This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/OGsMV3i3OB4gAngso8yoHzP7h7U.roa File: OGsMV3i3OB4gAngso8yoHzP7h7U.roa (raw, json) Hash identifier: +Dd1zPVvFn/QQiyhK9GClpGmONdHtqwWdAATYz40SAg= Subject key identifier: 38:6B:0C:57:78:B7:38:1E:20:02:78:2C:A3:CC:A8:1F:33:FB:87:B5 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F652A9B443F77719F739B739242A Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/OGsMV3i3OB4gAngso8yoHzP7h7U.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208914 IP address blocks: 2a0c:9a46:600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f6:52:a9:b4:43:f7:77:19:f7:39:b7:39:24:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=386b0c5778b7381e2002782ca3cca81f33fb87b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:f1:97:d7:de:82:fe:7c:0e:95:5b:22:84: e4:6e:0a:fc:13:33:f2:34:1c:b8:74:13:a4:51:81: 01:04:5c:1d:18:d8:9e:1b:88:54:8e:31:b8:14:ea: 73:b7:88:de:e0:f2:35:be:24:c8:f9:48:12:66:8f: b7:10:db:33:61:e9:fc:18:73:65:bc:99:8a:3c:9e: f5:e9:f5:49:9e:1a:ad:61:7c:a5:14:d0:db:73:c6: 62:9f:cc:3e:f9:7f:7e:4e:50:97:d0:1d:14:43:d7: 31:83:13:aa:9b:00:42:6a:a5:02:4f:f1:f9:4a:cd: 89:50:18:3f:a0:ab:ba:1f:88:10:2b:0a:a5:49:de: f8:59:dd:67:31:81:a8:7e:ad:aa:5b:7c:75:87:60: 63:29:1d:b4:22:b3:7b:80:a6:24:4d:92:6a:47:fb: e0:db:ab:36:ee:a0:a5:15:e9:09:a6:f7:34:a0:6d: 07:1f:fd:84:f3:f5:7c:af:0a:da:4c:e9:f5:95:e7: 8e:a2:59:2b:5f:84:1e:07:c0:c4:ee:d5:d2:65:61: 86:f0:1b:5b:52:df:9e:24:c6:a6:e5:f5:52:bc:0b: d4:99:3b:e0:4a:36:bc:e9:bf:a6:95:c8:82:4b:23: 31:39:61:7c:3d:fd:33:da:f7:56:16:62:d0:9c:61: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:0C:57:78:B7:38:1E:20:02:78:2C:A3:CC:A8:1F:33:FB:87:B5 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/OGsMV3i3OB4gAngso8yoHzP7h7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a46:600::/40 Signature Algorithm: sha256WithRSAEncryption 7a:d9:7f:53:07:2c:6f:cb:4a:14:81:8b:15:ad:f2:96:ac:97: 1a:22:76:7b:8b:26:f7:1f:8e:4b:cf:85:6f:cb:d0:cf:f8:8d: 46:ae:15:c7:ce:c4:9c:af:b9:e5:e9:2a:c1:d1:a6:0d:32:75: 21:71:a0:8b:ac:fb:4d:5f:8d:37:de:27:71:20:28:48:5b:fd: 41:2c:bc:b3:72:bc:b1:40:bd:8e:09:75:f1:99:3c:34:fc:22: ee:3c:5a:70:a0:67:f2:13:1c:dc:88:48:51:fb:09:82:73:4f: df:be:ed:74:99:06:10:c1:9e:37:cd:b6:74:b2:0e:7d:85:33: 42:3e:e1:4c:93:0b:08:71:64:dd:a5:1a:2a:25:44:1f:7d:c7: 62:d6:dd:9e:54:74:65:7b:8e:3c:c8:7e:5b:f3:29:e1:c5:11: ac:96:3f:b6:51:5a:51:3d:38:34:65:78:b4:fd:62:49:e1:ac: 2d:fa:75:e1:f6:86:4f:d0:6e:62:a6:e5:38:35:c4:c0:ce:20: 56:e7:a2:9c:6b:e5:6f:d7:93:4f:d2:52:ac:64:3a:12:f6:90: 2f:ef:cb:bc:1c:91:98:b6:11:ba:ec:85:7f:96:0a:a1:8c:17: 2b:5f:04:55:d3:89:8b:ed:af:35:d5:86:c8:a7:70:2a:61:2e: 3c:05:1f:be -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pvZSqbRD93cZ9zm3OSQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODZiMGM1Nzc4YjczODFlMjAwMjc4MmNhM2NjYTgxZjMzZmI4N2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbfxl9fegv58DpVbIoTkbgr8EzPy NBy4dBOkUYEBBFwdGNieG4hUjjG4FOpzt4je4PI1viTI+UgSZo+3ENszYen8GHNl vJmKPJ716fVJnhqtYXylFNDbc8Zin8w++X9+TlCX0B0UQ9cxgxOqmwBCaqUCT/H5 Ss2JUBg/oKu6H4gQKwqlSd74Wd1nMYGofq2qW3x1h2BjKR20IrN7gKYkTZJqR/vg 26s27qClFekJpvc0oG0HH/2E8/V8rwraTOn1leeOolkrX4QeB8DE7tXSZWGG8Btb Ut+eJMam5fVSvAvUmTvgSja86b+mlciCSyMxOWF8Pf0z2vdWFmLQnGGKVQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDhrDFd4tzgeIAJ4LKPMqB8z+4e1MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvT0dzTVYzaTNPQjRnQW5nc284eW9IelA3aDdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaRgYw DQYJKoZIhvcNAQELBQADggEBAHrZf1MHLG/LShSBixWt8paslxoidnuLJvcfjkvP hW/L0M/4jUauFcfOxJyvueXpKsHRpg0ydSFxoIus+01fjTfeJ3EgKEhb/UEsvLNy vLFAvY4JdfGZPDT8Iu48WnCgZ/ITHNyISFH7CYJzT9++7XSZBhDBnjfNtnSyDn2F M0I+4UyTCwhxZN2lGiolRB99x2LW3Z5UdGV7jjzIflvzKeHFEayWP7ZRWlE9ODRl eLT9YknhrC36deH2hk/QbmKm5Tg1xMDOIFbnopxr5W/Xk0/SUqxkOhL2kC/vy7wc kZi2EbrshX+WCqGMFytfBFXTiYvtrzXVhsincCphLjwFH74= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:27 2026 by rpki-client