This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa File: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (raw, json) Hash identifier: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo= Subject key identifier: A2:FA:D5:6D:50:7E:CF:C9:B5:FC:85:4E:4B:85:F6:43:C0:E0:4F:2C Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA7118A36D3B7FA94AA7D9F5628CFB2 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a0d:2146:848a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:11:8a:36:d3:b7:fa:94:aa:7d:9f:56:28:cf:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2fad56d507ecfc9b5fc854e4b85f643c0e04f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:3e:6e:f4:ca:ab:0c:2f:9d:6a:e7:23:6a: 05:50:11:23:c7:79:0d:d1:80:a2:51:2a:f3:8a:49: 2c:6b:6d:49:01:26:fb:46:ce:19:d3:1d:f4:38:e9: b4:ca:04:7c:0f:6c:ec:e8:8e:49:75:a1:11:6a:a3: 2b:53:49:cf:35:d0:61:05:e8:5a:59:aa:b0:37:3b: 64:04:99:76:85:5b:3e:62:7f:3f:0b:0b:4e:9d:9a: 3a:bd:fe:b1:4d:d3:bd:31:3b:79:c9:eb:d0:88:b3: 14:1d:86:26:75:42:7b:38:5f:57:31:6e:72:95:c1: 57:94:bf:d1:c9:55:1e:03:31:13:d1:43:e8:df:d4: 21:98:74:75:02:aa:70:d8:95:f5:c1:3c:73:40:04: ae:d0:a5:19:ad:65:79:43:03:d4:b5:14:0f:43:ff: d5:42:ec:e9:7d:9c:e0:ff:ec:08:d5:99:d3:99:0c: fc:08:1a:9d:37:ad:98:32:e5:90:f9:91:08:fd:da: 46:30:e5:01:db:59:60:ab:75:9b:ad:e6:dc:58:54: c7:de:fa:b8:e0:90:ee:fd:0b:81:2a:37:0b:bd:89: e4:cf:27:31:56:8f:e6:53:54:f0:b7:22:78:2a:29: a0:fc:3c:f5:ef:12:22:4f:cf:10:23:a9:85:90:ee: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:D5:6D:50:7E:CF:C9:B5:FC:85:4E:4B:85:F6:43:C0:E0:4F:2C X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:848a::/48 Signature Algorithm: sha256WithRSAEncryption 47:40:6f:78:69:5e:a9:e3:78:78:e9:09:e2:0e:8e:da:e4:38: 8c:e9:11:a2:f8:16:12:3c:cb:d7:b3:17:96:c6:9b:92:8c:93: 1d:20:ec:79:33:24:cf:97:f7:93:f4:32:ee:c3:c2:b6:db:9c: 42:d0:5b:c4:32:a4:fa:b8:a1:6d:25:bb:cb:33:0d:de:61:3f: f5:2d:62:9e:27:ae:4f:73:d1:63:76:48:64:94:9d:5e:54:d4: d8:53:6f:a7:c8:5a:d2:7b:54:4f:76:bb:bd:d5:29:4f:64:83: b0:8c:8a:33:58:d1:d0:4c:82:2a:f6:a6:02:69:5e:66:20:a2: 33:a2:96:04:ed:d0:ee:c3:14:40:c8:eb:71:37:5c:b3:21:b5: a4:cd:b9:7f:61:db:90:7c:c5:77:b4:29:f3:f8:fe:28:7c:88: 23:25:b4:25:ee:63:d2:0a:ca:0f:4f:a4:12:00:73:38:03:7e: a5:13:38:77:ce:18:1a:a1:3e:c9:16:63:6d:d7:19:62:f3:3f: ff:0d:13:c2:01:49:3c:48:e7:2d:66:e3:a2:29:6d:2f:d8:81: 71:59:51:64:12:63:35:69:78:8d:a8:46:e3:76:bd:7a:af:f2: d3:7a:f4:c5:df:be:c5:b9:c5:d6:c3:18:4d:4a:6f:ce:0f:b6: a6:db:9c:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxGKNtO3+pSqfZ9WKM+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmZhZDU2ZDUwN2VjZmM5YjVmYzg1NGU0Yjg1ZjY0M2MwZTA0ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWA+bvTKqwwvnWrnI2oFUBEjx3kN 0YCiUSrzikksa21JASb7Rs4Z0x30OOm0ygR8D2zs6I5JdaERaqMrU0nPNdBhBeha WaqwNztkBJl2hVs+Yn8/CwtOnZo6vf6xTdO9MTt5yevQiLMUHYYmdUJ7OF9XMW5y lcFXlL/RyVUeAzET0UPo39QhmHR1Aqpw2JX1wTxzQASu0KUZrWV5QwPUtRQPQ//V QuzpfZzg/+wI1ZnTmQz8CBqdN62YMuWQ+ZEI/dpGMOUB21lgq3WbrebcWFTH3vq4 4JDu/QuBKjcLvYnkzycxVo/mU1TwtyJ4Kimg/Dz17xIiT88QI6mFkO6MFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKL61W1Qfs/JtfyFTkuF9kPA4E8sMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvb3ZyVmJWQi16OG0xX0lWT1M0WDJROERnVHl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0hRoSK MA0GCSqGSIb3DQEBCwUAA4IBAQBHQG94aV6p43h46QniDo7a5DiM6RGi+BYSPMvX sxeWxpuSjJMdIOx5MyTPl/eT9DLuw8K225xC0FvEMqT6uKFtJbvLMw3eYT/1LWKe J65Pc9FjdkhklJ1eVNTYU2+nyFrSe1RPdru91SlPZIOwjIozWNHQTIIq9qYCaV5m IKIzopYE7dDuwxRAyOtxN1yzIbWkzbl/YduQfMV3tCnz+P4ofIgjJbQl7mPSCsoP T6QSAHM4A36lEzh3zhgaoT7JFmNt1xli8z//DRPCAUk8SOctZuOiKW0v2IFxWVFk EmM1aXiNqEbjdr16r/LTevTF377FucXWwxhNSm/OD7am25z9 -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:58 2026 by rpki-client