This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/O215t5pNe_JqqPq9M0M6wgC9btc.roa File: O215t5pNe_JqqPq9M0M6wgC9btc.roa (raw, json) Hash identifier: cKdULx7DmL6wOwSDs0PsyH0CT+IGBOs48exVSZMjLL4= Subject key identifier: 3B:6D:79:B7:9A:4D:7B:F2:6A:A8:FA:BD:33:43:3A:C2:00:BD:6E:D7 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D0DBCC8A152A670150A73ECE54B5 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/O215t5pNe_JqqPq9M0M6wgC9btc.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137490 IP address blocks: 2a0e:7d46::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d0:db:cc:8a:15:2a:67:01:50:a7:3e:ce:54:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b6d79b79a4d7bf26aa8fabd33433ac200bd6ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:ca:94:94:59:1e:9e:d4:f4:e0:f0:e3:9a: 42:ca:e9:1c:6b:6f:d2:c6:0d:dd:d9:de:e3:a9:c5: 5a:db:f3:96:55:f0:c1:22:aa:a4:23:14:7a:f3:cb: a3:05:ed:cb:a7:df:b3:0e:07:34:be:dc:34:f5:94: 55:45:d7:2c:dc:d6:8e:99:7c:ba:6b:ed:21:00:9f: 91:90:a0:2f:0e:2c:69:ba:ba:83:a8:c4:63:f1:66: 2b:61:94:67:58:da:5b:ad:24:06:09:bd:76:f8:12: b7:af:de:03:77:5c:d2:c2:73:a4:26:53:2d:45:ba: c6:1b:b4:ae:b8:7a:fd:f0:b4:bd:c0:03:68:fc:61: d1:c4:df:b9:1f:2c:b2:0e:0e:b3:25:ba:ba:c8:8a: 8a:25:cc:c6:48:99:b3:d0:f0:e6:f0:77:97:93:62: 92:f9:d3:4e:95:1d:6e:12:f6:fb:3f:69:63:25:94: e4:fd:c8:d7:72:4e:24:ba:04:de:16:f1:60:fb:14: e0:a5:e4:e0:60:85:0e:7e:e2:a4:bb:05:59:41:da: 55:b7:97:37:ae:64:c1:0e:6c:5c:00:88:bd:da:7f: 0a:92:c6:53:75:7a:24:a7:50:1b:78:73:17:45:a9: fd:e3:26:10:a0:1a:f2:ce:df:14:c3:d9:70:c7:7f: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6D:79:B7:9A:4D:7B:F2:6A:A8:FA:BD:33:43:3A:C2:00:BD:6E:D7 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/O215t5pNe_JqqPq9M0M6wgC9btc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:7d46::/32 Signature Algorithm: sha256WithRSAEncryption 4d:c9:00:64:c9:2d:6b:9e:66:52:64:cc:c5:9c:2c:fc:32:a3: 43:f6:47:f5:b4:47:6e:11:e4:46:1f:ed:a9:d1:93:c7:ce:d4: c9:4d:6c:c5:47:25:2a:d9:87:30:17:27:b1:6c:e9:f4:28:01: 47:18:e9:49:70:3c:73:07:d0:ae:48:bf:af:58:bc:ec:40:30: 6d:c9:f2:76:d4:37:aa:c8:5c:a2:c0:f4:e2:00:51:01:5a:75: 28:23:e5:c0:4b:95:98:22:00:5b:85:ec:41:cd:41:73:6a:1d: c1:70:db:01:9b:14:02:3e:ac:cc:57:13:13:55:3f:86:bb:ae: 23:f7:1d:80:11:32:ef:e5:cb:df:8f:69:2d:f9:f1:cc:23:69: 7b:cf:32:7b:3f:da:e3:26:ca:97:d9:62:d3:cf:36:97:62:31: f3:43:0b:9a:2c:79:1a:30:dd:5d:06:21:17:f3:31:2f:c8:4e: b5:07:67:7c:ce:ab:07:79:35:59:2b:82:e9:ed:3c:56:fc:3b: a7:66:ab:a8:eb:11:a5:15:92:57:12:c9:9c:9a:48:b5:20:f6: 08:eb:a5:70:2f:ae:09:f3:99:5b:b1:14:fc:10:b0:c2:fa:75: d0:bc:7b:26:31:a8:1b:f4:24:c3:34:be:c6:84:df:30:66:5a: 8f:0f:a4:bc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+ptDbzIoVKmcBUKc+zlS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjZkNzliNzlhNGQ3YmYyNmFhOGZhYmQzMzQzM2FjMjAwYmQ2ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygTKlJRZHp7U9ODw45pCyukca2/S xg3d2d7jqcVa2/OWVfDBIqqkIxR688ujBe3Lp9+zDgc0vtw09ZRVRdcs3NaOmXy6 a+0hAJ+RkKAvDixpurqDqMRj8WYrYZRnWNpbrSQGCb12+BK3r94Dd1zSwnOkJlMt RbrGG7SuuHr98LS9wANo/GHRxN+5HyyyDg6zJbq6yIqKJczGSJmz0PDm8HeXk2KS +dNOlR1uEvb7P2ljJZTk/cjXck4kugTeFvFg+xTgpeTgYIUOfuKkuwVZQdpVt5c3 rmTBDmxcAIi92n8KksZTdXokp1AbeHMXRan94yYQoBryzt8Uw9lwx38czwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDttebeaTXvyaqj6vTNDOsIAvW7XMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTzIxNXQ1cE5lX0pxcVBxOU0wTTZ3Z0M5YnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg59RjAN BgkqhkiG9w0BAQsFAAOCAQEATckAZMkta55mUmTMxZws/DKjQ/ZH9bRHbhHkRh/t qdGTx87UyU1sxUclKtmHMBcnsWzp9CgBRxjpSXA8cwfQrki/r1i87EAwbcnydtQ3 qshcosD04gBRAVp1KCPlwEuVmCIAW4XsQc1Bc2odwXDbAZsUAj6szFcTE1U/hruu I/cdgBEy7+XL349pLfnxzCNpe88yez/a4ybKl9li0882l2Ix80MLmix5GjDdXQYh F/MxL8hOtQdnfM6rB3k1WSuC6e08Vvw7p2arqOsRpRWSVxLJnJpItSD2COulcC+u CfOZW7EU/BCwwvp10Lx7JjGoG/QkwzS+xoTfMGZajw+kvA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:54 2026 by rpki-client