This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/oBXQMOceKxiCCzEWupGkaR0CA7U.roa File: oBXQMOceKxiCCzEWupGkaR0CA7U.roa (raw, json) Hash identifier: KvNrba4A78wX0pvIzSMuYPlcM/0CRAGlh77hE8ILw/8= Subject key identifier: A0:15:D0:30:E7:1E:2B:18:82:0B:31:16:BA:91:A4:69:1D:02:03:B5 Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Certificate serial: 019B7EA57E51144ECCCFBFD53B4225B0047A Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/oBXQMOceKxiCCzEWupGkaR0CA7U.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210852 IP address blocks: 2a11:df40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7e:51:14:4e:cc:cf:bf:d5:3b:42:25:b0:04:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a015d030e71e2b18820b3116ba91a4691d0203b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:74:96:2d:54:8d:9e:fa:d5:50:ca:c0:ba: c0:9d:d0:3a:d6:92:bc:0f:00:bd:3c:ad:a6:70:9a: b7:41:49:d3:59:96:a8:45:48:a1:ea:8a:96:62:cc: c3:d0:e5:7e:69:0f:fd:44:aa:e4:4a:3e:e2:d8:0a: 91:df:10:f5:1b:ef:58:c6:b7:0a:95:30:c8:6c:44: fa:a5:fb:0c:fc:9e:3e:3a:3f:16:60:eb:07:2e:19: 3b:61:9c:5d:b0:fe:53:6e:91:0c:8a:e0:b0:21:04: b6:18:87:9c:e1:d0:27:ae:77:9c:b5:76:7c:01:c4: 58:3f:ba:64:d5:30:f3:bb:23:2e:6b:71:17:00:ff: 66:35:7a:fa:81:4d:e4:de:ee:24:f3:08:61:b1:33: 1a:fa:af:be:35:6a:f1:48:31:4a:c4:bc:d4:f3:2f: c9:08:94:4a:d8:64:55:2d:8e:9d:7c:e5:18:ae:a2: a5:76:c6:87:84:e9:94:bc:a2:e9:a6:84:e7:b0:10: a5:31:2a:58:df:13:23:7d:48:c1:db:25:e5:b3:dc: 70:02:31:ad:d0:24:ff:5b:e1:7e:ae:03:a0:a7:77: 8d:76:33:80:38:a8:0c:a0:dd:7f:63:45:2f:c9:db: 55:aa:9c:c7:b9:76:ad:7b:8f:80:ad:90:61:54:ed: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:D0:30:E7:1E:2B:18:82:0B:31:16:BA:91:A4:69:1D:02:03:B5 X509v3 Authority Key Identifier: keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/oBXQMOceKxiCCzEWupGkaR0CA7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:df40::/32 Signature Algorithm: sha256WithRSAEncryption 7e:8a:6b:0b:02:c8:89:79:88:76:5e:08:f2:35:23:bd:75:e9: 1d:67:0d:6c:a1:da:de:9f:2f:67:4a:a0:69:fb:44:4b:17:b9: 57:1f:0c:85:6d:e1:9c:bd:c3:24:18:9a:66:9c:50:d9:c9:6b: 87:b2:dd:69:57:7c:b7:42:50:94:ea:90:2b:da:bd:66:ce:2a: 84:3e:e5:9c:50:8e:96:ea:e2:4c:63:43:57:5a:4a:53:0f:b5: 98:20:e6:9b:5d:fb:a3:36:61:a3:dc:3a:f0:ed:f5:6f:00:e7: 73:8d:19:89:d7:95:85:2f:7d:b7:f1:46:90:ee:04:86:c0:2d: 19:2c:84:28:58:7f:10:7a:02:79:67:c3:a6:94:1e:80:8f:24: 58:c0:ab:f1:07:d9:73:4e:db:92:a3:07:ca:16:19:fc:ee:22: 7c:6a:bd:9e:98:00:9f:d2:ba:b3:07:70:5c:85:46:48:c0:7d: b9:ad:c0:e9:6b:17:76:2e:f0:4d:46:2b:ac:b0:d3:22:64:7d: ff:97:40:2d:37:ec:8c:a2:7b:08:6d:5a:a7:15:48:e3:1d:cd: 2a:19:39:2a:0b:ef:0e:2a:30:90:6e:ab:79:e4:ef:56:92:f9: eb:1a:ba:61:56:28:69:d1:8a:c6:e9:e9:fa:a0:49:33:cb:1e: 9e:f9:cc:db -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pX5RFE7Mz7/VO0IlsAR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3 ZmY3MzYwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDE1ZDAzMGU3MWUyYjE4ODIwYjMxMTZiYTkxYTQ2OTFkMDIwM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltB0li1UjZ761VDKwLrAndA61pK8 DwC9PK2mcJq3QUnTWZaoRUih6oqWYszD0OV+aQ/9RKrkSj7i2AqR3xD1G+9YxrcK lTDIbET6pfsM/J4+Oj8WYOsHLhk7YZxdsP5TbpEMiuCwIQS2GIec4dAnrnectXZ8 AcRYP7pk1TDzuyMua3EXAP9mNXr6gU3k3u4k8whhsTMa+q++NWrxSDFKxLzU8y/J CJRK2GRVLY6dfOUYrqKldsaHhOmUvKLppoTnsBClMSpY3xMjfUjB2yXls9xwAjGt 0CT/W+F+rgOgp3eNdjOAOKgMoN1/Y0UvydtVqpzHuXate4+ArZBhVO17WwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKAV0DDnHisYggsxFrqRpGkdAgO1MB8GA1UdIwQY MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut YWYxZWYxZDdhZmI4LzEvb0JYUU1PY2VLeGlDQ3pFV3VwR2thUjBDQTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4 LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhHfQDAN BgkqhkiG9w0BAQsFAAOCAQEAfoprCwLIiXmIdl4I8jUjvXXpHWcNbKHa3p8vZ0qg aftESxe5Vx8MhW3hnL3DJBiaZpxQ2clrh7LdaVd8t0JQlOqQK9q9Zs4qhD7lnFCO luriTGNDV1pKUw+1mCDmm137ozZho9w68O31bwDnc40ZideVhS99t/FGkO4EhsAt GSyEKFh/EHoCeWfDppQegI8kWMCr8QfZc07bkqMHyhYZ/O4ifGq9npgAn9K6swdw XIVGSMB9ua3A6WsXdi7wTUYrrLDTImR9/5dALTfsjKJ7CG1apxVI4x3NKhk5Kgvv DiowkG6reeTvVpL56xq6YVYoadGKxunp+qBJM8senvnM2w== -----END CERTIFICATE-----Generated at Mon Jan 26 13:29:15 2026 by rpki-client