This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/OOcVjTinelu-vgE59aMpB7cwNfA.roa File: OOcVjTinelu-vgE59aMpB7cwNfA.roa (raw, json) Hash identifier: Zjel+wrfjrnJJPs2axJSuj38XRQFBg6WAwK0ANjmS6U= Subject key identifier: 38:E7:15:8D:38:A7:7A:5B:BE:BE:01:39:F5:A3:29:07:B7:30:35:F0 Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349 Certificate serial: 019B7C7FEB2F2953BD1732F1327ACD083924 Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/OOcVjTinelu-vgE59aMpB7cwNfA.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a01:f040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:eb:2f:29:53:bd:17:32:f1:32:7a:cd:08:39:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349 Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38e7158d38a77a5bbebe0139f5a32907b73035f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:6e:10:8e:a5:e0:c9:96:41:94:34:1b:db: 24:78:ee:c4:8f:7d:f7:d3:38:dc:21:6c:98:48:7b: ac:de:3c:a2:85:77:40:f5:05:7c:46:cb:bb:85:c9: cc:5e:79:f1:43:05:94:c1:12:3d:ee:85:37:84:62: fa:d8:06:8b:de:55:1f:2d:67:38:c3:70:0e:df:1a: aa:4e:06:62:25:d6:56:b0:22:24:fb:3a:8b:5c:ed: 3d:ed:e6:b8:12:c7:8d:d0:72:d0:33:f5:90:a3:ba: 6e:2d:41:3c:2e:9e:03:6a:eb:8b:78:6b:dc:3d:11: b0:4d:ed:4e:2f:1a:c7:a2:5b:09:e3:11:25:47:d1: 9c:08:4d:1c:2a:3a:84:ee:33:ad:ee:a8:6c:fb:e8: 61:05:18:54:81:39:75:72:62:42:ab:e3:e3:16:47: 1d:f6:27:9e:ee:64:6c:6b:84:80:b9:30:3d:e1:11: 37:36:ac:fe:df:54:cf:cc:48:06:0b:6b:54:98:30: b8:fc:fe:0e:03:77:6e:45:5c:f5:df:18:2d:fa:89: b6:54:dd:6d:89:df:ca:a7:d4:c6:44:f7:55:01:00: 4f:3c:16:6f:00:0a:69:e8:f4:3c:de:ef:d2:4b:80: ee:e2:6d:11:e9:4f:e9:e5:e6:95:c2:a1:6d:ed:e6: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:15:8D:38:A7:7A:5B:BE:BE:01:39:F5:A3:29:07:B7:30:35:F0 X509v3 Authority Key Identifier: keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/OOcVjTinelu-vgE59aMpB7cwNfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f040::/29 Signature Algorithm: sha256WithRSAEncryption 71:8f:ef:b7:a7:cd:67:54:0f:69:17:ed:4e:62:a2:02:37:35: e0:6b:33:a3:0d:b6:f7:02:b9:d9:c8:bf:bb:dd:1e:83:30:69: 94:e0:cd:84:80:24:91:5b:32:ac:c5:df:49:19:b9:7f:6d:51: d1:34:e2:3c:8a:ee:fc:a6:8c:d6:dc:54:5c:65:d8:50:11:51: 56:aa:fd:82:a5:0f:32:a1:c9:8b:27:c8:8e:2d:51:fe:d4:9e: 50:41:83:33:c4:d7:e4:79:8e:81:b7:be:49:af:9a:54:30:14: 83:db:d8:00:48:8e:15:b7:b8:04:ef:23:f2:b5:9a:33:9b:59: 11:c4:23:35:d0:e2:2e:40:9c:93:8a:ed:ed:a7:4a:ac:4b:05: dd:04:d7:8d:6b:4f:6a:3d:25:57:56:20:07:af:bb:72:de:7e: 5c:a6:cb:3d:5e:27:4c:91:97:2b:f4:4b:c1:a9:d4:28:2b:c8: 29:e3:ad:cc:fa:c0:7a:67:5d:34:2d:db:4a:cc:b7:65:43:a7: 01:6e:ed:f0:d7:dd:02:e6:43:d3:5b:ce:67:02:16:3f:ab:97: 77:a7:36:eb:66:0c:54:f0:0d:c0:9c:e9:8b:d0:52:90:c3:d3: 98:8a:4a:39:54:29:d9:72:d0:c6:d1:06:b0:d6:bd:d8:83:25: 77:67:ff:90 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f+svKVO9FzLxMnrNCDkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm ODYzNDkwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGU3MTU4ZDM4YTc3YTViYmViZTAxMzlmNWEzMjkwN2I3MzAzNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1puEI6l4MmWQZQ0G9skeO7Ej333 0zjcIWyYSHus3jyihXdA9QV8Rsu7hcnMXnnxQwWUwRI97oU3hGL62AaL3lUfLWc4 w3AO3xqqTgZiJdZWsCIk+zqLXO097ea4EseN0HLQM/WQo7puLUE8Lp4DauuLeGvc PRGwTe1OLxrHolsJ4xElR9GcCE0cKjqE7jOt7qhs++hhBRhUgTl1cmJCq+PjFkcd 9iee7mRsa4SAuTA94RE3Nqz+31TPzEgGC2tUmDC4/P4OA3duRVz13xgt+om2VN1t id/Kp9TGRPdVAQBPPBZvAApp6PQ83u/SS4Du4m0R6U/p5eaVwqFt7eYQjQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDjnFY04p3pbvr4BOfWjKQe3MDXwMB8GA1UdIwQY MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt MTY1MzE4OGQ4MTI2LzEvT09jVmpUaW5lbHUtdmdFNTlhTXBCN2N3TmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2 LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHwQDAN BgkqhkiG9w0BAQsFAAOCAQEAcY/vt6fNZ1QPaRftTmKiAjc14Gszow229wK52ci/ u90egzBplODNhIAkkVsyrMXfSRm5f21R0TTiPIru/KaM1txUXGXYUBFRVqr9gqUP MqHJiyfIji1R/tSeUEGDM8TX5HmOgbe+Sa+aVDAUg9vYAEiOFbe4BO8j8rWaM5tZ EcQjNdDiLkCck4rt7adKrEsF3QTXjWtPaj0lV1YgB6+7ct5+XKbLPV4nTJGXK/RL wanUKCvIKeOtzPrAemddNC3bSsy3ZUOnAW7t8NfdAuZD01vOZwIWP6uXd6c262YM VPANwJzpi9BSkMPTmIpKOVQp2XLQxtEGsNa92IMld2f/kA== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:10 2026 by rpki-client