This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rWOcOLgZO6Y0o0vo4JBGB5hoovg.roa File: rWOcOLgZO6Y0o0vo4JBGB5hoovg.roa (raw, json) Hash identifier: n1oXf09egTd4x0XN/y3nqf++6+UJwMWSUzjoOeLEsSw= Subject key identifier: AD:63:9C:38:B8:19:3B:A6:34:A3:4B:E8:E0:90:46:07:98:68:A2:F8 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BFE2177C3F174208CECAFC29FD01 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rWOcOLgZO6Y0o0vo4JBGB5hoovg.roa Signing time: Fri 02 Jan 2026 16:20:33 +0000 ROA not before: Fri 02 Jan 2026 16:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51999 IP address blocks: 2a0b:b83:d5::/48 maxlen: 48 2a0b:b83:d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bf:e2:17:7c:3f:17:42:08:ce:ca:fc:29:fd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad639c38b8193ba634a34be8e09046079868a2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:0e:e3:76:b2:e8:c7:d4:8b:f4:12:16:9f: 89:31:43:00:46:56:ae:14:a1:eb:b4:ba:00:0b:88: bb:3f:7b:00:78:d3:fa:87:86:30:e8:5a:38:31:0a: ca:42:61:0c:b0:69:78:52:15:6b:93:ad:34:44:e5: 9d:22:10:66:61:bc:89:4b:bd:e4:a4:47:e5:f5:6c: a2:73:6f:c7:75:13:93:38:cf:35:15:13:1a:c0:b1: a6:d4:c1:34:5f:0d:b2:f6:7f:11:cd:0a:1c:32:dd: c6:2b:61:53:54:ae:48:ca:4d:a2:71:bf:8f:40:f5: 9b:4f:4b:70:c0:16:35:ae:3e:d1:a8:92:03:e6:d4: c9:9a:b4:0e:db:90:cd:6c:e0:0b:74:90:f9:3d:e3: c3:8f:73:67:1a:65:c6:5b:a5:d3:cd:62:91:f7:32: fb:f9:01:13:c7:86:3d:ef:8e:a9:12:94:f4:d3:c1: ca:4c:59:57:c8:11:6a:bf:da:e6:ad:52:48:27:00: 0b:5d:b4:87:59:00:69:d9:a0:07:25:b7:cd:c3:77: 38:3c:bd:a5:2c:5b:68:57:90:7f:21:1f:50:b2:da: 03:9e:d1:fd:2f:62:7d:02:83:62:1a:c6:64:d1:1f: fa:f6:0a:ed:b5:bd:ff:ea:7a:15:ca:0c:2a:c1:71: 63:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:9C:38:B8:19:3B:A6:34:A3:4B:E8:E0:90:46:07:98:68:A2:F8 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rWOcOLgZO6Y0o0vo4JBGB5hoovg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b83:d5::-2a0b:b83:d6:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 78:c7:a6:4b:86:38:04:72:42:53:24:67:2f:fc:1a:01:46:cd: e1:5d:2a:5b:79:02:01:33:d8:61:8b:1b:9f:78:40:3a:3c:df: de:f0:65:81:25:95:57:83:a1:fa:d3:54:36:52:de:e4:d6:ad: 86:25:d1:3a:3e:ca:3c:d8:c0:e7:49:70:fa:9d:5f:74:04:02: 2e:fc:c3:7f:9c:57:55:a3:08:0c:4d:e1:84:26:6d:42:7c:40: 30:a0:16:c7:af:23:be:23:f5:9c:bd:84:2d:f9:57:cd:84:23: 27:88:0c:da:6f:98:94:06:4c:7a:a5:73:a1:ad:f6:2f:72:1f: b8:5b:ad:ad:39:36:24:4b:da:78:89:70:37:98:42:e8:13:bb: da:dc:fa:f3:3b:f0:72:09:f7:2c:4b:05:c0:6c:b8:a0:ca:5a: 6b:96:db:0f:7b:cf:96:d6:d9:27:24:bf:19:37:5b:f0:e1:d8: db:6d:86:6f:72:30:d4:3c:fe:56:b0:a3:b0:2d:bf:c6:f3:07: 30:ab:46:90:98:f5:cf:68:31:8e:94:00:5d:fc:45:b6:a0:16: d3:ad:99:49:bf:cc:89:11:ad:65:92:92:cc:1f:5d:00:6b:95: c0:6c:ca:e3:18:bc:d0:73:da:c3:c3:04:e1:3c:1e:30:bf:b9: b2:21:f6:1a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/gr/iF3w/F0IIzsr8Kf0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDYzOWMzOGI4MTkzYmE2MzRhMzRiZThlMDkwNDYwNzk4NjhhMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVwO43ay6MfUi/QSFp+JMUMARlau FKHrtLoAC4i7P3sAeNP6h4Yw6Fo4MQrKQmEMsGl4UhVrk600ROWdIhBmYbyJS73k pEfl9Wyic2/HdROTOM81FRMawLGm1ME0Xw2y9n8RzQocMt3GK2FTVK5Iyk2icb+P QPWbT0twwBY1rj7RqJID5tTJmrQO25DNbOALdJD5PePDj3NnGmXGW6XTzWKR9zL7 +QETx4Y9746pEpT008HKTFlXyBFqv9rmrVJIJwALXbSHWQBp2aAHJbfNw3c4PL2l LFtoV5B/IR9QstoDntH9L2J9AoNiGsZk0R/69grttb3/6noVygwqwXFjBQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFK1jnDi4GTumNKNL6OCQRgeYaKL4MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvcldPY09MZ1pPNlkwbzB2bzRKQkdCNWhvb3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqCwuD ANUDBwAqCwuDANYwDQYJKoZIhvcNAQELBQADggEBAHjHpkuGOARyQlMkZy/8GgFG zeFdKlt5AgEz2GGLG594QDo8397wZYEllVeDofrTVDZS3uTWrYYl0To+yjzYwOdJ cPqdX3QEAi78w3+cV1WjCAxN4YQmbUJ8QDCgFsevI74j9Zy9hC35V82EIyeIDNpv mJQGTHqlc6Gt9i9yH7hbra05NiRL2niJcDeYQugTu9rc+vM78HIJ9yxLBcBsuKDK WmuW2w97z5bW2Sckvxk3W/Dh2Ntthm9yMNQ8/lawo7Atv8bzBzCrRpCY9c9oMY6U AF38RbagFtOtmUm/zIkRrWWSkswfXQBrlcBsyuMYvNBz2sPDBOE8HjC/ubIh9ho= -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:17 2026 by rpki-client