S5nkHvar2 wwSuRV7BNj8e1lMiXA634B6pCFb0CEXQ5hbdatqw7Zq6d5wI -----END CERTIFICATE-----Generated at Fri Jan 23 12:54:48 2026 by rpki-client