This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/OislEKggcD7E5vmHMkHdlxKY_PU.roa File: OislEKggcD7E5vmHMkHdlxKY_PU.roa (raw, json) Hash identifier: nRjbdFsuY+3HF6/aKivZHmFTEVBOZaLeegL6y1Mg1XI= Subject key identifier: 3A:2B:25:10:A8:20:70:3E:C4:E6:F9:87:32:41:DD:97:12:98:FC:F5 Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Certificate serial: 019B7E381F502A39508CB2D7A1AEBB7664BA Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/OislEKggcD7E5vmHMkHdlxKY_PU.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a05:aec3:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1f:50:2a:39:50:8c:b2:d7:a1:ae:bb:76:64:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a2b2510a820703ec4e6f9873241dd971298fcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:4b:2d:b7:ad:74:d0:c0:18:9a:83:90:58: d0:18:89:e9:ce:01:2d:5f:4a:7c:0b:47:cd:ab:99: 0d:18:3d:1e:1e:b1:89:be:2a:fc:e3:b3:66:ef:59: 72:2b:e3:e9:b9:41:99:20:31:89:bb:e9:38:9b:16: 7e:43:92:86:4b:50:65:b3:17:cb:df:0c:84:17:73: f7:af:86:77:10:3b:cf:c0:55:29:8f:7d:ef:89:9e: fa:c4:4e:b7:ba:ef:81:b8:2d:00:69:e9:39:4e:6c: 54:a3:e9:7e:de:ca:c1:e7:78:ff:ed:f2:5e:f0:cd: ba:77:13:7c:b4:9d:5b:3c:2e:e4:af:42:69:27:41: 9e:86:2d:0a:50:30:7f:ec:f7:0e:6d:b6:6a:05:7a: eb:c4:69:2d:c1:82:bb:25:d4:12:31:03:bf:27:04: 16:95:3b:9f:bf:02:e9:e2:16:b2:51:5b:0e:12:fc: cc:d6:20:ec:46:90:50:a2:ab:76:43:0e:b5:e6:4c: d4:32:e1:d1:a9:4b:9e:44:cb:a6:45:ef:87:ca:61: 5c:fc:c0:6e:14:27:7b:2c:11:9b:98:cb:55:48:2a: 89:48:de:6b:c4:77:ac:38:0d:66:5a:60:4c:a2:6f: cb:a5:ee:86:a4:60:81:a3:ce:4e:17:40:77:16:8a: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:25:10:A8:20:70:3E:C4:E6:F9:87:32:41:DD:97:12:98:FC:F5 X509v3 Authority Key Identifier: keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/OislEKggcD7E5vmHMkHdlxKY_PU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:aec3:100::/40 Signature Algorithm: sha256WithRSAEncryption 96:c4:42:de:3c:de:8b:f3:07:d4:6e:1b:c9:ef:ce:82:ba:a4: 15:1e:3e:37:6d:bf:78:49:08:19:d6:c3:54:a4:fb:cc:f0:54: 8d:52:b4:fb:eb:4a:68:ab:32:17:da:02:21:c4:54:b7:09:08: 5c:6e:b5:7c:d8:8c:e5:75:7f:e0:a0:f1:91:42:88:ea:92:e2: 56:af:94:db:33:2e:70:6e:38:c1:d8:8c:a4:3d:94:94:c6:11: 29:75:3b:9c:8a:b5:81:13:69:13:d1:0b:55:5d:87:de:4e:ba: 54:c4:ed:76:b9:a5:26:a9:6b:a2:b9:53:c6:1b:f2:6d:57:d5: fb:df:05:d8:a4:28:23:bd:46:31:6e:11:57:49:e1:bb:7d:8c: 61:db:ef:88:37:9a:55:fd:2e:30:47:53:3a:c6:c2:b3:eb:18: fc:63:79:da:34:d2:b2:43:2c:b7:32:d1:73:71:71:8b:8f:60: e2:e8:61:d4:cb:0f:74:1d:51:eb:62:a4:7d:73:37:b7:a3:eb: f0:51:a0:fc:00:e8:3f:42:f0:49:07:d4:5a:84:9c:49:d4:a4: 21:9b:f5:fb:63:60:34:47:1a:8f:01:5d:0f:99:23:50:d3:0a: 56:04:82:d1:70:e8:89:20:9b:77:0d:7b:3b:36:74:15:c6:57: e7:44:08:5d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OB9QKjlQjLLXoa67dmS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODJiMTcxOWI0ZmVjNzA4YmE2NmIyOTdhYmUwZGIwOGZh ZDBlMWUwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTJiMjUxMGE4MjA3MDNlYzRlNmY5ODczMjQxZGQ5NzEyOThmY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvhLLbetdNDAGJqDkFjQGInpzgEt X0p8C0fNq5kNGD0eHrGJvir847Nm71lyK+PpuUGZIDGJu+k4mxZ+Q5KGS1BlsxfL 3wyEF3P3r4Z3EDvPwFUpj33viZ76xE63uu+BuC0Aaek5TmxUo+l+3srB53j/7fJe 8M26dxN8tJ1bPC7kr0JpJ0Gehi0KUDB/7PcObbZqBXrrxGktwYK7JdQSMQO/JwQW lTufvwLp4hayUVsOEvzM1iDsRpBQoqt2Qw615kzUMuHRqUueRMumRe+HymFc/MBu FCd7LBGbmMtVSCqJSN5rxHesOA1mWmBMom/Lpe6GpGCBo85OF0B3ForlkwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDorJRCoIHA+xOb5hzJB3ZcSmPz1MB8GA1UdIwQY MBaAFEmCsXGbT+xwi6ZrKXq+DbCPrQ4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYt YWU2Yjg0YzI4MTk1LzEvT2lzbEVLZ2djRDdFNXZtSE1rSGRseEtZX1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYtYWU2Yjg0YzI4MTk1 LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgWuwwEw DQYJKoZIhvcNAQELBQADggEBAJbEQt483ovzB9RuG8nvzoK6pBUePjdtv3hJCBnW w1Sk+8zwVI1StPvrSmirMhfaAiHEVLcJCFxutXzYjOV1f+Cg8ZFCiOqS4lavlNsz LnBuOMHYjKQ9lJTGESl1O5yKtYETaRPRC1Vdh95OulTE7Xa5pSapa6K5U8Yb8m1X 1fvfBdikKCO9RjFuEVdJ4bt9jGHb74g3mlX9LjBHUzrGwrPrGPxjedo00rJDLLcy 0XNxcYuPYOLoYdTLD3QdUetipH1zN7ej6/BRoPwA6D9C8EkH1FqEnEnUpCGb9ftj YDRHGo8BXQ+ZI1DTClYEgtFw6Ikgm3cNezs2dBXGV+dECF0= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:23 2026 by rpki-client