This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/oBPZxPOpZv6eWUPg75KmO94jUtg.roa File: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (raw, json) Hash identifier: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58= Subject key identifier: A0:13:D9:C4:F3:A9:66:FE:9E:59:43:E0:EF:92:A6:3B:DE:23:52:D8 Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Certificate serial: 019B7A5B02D1A4884A5964BCEEB9CB7EB7FD Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/oBPZxPOpZv6eWUPg75KmO94jUtg.roa Signing time: Thu 01 Jan 2026 16:19:03 +0000 ROA not before: Thu 01 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 2a13:1500:3a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:02:d1:a4:88:4a:59:64:bc:ee:b9:cb:7e:b7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a013d9c4f3a966fe9e5943e0ef92a63bde2352d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:04:af:a0:e1:26:f3:b2:26:64:e5:73:ae: 77:c1:bc:09:91:70:b7:15:10:b3:22:c2:66:97:1d: 4d:e3:c8:3e:58:c8:89:86:e0:ca:79:bd:d8:a5:f2: ec:46:9e:b4:27:f4:65:63:e1:89:fc:ba:0e:ad:fd: ba:e4:3a:e5:80:c6:09:f4:f7:79:d0:9e:c8:ba:f9: e8:ef:1a:b6:8e:f0:f2:08:a5:df:8b:a2:e5:73:27: 83:8f:d5:e1:ec:f2:c6:7c:13:b0:68:86:d2:4f:04: 0f:3b:77:f9:ed:81:cf:c8:e6:e6:ac:c6:75:f9:97: c4:a2:f4:91:f3:59:bb:76:9e:cc:6f:3d:84:6f:53: 22:57:d0:ee:71:ed:ca:e3:60:74:59:05:14:6c:b1: c8:88:2a:f8:2d:4d:cb:09:72:21:ce:05:35:39:09: 01:b7:31:2d:b8:e0:69:e9:ed:9c:95:c8:25:6a:8f: ab:95:7b:dd:2f:48:6c:20:48:41:cb:23:06:0e:d5: af:a8:ac:e5:59:d4:fa:eb:5f:14:9e:27:a6:9e:21: db:d6:fe:d0:dd:25:2d:3e:c6:51:17:e1:29:35:39: 45:49:ca:95:45:99:85:63:e9:fc:1c:e4:cf:3a:3a: a5:8c:42:a3:9c:7b:d8:fd:cf:ed:1e:d0:9f:fa:69: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:13:D9:C4:F3:A9:66:FE:9E:59:43:E0:EF:92:A6:3B:DE:23:52:D8 X509v3 Authority Key Identifier: keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/oBPZxPOpZv6eWUPg75KmO94jUtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:1500:3a00::/40 Signature Algorithm: sha256WithRSAEncryption 30:c5:2b:71:b5:99:71:d2:29:0e:25:a1:5f:15:1e:0a:fe:45: 64:4a:86:e7:8f:46:92:ba:80:c0:c5:60:02:91:3a:b2:ab:70: 39:7a:e7:26:9a:ab:0c:fb:2c:d6:0d:66:0a:8d:84:53:12:de: 6b:71:79:3b:bc:47:45:1f:fd:17:08:28:db:57:f0:ca:ce:f1: 1e:25:27:f2:c0:9a:68:45:b2:d6:eb:12:f3:d1:2a:36:ff:35: cb:e6:d7:92:b4:0f:6e:e0:d1:56:27:f4:6d:5d:ce:8b:b6:6f: 38:9a:d0:59:1c:f3:f0:7d:a6:3c:4f:cb:cf:96:05:a3:d1:18: 82:f4:d3:f8:18:77:56:19:43:c2:5d:31:dc:fa:c4:58:cf:12: a2:97:68:f0:dd:69:bf:07:82:27:01:47:88:ef:cb:26:0b:d8: 5f:ba:27:3e:e7:99:50:fe:d1:ac:4a:dd:51:08:4c:51:e2:b5: 84:61:42:f7:0d:84:3a:bf:cd:59:3f:8b:9b:e3:cd:32:27:95: ba:c5:0a:ba:b9:e9:ba:26:b5:81:35:e8:5c:27:ea:7d:93:5d: d0:43:47:c5:8c:f6:fb:9a:a0:95:11:42:84:45:14:76:1d:07: 6d:82:1a:6c:c8:38:77:c2:a9:82:f8:0c:34:c5:25:48:55:85: 95:84:e6:52 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6WwLRpIhKWWS87rnLfrf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk NzUyMjQwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDEzZDljNGYzYTk2NmZlOWU1OTQzZTBlZjkyYTYzYmRlMjM1MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5UEr6DhJvOyJmTlc653wbwJkXC3 FRCzIsJmlx1N48g+WMiJhuDKeb3YpfLsRp60J/RlY+GJ/LoOrf265DrlgMYJ9Pd5 0J7Iuvno7xq2jvDyCKXfi6LlcyeDj9Xh7PLGfBOwaIbSTwQPO3f57YHPyObmrMZ1 +ZfEovSR81m7dp7Mbz2Eb1MiV9Duce3K42B0WQUUbLHIiCr4LU3LCXIhzgU1OQkB tzEtuOBp6e2clcglao+rlXvdL0hsIEhByyMGDtWvqKzlWdT6618UniemniHb1v7Q 3SUtPsZRF+EpNTlFScqVRZmFY+n8HOTPOjqljEKjnHvY/c/tHtCf+mlxEQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKAT2cTzqWb+nllD4O+SpjveI1LYMB8GA1UdIwQY MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt ZWZlNzljMjU0ZTI1LzEvb0JQWnhQT3BadjZlV1VQZzc1S21POTRqVXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1 LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhMVADow DQYJKoZIhvcNAQELBQADggEBADDFK3G1mXHSKQ4loV8VHgr+RWRKhuePRpK6gMDF YAKROrKrcDl65yaaqwz7LNYNZgqNhFMS3mtxeTu8R0Uf/RcIKNtX8MrO8R4lJ/LA mmhFstbrEvPRKjb/Ncvm15K0D27g0VYn9G1dzou2bzia0Fkc8/B9pjxPy8+WBaPR GIL00/gYd1YZQ8JdMdz6xFjPEqKXaPDdab8HgicBR4jvyyYL2F+6Jz7nmVD+0axK 3VEITFHitYRhQvcNhDq/zVk/i5vjzTInlbrFCrq56bomtYE16Fwn6n2TXdBDR8WM 9vuaoJURQoRFFHYdB22CGmzIOHfCqYL4DDTFJUhVhZWE5lI= -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:46 2026 by rpki-client