This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/o6IB38C6xSOkxGBGXTts02Icg5E.roa File: o6IB38C6xSOkxGBGXTts02Icg5E.roa (raw, json) Hash identifier: 3kcNqmgdeYSwqNssdu/7Mxp1Q+Ah6H4caa+MFD2yuJ0= Subject key identifier: A3:A2:01:DF:C0:BA:C5:23:A4:C4:60:46:5D:3B:6C:D3:62:1C:83:91 Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Certificate serial: 019B7758E55C04E5539E5BFF8A37D8440548 Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/o6IB38C6xSOkxGBGXTts02Icg5E.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48758 IP address blocks: 193.32.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e5:5c:04:e5:53:9e:5b:ff:8a:37:d8:44:05:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3a201dfc0bac523a4c460465d3b6cd3621c8391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:0b:9c:83:61:f3:67:6e:a1:92:43:a6:f6: d2:21:e5:56:11:51:8c:4a:eb:b7:f9:4a:dc:5b:66: 60:a2:fb:34:8a:c3:82:b2:02:40:bd:62:12:8d:52: 93:6c:21:55:dc:5d:80:34:de:d2:71:76:d1:51:96: 58:76:ae:73:67:1d:26:77:0f:80:3f:8c:34:4d:30: 84:a2:cf:fa:d3:d0:d5:ff:1e:fa:13:5a:dd:33:35: bc:c6:b0:88:c0:5b:09:2f:cb:a4:b9:a1:5a:2a:e8: a2:86:df:2d:8f:10:da:73:9b:d5:76:9c:96:2b:23: 3f:19:60:51:7e:61:81:ce:73:03:77:15:2b:d8:95: 3b:32:40:7d:71:91:17:b8:88:b0:94:e2:df:42:19: 06:62:ab:e1:e9:2d:06:53:fd:67:71:ff:db:5f:a8: cf:eb:00:45:91:49:ab:90:77:77:19:19:c6:05:99: d4:cb:75:f8:2a:7b:54:5e:36:e4:dd:fa:6e:ee:ef: 0a:fb:20:2a:db:eb:53:c1:7c:65:94:9b:44:7b:19: 4c:8c:ff:c0:f5:e3:72:75:e2:56:3a:6d:51:ed:42: a1:c3:fc:fe:d8:2f:62:4d:f0:15:e0:fd:8c:b7:e3: d7:94:91:58:2d:69:a5:9c:2a:95:6a:50:d9:1a:c5: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:01:DF:C0:BA:C5:23:A4:C4:60:46:5D:3B:6C:D3:62:1C:83:91 X509v3 Authority Key Identifier: keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/o6IB38C6xSOkxGBGXTts02Icg5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.54.0/24 Signature Algorithm: sha256WithRSAEncryption d8:95:8f:69:f9:6f:8c:a5:5b:e4:36:ed:26:c3:ad:8f:bc:d3: 30:b9:2d:5d:24:9b:52:82:8d:4f:f2:b4:85:8f:58:b8:6b:d0: 40:9e:55:7b:93:95:51:85:4c:73:75:57:d7:92:ee:a9:68:d3: 9a:69:f6:6a:c6:4b:40:57:32:a6:c1:8e:85:b3:35:66:82:ed: 7e:48:0f:5c:af:8b:94:c7:57:98:c2:05:2a:d7:22:68:49:74: 76:ea:c0:23:a7:d2:ac:39:6b:6b:0b:a3:30:0f:a2:7f:d2:5d: b6:00:35:ce:a0:92:8b:97:36:71:cd:ac:06:0d:59:dd:e7:f2: ac:30:2c:30:cc:44:85:a3:73:fd:89:c4:bd:ce:e2:c3:ca:7d: a1:44:b7:46:88:cf:48:29:cb:a3:f0:83:46:af:ba:d2:dd:56: b6:37:f6:cf:a2:9b:3a:41:87:fa:6d:3d:e2:15:cd:a5:88:1c: 3e:77:48:3b:3b:c9:43:0f:82:0f:90:62:bb:8c:0f:9e:f4:d3: 95:a6:65:3d:7a:98:37:0f:f9:ba:cb:eb:e5:a9:f8:d1:b8:16: 8c:a9:6e:d2:18:86:d5:6e:d9:78:82:37:31:a5:16:e1:9f:9c: 29:2e:a6:bc:40:6b:97:24:c2:96:a8:14:48:d0:9b:40:c4:82: 4e:6f:8c:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOVcBOVTnlv/ijfYRAVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWMxNmY1YmUzN2ZmNmM1ZDQyMDVmMmFiYTI1ZmNlMzU4 OTAzMzUwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2EyMDFkZmMwYmFjNTIzYTRjNDYwNDY1ZDNiNmNkMzYyMWM4MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eULnINh82duoZJDpvbSIeVWEVGM Suu3+UrcW2Zgovs0isOCsgJAvWISjVKTbCFV3F2ANN7ScXbRUZZYdq5zZx0mdw+A P4w0TTCEos/609DV/x76E1rdMzW8xrCIwFsJL8ukuaFaKuiiht8tjxDac5vVdpyW KyM/GWBRfmGBznMDdxUr2JU7MkB9cZEXuIiwlOLfQhkGYqvh6S0GU/1ncf/bX6jP 6wBFkUmrkHd3GRnGBZnUy3X4KntUXjbk3fpu7u8K+yAq2+tTwXxllJtEexlMjP/A 9eNydeJWOm1R7UKhw/z+2C9iTfAV4P2Mt+PXlJFYLWmlnCqValDZGsWsgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKOiAd/AusUjpMRgRl07bNNiHIORMB8GA1UdIwQY MBaAFLwcFvW+N/9sXUIF8quiX841iQM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYt YWJkNmYyYjM0MTBiLzEvbzZJQjM4QzZ4U09reEdCR1hUdHMwMkljZzVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYtYWJkNmYyYjM0MTBi LzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSA2MA0G CSqGSIb3DQEBCwUAA4IBAQDYlY9p+W+MpVvkNu0mw62PvNMwuS1dJJtSgo1P8rSF j1i4a9BAnlV7k5VRhUxzdVfXku6paNOaafZqxktAVzKmwY6FszVmgu1+SA9cr4uU x1eYwgUq1yJoSXR26sAjp9KsOWtrC6MwD6J/0l22ADXOoJKLlzZxzawGDVnd5/Ks MCwwzESFo3P9icS9zuLDyn2hRLdGiM9IKcuj8INGr7rS3Va2N/bPops6QYf6bT3i Fc2liBw+d0g7O8lDD4IPkGK7jA+e9NOVpmU9epg3D/m6y+vlqfjRuBaMqW7SGIbV btl4gjcxpRbhn5wpLqa8QGuXJMKWqBRI0JtAxIJOb4wA -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:20 2026 by rpki-client