This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/vOLYbuZI2HiAQAMspaYJozGTYd4.roa File: vOLYbuZI2HiAQAMspaYJozGTYd4.roa (raw, json) Hash identifier: 2GBF+iOAjgmkpYWuKiOs1PlAzGgzPUynmOp5R9AhrOU= Subject key identifier: BC:E2:D8:6E:E6:48:D8:78:80:40:03:2C:A5:A6:09:A3:31:93:61:DE Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d Certificate serial: 019B7BA50A26354B75C22A06AD475D669D61 Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/vOLYbuZI2HiAQAMspaYJozGTYd4.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213268 IP address blocks: 2a09:3c00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0a:26:35:4b:75:c2:2a:06:ad:47:5d:66:9d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bce2d86ee648d8788040032ca5a609a3319361de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:e2:3a:43:72:5c:fb:d5:e6:da:99:55:a9: 88:af:3a:0b:52:18:0f:1e:db:c9:ef:73:dc:cc:58: 15:95:8f:3e:67:02:f3:66:84:28:04:73:6c:30:ba: 81:a1:40:33:d7:30:41:16:91:1f:ba:ee:4e:65:ac: 3c:a7:4a:78:88:d8:df:c4:75:2e:b4:a1:67:1c:16: 7d:fc:b6:88:31:e0:e5:10:61:43:d0:53:e5:5e:75: 12:7c:4d:c0:94:35:84:ef:2b:de:57:3d:2f:ab:77: 71:36:c9:de:06:c0:f0:1e:45:00:4f:0d:be:93:a9: 4d:04:72:1c:f4:e6:31:6a:bb:58:73:3c:19:d6:f6: e5:f7:6b:ed:a0:e7:c1:b7:8f:d8:60:ba:82:cc:6d: ca:92:97:16:36:5e:f4:9e:91:55:dd:34:f7:01:3e: 6d:65:6e:58:5f:61:1e:65:61:1c:d9:ac:7b:e5:f3: f5:0e:c2:7d:98:03:97:d0:7e:b9:41:e7:d8:fb:64: 92:63:35:d4:b7:b4:c5:41:47:de:af:9e:aa:1f:17: 16:25:55:a1:3f:4a:4f:84:dd:f2:9c:b7:5c:2e:e1: ce:00:b2:d9:bd:9b:53:82:f6:57:d8:bc:fb:f0:dc: bc:6f:17:1c:3f:62:39:1b:74:ad:ac:f3:ba:e8:ed: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E2:D8:6E:E6:48:D8:78:80:40:03:2C:A5:A6:09:A3:31:93:61:DE X509v3 Authority Key Identifier: keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/vOLYbuZI2HiAQAMspaYJozGTYd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:3c00:1::/48 Signature Algorithm: sha256WithRSAEncryption 0d:68:69:ae:3c:ae:fb:38:d8:58:22:85:ae:00:c9:68:dc:42: f7:ae:68:48:f4:69:65:27:6f:17:66:75:9f:cf:5a:35:60:c4: 42:f8:d3:6d:b8:76:b9:ab:27:b2:4f:14:7d:f8:1e:a2:ba:7d: 4e:cb:d7:25:cd:30:5d:92:eb:60:6c:f9:2e:17:3e:69:bd:c0: 97:44:97:e9:ab:dd:1c:9d:eb:33:b2:68:f5:40:99:db:4f:0a: 62:b4:a7:57:4f:b9:41:9a:51:30:ef:c5:95:3f:2a:56:ed:1d: c1:df:12:fa:91:a9:f0:59:56:da:ac:0b:81:9a:1b:5c:13:9b: 58:43:bf:f0:76:3b:fc:cd:9e:d2:9c:44:05:a7:5f:fe:c4:da: bc:dc:f6:49:d3:d7:f6:54:33:f7:ae:b4:5d:f2:8a:76:9c:ec: 8d:ee:ef:5a:64:5b:03:f4:9a:38:3d:74:18:45:0b:1d:1c:47: 46:0d:f6:22:45:05:24:55:a8:34:15:0c:59:4c:7e:0c:dc:65: ee:cd:e7:b0:f1:c5:fd:e5:50:b3:fb:5c:95:1a:2c:38:c9:9a: e8:c6:60:ff:24:55:8a:71:21:77:48:c8:23:8c:3a:d2:96:60: 25:11:df:bb:09:fa:d2:c7:08:03:4d:e7:30:b5:04:3c:0e:36: fa:ab:7e:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pQomNUt1wioGrUddZp1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2JlZmUyMGUxODg2NmI4YTQ5MGM5NWVlNDU5OTI2NDNi ZWQ2OWQwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2UyZDg2ZWU2NDhkODc4ODA0MDAzMmNhNWE2MDlhMzMxOTM2MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqziOkNyXPvV5tqZVamIrzoLUhgP HtvJ73PczFgVlY8+ZwLzZoQoBHNsMLqBoUAz1zBBFpEfuu5OZaw8p0p4iNjfxHUu tKFnHBZ9/LaIMeDlEGFD0FPlXnUSfE3AlDWE7yveVz0vq3dxNsneBsDwHkUATw2+ k6lNBHIc9OYxartYczwZ1vbl92vtoOfBt4/YYLqCzG3KkpcWNl70npFV3TT3AT5t ZW5YX2EeZWEc2ax75fP1DsJ9mAOX0H65QefY+2SSYzXUt7TFQUfer56qHxcWJVWh P0pPhN3ynLdcLuHOALLZvZtTgvZX2Lz78Ny8bxccP2I5G3StrPO66O2JnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLzi2G7mSNh4gEADLKWmCaMxk2HeMB8GA1UdIwQY MBaAFA7L7+IOGIZrikkMle5FmSZDvtadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMt OTA1ZjI0YzI1OGVlLzEvdk9MWWJ1WkkySGlBUUFNc3BhWUpvekdUWWQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMtOTA1ZjI0YzI1OGVl LzEvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgk8AAAB MA0GCSqGSIb3DQEBCwUAA4IBAQANaGmuPK77ONhYIoWuAMlo3EL3rmhI9GllJ28X ZnWfz1o1YMRC+NNtuHa5qyeyTxR9+B6iun1Oy9clzTBdkutgbPkuFz5pvcCXRJfp q90cneszsmj1QJnbTwpitKdXT7lBmlEw78WVPypW7R3B3xL6kanwWVbarAuBmhtc E5tYQ7/wdjv8zZ7SnEQFp1/+xNq83PZJ09f2VDP3rrRd8op2nOyN7u9aZFsD9Jo4 PXQYRQsdHEdGDfYiRQUkVag0FQxZTH4M3GXuzeew8cX95VCz+1yVGiw4yZroxmD/ JFWKcSF3SMgjjDrSlmAlEd+7CfrSxwgDTecwtQQ8Djb6q35o -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:35 2026 by rpki-client