This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ogO_dBP4Eid3Jsp-Qp34xIuHCVA.roa File: ogO_dBP4Eid3Jsp-Qp34xIuHCVA.roa (raw, json) Hash identifier: 5ISM3SRaXvpG5x7EdolkJpiYmBlJBXZTMefhM8RsX3A= Subject key identifier: A2:03:BF:74:13:F8:12:27:77:26:CA:7E:42:9D:F8:C4:8B:87:09:50 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CAD9AE672C6FFAD0B8EC7A63D7F4 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ogO_dBP4Eid3Jsp-Qp34xIuHCVA.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49367 IP address blocks: 2a0c:9a40:8083::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ca:d9:ae:67:2c:6f:fa:d0:b8:ec:7a:63:d7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a203bf7413f812277726ca7e429df8c48b870950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:10:4d:50:31:1c:c9:04:e9:43:ce:12:18: bc:bd:2a:21:ca:6a:2d:6a:c0:63:24:d3:9d:62:ab: be:7a:01:1c:ac:48:9b:77:b4:7c:f4:f3:25:93:6f: ec:a8:91:22:64:3f:e1:0b:be:1c:76:69:8b:08:e6: a1:9d:6d:18:70:00:a9:8a:93:9b:7c:a9:41:aa:0e: cc:93:6d:1c:b2:18:5f:53:e1:15:24:9f:b1:08:e6: c3:a3:c4:38:21:c7:78:f6:94:6a:e4:54:50:cd:b0: 4c:eb:ed:29:e2:35:5d:74:3c:4c:94:c3:c6:f6:13: 93:6d:1c:14:ea:24:f7:39:7b:d5:c6:05:90:a6:11: b4:2b:01:79:14:bf:c5:c7:af:ca:29:0a:25:ec:2c: dd:d2:0a:c1:c2:1b:7e:98:13:37:dd:c5:d4:cc:b6: 53:da:4c:61:db:90:34:28:52:e6:c9:83:5c:45:3f: fc:71:41:4a:cf:fe:81:48:5a:c6:02:d8:73:92:2c: fa:20:9e:54:66:1a:51:e8:1c:6a:4f:46:08:e5:b5: 2a:d8:25:eb:9a:de:c1:74:01:e2:1d:37:02:68:6d: 7f:a2:3c:be:7d:f8:f5:65:76:ba:f2:3b:9a:3e:6a: 76:ec:ad:75:f5:3f:25:0b:29:0e:24:3f:57:66:7a: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:BF:74:13:F8:12:27:77:26:CA:7E:42:9D:F8:C4:8B:87:09:50 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ogO_dBP4Eid3Jsp-Qp34xIuHCVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8083::/48 Signature Algorithm: sha256WithRSAEncryption ab:b0:4d:2b:76:35:11:01:00:f7:2a:ff:bd:e6:9e:90:55:38: f8:56:db:be:e0:fd:eb:78:41:93:ec:58:23:58:70:c1:ca:ed: ca:14:d1:4a:34:59:6b:35:76:12:c7:64:af:7e:6b:58:ea:f7: 08:dc:0d:1d:f0:7c:b4:cb:cd:68:4e:7c:1b:35:6d:fc:8c:7e: 5b:00:a8:eb:5e:0e:93:32:80:87:bf:34:0d:b3:e8:43:a2:68: 22:8f:c9:99:3d:ae:90:be:12:63:af:3c:08:7a:ba:4c:98:4d: d2:54:8f:c8:0d:15:0b:6b:10:bd:f8:f2:a7:8c:d3:ed:35:2e: ee:59:8d:58:53:e4:52:c1:d1:62:9d:5d:c1:da:e0:4c:11:fc: 67:46:ca:3e:67:34:47:ca:70:e4:39:d1:7b:34:1e:70:c6:4b: 47:23:df:77:0a:04:ba:13:7b:ca:fa:c9:a8:20:eb:e7:24:1f: ef:0e:d0:ee:eb:08:90:42:77:7e:4c:c4:b8:23:f6:12:ee:44: 4f:17:ac:5e:fd:dc:2f:55:af:d9:e8:1b:06:63:7e:51:42:42: ad:51:f4:53:89:25:69:78:ef:a1:11:9c:4f:af:0e:69:c9:8c: f4:3d:b1:48:ec:59:79:5a:06:ef:3c:5d:fc:e0:85:35:fc:2c: 94:d5:89:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+psrZrmcsb/rQuOx6Y9f0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjAzYmY3NDEzZjgxMjI3NzcyNmNhN2U0MjlkZjhjNDhiODcwOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkYQTVAxHMkE6UPOEhi8vSohymot asBjJNOdYqu+egEcrEibd7R89PMlk2/sqJEiZD/hC74cdmmLCOahnW0YcACpipOb fKlBqg7Mk20cshhfU+EVJJ+xCObDo8Q4Icd49pRq5FRQzbBM6+0p4jVddDxMlMPG 9hOTbRwU6iT3OXvVxgWQphG0KwF5FL/Fx6/KKQol7Czd0grBwht+mBM33cXUzLZT 2kxh25A0KFLmyYNcRT/8cUFKz/6BSFrGAthzkiz6IJ5UZhpR6BxqT0YI5bUq2CXr mt7BdAHiHTcCaG1/ojy+ffj1ZXa68juaPmp27K119T8lCykOJD9XZnprzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKIDv3QT+BIndybKfkKd+MSLhwlQMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvb2dPX2RCUDRFaWQzSnNwLVFwMzR4SXVIQ1ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICD MA0GCSqGSIb3DQEBCwUAA4IBAQCrsE0rdjURAQD3Kv+95p6QVTj4Vtu+4P3reEGT 7FgjWHDByu3KFNFKNFlrNXYSx2SvfmtY6vcI3A0d8Hy0y81oTnwbNW38jH5bAKjr Xg6TMoCHvzQNs+hDomgij8mZPa6QvhJjrzwIerpMmE3SVI/IDRULaxC9+PKnjNPt NS7uWY1YU+RSwdFinV3B2uBMEfxnRso+ZzRHynDkOdF7NB5wxktHI993CgS6E3vK +smoIOvnJB/vDtDu6wiQQnd+TMS4I/YS7kRPF6xe/dwvVa/Z6BsGY35RQkKtUfRT iSVpeO+hEZxPrw5pyYz0PbFI7Fl5WgbvPF384IU1/CyU1Yni -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client