This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/vOap3lF_tFCZW-DOrcwPq0UBrm0.roa File: vOap3lF_tFCZW-DOrcwPq0UBrm0.roa (raw, json) Hash identifier: sDecGEkGDmv0nje/6thzunoswSWfLrwvt0Nww3M0Lpw= Subject key identifier: BC:E6:A9:DE:51:7F:B4:50:99:5B:E0:CE:AD:CC:0F:AB:45:01:AE:6D Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Certificate serial: 019B797DF02CF2B338E630F8D0735A775AEA Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/vOap3lF_tFCZW-DOrcwPq0UBrm0.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 2a05:bc00::/29 maxlen: 48 2a06:80c0::/29 maxlen: 48 2a06:8e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f0:2c:f2:b3:38:e6:30:f8:d0:73:5a:77:5a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bce6a9de517fb450995be0ceadcc0fab4501ae6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:0b:dc:76:42:c1:fe:8a:6d:6a:56:a9:a1: 6d:07:e6:7c:3e:8e:1b:26:02:94:bc:b7:7f:c5:7b: 3c:a8:7a:02:53:6d:68:26:d7:8b:9a:30:92:d9:02: 35:be:f3:1b:fb:8b:79:10:ef:12:d2:ff:2a:76:33: 7a:b2:2b:70:b6:4e:bd:86:4b:d4:bc:36:1d:0f:c3: 61:d3:b4:cd:87:40:65:25:81:3d:cc:08:b0:25:46: fe:b5:62:76:59:42:0a:e7:f0:1c:cb:d8:8b:83:2c: ed:42:f1:98:93:63:73:11:80:28:34:4a:ed:8f:3e: 70:1e:51:27:18:fb:6b:ef:ed:a4:a0:a3:a2:a7:35: 82:ec:81:74:14:7d:bb:d4:06:a8:13:e4:8f:60:0b: 2d:39:75:7b:92:09:20:7f:8c:43:6b:31:b3:cf:e9: a5:50:99:db:a1:9f:c3:3e:84:50:bb:d9:64:26:0a: 60:c7:b9:2d:b2:6d:ae:cc:69:97:76:07:9c:90:94: 7a:c0:fc:7a:8c:e3:9d:b2:7d:fe:d6:76:53:5e:ed: 35:02:35:cb:d7:39:23:24:55:9b:95:70:7e:dc:da: 86:fe:0c:df:78:31:ca:5d:af:77:4b:96:3d:7f:e7: 2f:b5:ae:e8:9c:c5:b8:e4:57:60:9a:df:d5:47:60: 64:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E6:A9:DE:51:7F:B4:50:99:5B:E0:CE:AD:CC:0F:AB:45:01:AE:6D X509v3 Authority Key Identifier: keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/vOap3lF_tFCZW-DOrcwPq0UBrm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:bc00::/29 2a06:80c0::/29 2a06:8e40::/29 Signature Algorithm: sha256WithRSAEncryption 7c:fb:0f:25:db:ef:c9:63:19:a0:cc:75:e1:ca:dd:34:6e:b0: 85:fb:fe:e2:44:cc:42:db:72:d1:b4:9b:27:2b:1f:23:ba:fb: ce:a7:98:1b:f1:bc:0a:b0:2e:cc:9f:ce:4b:ab:70:12:80:ac: 33:52:1c:30:62:a0:83:44:08:25:dd:16:df:75:95:51:1f:5f: 64:27:e7:71:c9:c5:ce:36:85:c9:df:9c:b9:5c:7c:81:3e:71: 6b:6e:43:91:ab:3e:46:c3:f8:81:c0:14:6a:eb:86:43:ea:1a: f6:bf:a3:4f:69:06:71:91:2b:d6:a2:c8:b7:70:4c:8d:17:9a: 1d:70:c2:d7:8e:2f:19:4c:3c:02:44:d1:6b:b8:d5:8e:3c:08: 47:5f:66:f6:46:0c:1c:92:f8:6f:15:85:90:67:dc:f7:ab:0b: c3:fb:bb:1c:79:0c:0c:82:64:d4:62:f6:ca:a9:dc:6f:8f:7a: 75:1d:8c:b2:c5:5f:e9:96:dc:60:f4:0d:3d:7b:12:dc:97:6d: c1:21:4c:3b:90:f9:17:45:c4:db:2a:dd:a5:81:3d:e3:f0:29: 27:0d:92:f4:5e:9e:38:ef:1c:bf:a2:68:86:1d:00:aa:6b:5b: 77:30:ea:07:f0:8c:6b:dc:af:17:a1:aa:3f:8b:ed:f7:22:75: 86:a0:c9:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ffAs8rM45jD40HNad1rqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0 ZWZiMWQwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2U2YTlkZTUxN2ZiNDUwOTk1YmUwY2VhZGNjMGZhYjQ1MDFhZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXkL3HZCwf6KbWpWqaFtB+Z8Po4b JgKUvLd/xXs8qHoCU21oJteLmjCS2QI1vvMb+4t5EO8S0v8qdjN6sitwtk69hkvU vDYdD8Nh07TNh0BlJYE9zAiwJUb+tWJ2WUIK5/Acy9iLgyztQvGYk2NzEYAoNErt jz5wHlEnGPtr7+2koKOipzWC7IF0FH271AaoE+SPYAstOXV7kgkgf4xDazGzz+ml UJnboZ/DPoRQu9lkJgpgx7ktsm2uzGmXdgeckJR6wPx6jOOdsn3+1nZTXu01AjXL 1zkjJFWblXB+3NqG/gzfeDHKXa93S5Y9f+cvta7onMW45Fdgmt/VR2BkiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLzmqd5Rf7RQmVvgzq3MD6tFAa5tMB8GA1UdIwQY MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt ZDEyMDVlMGMwY2NlLzEvdk9hcDNsRl90RkNaVy1ET3Jjd1BxMFVCcm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgW8AAMF AyoGgMADBQMqBo5AMA0GCSqGSIb3DQEBCwUAA4IBAQB8+w8l2+/JYxmgzHXhyt00 brCF+/7iRMxC23LRtJsnKx8juvvOp5gb8bwKsC7Mn85Lq3ASgKwzUhwwYqCDRAgl 3RbfdZVRH19kJ+dxycXONoXJ35y5XHyBPnFrbkORqz5Gw/iBwBRq64ZD6hr2v6NP aQZxkSvWosi3cEyNF5odcMLXji8ZTDwCRNFruNWOPAhHX2b2RgwckvhvFYWQZ9z3 qwvD+7sceQwMgmTUYvbKqdxvj3p1HYyyxV/pltxg9A09exLcl23BIUw7kPkXRcTb Kt2lgT3j8CknDZL0Xp447xy/omiGHQCqa1t3MOoH8Ixr3K8Xoao/i+33InWGoMkN -----END CERTIFICATE-----Generated at Sun Jan 18 10:47:21 2026 by rpki-client