This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/owF-nE-rFbIaWXr3l_HNpTejWks.roa File: owF-nE-rFbIaWXr3l_HNpTejWks.roa (raw, json) Hash identifier: tZuJFEiMjmGz6PSS1ERURoQEENUy8MFlHmI42mTZfyk= Subject key identifier: A3:01:7E:9C:4F:AB:15:B2:1A:59:7A:F7:97:F1:CD:A5:37:A3:5A:4B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39686DDB8A1E37493A91E10A3E2E2B Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/owF-nE-rFbIaWXr3l_HNpTejWks.roa Signing time: Fri 02 Jan 2026 10:20:50 +0000 ROA not before: Fri 02 Jan 2026 10:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214049 IP address blocks: 2a0c:b641:d20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:68:6d:db:8a:1e:37:49:3a:91:e1:0a:3e:2e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3017e9c4fab15b21a597af797f1cda537a35a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:aa:96:b3:87:50:54:6f:22:dc:9a:ad:b3: 63:87:0c:1a:2c:69:a1:6f:b5:1a:5c:b3:9a:e5:bc: 72:7e:c0:24:ff:00:15:04:4d:be:a1:82:96:cf:3f: 8d:5e:ab:50:fa:ee:ae:51:6e:be:34:66:01:87:61: 34:e9:77:9c:a7:9b:26:7e:0d:25:dc:01:98:ab:93: 9e:d3:1b:c0:3d:2c:85:cf:f2:0d:df:54:f7:83:25: e8:4f:57:47:e2:e5:22:c4:0b:02:dc:07:77:c4:76: b0:70:66:40:92:1c:80:cb:4b:00:b0:a8:7c:82:af: 80:b7:b0:3f:e8:62:e8:a5:67:51:9c:c3:21:07:60: cf:f6:cf:af:ad:22:4c:b7:42:d2:4c:b7:e4:69:9c: 02:59:0f:01:b2:db:36:13:f3:a4:72:d6:e3:84:b3: a4:d3:04:93:1b:ed:aa:de:c4:e9:a3:29:47:2a:c4: 8b:49:6a:74:c9:97:4d:29:a8:b3:4c:19:74:ce:d7: b6:66:02:87:89:d4:c1:6c:e6:26:28:1c:04:68:85: dd:c4:ed:f5:64:d2:f5:ed:be:4f:55:8d:c4:73:17: 58:31:d7:09:52:f3:c4:c9:d2:7c:89:52:ad:da:7d: 15:07:29:72:d4:44:60:64:0a:89:1c:1c:3f:a2:eb: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:01:7E:9C:4F:AB:15:B2:1A:59:7A:F7:97:F1:CD:A5:37:A3:5A:4B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/owF-nE-rFbIaWXr3l_HNpTejWks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:d20::/44 Signature Algorithm: sha256WithRSAEncryption 78:53:4a:f1:7b:8a:34:53:3d:47:e1:58:ed:43:11:56:f0:eb: 49:27:7b:f3:6f:42:f3:1d:9c:43:7f:50:98:6e:d0:12:00:73: 3f:3a:3c:d9:7d:1a:1f:c3:4d:6d:15:26:fc:6e:e2:3f:42:2e: 17:d9:17:8b:70:6b:e0:cd:da:80:5c:37:89:68:e3:bd:07:0c: 43:2b:23:99:0f:6a:93:f9:9b:ad:59:82:86:f8:eb:e1:aa:27: 82:bf:bd:97:4b:e9:a3:ee:78:89:d5:65:d5:22:64:09:89:37: e7:7d:0c:e4:ae:57:c5:31:34:26:4b:c1:a4:54:7b:8e:c7:07: b0:f6:46:45:0b:9a:ec:c7:e0:8e:05:13:b9:47:ab:52:06:66: a2:a8:84:4a:2f:49:0e:b7:4c:e2:53:1a:3d:cd:06:43:15:74: a9:6b:a4:80:30:ca:73:8c:e3:0d:ef:18:4a:cc:12:f6:08:b3: 33:90:67:ac:57:df:dc:f6:f3:0e:ae:d6:6d:d1:05:8f:9b:18: 46:ae:6c:00:30:76:a0:c9:fd:1d:50:27:ae:87:07:08:27:15: 3d:de:e1:b3:d3:5c:6d:e1:d9:94:d1:0e:43:36:40:de:d0:12: b9:b2:1d:97:be:5f:b2:9e:00:79:ba:88:f5:66:a6:0c:14:d6: d8:b6:34:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWht24oeN0k6keEKPi4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzAxN2U5YzRmYWIxNWIyMWE1OTdhZjc5N2YxY2RhNTM3YTM1YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlyqlrOHUFRvItyarbNjhwwaLGmh b7UaXLOa5bxyfsAk/wAVBE2+oYKWzz+NXqtQ+u6uUW6+NGYBh2E06Xecp5smfg0l 3AGYq5Oe0xvAPSyFz/IN31T3gyXoT1dH4uUixAsC3Ad3xHawcGZAkhyAy0sAsKh8 gq+At7A/6GLopWdRnMMhB2DP9s+vrSJMt0LSTLfkaZwCWQ8Bsts2E/OkctbjhLOk 0wSTG+2q3sTpoylHKsSLSWp0yZdNKaizTBl0zte2ZgKHidTBbOYmKBwEaIXdxO31 ZNL17b5PVY3EcxdYMdcJUvPEydJ8iVKt2n0VByly1ERgZAqJHBw/ouvpZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKMBfpxPqxWyGll695fxzaU3o1pLMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvb3dGLW5FLXJGYklhV1hyM2xfSE5wVGVqV2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQ0g MA0GCSqGSIb3DQEBCwUAA4IBAQB4U0rxe4o0Uz1H4VjtQxFW8OtJJ3vzb0LzHZxD f1CYbtASAHM/OjzZfRofw01tFSb8buI/Qi4X2ReLcGvgzdqAXDeJaOO9BwxDKyOZ D2qT+ZutWYKG+OvhqieCv72XS+mj7niJ1WXVImQJiTfnfQzkrlfFMTQmS8GkVHuO xwew9kZFC5rsx+COBRO5R6tSBmaiqIRKL0kOt0ziUxo9zQZDFXSpa6SAMMpzjOMN 7xhKzBL2CLMzkGesV9/c9vMOrtZt0QWPmxhGrmwAMHagyf0dUCeuhwcIJxU93uGz 01xt4dmU0Q5DNkDe0BK5sh2Xvl+yngB5uoj1ZqYMFNbYtjTS -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:25 2026 by rpki-client