This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ODl1WsE2ocNz0YLBntn_x3nj14s.roa File: ODl1WsE2ocNz0YLBntn_x3nj14s.roa (raw, json) Hash identifier: avP0bVOIlj7sYRV7v3TEnSBtmOvr9iG0yC6puW/RGjQ= Subject key identifier: 38:39:75:5A:C1:36:A1:C3:73:D1:82:C1:9E:D9:FF:C7:79:E3:D7:8B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C68A414A5099091276C88561F148 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ODl1WsE2ocNz0YLBntn_x3nj14s.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 2a0c:9a40:9c10::/44 maxlen: 48 2a0c:9a40:9cc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c6:8a:41:4a:50:99:09:12:76:c8:85:61:f1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3839755ac136a1c373d182c19ed9ffc779e3d78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:15:c2:0a:1b:83:f3:b7:20:13:9b:88:3b: 36:e7:06:35:35:36:97:a5:8f:92:cd:0e:8b:25:cd: 43:2c:54:cd:19:b7:9a:63:7c:c8:1c:9d:4d:15:23: 04:0c:eb:c2:23:2c:07:b9:c5:54:0f:ad:99:b7:b1: 37:1b:fd:4a:d9:87:f8:2e:78:c7:6c:c5:55:b5:e4: 63:da:74:ce:91:0e:f0:e9:97:1f:d3:cc:47:fc:2d: a9:a7:b0:cc:00:9f:ed:cb:d3:9c:d0:ef:09:b4:1d: eb:75:21:ac:2c:bf:ac:04:38:39:a4:7f:cc:0a:67: e9:1a:06:5b:9e:4b:35:ed:ba:68:e1:aa:e1:e5:73: 24:48:3f:b0:23:c4:76:8e:2a:6e:3b:21:e4:86:5f: 53:d3:df:eb:c2:f8:0a:36:98:60:76:8c:7a:4e:5d: 4a:8d:f3:15:2a:da:ba:23:03:fd:f9:86:39:0b:7b: de:c4:83:c6:86:34:fb:12:df:17:44:e1:b0:f3:e0: 56:c8:39:29:13:ca:7d:17:5e:b2:53:2f:5d:73:0b: a6:2a:65:e1:ec:07:f0:fd:94:64:56:97:9c:f6:86: c7:28:c6:6a:8c:bf:13:fe:00:1d:5f:da:1c:50:da: b0:16:1f:43:8a:20:9a:09:cd:b1:6f:57:20:78:a7: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:39:75:5A:C1:36:A1:C3:73:D1:82:C1:9E:D9:FF:C7:79:E3:D7:8B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ODl1WsE2ocNz0YLBntn_x3nj14s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:9c10::/44 2a0c:9a40:9cc0::/44 Signature Algorithm: sha256WithRSAEncryption 78:04:64:a4:33:a4:cb:aa:c4:03:f6:a1:de:71:11:a3:fd:ff: e0:c7:9e:13:59:98:66:9f:b9:9d:4c:08:d0:ac:aa:d7:d3:15: 93:c6:46:98:91:e8:a7:95:cd:8e:c6:6e:c1:e0:96:0e:dc:a3: 34:67:58:ed:3f:d0:19:f0:30:56:9b:cd:de:19:76:1a:63:96: 39:54:44:15:9c:19:39:9b:58:e7:c9:33:7c:99:82:62:92:a9: cb:93:ed:2c:56:74:fc:3c:31:bc:96:d5:18:9b:9f:f4:23:ec: 38:60:15:a6:4f:a6:cd:27:bf:a2:7d:85:28:2e:8e:65:c0:18: 7d:d7:52:df:22:f3:69:0f:8a:20:2b:b3:94:13:51:78:d9:b8: 87:13:cf:40:dc:41:6d:e7:b2:18:8a:62:2a:6b:6e:20:ae:38: 50:fb:bf:85:19:98:1c:17:e9:91:6a:5e:ee:df:a8:4c:89:19: 68:4b:1f:67:ee:fd:b6:4c:13:93:c5:e2:be:bf:29:32:8a:0b: 14:ac:9d:7e:f7:fa:9a:86:bc:6b:ca:fa:3a:b1:19:d0:89:c4: a3:57:5d:d9:db:94:a5:9d:ea:47:1b:b2:96:51:e5:e0:2e:1f: f5:7b:ba:35:4c:d0:d9:74:45:49:ec:55:a2:2c:1f:b7:d8:6a: 12:d2:8e:4c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+psaKQUpQmQkSdsiFYfFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODM5NzU1YWMxMzZhMWMzNzNkMTgyYzE5ZWQ5ZmZjNzc5ZTNkNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykgVwgobg/O3IBObiDs25wY1NTaX pY+SzQ6LJc1DLFTNGbeaY3zIHJ1NFSMEDOvCIywHucVUD62Zt7E3G/1K2Yf4LnjH bMVVteRj2nTOkQ7w6Zcf08xH/C2pp7DMAJ/ty9Oc0O8JtB3rdSGsLL+sBDg5pH/M CmfpGgZbnks17bpo4arh5XMkSD+wI8R2jipuOyHkhl9T09/rwvgKNphgdox6Tl1K jfMVKtq6IwP9+YY5C3vexIPGhjT7Et8XROGw8+BWyDkpE8p9F16yUy9dcwumKmXh 7Afw/ZRkVpec9obHKMZqjL8T/gAdX9ocUNqwFh9DiiCaCc2xb1cgeKeI6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDg5dVrBNqHDc9GCwZ7Z/8d549eLMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvT0RsMVdzRTJvY056MFlMQm50bl94M25qMTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgyaQJwQ AwcEKgyaQJzAMA0GCSqGSIb3DQEBCwUAA4IBAQB4BGSkM6TLqsQD9qHecRGj/f/g x54TWZhmn7mdTAjQrKrX0xWTxkaYkeinlc2Oxm7B4JYO3KM0Z1jtP9AZ8DBWm83e GXYaY5Y5VEQVnBk5m1jnyTN8mYJikqnLk+0sVnT8PDG8ltUYm5/0I+w4YBWmT6bN J7+ifYUoLo5lwBh911LfIvNpD4ogK7OUE1F42biHE89A3EFt57IYimIqa24grjhQ +7+FGZgcF+mRal7u36hMiRloSx9n7v22TBOTxeK+vykyigsUrJ1+9/qahrxryvo6 sRnQicSjV13Z25SlnepHG7KWUeXgLh/1e7o1TNDZdEVJ7FWiLB+32GoS0o5M -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:52 2026 by rpki-client