This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oRUZd3qfTPtV41gwBYIJYCDAy8M.roa File: oRUZd3qfTPtV41gwBYIJYCDAy8M.roa (raw, json) Hash identifier: EqJaiQQj26ddeFzY+g/7spAHgO86ZrQN/y0utB+gpgE= Subject key identifier: A1:15:19:77:7A:9F:4C:FB:55:E3:58:30:05:82:09:60:20:C0:CB:C3 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA766E6B78BCD0ECB54544CC885EF03 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oRUZd3qfTPtV41gwBYIJYCDAy8M.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216213 IP address blocks: 2a14:17c0::/29 maxlen: 29 2a14:1840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:66:e6:b7:8b:cd:0e:cb:54:54:4c:c8:85:ef:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a11519777a9f4cfb55e358300582096020c0cbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0d:43:08:95:99:33:2e:a2:8b:29:0a:46:fa: e8:2c:d2:ff:91:98:9b:e7:f8:9d:26:51:5f:f8:e1: 31:26:10:b4:b9:c0:f6:67:49:f1:b8:47:6a:ce:4d: 55:3f:7c:65:10:7d:9a:d0:c0:89:b6:27:ac:41:aa: 0b:03:90:46:df:5a:c8:28:03:c3:1d:8c:5b:2c:d5: e4:23:b5:b3:de:61:af:14:f1:08:63:0f:3f:d9:ce: ea:dd:79:59:0e:49:25:b4:02:90:62:a7:c9:07:d0: 40:8e:6b:ef:f9:6d:b7:5c:69:7a:7f:c3:28:48:4c: 44:97:70:20:6b:96:78:fa:4f:3a:c7:56:aa:37:30: 4e:1a:1a:84:b2:cf:69:98:2a:44:14:49:86:da:fb: 5a:50:53:a7:18:18:ea:3a:25:c6:ff:0e:16:52:9f: a9:8a:06:a2:29:57:9b:01:aa:11:6d:17:14:80:38: 70:a3:15:e0:c3:d0:7d:41:84:ae:92:f9:c3:6e:0e: 68:7e:64:6e:03:cb:15:75:13:12:b3:d2:67:b2:4e: f2:45:80:fb:61:57:e3:47:6a:1a:74:32:78:94:60: d4:26:4d:fb:5c:a8:93:9f:f1:ad:63:e3:3a:45:e8: 61:b1:c6:bd:70:20:45:84:e1:d0:8c:4d:be:60:ab: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:15:19:77:7A:9F:4C:FB:55:E3:58:30:05:82:09:60:20:C0:CB:C3 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oRUZd3qfTPtV41gwBYIJYCDAy8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:17c0::/29 2a14:1840::/29 Signature Algorithm: sha256WithRSAEncryption 7a:b2:fa:7e:b2:41:f5:26:e5:f6:ca:22:d5:5a:db:46:dc:4c: ad:a3:71:51:17:b5:3e:33:ba:97:5c:95:20:6d:b5:da:3f:98: 9e:f4:48:38:e0:a9:b2:d2:b4:7b:51:c7:77:c1:82:52:8e:18: dd:3b:1e:bd:4c:0e:43:26:75:2a:76:59:6f:2f:58:8d:50:39: b8:af:5c:16:e2:2b:c3:a3:56:05:d3:41:8d:ef:d6:be:46:29: 21:8d:0f:f8:66:87:fc:04:06:18:26:89:70:3d:57:f3:34:2d: 92:50:37:55:44:b6:7a:e1:6d:07:cd:21:76:cd:80:42:46:7a: c7:72:a6:f2:f5:97:f5:a9:46:74:bc:22:9e:14:7a:01:cb:3f: 7c:8e:4d:48:23:07:6c:d3:ea:7e:be:f4:5f:67:92:2c:8d:ec: f2:c7:7f:bc:29:df:39:c2:5f:ce:32:e6:7e:bc:37:d3:a7:74: 17:d3:ff:d9:09:c2:19:c8:2f:c2:be:98:57:87:80:79:61:fd: c1:20:28:99:ab:1d:e2:61:c0:23:f3:b4:e2:12:f1:de:f8:e2: 96:12:2c:47:a2:af:1a:8a:ec:58:97:1a:16:a7:d4:19:46:fd: 3e:bb:17:38:83:2e:7f:d4:b2:fb:85:f0:38:af:8a:e2:2d:8b: 8e:86:79:5a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+p2bmt4vNDstUVEzIhe8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTE1MTk3NzdhOWY0Y2ZiNTVlMzU4MzAwNTgyMDk2MDIwYzBjYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Q1DCJWZMy6iiykKRvroLNL/kZib 5/idJlFf+OExJhC0ucD2Z0nxuEdqzk1VP3xlEH2a0MCJtiesQaoLA5BG31rIKAPD HYxbLNXkI7Wz3mGvFPEIYw8/2c7q3XlZDkkltAKQYqfJB9BAjmvv+W23XGl6f8Mo SExEl3Aga5Z4+k86x1aqNzBOGhqEss9pmCpEFEmG2vtaUFOnGBjqOiXG/w4WUp+p igaiKVebAaoRbRcUgDhwoxXgw9B9QYSukvnDbg5ofmRuA8sVdRMSs9Jnsk7yRYD7 YVfjR2oadDJ4lGDUJk37XKiTn/GtY+M6Rehhsca9cCBFhOHQjE2+YKuqBwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKEVGXd6n0z7VeNYMAWCCWAgwMvDMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvb1JVWmQzcWZUUHRWNDFnd0JZSUpZQ0RBeThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhQXwAMF AyoUGEAwDQYJKoZIhvcNAQELBQADggEBAHqy+n6yQfUm5fbKItVa20bcTK2jcVEX tT4zupdclSBttdo/mJ70SDjgqbLStHtRx3fBglKOGN07Hr1MDkMmdSp2WW8vWI1Q ObivXBbiK8OjVgXTQY3v1r5GKSGND/hmh/wEBhgmiXA9V/M0LZJQN1VEtnrhbQfN IXbNgEJGesdypvL1l/WpRnS8Ip4UegHLP3yOTUgjB2zT6n6+9F9nkiyN7PLHf7wp 3znCX84y5n68N9OndBfT/9kJwhnIL8K+mFeHgHlh/cEgKJmrHeJhwCPztOIS8d74 4pYSLEeirxqK7FiXGhan1BlG/T67FziDLn/UsvuF8DiviuIti46GeVo= -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:20 2026 by rpki-client