This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/oSVqebziTAnWxzzhjCN56NayiOI.roa File: oSVqebziTAnWxzzhjCN56NayiOI.roa (raw, json) Hash identifier: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E= Subject key identifier: A1:25:6A:79:BC:E2:4C:09:D6:C7:3C:E1:8C:23:79:E8:D6:B2:88:E2 Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Certificate serial: 019B7B35F9D68D39DE08E91DC8308F15AC9B Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/oSVqebziTAnWxzzhjCN56NayiOI.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a04:1f41::/32 maxlen: 48 2a04:1f42::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f9:d6:8d:39:de:08:e9:1d:c8:30:8f:15:ac:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1256a79bce24c09d6c73ce18c2379e8d6b288e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:66:59:50:f0:71:83:46:ad:5e:ac:61:b7: 15:f2:58:6e:8a:c8:13:ce:32:a1:c7:20:b4:73:ea: 41:63:c8:2f:fc:50:61:e0:27:ca:3e:75:34:f1:41: c7:3f:e9:36:90:36:29:1e:d7:9d:f0:b7:85:d1:9a: 66:0b:d8:70:c2:72:8c:fd:30:6f:a4:ea:be:96:06: 3d:99:3d:bc:77:c1:23:f0:af:52:93:61:01:8e:5a: 36:4b:a3:bb:d6:94:6c:10:f4:c6:31:e2:6f:bb:da: bc:41:1c:51:ac:00:cf:6f:10:4b:4a:28:6a:b2:13: 2b:c9:ce:04:6d:2d:7a:89:11:49:ad:4a:31:a9:70: 81:80:44:88:ce:04:57:8d:47:bc:4d:a6:c1:c5:40: 51:e8:d7:84:aa:15:86:77:68:5e:4c:db:4f:cf:e6: 0e:bc:55:fe:27:0e:dd:20:c0:ad:00:46:42:84:5c: 59:0f:28:8b:0d:f5:5f:5f:3b:69:99:a9:04:4a:97: 71:6b:66:36:fb:62:84:02:b5:50:65:4b:b8:63:3d: b8:c2:37:a2:71:a2:21:97:52:ed:05:2d:54:a0:ef: 64:53:4c:38:1e:be:52:c1:e8:dd:2e:35:94:97:20: 94:ab:b4:fb:e4:8b:16:7b:61:3d:38:d8:78:c9:38: c4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:6A:79:BC:E2:4C:09:D6:C7:3C:E1:8C:23:79:E8:D6:B2:88:E2 X509v3 Authority Key Identifier: keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/oSVqebziTAnWxzzhjCN56NayiOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:1f41::-2a04:1f42:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 76:3e:26:25:46:33:cd:c6:d4:93:2f:48:c5:07:dc:59:5b:58: f5:9a:d9:f5:7e:c5:ef:3e:5b:45:5f:21:58:32:65:19:d4:8d: 06:fa:8e:0b:1b:fc:13:5a:94:fd:e7:b0:a6:5d:03:ae:61:56: 20:7b:7e:40:86:63:1f:8a:b8:aa:d0:4e:e8:df:37:a7:98:a4: 8d:50:df:24:f4:e7:5a:2e:f8:67:68:45:01:2d:3f:37:75:87: 32:9e:9a:50:6c:fa:95:2c:40:77:91:e5:fc:0e:3b:37:e4:ca: 1b:90:5b:7e:0e:ce:33:39:6d:d5:7a:55:45:21:cc:2b:0d:cf: 6f:67:2a:1b:29:16:fa:90:6e:68:8c:89:32:89:99:bb:a7:86: 0b:8b:65:4f:5b:2c:5b:36:c0:5e:2e:bc:df:c3:07:91:99:81: a0:be:15:fb:33:b4:f2:d0:a9:e6:21:ce:b0:c5:cc:9e:df:5b: de:4a:2c:c8:14:fa:e1:1f:33:0d:fc:7e:bc:24:2e:ba:2b:d5: d8:97:a6:f4:76:90:5c:c1:1f:51:0e:d8:fb:ae:7c:08:2c:5d: 42:07:30:1c:04:a9:c2:8a:3a:50:63:d7:86:c6:5f:c1:02:3f: 06:40:38:08:79:80:3b:4b:7d:35:49:8a:bb:19:49:93:c2:1d: b2:0c:dc:db -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7NfnWjTneCOkdyDCPFaybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw OWQ3YTIwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTI1NmE3OWJjZTI0YzA5ZDZjNzNjZTE4YzIzNzllOGQ2YjI4OGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hNmWVDwcYNGrV6sYbcV8lhuisgT zjKhxyC0c+pBY8gv/FBh4CfKPnU08UHHP+k2kDYpHted8LeF0ZpmC9hwwnKM/TBv pOq+lgY9mT28d8Ej8K9Sk2EBjlo2S6O71pRsEPTGMeJvu9q8QRxRrADPbxBLSihq shMryc4EbS16iRFJrUoxqXCBgESIzgRXjUe8TabBxUBR6NeEqhWGd2heTNtPz+YO vFX+Jw7dIMCtAEZChFxZDyiLDfVfXztpmakESpdxa2Y2+2KEArVQZUu4Yz24wjei caIhl1LtBS1UoO9kU0w4Hr5SwejdLjWUlyCUq7T75IsWe2E9ONh4yTjEXwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFKElanm84kwJ1sc84YwjeejWsojiMB8GA1UdIwQY MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt NTdjOTU1YzljODVkLzEvb1NWcWViemlUQW5XeHp6aGpDTjU2TmF5aU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqBB9B AwUAKgQfQjANBgkqhkiG9w0BAQsFAAOCAQEAdj4mJUYzzcbUky9IxQfcWVtY9ZrZ 9X7F7z5bRV8hWDJlGdSNBvqOCxv8E1qU/eewpl0DrmFWIHt+QIZjH4q4qtBO6N83 p5ikjVDfJPTnWi74Z2hFAS0/N3WHMp6aUGz6lSxAd5Hl/A47N+TKG5Bbfg7OMzlt 1XpVRSHMKw3Pb2cqGykW+pBuaIyJMomZu6eGC4tlT1ssWzbAXi6838MHkZmBoL4V +zO08tCp5iHOsMXMnt9b3kosyBT64R8zDfx+vCQuuivV2Jem9HaQXMEfUQ7Y+658 CCxdQgcwHASpwoo6UGPXhsZfwQI/BkA4CHmAO0t9NUmKuxlJk8Idsgzc2w== -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:14 2026 by rpki-client