This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/OS72UUjy1jIbO6SLm4_mGk1QjoA.roa File: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (raw, json) Hash identifier: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M= Subject key identifier: 39:2E:F6:51:48:F2:D6:32:1B:3B:A4:8B:9B:8F:E6:1A:4D:50:8E:80 Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019B78A2A62D8F2DCD196E1536598D2A4C20 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/OS72UUjy1jIbO6SLm4_mGk1QjoA.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2003:5:200::/40 maxlen: 40 2003:8:4400::/48 maxlen: 48 2003:8:6400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a6:2d:8f:2d:cd:19:6e:15:36:59:8d:2a:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=392ef65148f2d6321b3ba48b9b8fe61a4d508e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d8:b7:d1:15:55:d2:af:b2:d7:9c:51:2c:59: 13:e7:14:d0:f5:ad:3d:91:27:0f:98:f1:86:79:75: 93:a4:18:62:ec:66:0f:ad:70:a0:cb:9e:59:28:ff: 8e:a2:e1:60:d8:01:1a:64:b9:e8:73:e5:3a:b6:d9: 1b:46:30:7a:03:c6:50:87:97:cd:3c:d9:82:d8:26: b9:18:aa:0a:bf:4e:d0:b3:86:b6:4b:a7:45:23:5a: 25:e1:e2:97:86:02:77:ec:7d:63:04:18:2a:73:ee: ee:df:09:24:b4:80:32:10:03:45:7c:6e:54:7c:b4: 43:03:31:e0:3f:bf:2b:a1:97:0c:e3:35:40:68:04: 6a:b4:30:55:6b:ea:98:b5:f1:02:b7:30:55:96:df: bf:f0:59:4d:bf:9c:20:f0:13:0e:cf:9f:a5:d7:7f: 54:12:4c:95:c9:fc:74:81:5c:18:a9:9b:11:42:40: 7c:da:a3:32:71:89:6d:f1:e1:b8:8f:62:c8:38:12: da:4c:e9:75:f2:7b:b1:c7:3f:6e:97:b9:a2:f9:d9: cb:23:fa:e5:af:cb:e8:3c:d4:ad:8c:68:5e:1e:82: 57:94:c9:b2:dd:8c:c8:16:5f:a7:b7:a1:d0:8f:bc: 88:95:b7:5c:5a:70:06:cf:52:e2:2e:cb:6f:2e:e3: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:F6:51:48:F2:D6:32:1B:3B:A4:8B:9B:8F:E6:1A:4D:50:8E:80 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/OS72UUjy1jIbO6SLm4_mGk1QjoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2003:5:200::/40 2003:8:4400::/48 2003:8:6400::/48 Signature Algorithm: sha256WithRSAEncryption a3:dc:03:b8:4d:17:6c:aa:16:90:14:7e:52:50:b4:b3:34:94: eb:c6:2d:e5:a5:65:4d:2e:a1:27:e1:72:3d:1c:e7:20:1c:22: 27:03:c8:bd:b2:92:10:9b:6e:50:2b:01:95:ef:24:bf:db:c8: 0d:fc:43:8a:89:8b:e0:89:be:42:ed:8b:bd:ef:43:0d:1b:0a: 59:1b:66:45:55:d1:73:0e:ba:3f:ff:29:b8:72:be:0f:73:28: 38:c6:10:1f:08:11:92:e7:d8:dd:36:55:b5:9f:60:c8:cb:54: 58:33:6d:16:da:b9:87:90:06:96:bc:b4:12:e7:44:2f:f4:33: 8f:b0:87:56:4b:02:c4:0d:9a:a8:7e:3d:79:d4:7d:b4:b6:3a: 87:f8:66:ab:d2:60:9f:de:a9:9b:36:22:fa:ac:af:ba:6f:72: dd:db:ea:de:40:c0:48:a5:62:3b:cc:7b:ae:14:ff:e4:7c:ee: a2:87:7e:ca:b4:3f:22:d4:b4:83:f2:b3:97:7c:81:c1:f8:76: 55:84:36:6b:6a:d3:ec:62:da:ec:5f:51:6b:04:cb:f6:80:4f: b8:14:99:ab:99:24:2d:e1:15:12:b6:57:58:0a:86:8d:2f:50: 97:bf:0b:ba:88:c7:aa:98:8e:39:2e:cf:ab:9d:20:3d:84:54: e6:09:29:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4oqYtjy3NGW4VNlmNKkwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTJlZjY1MTQ4ZjJkNjMyMWIzYmE0OGI5YjhmZTYxYTRkNTA4ZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ni30RVV0q+y15xRLFkT5xTQ9a09 kScPmPGGeXWTpBhi7GYPrXCgy55ZKP+OouFg2AEaZLnoc+U6ttkbRjB6A8ZQh5fN PNmC2Ca5GKoKv07Qs4a2S6dFI1ol4eKXhgJ37H1jBBgqc+7u3wkktIAyEANFfG5U fLRDAzHgP78roZcM4zVAaARqtDBVa+qYtfECtzBVlt+/8FlNv5wg8BMOz5+l139U EkyVyfx0gVwYqZsRQkB82qMycYlt8eG4j2LIOBLaTOl18nuxxz9ul7mi+dnLI/rl r8voPNStjGheHoJXlMmy3YzIFl+nt6HQj7yIlbdcWnAGz1LiLstvLuOqeQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFDku9lFI8tYyGzuki5uP5hpNUI6AMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xL09TNzJVVWp5MWpJYk82U0xtNF9tR2sxUWpvQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYz ZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgACMBoDBgAgAwAF AgMHACADAAhEAAMHACADAAhkADANBgkqhkiG9w0BAQsFAAOCAQEAo9wDuE0XbKoW kBR+UlC0szSU68Yt5aVlTS6hJ+FyPRznIBwiJwPIvbKSEJtuUCsBle8kv9vIDfxD iomL4Im+Qu2Lve9DDRsKWRtmRVXRcw66P/8puHK+D3MoOMYQHwgRkufY3TZVtZ9g yMtUWDNtFtq5h5AGlry0EudEL/Qzj7CHVksCxA2aqH49edR9tLY6h/hmq9Jgn96p mzYi+qyvum9y3dvq3kDASKViO8x7rhT/5Hzuood+yrQ/ItS0g/Kzl3yBwfh2VYQ2 a2rT7GLa7F9RawTL9oBPuBSZq5kkLeEVErZXWAqGjS9Ql78LuojHqpiOOS7Pq50g PYRU5gkpeg== -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:12 2026 by rpki-client