This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/oDeQkGiiDpeW8Fb417JF-HeUY68.roa File: oDeQkGiiDpeW8Fb417JF-HeUY68.roa (raw, json) Hash identifier: RfpJKZvP9NXaT8zUBt4vh5O6YG2vInwoG0F+j91Wx8M= Subject key identifier: A0:37:90:90:68:A2:0E:97:96:F0:56:F8:D7:B2:45:F8:77:94:63:AF Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B37B149A5B3DBCFDD683899A8CEF Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/oDeQkGiiDpeW8Fb417JF-HeUY68.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198304 IP address blocks: 2a13:a5c5:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b3:7b:14:9a:5b:3d:bc:fd:d6:83:89:9a:8c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a037909068a20e9796f056f8d7b245f8779463af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:56:79:a2:09:ab:23:7b:e3:f2:56:b4:d1:c4: 7a:d1:26:8f:53:d9:e6:50:00:2c:46:81:fb:aa:64: 57:53:c4:6c:88:02:7b:62:f1:7c:ae:6d:1f:b9:0c: fa:db:a0:a6:41:cb:d1:4e:2f:86:b1:ff:97:50:07: ad:12:51:47:7e:2c:02:b5:5d:b6:0d:3d:bb:39:13: e9:20:cb:6d:fc:4f:63:a9:5b:05:e5:1f:2d:9d:88: b6:f8:44:40:b9:e9:3e:c8:c9:fe:26:9d:c1:e7:55: 81:dc:7d:d9:1d:52:a6:5e:d4:4f:80:85:5a:bc:2a: 3a:5c:08:b4:d1:25:a3:98:14:24:38:ff:f4:77:e0: 0e:4c:cc:d8:be:32:7b:9f:a5:18:ef:57:d7:f8:9c: 64:3f:34:da:81:36:44:4f:7d:dc:b4:6d:a0:1b:7d: 02:e1:33:df:61:85:54:e0:0c:f0:92:1d:b2:0c:b5: b0:b7:90:f7:d9:e6:de:ba:3a:78:e5:e2:ff:ef:55: f1:7f:43:b6:42:83:5b:55:8f:97:44:5d:32:18:b3: 1b:85:9b:17:19:e9:f4:65:eb:58:92:d3:8a:78:ad: 80:75:e5:8f:28:25:3f:76:75:97:d8:30:25:74:46: 4a:76:35:ad:1d:dc:f5:ef:fe:bc:b0:7d:df:7e:8e: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:37:90:90:68:A2:0E:97:96:F0:56:F8:D7:B2:45:F8:77:94:63:AF X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/oDeQkGiiDpeW8Fb417JF-HeUY68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c5:f000::/40 Signature Algorithm: sha256WithRSAEncryption 18:98:17:99:88:8a:73:b1:71:e5:f2:d8:ee:0f:08:81:e3:e1: b7:3f:92:73:58:15:84:d4:d4:0a:88:72:a4:55:c0:2c:63:4a: 48:64:e7:48:2f:95:2c:8c:58:35:b6:64:68:10:df:6c:0e:d5: 68:86:9b:d4:01:b5:19:ae:e1:a9:9f:dd:f4:dd:fe:36:e6:d4: 38:de:2a:6c:43:a0:fc:79:be:84:40:83:d1:1e:ae:7d:6d:9f: 3c:36:7f:84:37:7d:69:5b:34:28:de:ea:63:d0:77:97:e7:71: 06:db:0c:48:c1:ac:81:7e:a2:f5:f7:19:03:7a:da:9e:0d:2f: b8:17:14:6a:35:b7:05:f8:10:5a:d3:77:f1:3b:75:08:f6:46: ca:dd:2c:e9:38:68:ba:ba:73:88:48:ec:3a:f6:2a:61:52:11: aa:e2:80:48:bb:52:95:01:da:4c:8d:ed:61:e8:77:1a:6d:f8: cc:7c:bc:f3:a0:01:6d:7e:52:f4:6d:ce:52:8f:b5:16:66:5e: 6e:db:fa:60:31:d9:2f:25:2f:fa:eb:40:05:8a:69:42:c2:5f: f4:96:20:3b:9e:dd:69:e7:2b:32:a5:c1:25:da:0e:4e:35:8f: fa:bb:02:c5:1c:b0:98:44:39:a3:69:7b:61:45:55:84:78:3f: c7:12:4f:e3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLN7FJpbPbz91oOJmozvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDM3OTA5MDY4YTIwZTk3OTZmMDU2ZjhkN2IyNDVmODc3OTQ2M2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lZ5ogmrI3vj8la00cR60SaPU9nm UAAsRoH7qmRXU8RsiAJ7YvF8rm0fuQz626CmQcvRTi+Gsf+XUAetElFHfiwCtV22 DT27ORPpIMtt/E9jqVsF5R8tnYi2+ERAuek+yMn+Jp3B51WB3H3ZHVKmXtRPgIVa vCo6XAi00SWjmBQkOP/0d+AOTMzYvjJ7n6UY71fX+JxkPzTagTZET33ctG2gG30C 4TPfYYVU4Azwkh2yDLWwt5D32ebeujp45eL/71Xxf0O2QoNbVY+XRF0yGLMbhZsX Gen0ZetYktOKeK2AdeWPKCU/dnWX2DAldEZKdjWtHdz17/68sH3ffo47cQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKA3kJBoog6XlvBW+NeyRfh3lGOvMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvb0RlUWtHaWlEcGVXOEZiNDE3SkYtSGVVWTY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxfAw DQYJKoZIhvcNAQELBQADggEBABiYF5mIinOxceXy2O4PCIHj4bc/knNYFYTU1AqI cqRVwCxjSkhk50gvlSyMWDW2ZGgQ32wO1WiGm9QBtRmu4amf3fTd/jbm1DjeKmxD oPx5voRAg9Eern1tnzw2f4Q3fWlbNCje6mPQd5fncQbbDEjBrIF+ovX3GQN62p4N L7gXFGo1twX4EFrTd/E7dQj2RsrdLOk4aLq6c4hI7Dr2KmFSEarigEi7UpUB2kyN 7WHodxpt+Mx8vPOgAW1+UvRtzlKPtRZmXm7b+mAx2S8lL/rrQAWKaULCX/SWIDue 3WnnKzKlwSXaDk41j/q7AsUcsJhEOaNpe2FFVYR4P8cST+M= -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:30 2026 by rpki-client