This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa File: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (raw, json) Hash identifier: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g= Subject key identifier: A3:CA:96:27:5A:A6:BF:76:05:96:17:40:61:DC:08:25:96:8F:05:3E Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Certificate serial: 019B7BA52490BC710D4FD86FEAE3AF248683 Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13045 IP address blocks: 192.109.36.0/24 maxlen: 24 2001:678:b10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:24:90:bc:71:0d:4f:d8:6f:ea:e3:af:24:86:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3ca96275aa6bf760596174061dc0825968f053e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:04:0a:9d:b5:1d:73:2f:50:d7:17:0e:d3:65: f2:37:83:4e:3e:2b:03:27:8f:f7:88:3b:0d:14:9f: 65:cd:96:57:cb:72:89:1a:2e:a8:f8:03:c3:ad:9e: 45:c7:19:7a:35:4d:12:05:11:b8:5e:59:6b:d0:f6: 27:10:d3:3a:8c:ea:25:5f:72:25:bf:05:2b:8a:c0: 9f:83:d8:5c:c9:b5:f6:b8:ff:48:76:b3:39:63:d4: af:13:d5:8d:33:5e:63:2c:56:3d:94:7f:4a:50:60: 6e:86:c1:a5:4b:04:12:cf:bb:eb:93:e2:c3:09:8d: e4:cc:ae:cd:15:29:13:cc:9a:16:df:9e:bf:19:d8: 29:55:83:8b:fb:c7:28:24:7f:c2:4d:ea:b7:ab:e6: a3:70:aa:b4:88:93:df:60:ab:56:77:6d:30:11:73: e4:09:08:d7:7f:4a:db:fa:f5:41:e1:29:05:ab:4c: 44:3f:c1:74:10:fe:6c:31:69:55:bb:08:cc:2e:1b: 9c:2d:ff:61:6e:12:01:33:41:c3:a7:32:63:77:57: de:b1:0e:65:dd:99:06:7b:6c:24:d4:7b:72:f8:c2: 47:4e:22:36:86:5f:8c:92:4e:ce:09:5e:77:f5:48: 98:5b:8a:98:4b:db:78:ac:88:4c:2c:60:db:c5:bd: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CA:96:27:5A:A6:BF:76:05:96:17:40:61:DC:08:25:96:8F:05:3E X509v3 Authority Key Identifier: keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.36.0/24 IPv6: 2001:678:b10::/48 Signature Algorithm: sha256WithRSAEncryption 66:cb:fb:22:04:af:11:7c:4a:f2:29:47:28:87:43:b0:65:4b: 60:8a:47:05:7f:10:00:ff:f3:9e:51:c6:43:b3:34:40:1a:7d: 5b:3c:ae:9e:a0:fa:69:0f:c1:d3:85:03:49:7a:04:60:e2:7a: 7a:8c:14:d9:2c:fe:6e:5e:b3:cf:32:0e:93:e8:e2:a8:4b:e6: 73:34:43:6c:aa:23:e7:ba:1c:32:b6:77:4d:df:01:18:0f:0c: 17:c2:07:31:d0:29:41:03:d5:e2:d1:49:88:1f:4a:05:13:7e: a1:01:11:d1:f2:32:d5:ea:b1:a7:c3:1d:56:f3:a2:c6:ab:b1: 72:f8:62:55:7d:a9:41:05:24:27:83:30:3c:83:45:aa:c4:eb: 19:b7:4c:67:4d:62:2b:f8:27:50:89:9f:1e:71:67:5e:20:7a: eb:4b:13:00:fb:cb:e4:f5:9d:9f:1e:f5:cb:51:2a:32:43:bb: d7:c7:7d:2c:42:38:ce:4b:e8:24:81:3b:fa:01:c9:c7:7b:c4: 76:ab:3f:0d:f6:d5:1d:8a:bd:f6:27:77:b7:6b:08:ce:c7:c2: 4c:61:57:d8:08:39:7b:a6:8e:8a:2d:5c:2f:00:50:13:e9:c7: a8:27:2d:0b:81:32:43:8b:8f:9f:a9:1c:5f:d9:b6:6d:93:69: 72:41:41:7c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pSSQvHENT9hv6uOvJIaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz Y2VlMWMwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NhOTYyNzVhYTZiZjc2MDU5NjE3NDA2MWRjMDgyNTk2OGYwNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QQKnbUdcy9Q1xcO02XyN4NOPisD J4/3iDsNFJ9lzZZXy3KJGi6o+APDrZ5Fxxl6NU0SBRG4Xllr0PYnENM6jOolX3Il vwUrisCfg9hcybX2uP9IdrM5Y9SvE9WNM15jLFY9lH9KUGBuhsGlSwQSz7vrk+LD CY3kzK7NFSkTzJoW356/GdgpVYOL+8coJH/CTeq3q+ajcKq0iJPfYKtWd20wEXPk CQjXf0rb+vVB4SkFq0xEP8F0EP5sMWlVuwjMLhucLf9hbhIBM0HDpzJjd1fesQ5l 3ZkGe2wk1Hty+MJHTiI2hl+Mkk7OCV539UiYW4qYS9t4rIhMLGDbxb1yYQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKPKlidapr92BZYXQGHcCCWWjwU+MB8GA1UdIwQY MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt Zjg1ZTMzZGQ4OTQ2LzEvbzhxV0oxcW12M1lGbGhkQVlkd0lKWmFQQlQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2 LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwG0kMA8E AgACMAkDBwAgAQZ4CxAwDQYJKoZIhvcNAQELBQADggEBAGbL+yIErxF8SvIpRyiH Q7BlS2CKRwV/EAD/855RxkOzNEAafVs8rp6g+mkPwdOFA0l6BGDienqMFNks/m5e s88yDpPo4qhL5nM0Q2yqI+e6HDK2d03fARgPDBfCBzHQKUED1eLRSYgfSgUTfqEB EdHyMtXqsafDHVbzosarsXL4YlV9qUEFJCeDMDyDRarE6xm3TGdNYiv4J1CJnx5x Z14geutLEwD7y+T1nZ8e9ctRKjJDu9fHfSxCOM5L6CSBO/oBycd7xHarPw321R2K vfYnd7drCM7HwkxhV9gIOXumjootXC8AUBPpx6gnLQuBMkOLj5+pHF/Ztm2TaXJB QXw= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:25 2026 by rpki-client