This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-OQCsKAGxLmKYvQe5KG0yHXQW40.roa File: 1-OQCsKAGxLmKYvQe5KG0yHXQW40.roa (raw, json) Hash identifier: kyQcyY2/Sucqtvk6d7XXcpMLBL0hL6m9wC9f9J6LRm8= Subject key identifier: F8:E4:02:B0:A0:06:C4:B9:8A:62:F4:1E:E4:A1:B4:C8:75:D0:5B:8D Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019ACBC49263BE054B238017076C7F3D5296 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-OQCsKAGxLmKYvQe5KG0yHXQW40.roa Signing time: Fri 28 Nov 2025 18:40:48 +0000 ROA not before: Fri 28 Nov 2025 18:40:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204968 IP address blocks: 2a0d:6ec0::/29 maxlen: 29 2a0d:9740::/29 maxlen: 29 2a0d:b540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:c4:92:63:be:05:4b:23:80:17:07:6c:7f:3d:52:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 28 18:40:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8e402b0a006c4b98a62f41ee4a1b4c875d05b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:59:d8:08:9a:f3:1f:2b:fc:53:63:f6:4d:a0: 11:cc:54:5a:77:ff:d2:14:a2:25:f4:ab:e7:32:a3: 5f:26:f5:70:e2:5f:f9:6a:44:79:e5:d5:3f:ac:de: 78:34:94:54:32:c4:b7:dd:17:c0:35:34:c2:8f:e2: 12:a0:48:ad:cc:39:1c:14:25:7d:39:69:71:56:57: 80:a2:64:88:e1:34:05:f6:72:48:da:ab:a0:eb:15: 63:53:b7:1a:54:e1:85:9f:40:84:07:71:2e:95:88: 5f:c4:71:0d:69:5f:67:b1:a9:fd:fe:f7:1f:aa:91: c3:0d:4b:95:d0:52:1e:3f:6e:31:c4:4a:1e:75:93: bb:45:8c:a8:71:e4:36:66:84:de:4d:cc:99:bb:fb: 08:d8:3f:3c:22:b7:e3:70:7c:ab:34:97:73:84:f6: 73:80:44:c9:a0:e9:ba:2f:ca:52:71:5b:e6:93:be: df:fe:6d:fe:b9:38:bd:46:65:ed:2c:9a:eb:11:8e: 0f:e0:9a:e0:3a:f4:18:f8:2d:fe:d2:e9:28:90:d3: 45:83:1c:e7:02:7f:f1:ec:43:fd:e9:63:94:a8:6d: 58:ec:1b:26:cf:8e:45:91:b9:f2:ad:7f:eb:e7:8d: 62:48:ce:aa:5b:9f:f4:c8:49:46:01:71:a9:26:7c: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E4:02:B0:A0:06:C4:B9:8A:62:F4:1E:E4:A1:B4:C8:75:D0:5B:8D X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-OQCsKAGxLmKYvQe5KG0yHXQW40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6ec0::/29 2a0d:9740::/29 2a0d:b540::/29 Signature Algorithm: sha256WithRSAEncryption 45:2e:d9:0c:4c:fb:b0:9c:26:a7:1b:b4:20:28:ca:6a:e7:de: ed:5f:c4:3b:6e:b0:7b:d1:c6:b3:00:53:3f:d9:84:df:ad:24: ab:e0:31:29:40:0f:39:4b:ff:61:09:0c:46:a5:2d:af:2e:a1: ad:18:2b:5d:3c:02:cc:19:fb:60:02:a6:88:0a:41:24:1f:f9: a5:52:bc:ae:14:a3:c1:fa:df:59:3c:76:7d:2b:94:37:ed:68: 5c:f5:e8:c4:d0:fb:f7:16:68:ca:4d:34:f6:82:f8:af:17:f1: 60:96:5d:81:04:88:79:c3:b8:9c:10:03:d5:4a:8d:8d:df:76: 0d:be:f4:32:f7:1a:91:f9:cf:60:b7:1a:bb:e6:36:56:cd:f3: 04:dc:03:3f:e3:32:43:63:f5:76:28:c1:01:d8:ff:10:6d:ad: e2:d0:df:a6:87:f3:7f:f8:81:90:3a:35:d6:ed:8a:e5:50:97: b9:ac:75:5f:90:e8:6b:80:38:97:04:9b:5c:02:c3:5b:0f:f7: ba:d9:5b:a8:bf:ec:d6:0e:b4:5a:ee:de:62:88:a2:98:d8:56: f9:f4:e4:53:64:e5:5b:cb:21:fe:b5:76:14:77:5f:34:d3:cf: 9c:92:a5:76:76:c5:3d:48:31:bc:f9:77:2e:9d:34:28:bf:2e: e2:17:2c:f7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZrLxJJjvgVLI4AXB2x/PVKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTI4MTg0MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGU0MDJiMGEwMDZjNGI5OGE2MmY0MWVlNGExYjRjODc1ZDA1YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVnYCJrzHyv8U2P2TaARzFRad//S FKIl9KvnMqNfJvVw4l/5akR55dU/rN54NJRUMsS33RfANTTCj+ISoEitzDkcFCV9 OWlxVleAomSI4TQF9nJI2qug6xVjU7caVOGFn0CEB3EulYhfxHENaV9nsan9/vcf qpHDDUuV0FIeP24xxEoedZO7RYyoceQ2ZoTeTcyZu/sI2D88IrfjcHyrNJdzhPZz gETJoOm6L8pScVvmk77f/m3+uTi9RmXtLJrrEY4P4JrgOvQY+C3+0ukokNNFgxzn An/x7EP96WOUqG1Y7Bsmz45FkbnyrX/r541iSM6qW5/0yElGAXGpJnzi2QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPjkArCgBsS5imL0HuShtMh10FuNMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvMS1PUUNzS0FHeExtS1l2UWU1S0cweUhYUVc0MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWIvN2I5MzM2LWU5ZjgtNGUyNy1hZjRiLTIzOWQyZmUzOThi MS8xL0NUTlR3ZnEtaVdyNHVGX25ZQTVHTkphUHpFdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wGwQCAAIwFQMFAyoNbsAD BQMqDZdAAwUDKg21QDANBgkqhkiG9w0BAQsFAAOCAQEARS7ZDEz7sJwmpxu0ICjK aufe7V/EO26we9HGswBTP9mE360kq+AxKUAPOUv/YQkMRqUtry6hrRgrXTwCzBn7 YAKmiApBJB/5pVK8rhSjwfrfWTx2fSuUN+1oXPXoxND79xZoyk009oL4rxfxYJZd gQSIecO4nBAD1UqNjd92Db70MvcakfnPYLcau+Y2Vs3zBNwDP+MyQ2P1dijBAdj/ EG2t4tDfpofzf/iBkDo11u2K5VCXuax1X5Doa4A4lwSbXALDWw/3utlbqL/s1g60 Wu7eYoiimNhW+fTkU2TlW8sh/rV2FHdfNNPPnJKldnbFPUgxvPl3Lp00KL8u4hcs 9w== -----END CERTIFICATE-----Generated at Fri Dec 5 13:23:15 2025 by rpki-client