This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/0yRcFcA3OBSplazAFaiD6lfC3B0.roa File: 0yRcFcA3OBSplazAFaiD6lfC3B0.roa (raw, json) Hash identifier: 2qPLWspuMTgkMxkS4l/YyisgXYynSeGYaJD2ttoyg+o= Subject key identifier: D3:24:5C:15:C0:37:38:14:A9:95:AC:C0:15:A8:83:EA:57:C2:DC:1D Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582 Certificate serial: 019B7758B800759733C60DA2F465C3D47390 Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/0yRcFcA3OBSplazAFaiD6lfC3B0.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 160.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b8:00:75:97:33:c6:0d:a2:f4:65:c3:d4:73:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3245c15c0373814a995acc015a883ea57c2dc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ab:cb:c7:6b:ed:1f:37:99:8a:fe:71:39:b1: d1:11:e5:9e:53:e9:b9:cc:25:4c:66:aa:39:03:ce: 17:fa:e4:d1:c1:bf:a4:bb:af:35:88:3a:c6:fb:20: 9c:67:9f:6f:6c:95:f7:9e:6e:fb:4d:c4:0e:fb:7e: 4b:55:f2:e6:8e:18:90:55:df:6b:f9:c3:ff:58:54: 61:85:16:42:6e:41:96:fb:ac:be:46:19:e8:7a:1d: d3:04:d5:c9:5d:00:8b:6f:36:3a:ba:96:71:72:57: 94:46:1f:cc:7d:cf:a4:66:1c:87:37:a9:67:4c:b2: 2c:d2:a4:bc:6c:81:04:df:1c:52:43:25:9e:6e:ef: 5d:f4:2d:b5:78:c2:98:ee:34:1d:26:90:8c:a1:06: fb:f5:63:e2:3f:8f:6f:22:29:3c:83:ef:61:23:b9: 0c:f2:e2:72:fc:dc:d3:04:d9:96:44:74:a1:06:f2: 5b:20:79:1a:9d:82:43:4c:83:18:63:ac:68:a6:62: 5c:a2:ff:cd:a8:85:1f:17:cf:ec:21:5a:80:04:9b: 3c:3c:aa:0a:f0:29:b6:fa:50:93:0f:90:fc:6b:90: 5d:8b:46:65:5a:4d:1c:ac:14:ef:fc:c2:fe:6e:6b: 53:07:df:86:61:9e:b4:a0:6c:f6:a8:71:4e:0a:d1: 4a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:5C:15:C0:37:38:14:A9:95:AC:C0:15:A8:83:EA:57:C2:DC:1D X509v3 Authority Key Identifier: keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/0yRcFcA3OBSplazAFaiD6lfC3B0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.80.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5b:ca:98:71:1c:96:1c:c6:27:a9:ce:77:88:fa:28:32:b3:93: 44:0f:c4:5d:d2:b0:af:ea:23:a2:11:28:5b:2c:6a:35:59:c4: 1e:66:93:16:b1:a8:75:e6:37:90:4f:f9:de:8c:1f:fb:58:b1: c5:9b:99:a1:2e:2b:a9:87:47:d4:96:6d:43:72:b9:a3:16:5d: 9d:29:2d:45:e0:70:f8:c0:08:14:8e:22:3b:dc:23:f9:0f:43: 29:d7:95:b4:75:6a:d7:3b:07:95:b0:39:4f:2b:1c:4d:85:8d: 07:f7:7c:2a:e4:a6:36:22:f9:d1:77:c0:02:27:eb:42:b2:39: f3:a2:44:7f:a9:f9:f0:cb:96:c6:70:5d:1a:28:7e:64:c4:04: 2d:ce:4c:f4:9d:79:1f:c8:56:b8:9c:37:c0:2b:ad:e5:9f:b8: ae:4e:86:78:9f:34:b8:2b:74:1a:df:9d:15:c6:19:98:7a:45: 22:19:a0:59:19:0c:c2:99:e7:f6:21:92:78:d2:b5:2c:f4:c8: 53:a2:6d:ab:ec:81:07:88:1f:ec:66:15:06:17:e8:9e:64:d5: b5:8d:6f:9e:a9:57:7a:9a:4c:0e:db:a6:84:3e:0e:8f:f6:f2: 0f:fc:26:9f:d8:f9:c4:ce:d5:9e:93:63:e8:d8:4b:e0:b6:0a: 0c:d4:d3:72 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WLgAdZczxg2i9GXD1HOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMTQ2MjljNzY1Y2UxYWM0ZjY4ODk1NmUzYjkwZjZhZDhj NGI1ODIwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzI0NWMxNWMwMzczODE0YTk5NWFjYzAxNWE4ODNlYTU3YzJkYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9avLx2vtHzeZiv5xObHREeWeU+m5 zCVMZqo5A84X+uTRwb+ku681iDrG+yCcZ59vbJX3nm77TcQO+35LVfLmjhiQVd9r +cP/WFRhhRZCbkGW+6y+Rhnoeh3TBNXJXQCLbzY6upZxcleURh/Mfc+kZhyHN6ln TLIs0qS8bIEE3xxSQyWebu9d9C21eMKY7jQdJpCMoQb79WPiP49vIik8g+9hI7kM 8uJy/NzTBNmWRHShBvJbIHkanYJDTIMYY6xopmJcov/NqIUfF8/sIVqABJs8PKoK 8Cm2+lCTD5D8a5Bdi0ZlWk0crBTv/ML+bmtTB9+GYZ60oGz2qHFOCtFKVwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNMkXBXANzgUqZWswBWog+pXwtwdMB8GA1UdIwQY MBaAFDsUYpx2XOGsT2iJVuO5D2rYxLWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hMzdmOWMtMWU2YS00NjY1LWEwZTIt ZmUzMTEwMGQwODFmLzEvMHlSY0ZjQTNPQlNwbGF6QUZhaUQ2bGZDM0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hMzdmOWMtMWU2YS00NjY1LWEwZTItZmUzMTEwMGQwODFm LzEvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoFAwDQYJ KoZIhvcNAQELBQADggEBAFvKmHEclhzGJ6nOd4j6KDKzk0QPxF3SsK/qI6IRKFss ajVZxB5mkxaxqHXmN5BP+d6MH/tYscWbmaEuK6mHR9SWbUNyuaMWXZ0pLUXgcPjA CBSOIjvcI/kPQynXlbR1atc7B5WwOU8rHE2FjQf3fCrkpjYi+dF3wAIn60KyOfOi RH+p+fDLlsZwXRoofmTEBC3OTPSdeR/IVricN8ArreWfuK5OhnifNLgrdBrfnRXG GZh6RSIZoFkZDMKZ5/YhknjStSz0yFOibavsgQeIH+xmFQYX6J5k1bWNb56pV3qa TA7bpoQ+Do/28g/8Jp/Y+cTO1Z6TY+jYS+C2CgzU03I= -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:02 2026 by rpki-client