This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/oAm1gK3PlSJ8uZpz6kuGG8_RDis.roa File: oAm1gK3PlSJ8uZpz6kuGG8_RDis.roa (raw, json) Hash identifier: qyWcJhPl+RateZRWaHU5ZN6wmeIFgslBGIm52luDwjg= Subject key identifier: A0:09:B5:80:AD:CF:95:22:7C:B9:9A:73:EA:4B:86:1B:CF:D1:0E:2B Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b Certificate serial: 019B79EC175B0359D428010A77F2FF3A1103 Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/oAm1gK3PlSJ8uZpz6kuGG8_RDis.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202611 IP address blocks: 185.32.184.0/23 maxlen: 24 2a0b:1440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:17:5b:03:59:d4:28:01:0a:77:f2:ff:3a:11:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a009b580adcf95227cb99a73ea4b861bcfd10e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:06:95:8e:23:8b:50:3f:6e:ca:7d:4a:f0: 40:63:75:02:55:b9:d7:58:fd:e2:be:32:0f:98:93: 46:75:2d:dc:05:1a:af:bb:3c:3c:c3:5d:ee:e8:71: d2:7b:ca:13:c6:d0:5c:11:b1:fa:f6:6e:41:78:8a: 97:d4:9e:b8:f2:ed:48:73:18:99:c9:3e:b3:d1:44: 4d:2f:29:c2:a4:44:31:1d:12:2a:d2:e4:cf:fb:9d: bc:df:48:98:fd:d7:e0:fe:2b:a9:a3:73:28:f2:9b: 17:67:11:de:5c:54:04:65:bd:7b:de:70:61:aa:d5: cd:06:5c:0c:36:4e:d6:e9:e2:16:fc:85:8a:82:2f: 77:58:7a:53:8d:51:9f:4e:28:f7:85:7c:57:9c:18: ee:e5:a7:6b:3c:dd:75:9d:b1:b6:f4:a8:13:3b:5e: 67:e5:dc:bc:52:ab:82:49:63:ec:8a:83:cd:12:af: e8:26:93:f0:9c:4e:f2:56:1b:20:36:81:b3:df:1b: eb:11:6e:dd:c2:e7:ef:a5:fa:30:b5:09:18:8e:b4: 47:40:a3:4f:24:20:3d:59:41:a7:e1:db:3e:68:62: 5d:6a:4e:eb:b5:76:57:6d:71:04:b3:15:ac:0a:c3: 4b:77:63:83:0e:6b:45:26:32:78:48:74:14:37:c2: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:09:B5:80:AD:CF:95:22:7C:B9:9A:73:EA:4B:86:1B:CF:D1:0E:2B X509v3 Authority Key Identifier: keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/oAm1gK3PlSJ8uZpz6kuGG8_RDis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.184.0/23 IPv6: 2a0b:1440::/32 Signature Algorithm: sha256WithRSAEncryption 3d:c3:54:45:a2:1c:58:0f:80:5e:82:37:68:15:3e:ed:a3:e5: c4:d2:c8:b9:e5:c5:81:d0:e0:85:34:0a:f0:38:d7:ec:6f:28: b2:09:60:c0:7c:78:93:f3:46:cb:25:39:b2:34:96:37:be:57: 02:cd:e0:c9:79:9d:d9:23:39:23:cb:ed:40:91:db:4e:28:3d: 54:86:7d:46:d0:a0:e5:b8:a4:34:38:0e:29:cf:7a:5f:4e:6d: 9f:ac:07:0d:e0:7f:73:ea:eb:41:05:db:76:4e:6d:1d:da:42: 2b:5b:bf:04:fd:d0:cc:2b:b9:99:ba:66:a7:2c:01:6c:77:fb: 4c:f0:11:71:1c:b4:8b:35:99:73:82:55:05:5f:3a:00:bd:4d: 9e:53:58:79:a5:7b:4f:17:55:10:f2:a3:ef:81:2e:32:b9:11: 17:87:5e:dd:21:b5:94:e7:61:33:94:a7:9b:4f:4a:48:7f:50: 6f:e7:be:57:43:65:89:5c:33:db:c0:c5:9f:27:f3:c5:31:64: cc:1f:85:db:b0:b9:b1:6a:eb:35:3c:8c:bf:65:70:f5:03:bf: 6e:49:ec:09:7d:d7:6f:8b:b4:1b:1e:02:53:0a:7f:76:cb:0a: fe:3a:23:56:b7:57:e7:0e:70:85:e4:a5:02:d7:3d:7b:77:85: d3:36:b5:d3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57BdbA1nUKAEKd/L/OhEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz ODJhNmIwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDA5YjU4MGFkY2Y5NTIyN2NiOTlhNzNlYTRiODYxYmNmZDEwZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobwGlY4ji1A/bsp9SvBAY3UCVbnX WP3ivjIPmJNGdS3cBRqvuzw8w13u6HHSe8oTxtBcEbH69m5BeIqX1J648u1IcxiZ yT6z0URNLynCpEQxHRIq0uTP+52830iY/dfg/iupo3Mo8psXZxHeXFQEZb173nBh qtXNBlwMNk7W6eIW/IWKgi93WHpTjVGfTij3hXxXnBju5adrPN11nbG29KgTO15n 5dy8UquCSWPsioPNEq/oJpPwnE7yVhsgNoGz3xvrEW7dwufvpfowtQkYjrRHQKNP JCA9WUGn4ds+aGJdak7rtXZXbXEEsxWsCsNLd2ODDmtFJjJ4SHQUN8K+1QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKAJtYCtz5UifLmac+pLhhvP0Q4rMB8GA1UdIwQY MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt MTM0MDFkMWYyMmQyLzEvb0FtMWdLM1BsU0o4dVpwejZrdUdHOF9SRGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuSC4MA0E AgACMAcDBQAqCxRAMA0GCSqGSIb3DQEBCwUAA4IBAQA9w1RFohxYD4BegjdoFT7t o+XE0si55cWB0OCFNArwONfsbyiyCWDAfHiT80bLJTmyNJY3vlcCzeDJeZ3ZIzkj y+1AkdtOKD1Uhn1G0KDluKQ0OA4pz3pfTm2frAcN4H9z6utBBdt2Tm0d2kIrW78E /dDMK7mZumanLAFsd/tM8BFxHLSLNZlzglUFXzoAvU2eU1h5pXtPF1UQ8qPvgS4y uREXh17dIbWU52EzlKebT0pIf1Bv575XQ2WJXDPbwMWfJ/PFMWTMH4XbsLmxaus1 PIy/ZXD1A79uSewJfddvi7QbHgJTCn92ywr+OiNWt1fnDnCF5KUC1z17d4XTNrXT -----END CERTIFICATE-----Generated at Tue Feb 10 04:38:08 2026 by rpki-client