This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/oNnDZwusFuv5UtMyxcJz3DtbE00.roa File: oNnDZwusFuv5UtMyxcJz3DtbE00.roa (raw, json) Hash identifier: gdqrDRQ7FgRPSgYvq2DfctPsFTOhIJlWOftupYpojX4= Subject key identifier: A0:D9:C3:67:0B:AC:16:EB:F9:52:D3:32:C5:C2:73:DC:3B:5B:13:4D Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b Certificate serial: 019B76EAFE3DAA593AE74BC9B57FCF67EE15 Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/oNnDZwusFuv5UtMyxcJz3DtbE00.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47292 IP address blocks: 2a0b:7e00::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fe:3d:aa:59:3a:e7:4b:c9:b5:7f:cf:67:ee:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0d9c3670bac16ebf952d332c5c273dc3b5b134d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:cc:f9:1b:1f:95:5f:4b:19:30:aa:3d:14: 49:31:6b:3a:53:09:2d:5e:d6:6b:3e:48:18:02:17: cb:d5:3c:88:42:62:ed:b0:9f:c6:3d:5a:6f:32:58: 4c:b7:64:4c:08:3d:35:0f:a8:fe:77:37:8d:62:0b: fe:51:5a:2c:f4:26:00:ae:f3:71:d8:0a:c2:10:d1: 53:76:c6:de:9d:e1:7e:ac:a4:f9:ea:fb:27:71:e7: ab:76:7f:5e:ce:c6:be:35:a6:3e:4b:7c:b2:f1:72: b1:ff:a1:bb:d4:a6:cf:9a:8a:cd:25:7b:5b:db:c6: f9:b4:bd:a1:0f:b0:e4:34:d2:1a:3f:0e:8e:0d:40: 16:a4:28:66:bd:2b:6f:74:9d:7e:9c:54:4e:a3:61: bc:b4:f0:a6:9b:d3:f9:fe:08:1f:19:01:4a:df:de: ee:10:bd:ce:88:e8:c5:d4:59:00:67:1a:66:d7:23: 11:b3:de:1e:e7:9d:77:f2:ed:20:08:0f:6d:99:7d: 57:c7:4a:ab:ab:fe:bd:39:6c:86:59:a2:75:92:1a: 61:41:cc:b0:e5:9d:e6:b4:6f:2a:12:1d:d5:47:38: ba:61:93:2d:45:4c:91:9d:07:45:fd:4f:93:aa:e6: 6d:99:4f:50:ee:8f:c8:dd:cb:15:11:3a:d6:6e:63: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D9:C3:67:0B:AC:16:EB:F9:52:D3:32:C5:C2:73:DC:3B:5B:13:4D X509v3 Authority Key Identifier: keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/oNnDZwusFuv5UtMyxcJz3DtbE00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:7e00::/36 Signature Algorithm: sha256WithRSAEncryption 3e:30:76:d7:71:56:5b:15:61:cd:37:ac:ae:53:7a:4d:b9:15: 1e:7b:b8:d7:9e:a9:48:c5:63:76:50:66:e7:0b:6b:46:35:35: 81:7f:7b:98:c9:c7:ff:47:7d:84:f0:79:86:aa:7d:10:26:41: 2a:c3:a0:d5:3e:74:2a:68:3f:ba:3d:3a:fe:33:c9:f2:79:cb: 7f:5e:c0:25:3c:6e:d6:7c:9b:36:16:de:8f:5e:4f:df:ed:c3: ab:40:14:fe:09:a6:10:e5:63:44:5a:cf:97:c4:ea:fe:af:2d: a0:a9:f5:13:65:5c:d8:be:15:05:71:30:ee:23:6a:4e:6a:cf: c4:a3:60:40:6f:66:73:d6:18:b4:6b:1c:6d:87:5a:da:53:6e: 09:18:5d:96:bf:b2:d6:65:e9:3b:a4:7a:91:11:2d:22:af:f1: ba:13:4d:e1:a6:97:33:f6:9b:c3:85:7b:b4:87:9d:1a:76:c7: 55:c4:ab:e4:f9:5c:ec:05:4f:a6:77:f5:68:d3:40:6f:45:69: 16:6a:34:a9:9d:83:5d:59:61:ed:1b:67:58:1a:44:f2:8f:7b: 7b:9a:16:c9:93:fe:db:f3:ae:44:a0:96:85:8b:4a:6b:df:e0: ae:66:39:96:28:4e:dd:c8:f2:21:7b:9a:1e:86:b8:c3:34:1b: 98:7d:7d:f4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt26v49qlk650vJtX/PZ+4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWM3ODBlYjIwNDJjOGM1NzAwMWI2NWVmMTU2ZTZmNTkz MTIzOWIwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGQ5YzM2NzBiYWMxNmViZjk1MmQzMzJjNWMyNzNkYzNiNWIxMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNfM+RsflV9LGTCqPRRJMWs6Uwkt XtZrPkgYAhfL1TyIQmLtsJ/GPVpvMlhMt2RMCD01D6j+dzeNYgv+UVos9CYArvNx 2ArCENFTdsbeneF+rKT56vsnceerdn9ezsa+NaY+S3yy8XKx/6G71KbPmorNJXtb 28b5tL2hD7DkNNIaPw6ODUAWpChmvStvdJ1+nFROo2G8tPCmm9P5/ggfGQFK397u EL3OiOjF1FkAZxpm1yMRs94e55138u0gCA9tmX1Xx0qrq/69OWyGWaJ1khphQcyw 5Z3mtG8qEh3VRzi6YZMtRUyRnQdF/U+TquZtmU9Q7o/I3csVETrWbmN7kwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKDZw2cLrBbr+VLTMsXCc9w7WxNNMB8GA1UdIwQY MBaAFLeseA6yBCyMVwAbZe8Vbm9ZMSObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZ4NERySUVMSXhYQUJ0bDd4VnViMWt4STVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xOTBkNDctNjhkYS00NGQyLTk1MGUt Mzc2NjRkNzViMjU0LzEvb05uRFp3dXNGdXY1VXRNeXhjSnozRHRiRTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xOTBkNDctNjhkYS00NGQyLTk1MGUtMzc2NjRkNzViMjU0 LzEvdDZ4NERySUVMSXhYQUJ0bDd4VnViMWt4STVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgt+AAAw DQYJKoZIhvcNAQELBQADggEBAD4wdtdxVlsVYc03rK5Tek25FR57uNeeqUjFY3ZQ ZucLa0Y1NYF/e5jJx/9HfYTweYaqfRAmQSrDoNU+dCpoP7o9Ov4zyfJ5y39ewCU8 btZ8mzYW3o9eT9/tw6tAFP4JphDlY0Raz5fE6v6vLaCp9RNlXNi+FQVxMO4jak5q z8SjYEBvZnPWGLRrHG2HWtpTbgkYXZa/stZl6TukepERLSKv8boTTeGmlzP2m8OF e7SHnRp2x1XEq+T5XOwFT6Z39WjTQG9FaRZqNKmdg11ZYe0bZ1gaRPKPe3uaFsmT /tvzrkSgloWLSmvf4K5mOZYoTt3I8iF7mh6GuMM0G5h9ffQ= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:20 2026 by rpki-client