This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oO0YjZjjLyjuPeGsyrMiskBBbHs.roa File: oO0YjZjjLyjuPeGsyrMiskBBbHs.roa (raw, json) Hash identifier: BFgsaPcccyFtEHG2iI/umLJVr3SU5plTPInIuWEr5WA= Subject key identifier: A0:ED:18:8D:98:E3:2F:28:EE:3D:E1:AC:CA:B3:22:B2:40:41:6C:7B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3964614F2E2D39A4CC942B8B94C8A6 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oO0YjZjjLyjuPeGsyrMiskBBbHs.roa Signing time: Fri 02 Jan 2026 10:20:48 +0000 ROA not before: Fri 02 Jan 2026 10:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213615 IP address blocks: 2a0c:b641:190::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:64:61:4f:2e:2d:39:a4:cc:94:2b:8b:94:c8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0ed188d98e32f28ee3de1accab322b240416c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:4b:bd:9e:56:09:a2:8d:db:19:4a:55:a4: 2e:34:dd:95:72:dd:61:ea:2b:1c:9d:8c:5a:1d:f5: ae:48:02:49:a2:63:18:e9:07:03:d3:61:52:be:92: 1a:e3:24:22:e7:45:40:ea:48:70:9e:1b:3d:b3:aa: 94:21:fe:8b:71:92:95:09:08:ca:de:3c:df:29:bd: 46:43:71:96:dc:3b:78:a0:e6:4c:b6:12:10:e1:07: eb:4a:14:ea:bb:0c:fd:ff:f7:c6:8d:7f:12:4a:af: 5c:b0:ec:e0:b9:21:90:a9:99:61:39:65:b1:d8:17: e6:6d:ff:3d:f7:68:0d:07:b4:ab:b8:32:37:0f:28: a8:a1:7c:ca:11:44:44:5c:ac:e2:df:ea:80:ec:27: 3d:c8:fe:db:2b:58:6f:7c:51:2f:1d:dc:8e:c9:2e: e8:53:46:f1:4f:5d:3c:09:7e:68:0b:c2:54:47:32: 57:c1:48:2c:14:a6:18:21:54:a4:cf:ff:16:c0:39: 9b:fb:db:dc:24:1e:c2:4e:d4:2e:97:0f:2e:04:5e: d5:93:06:9b:0f:9f:49:32:c6:88:3a:4b:f2:a2:f0: b0:31:27:4f:a1:e8:3d:59:ef:cd:58:c7:af:40:1e: 30:bd:50:6e:f6:c3:de:43:5c:1c:a4:00:01:30:dd: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:18:8D:98:E3:2F:28:EE:3D:E1:AC:CA:B3:22:B2:40:41:6C:7B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/oO0YjZjjLyjuPeGsyrMiskBBbHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:190::/44 Signature Algorithm: sha256WithRSAEncryption 79:92:ba:db:9c:a3:8c:b6:36:86:bd:61:02:8a:b0:b2:e7:5d: 43:82:85:76:e9:82:45:21:0b:59:59:b1:2e:08:e6:47:dc:ae: c6:15:73:84:83:7a:61:6c:57:ba:c2:75:0e:97:0e:85:e1:fa: df:69:51:5f:08:43:e5:dd:11:b3:b6:2c:a8:6b:aa:7f:53:ea: 19:d6:c7:f8:6a:55:e6:ac:72:5c:03:fa:09:f9:55:40:4b:2d: f4:b5:8d:0e:1c:3c:f2:c2:a7:5d:11:21:08:a6:53:a2:ce:ba: 3c:69:8f:b4:28:b3:b7:18:a1:2f:e5:17:91:51:9f:45:c3:d9: 20:a5:8f:82:3b:c3:c2:e5:c6:2c:ea:f1:ea:e3:23:c2:fe:95: 9c:50:fa:1e:13:c3:08:6a:22:ca:b3:27:bb:e0:23:ec:cc:41: a1:a6:0d:a1:50:4f:dd:5a:14:9e:fa:0f:13:ed:e7:e8:d9:60: c0:32:cb:48:07:0b:5a:08:93:eb:bd:e4:1f:6f:c0:ab:d1:4a: 3e:47:32:7d:7d:0f:f6:92:44:f1:b4:53:d3:8c:35:87:21:76: b2:4c:9f:56:27:93:f9:37:a4:71:45:f1:54:90:56:87:b3:cf: f2:31:f0:98:3b:bb:5c:44:43:d1:92:7f:de:1e:b6:4c:02:1f: 7b:62:16:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWRhTy4tOaTMlCuLlMimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGVkMTg4ZDk4ZTMyZjI4ZWUzZGUxYWNjYWIzMjJiMjQwNDE2YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/hLvZ5WCaKN2xlKVaQuNN2Vct1h 6iscnYxaHfWuSAJJomMY6QcD02FSvpIa4yQi50VA6khwnhs9s6qUIf6LcZKVCQjK 3jzfKb1GQ3GW3Dt4oOZMthIQ4QfrShTquwz9//fGjX8SSq9csOzguSGQqZlhOWWx 2Bfmbf8992gNB7SruDI3DyiooXzKEUREXKzi3+qA7Cc9yP7bK1hvfFEvHdyOyS7o U0bxT108CX5oC8JURzJXwUgsFKYYIVSkz/8WwDmb+9vcJB7CTtQulw8uBF7Vkwab D59JMsaIOkvyovCwMSdPoeg9We/NWMevQB4wvVBu9sPeQ1wcpAABMN393QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKDtGI2Y4y8o7j3hrMqzIrJAQWx7MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvb08wWWpaampMeWp1UGVHc3lyTWlza0JCYkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQGQ MA0GCSqGSIb3DQEBCwUAA4IBAQB5krrbnKOMtjaGvWECirCy511DgoV26YJFIQtZ WbEuCOZH3K7GFXOEg3phbFe6wnUOlw6F4frfaVFfCEPl3RGztiyoa6p/U+oZ1sf4 alXmrHJcA/oJ+VVASy30tY0OHDzywqddESEIplOizro8aY+0KLO3GKEv5ReRUZ9F w9kgpY+CO8PC5cYs6vHq4yPC/pWcUPoeE8MIaiLKsye74CPszEGhpg2hUE/dWhSe +g8T7efo2WDAMstIBwtaCJPrveQfb8Cr0Uo+RzJ9fQ/2kkTxtFPTjDWHIXayTJ9W J5P5N6RxRfFUkFaHs8/yMfCYO7tcREPRkn/eHrZMAh97YhbW -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:47 2026 by rpki-client