This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oEJEcLtWiL9ywTSnPYHHONiYXBw.roa File: oEJEcLtWiL9ywTSnPYHHONiYXBw.roa (raw, json) Hash identifier: BKMPgHS7aEpnh9O8njJq9dKuhfly21B/nFsIbyF2GYI= Subject key identifier: A0:42:44:70:BB:56:88:BF:72:C1:34:A7:3D:81:C7:38:D8:98:5C:1C Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B94786768FB7D1ABE221E8E3C1F2A3C44 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oEJEcLtWiL9ywTSnPYHHONiYXBw.roa Signing time: Tue 06 Jan 2026 18:01:17 +0000 ROA not before: Tue 06 Jan 2026 18:01:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208674 IP address blocks: 2a0c:b641:890::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:78:67:68:fb:7d:1a:be:22:1e:8e:3c:1f:2a:3c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 6 18:01:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0424470bb5688bf72c134a73d81c738d8985c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:7c:49:92:ca:d1:b3:0b:50:d8:bd:8b:ac: 60:54:50:0c:30:26:c8:7b:f7:fb:fc:32:a4:25:33: 9c:18:9e:0a:7c:c7:7f:a1:ba:7c:dd:0f:a1:71:a7: a5:72:50:56:8a:c0:3f:15:8a:8d:c9:2d:cf:f2:78: 60:cd:ac:69:23:6a:f7:9f:17:8d:2f:32:24:e2:d4: f9:2a:41:72:54:21:8b:f9:d8:b5:3e:39:e0:91:c8: c7:5f:42:e0:4c:f4:ea:10:7f:27:6e:d8:d6:d4:0a: ce:5c:9b:dc:38:ea:c3:39:90:2c:0a:e4:a7:3c:9c: 03:57:67:08:8e:ae:98:d5:a4:35:c5:25:89:71:7b: e0:9c:dc:55:4d:ac:8f:ea:fe:a4:e3:13:02:bb:ff: 90:8a:d2:4a:67:29:5f:76:20:7d:72:f1:f9:28:36: 68:d2:58:f1:9a:02:84:66:be:ed:5a:d1:48:bb:46: 22:5c:7f:7f:35:49:e8:f7:aa:57:03:78:e7:47:75: 8b:94:77:67:03:d4:7e:d9:59:8f:dc:b6:b5:49:04: cc:d2:1d:81:31:2b:e8:bc:4d:38:75:a5:74:c8:b3: 80:1d:d7:ec:e4:28:0a:7f:6c:c9:e8:4c:a7:dd:44: 8c:07:9f:85:bd:5a:8b:42:03:50:0a:b8:35:e3:00: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:44:70:BB:56:88:BF:72:C1:34:A7:3D:81:C7:38:D8:98:5C:1C X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oEJEcLtWiL9ywTSnPYHHONiYXBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:890::/44 Signature Algorithm: sha256WithRSAEncryption 42:c8:c3:dc:85:3b:a9:19:6c:eb:1d:83:58:6e:a2:94:2d:9e: b0:5b:ea:e9:0b:df:72:69:58:ff:9d:22:09:94:73:86:23:e0: f7:15:a2:c5:90:43:df:d5:49:b7:d5:fe:1f:61:7e:a9:dd:14: 88:a7:97:3b:9e:c4:76:b1:29:ee:95:ad:45:d7:91:20:c0:9e: 7b:fb:c1:21:02:d2:f3:33:9e:cd:cb:b7:29:f5:9e:6a:fe:59: 60:5d:f5:8d:a1:5f:ca:76:8c:22:2f:ed:ad:8e:20:0b:37:b2: 0c:48:98:68:aa:f2:e8:51:99:74:5e:10:05:58:25:2a:3c:0d: 20:80:cf:f8:ec:0e:29:5a:b2:5b:9f:f1:33:fe:2d:ba:31:8e: 77:e8:fc:52:57:fe:0a:83:ab:75:94:31:f8:ea:11:13:8c:64: dc:6d:a3:66:be:3c:74:96:e9:b0:3f:5a:f4:3b:93:ca:aa:9f: 86:15:47:5f:2f:f7:10:8c:26:b1:61:52:7b:01:6e:c4:af:0b: 11:2d:eb:f6:d2:87:5a:3f:5a:40:a1:49:0f:ea:4e:a7:e6:b9: ae:bd:47:8f:65:25:cc:03:1f:02:9a:27:68:d8:9f:e5:3c:fd: 8a:37:d8:44:39:68:62:f9:2c:de:f0:38:78:f2:e6:69:5d:ce: ba:7c:08:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuUeGdo+30aviIejjwfKjxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTA2MTgwMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDQyNDQ3MGJiNTY4OGJmNzJjMTM0YTczZDgxYzczOGQ4OTg1YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk58SZLK0bMLUNi9i6xgVFAMMCbI e/f7/DKkJTOcGJ4KfMd/obp83Q+hcaelclBWisA/FYqNyS3P8nhgzaxpI2r3nxeN LzIk4tT5KkFyVCGL+di1PjngkcjHX0LgTPTqEH8nbtjW1ArOXJvcOOrDOZAsCuSn PJwDV2cIjq6Y1aQ1xSWJcXvgnNxVTayP6v6k4xMCu/+QitJKZylfdiB9cvH5KDZo 0ljxmgKEZr7tWtFIu0YiXH9/NUno96pXA3jnR3WLlHdnA9R+2VmP3La1SQTM0h2B MSvovE04daV0yLOAHdfs5CgKf2zJ6Eyn3USMB5+FvVqLQgNQCrg14wCWWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKBCRHC7Voi/csE0pz2BxzjYmFwcMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvb0VKRWNMdFdpTDl5d1RTblBZSEhPTmlZWEJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQiQ MA0GCSqGSIb3DQEBCwUAA4IBAQBCyMPchTupGWzrHYNYbqKULZ6wW+rpC99yaVj/ nSIJlHOGI+D3FaLFkEPf1Um31f4fYX6p3RSIp5c7nsR2sSnula1F15EgwJ57+8Eh AtLzM57Ny7cp9Z5q/llgXfWNoV/KdowiL+2tjiALN7IMSJhoqvLoUZl0XhAFWCUq PA0ggM/47A4pWrJbn/Ez/i26MY536PxSV/4Kg6t1lDH46hETjGTcbaNmvjx0lumw P1r0O5PKqp+GFUdfL/cQjCaxYVJ7AW7ErwsRLev20odaP1pAoUkP6k6n5rmuvUeP ZSXMAx8Cmido2J/lPP2KN9hEOWhi+Sze8Dh48uZpXc66fAjV -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client