This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/OA0QKGjsidmjWZ0_-WuXkyGqjKE.roa File: OA0QKGjsidmjWZ0_-WuXkyGqjKE.roa (raw, json) Hash identifier: 3kGi/8bV18G+a7NdJiyQixBV5LowQSNl7CY3VUjeaTw= Subject key identifier: 38:0D:10:28:68:EC:89:D9:A3:59:9D:3F:F9:6B:97:93:21:AA:8C:A1 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9D29167F996479D4C857B914D152 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/OA0QKGjsidmjWZ0_-WuXkyGqjKE.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38255 IP address blocks: 2a0e:aa06:49f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9d:29:16:7f:99:64:79:d4:c8:57:b9:14:d1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=380d102868ec89d9a3599d3ff96b979321aa8ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:74:7c:a4:6c:df:84:58:01:ba:cb:78:80: 1f:54:c4:43:31:86:73:dc:71:7d:05:10:29:c6:dd: 89:76:b2:f1:73:03:1c:2a:06:72:f6:40:10:db:f8: f6:c5:18:3b:50:96:1b:9c:43:49:eb:79:4c:ed:f1: a4:f2:f3:08:0d:9c:a7:85:b8:3d:30:08:d3:1b:11: 06:b0:32:52:a4:8c:f4:9a:d2:ed:49:d6:e2:a2:68: 7e:a6:f1:15:4f:a5:74:64:eb:ab:6f:85:f5:51:13: 6c:32:1a:95:5b:cf:ae:55:ed:ef:6f:13:d4:bc:71: dd:11:6e:c2:35:1f:00:49:f4:56:c2:de:51:9b:73: c0:c3:43:58:e2:fb:08:bc:92:46:bc:4a:22:a3:fb: 56:41:3d:17:1d:22:93:a6:a2:8c:fb:ac:29:f6:8d: 43:d4:d0:bd:4b:5f:b1:2d:fd:0d:4c:2e:82:18:c7: 01:9e:84:99:93:c1:dc:02:c0:fd:a1:34:62:f0:14: c1:73:85:36:bc:d1:16:06:82:00:d6:d7:68:38:98: e6:90:e7:f7:b0:13:bf:e9:10:7f:86:b8:c1:bc:09: ca:c8:b6:d5:e0:78:75:3c:9d:75:9d:ad:4f:88:46: a8:5b:de:37:9d:9f:9e:fb:f7:eb:bf:a7:53:b6:f3: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:10:28:68:EC:89:D9:A3:59:9D:3F:F9:6B:97:93:21:AA:8C:A1 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/OA0QKGjsidmjWZ0_-WuXkyGqjKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:49f::/48 Signature Algorithm: sha256WithRSAEncryption 75:d8:73:56:a9:0c:fa:41:5a:31:15:e1:8f:e8:3a:16:02:d7: 1e:da:36:da:8e:b5:f2:be:a4:82:2f:1f:af:42:76:c1:4d:0e: 08:28:cb:d3:c3:a2:0d:ab:ee:02:5a:f9:f1:3c:ea:ca:2d:ed: d6:6a:a1:fc:c6:de:ca:62:f7:ee:9c:f1:58:b4:22:83:4c:0d: 84:78:30:dc:f4:63:71:cd:94:35:e5:62:50:13:6e:40:39:9c: 94:23:c0:2a:fe:05:93:73:15:5d:7b:3c:4e:58:51:03:dc:73: 12:32:f1:ee:2e:61:28:a8:09:86:de:f0:28:ee:cd:f2:bb:71: 02:d8:04:d2:59:e3:39:d0:e0:f1:51:2d:cb:8f:94:19:55:f4: 14:bb:36:e8:80:44:3f:f3:6b:40:ff:25:ec:60:59:c3:1b:30: 2c:63:96:cc:f1:4c:76:7c:3b:4c:e6:b9:7b:f2:72:2f:b3:e1: 0c:ba:09:9f:7e:fd:0d:1d:b3:b7:75:35:6a:16:df:f1:80:a4: 01:96:e7:46:18:a5:e3:9c:bc:60:90:57:eb:a0:6f:36:cc:91: 26:13:ce:0b:74:cf:a7:c6:f5:ce:a1:91:66:64:87:9b:0a:37: b0:cf:6c:d8:1b:79:41:48:26:4d:dd:bb:80:91:66:f7:1c:69: fa:43:e6:2a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fp0pFn+ZZHnUyFe5FNFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODBkMTAyODY4ZWM4OWQ5YTM1OTlkM2ZmOTZiOTc5MzIxYWE4Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslN0fKRs34RYAbrLeIAfVMRDMYZz 3HF9BRApxt2JdrLxcwMcKgZy9kAQ2/j2xRg7UJYbnENJ63lM7fGk8vMIDZynhbg9 MAjTGxEGsDJSpIz0mtLtSdbiomh+pvEVT6V0ZOurb4X1URNsMhqVW8+uVe3vbxPU vHHdEW7CNR8ASfRWwt5Rm3PAw0NY4vsIvJJGvEoio/tWQT0XHSKTpqKM+6wp9o1D 1NC9S1+xLf0NTC6CGMcBnoSZk8HcAsD9oTRi8BTBc4U2vNEWBoIA1tdoOJjmkOf3 sBO/6RB/hrjBvAnKyLbV4Hh1PJ11na1PiEaoW943nZ+e+/frv6dTtvOobQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDgNECho7InZo1mdP/lrl5MhqoyhMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvT0EwUUtHanNpZG1qV1owXy1XdVhreUdxaktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qBgSf MA0GCSqGSIb3DQEBCwUAA4IBAQB12HNWqQz6QVoxFeGP6DoWAtce2jbajrXyvqSC Lx+vQnbBTQ4IKMvTw6INq+4CWvnxPOrKLe3WaqH8xt7KYvfunPFYtCKDTA2EeDDc 9GNxzZQ15WJQE25AOZyUI8Aq/gWTcxVdezxOWFED3HMSMvHuLmEoqAmG3vAo7s3y u3EC2ATSWeM50ODxUS3Lj5QZVfQUuzbogEQ/82tA/yXsYFnDGzAsY5bM8Ux2fDtM 5rl78nIvs+EMugmffv0NHbO3dTVqFt/xgKQBludGGKXjnLxgkFfroG82zJEmE84L dM+nxvXOoZFmZIebCjewz2zYG3lBSCZN3buAkWb3HGn6Q+Yq -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:11 2026 by rpki-client