This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/C-O1DWYyfHNUhw4iRzGBt5fnn10.roa File: C-O1DWYyfHNUhw4iRzGBt5fnn10.roa (raw, json) Hash identifier: BKCId5Vhq6BJF9n6ENjsO7jn4POMw+PTLm0nZfVyA3U= Subject key identifier: 0B:E3:B5:0D:66:32:7C:73:54:87:0E:22:47:31:81:B7:97:E7:9F:5D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D88E49811EDB534301973E33DE23 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/C-O1DWYyfHNUhw4iRzGBt5fnn10.roa Signing time: Fri 02 Jan 2026 16:20:40 +0000 ROA not before: Fri 02 Jan 2026 16:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211849 IP address blocks: 2a0b:b86:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d8:8e:49:81:1e:db:53:43:01:97:3e:33:de:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0be3b50d66327c7354870e22473181b797e79f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:fa:b5:79:25:5a:9d:71:a9:49:90:45:61: 9e:35:10:d0:e4:6d:cc:99:a3:12:7e:2c:49:c4:7b: f7:6f:61:cb:8c:b2:c2:80:be:7a:28:5a:af:b0:ae: 17:da:39:3e:47:c4:1e:fe:36:74:1d:a6:6a:63:82: db:70:64:6d:87:ea:90:3e:a2:29:10:1e:30:67:d5: ab:33:14:ba:95:d8:d3:6a:ff:fe:a7:57:22:8a:21: 96:b4:d9:3b:9b:4d:ab:3d:a6:2b:65:88:97:d7:90: ca:04:82:b3:c1:c4:2d:ac:78:7f:c1:01:df:a1:d9: 57:f6:13:ed:d0:c2:9e:52:8d:2c:68:8e:a0:c8:e6: 66:7b:73:71:71:f3:cc:bd:28:1f:28:5a:dd:07:c7: 5b:08:0a:0d:6b:12:b9:53:64:00:9f:38:49:fe:fb: 1d:fa:66:7d:06:34:56:ca:5c:2b:5f:fd:a0:02:ed: 08:26:fa:7f:fd:21:90:74:17:0b:87:30:fe:32:0c: 16:41:08:60:13:bb:c2:c8:72:cd:54:16:cb:3a:80: b0:99:6d:7d:15:16:32:76:e4:da:80:47:07:57:eb: e6:58:66:1f:d9:2d:18:67:b9:7c:3e:70:f5:30:33: ee:29:30:b4:32:a3:6c:f3:b6:85:d1:8d:bd:88:63: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E3:B5:0D:66:32:7C:73:54:87:0E:22:47:31:81:B7:97:E7:9F:5D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/C-O1DWYyfHNUhw4iRzGBt5fnn10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b86:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 25:e4:d5:70:8e:7a:8d:a9:ec:f1:ae:c3:eb:ed:15:63:c9:09: 57:ae:3a:e3:02:c3:d1:77:54:9c:cc:32:37:58:d9:a6:9c:a3: 09:55:49:8c:21:a0:b7:e9:6e:69:82:c0:b0:07:38:f3:11:88: 71:9c:f2:41:6e:5c:11:87:b2:f0:5b:35:2a:21:1e:ea:ed:aa: 32:13:c7:72:5e:9a:ca:89:54:56:21:d1:65:38:46:26:c0:c2: a2:76:71:2c:7a:61:fc:3e:84:16:d3:07:bd:aa:d3:58:bc:9a: 7e:d6:87:a0:8a:d7:cf:64:20:28:c0:29:39:45:d5:d8:98:36: 1a:37:2f:d9:79:07:36:79:d2:a4:2d:47:c8:bc:57:f9:6c:73: 34:47:14:52:ea:94:1f:f4:7f:91:93:19:01:d6:25:ea:dd:fc: 71:c4:63:c3:48:a7:bd:c3:fc:be:7f:c3:6a:62:65:1b:30:14: c9:80:22:be:4b:5b:fa:3a:5c:3d:a1:62:65:c3:bd:5a:a8:f7: 69:87:5d:97:93:45:78:c1:4c:04:36:5e:10:ce:95:07:cc:92: 1c:ba:2d:65:3b:0d:f5:d5:5e:e4:1b:6a:9d:26:a8:d1:8f:3b: ea:86:e4:b3:cf:46:8a:08:13:d9:7a:9a:0f:77:91:b7:11:c0: fe:f1:0d:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gtiOSYEe21NDAZc+M94jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmUzYjUwZDY2MzI3YzczNTQ4NzBlMjI0NzMxODFiNzk3ZTc5ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4H6tXklWp1xqUmQRWGeNRDQ5G3M maMSfixJxHv3b2HLjLLCgL56KFqvsK4X2jk+R8Qe/jZ0HaZqY4LbcGRth+qQPqIp EB4wZ9WrMxS6ldjTav/+p1ciiiGWtNk7m02rPaYrZYiX15DKBIKzwcQtrHh/wQHf odlX9hPt0MKeUo0saI6gyOZme3NxcfPMvSgfKFrdB8dbCAoNaxK5U2QAnzhJ/vsd +mZ9BjRWylwrX/2gAu0IJvp//SGQdBcLhzD+MgwWQQhgE7vCyHLNVBbLOoCwmW19 FRYyduTagEcHV+vmWGYf2S0YZ7l8PnD1MDPuKTC0MqNs87aF0Y29iGM3xwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAvjtQ1mMnxzVIcOIkcxgbeX559dMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvQy1PMURXWXlmSE5VaHc0aVJ6R0J0NWZubjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLhv/A MA0GCSqGSIb3DQEBCwUAA4IBAQAl5NVwjnqNqezxrsPr7RVjyQlXrjrjAsPRd1Sc zDI3WNmmnKMJVUmMIaC36W5pgsCwBzjzEYhxnPJBblwRh7LwWzUqIR7q7aoyE8dy XprKiVRWIdFlOEYmwMKidnEsemH8PoQW0we9qtNYvJp+1oegitfPZCAowCk5RdXY mDYaNy/ZeQc2edKkLUfIvFf5bHM0RxRS6pQf9H+RkxkB1iXq3fxxxGPDSKe9w/y+ f8NqYmUbMBTJgCK+S1v6Olw9oWJlw71aqPdph12Xk0V4wUwENl4QzpUHzJIcui1l Ow311V7kG2qdJqjRjzvqhuSzz0aKCBPZepoPd5G3EcD+8Q3a -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:16 2026 by rpki-client