This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0rhF20B9J0l57DDXD5PI3Mlgck4.roa File: 0rhF20B9J0l57DDXD5PI3Mlgck4.roa (raw, json) Hash identifier: IsJTlAtlEK1wuKb/L+IEKig4AE4TBarY7Xe4bFwDMpI= Subject key identifier: D2:B8:45:DB:40:7D:27:49:79:EC:30:D7:0F:93:C8:DC:C9:60:72:4E Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC8814D216D1F61DF0F243E88A814A9 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0rhF20B9J0l57DDXD5PI3Mlgck4.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215443 IP address blocks: 2a0d:d940:2000::/48 maxlen: 48 2a0d:d940:9005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:81:4d:21:6d:1f:61:df:0f:24:3e:88:a8:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2b845db407d274979ec30d70f93c8dcc960724e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:99:df:73:66:29:9b:69:fb:83:b4:4a:01: fc:7a:a7:f8:1b:23:7a:d7:63:49:43:00:02:b0:1e: d9:c8:1d:3c:55:36:8e:70:81:94:47:f0:dc:56:3f: c7:86:d8:2e:e3:f1:c8:cd:ac:91:ff:06:38:db:a4: e6:9e:d4:2b:a2:65:e9:55:27:bd:68:9d:ca:1d:78: 56:ef:f6:ea:21:5a:d3:f3:65:88:2e:98:fc:c5:75: 57:9a:d5:4f:4a:9b:04:78:0c:ec:3d:4d:51:61:b3: f8:8c:33:e9:a8:12:9d:df:24:55:43:69:e2:77:94: 9e:91:bf:7e:cc:d2:d4:73:ba:b0:98:d1:e5:44:88: f4:6f:93:f7:1f:55:f9:ee:b2:79:42:e3:36:7e:82: 15:d8:50:6e:38:26:50:70:a0:ce:11:3b:50:5a:e4: fa:0f:f5:cb:e9:d2:86:a2:f7:21:92:3f:17:3b:81: 18:e7:cd:d8:e5:c5:96:36:6b:1e:27:66:7c:cd:ef: 8d:b2:f6:30:16:29:3f:54:5b:cf:b4:41:24:43:ee: 14:32:66:62:08:de:87:ed:0e:3a:f4:9c:42:78:44: c4:8c:b4:97:94:73:c6:17:60:7d:2a:88:c6:6b:ab: 65:fc:1e:2c:c4:6c:90:9f:25:26:96:95:8a:72:37: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B8:45:DB:40:7D:27:49:79:EC:30:D7:0F:93:C8:DC:C9:60:72:4E X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/0rhF20B9J0l57DDXD5PI3Mlgck4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:2000::/48 2a0d:d940:9005::/48 Signature Algorithm: sha256WithRSAEncryption 7c:0d:8f:71:8f:10:ec:2f:a9:56:82:35:b5:2e:22:97:bc:82: 29:37:ee:51:98:89:c5:db:54:29:80:39:bd:b5:93:24:3f:28: 7d:af:38:f1:ae:e1:51:c8:10:6d:94:7a:f9:91:bb:ec:b0:64: 20:d0:a1:2f:dd:c7:9a:02:8a:c5:3e:a1:70:34:35:6f:ce:80: 95:7d:07:b0:49:f3:eb:97:60:38:9f:b6:bb:61:5e:33:e2:60: 7c:cb:66:74:ad:07:f3:92:b2:4f:21:25:34:49:a7:69:a7:c3: 04:97:fc:5e:42:ab:55:3f:7e:69:19:26:5e:d5:d5:d2:3e:d6: ae:4e:91:3b:81:85:04:12:f4:13:c3:c4:de:b9:f8:3c:af:b8: f7:0d:c9:7a:46:d7:7e:d3:33:72:59:c6:00:96:f5:86:4d:c6: de:ee:76:e0:16:c6:91:e7:d4:16:9b:a3:74:c3:fc:bf:ef:79: 26:ac:c9:c8:6c:00:c3:d3:b4:62:36:25:cc:91:a8:9f:d2:95: 63:1b:ec:b3:1c:02:f3:ca:64:5f:a1:62:d8:3b:23:a9:b2:a9: 11:27:6c:38:a2:e6:97:22:c1:7c:84:94:33:26:3f:0b:0f:12: c4:f3:77:d7:67:d9:96:31:ba:9c:48:5f:29:9c:71:08:fc:2b: 4a:65:1b:68 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yIFNIW0fYd8PJD6IqBSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmI4NDVkYjQwN2QyNzQ5NzllYzMwZDcwZjkzYzhkY2M5NjA3MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8qZ33NmKZtp+4O0SgH8eqf4GyN6 12NJQwACsB7ZyB08VTaOcIGUR/DcVj/Hhtgu4/HIzayR/wY426TmntQromXpVSe9 aJ3KHXhW7/bqIVrT82WILpj8xXVXmtVPSpsEeAzsPU1RYbP4jDPpqBKd3yRVQ2ni d5Sekb9+zNLUc7qwmNHlRIj0b5P3H1X57rJ5QuM2foIV2FBuOCZQcKDOETtQWuT6 D/XL6dKGovchkj8XO4EY583Y5cWWNmseJ2Z8ze+NsvYwFik/VFvPtEEkQ+4UMmZi CN6H7Q469JxCeETEjLSXlHPGF2B9KojGa6tl/B4sxGyQnyUmlpWKcjdpyQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNK4RdtAfSdJeeww1w+TyNzJYHJOMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvMHJoRjIwQjlKMGw1N0REWEQ1UEkzTWxnY2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQCAA AwcAKg3ZQJAFMA0GCSqGSIb3DQEBCwUAA4IBAQB8DY9xjxDsL6lWgjW1LiKXvIIp N+5RmInF21QpgDm9tZMkPyh9rzjxruFRyBBtlHr5kbvssGQg0KEv3ceaAorFPqFw NDVvzoCVfQewSfPrl2A4n7a7YV4z4mB8y2Z0rQfzkrJPISU0Sadpp8MEl/xeQqtV P35pGSZe1dXSPtauTpE7gYUEEvQTw8Teufg8r7j3Dcl6Rtd+0zNyWcYAlvWGTcbe 7nbgFsaR59QWm6N0w/y/73kmrMnIbADD07RiNiXMkaif0pVjG+yzHALzymRfoWLY OyOpsqkRJ2w4ouaXIsF8hJQzJj8LDxLE83fXZ9mWMbqcSF8pnHEI/CtKZRto -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:58 2026 by rpki-client