This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1O5lti6cu-ANRQOd4MRur6d_wPQ.roa File: 1O5lti6cu-ANRQOd4MRur6d_wPQ.roa (raw, json) Hash identifier: SUssmUml3yq7TQq4Zp2Z9o5PW7tCb96BGZ03vvW2l0M= Subject key identifier: D4:EE:65:B6:2E:9C:BB:E0:0D:45:03:9D:E0:C4:6E:AF:A7:7F:C0:F4 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9EB9F65F59B0B808160BF0257DF7 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1O5lti6cu-ANRQOd4MRur6d_wPQ.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48646 IP address blocks: 2a0e:aa01:ab02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9e:b9:f6:5f:59:b0:b8:08:16:0b:f0:25:7d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4ee65b62e9cbbe00d45039de0c46eafa77fc0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:e6:2b:57:8a:17:a4:83:c4:54:ec:66:f3: 71:32:bb:42:39:c2:46:80:a1:50:94:75:eb:e3:b2: d7:5f:1b:e6:fe:43:96:09:c4:f3:c5:23:12:3f:2b: 21:d9:b4:28:44:7d:a6:3f:93:9d:d2:a7:b1:c0:e2: a1:7c:b6:9a:0e:1f:77:2f:f7:86:f3:eb:34:ca:2b: f9:6b:26:8e:60:2c:5e:a6:cb:30:33:d4:97:10:64: 6b:ba:4e:9b:92:38:df:3d:13:a7:55:09:94:82:4c: a9:c0:87:e6:3a:d1:42:81:1a:67:52:d0:28:17:22: c7:91:36:32:fa:73:5a:da:cf:90:8d:f9:73:ee:16: 34:f3:a4:30:a5:40:93:0a:db:fe:5d:81:85:da:55: db:bc:c7:96:46:f1:a3:b0:70:d2:9e:67:38:7c:ec: a1:7c:74:2c:18:8c:2d:a3:e8:7b:c6:fe:22:45:7c: 78:32:33:11:b6:dc:8d:2a:f6:cd:ab:cc:1e:44:bc: 6f:d0:71:93:be:9a:d5:00:79:bb:c1:2b:68:dd:42: 21:49:89:4e:dd:e0:1d:58:81:41:33:a7:b3:38:9b: 8d:98:e0:80:25:ba:7c:3a:a4:08:c7:9d:95:16:52: c9:ce:eb:59:a5:1f:7a:18:5f:7b:36:5c:14:aa:e5: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EE:65:B6:2E:9C:BB:E0:0D:45:03:9D:E0:C4:6E:AF:A7:7F:C0:F4 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1O5lti6cu-ANRQOd4MRur6d_wPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:ab02::/48 Signature Algorithm: sha256WithRSAEncryption 2f:df:32:51:a4:ee:ed:43:10:04:d1:0e:18:1c:31:3c:65:e9: 96:56:47:b9:56:79:ca:c0:10:fe:5c:54:b7:be:03:0d:7f:e0: 9c:66:c5:e8:31:15:9b:9b:96:40:97:6b:f2:29:47:19:e9:47: 07:f7:7d:bc:82:a2:3c:7b:65:c6:1b:a2:aa:48:89:37:d8:ad: d9:81:80:a6:c6:26:6a:5b:0d:37:42:9a:73:86:5e:09:02:24: fd:61:0d:b3:c1:6b:98:52:08:f6:2d:18:95:76:4d:83:61:c7: f5:cc:80:b7:56:fe:94:f6:8f:04:7b:42:27:c8:a8:ea:fb:39: 2d:1e:e5:f4:c1:6f:fa:63:29:ab:10:8d:10:33:86:40:58:ab: 8e:a3:dd:fa:68:65:a7:d4:c1:ce:df:9d:71:a0:a2:7a:d2:cb: 47:b5:ff:25:90:51:1f:03:1b:18:9b:b5:4d:3d:b1:c3:6f:65: 93:49:ea:82:47:58:07:f1:5d:0f:7c:a1:0b:ca:9f:27:1d:81: d6:89:5b:8f:b6:2f:38:f2:8c:98:2c:70:c8:bc:c6:18:1c:67: c1:92:30:fc:bb:5b:9a:2f:75:33:65:40:80:47:66:31:64:a6: 38:2e:79:6d:45:21:51:d8:d5:e9:9d:fb:8b:fb:30:1d:3a:ce: bb:3f:62:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fp659l9ZsLgIFgvwJX33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGVlNjViNjJlOWNiYmUwMGQ0NTAzOWRlMGM0NmVhZmE3N2ZjMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1TmK1eKF6SDxFTsZvNxMrtCOcJG gKFQlHXr47LXXxvm/kOWCcTzxSMSPysh2bQoRH2mP5Od0qexwOKhfLaaDh93L/eG 8+s0yiv5ayaOYCxepsswM9SXEGRruk6bkjjfPROnVQmUgkypwIfmOtFCgRpnUtAo FyLHkTYy+nNa2s+Qjflz7hY086QwpUCTCtv+XYGF2lXbvMeWRvGjsHDSnmc4fOyh fHQsGIwto+h7xv4iRXx4MjMRttyNKvbNq8weRLxv0HGTvprVAHm7wSto3UIhSYlO 3eAdWIFBM6ezOJuNmOCAJbp8OqQIx52VFlLJzutZpR96GF97NlwUquUGXwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNTuZbYunLvgDUUDneDEbq+nf8D0MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvMU81bHRpNmN1LUFOUlFPZDRNUnVyNmRfd1BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qAasC MA0GCSqGSIb3DQEBCwUAA4IBAQAv3zJRpO7tQxAE0Q4YHDE8ZemWVke5VnnKwBD+ XFS3vgMNf+CcZsXoMRWbm5ZAl2vyKUcZ6UcH9328gqI8e2XGG6KqSIk32K3ZgYCm xiZqWw03Qppzhl4JAiT9YQ2zwWuYUgj2LRiVdk2DYcf1zIC3Vv6U9o8Ee0InyKjq +zktHuX0wW/6YymrEI0QM4ZAWKuOo936aGWn1MHO351xoKJ60stHtf8lkFEfAxsY m7VNPbHDb2WTSeqCR1gH8V0PfKELyp8nHYHWiVuPti848oyYLHDIvMYYHGfBkjD8 u1uaL3UzZUCAR2YxZKY4LnltRSFR2NXpnfuL+zAdOs67P2Lu -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client