This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa File: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (raw, json) Hash identifier: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI= Subject key identifier: A0:4E:90:4B:74:3A:B9:AC:46:CF:70:A6:ED:83:8E:50:49:BA:33:DB Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979 Certificate serial: 019B7B36CEEC1950E998AC608AAD3EF9A988 Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42905 IP address blocks: 2a02:680:9100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ce:ec:19:50:e9:98:ac:60:8a:ad:3e:f9:a9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a04e904b743ab9ac46cf70a6ed838e5049ba33db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:b9:07:cc:e6:2e:20:56:9d:ad:15:d2:b6: be:1f:df:9d:3a:a0:70:a9:77:89:2d:0d:31:5c:e2: 99:0a:58:da:1c:bc:8b:ad:54:47:be:2e:02:bb:9f: 5e:2b:3b:75:9f:e7:52:49:23:a5:60:1f:d7:b7:4b: 60:f3:7a:c4:ee:0b:5d:95:19:51:03:90:f3:97:45: d8:02:25:72:ba:23:55:73:a2:b7:f9:e9:7c:0a:52: 20:74:e0:ac:1e:2e:d4:c0:e8:34:3b:cd:c3:5d:69: 49:dc:4f:33:a6:f1:d0:36:47:a8:00:6c:02:35:0d: 6a:c5:58:cf:cb:d4:a0:cd:3a:43:82:49:4e:5f:45: ad:7c:62:ee:07:ef:b8:56:1e:0e:35:29:71:bd:2c: d5:c6:53:e3:8f:fa:93:87:ee:82:a2:ae:fb:df:fc: 32:df:bd:f8:f9:4f:de:ed:b4:05:9c:7e:24:35:10: e8:c3:35:d4:64:a6:bf:89:82:97:1c:d4:4e:15:27: a4:cb:68:8c:4b:58:de:9c:7f:1d:9d:1a:d1:1c:ab: 73:7c:af:6e:4e:39:95:5c:b2:f9:92:49:fd:a3:0f: 79:17:8e:7c:4a:9b:16:75:43:2b:38:1a:b0:b0:89: f1:80:fe:ea:90:a3:56:b3:5e:c9:68:c0:f0:21:d1: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4E:90:4B:74:3A:B9:AC:46:CF:70:A6:ED:83:8E:50:49:BA:33:DB X509v3 Authority Key Identifier: keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:680:9100::/40 Signature Algorithm: sha256WithRSAEncryption 42:75:d3:e3:51:65:32:f6:35:3b:c6:6d:90:57:69:2c:60:b6: 7c:4e:82:32:c8:b7:73:4f:e1:50:b2:4a:ca:c1:95:a1:75:92: 4d:ce:68:ec:cb:ab:71:33:aa:0a:d1:5d:d4:e2:ee:32:3a:40: 7a:99:6c:5e:32:7c:a4:66:34:d1:b9:34:d2:e5:40:d3:3c:a2: 23:b2:f4:1d:5f:81:4e:ff:f6:da:6b:1a:10:b4:34:55:6b:87: f0:21:f9:a5:05:b4:38:9e:36:8e:f0:a0:f4:03:12:46:ce:a6: 0d:c7:12:77:83:5a:9d:03:f4:b7:3d:36:de:e6:91:49:0a:bf: f6:3a:7b:ae:2c:57:40:a5:26:ad:b2:5f:71:5f:d4:52:84:60: b1:9d:f5:87:d1:39:5b:74:97:00:b0:03:bc:2e:63:b0:14:89: 01:17:1f:5c:4b:ac:53:e2:99:d1:3f:4d:0f:5b:ad:bf:1f:dd: 81:d6:11:86:cc:d8:41:bf:e7:4a:cb:e0:59:2c:4b:6d:10:13: 66:d3:b3:c7:93:3d:26:f8:56:ed:6f:cb:8c:8b:d1:77:cb:5c: 04:83:3b:64:3a:09:89:a5:5f:6a:24:41:47:10:61:bf:87:09: 2e:e5:52:8a:34:dc:12:05:e5:c9:d1:c5:21:c5:21:c9:ac:04: 2e:73:e8:d2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7Ns7sGVDpmKxgiq0++amIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0 NDE5NzkwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDRlOTA0Yjc0M2FiOWFjNDZjZjcwYTZlZDgzOGU1MDQ5YmEzM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1C5B8zmLiBWna0V0ra+H9+dOqBw qXeJLQ0xXOKZCljaHLyLrVRHvi4Cu59eKzt1n+dSSSOlYB/Xt0tg83rE7gtdlRlR A5Dzl0XYAiVyuiNVc6K3+el8ClIgdOCsHi7UwOg0O83DXWlJ3E8zpvHQNkeoAGwC NQ1qxVjPy9SgzTpDgklOX0WtfGLuB++4Vh4ONSlxvSzVxlPjj/qTh+6Coq773/wy 3734+U/e7bQFnH4kNRDowzXUZKa/iYKXHNROFSeky2iMS1jenH8dnRrRHKtzfK9u TjmVXLL5kkn9ow95F458SpsWdUMrOBqwsInxgP7qkKNWs17JaMDwIdGpuwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKBOkEt0OrmsRs9wpu2DjlBJujPbMB8GA1UdIwQY MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt YjdkMWNhYzUxZTBjLzEvb0U2UVMzUTZ1YXhHejNDbTdZT09VRW02TTlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgIGgJEw DQYJKoZIhvcNAQELBQADggEBAEJ10+NRZTL2NTvGbZBXaSxgtnxOgjLIt3NP4VCy SsrBlaF1kk3OaOzLq3EzqgrRXdTi7jI6QHqZbF4yfKRmNNG5NNLlQNM8oiOy9B1f gU7/9tprGhC0NFVrh/Ah+aUFtDieNo7woPQDEkbOpg3HEneDWp0D9Lc9Nt7mkUkK v/Y6e64sV0ClJq2yX3Ff1FKEYLGd9YfROVt0lwCwA7wuY7AUiQEXH1xLrFPimdE/ TQ9brb8f3YHWEYbM2EG/50rL4FksS20QE2bTs8eTPSb4Vu1vy4yL0XfLXASDO2Q6 CYmlX2okQUcQYb+HCS7lUoo03BIF5cnRxSHFIcmsBC5z6NI= -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:36 2026 by rpki-client