This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RooOjae6yh6GsXNac1iR1FyvCQc.roa File: RooOjae6yh6GsXNac1iR1FyvCQc.roa (raw, json) Hash identifier: kd0RD5JQQTJAVaFekZvUKjakEBOzgmmaNe/KDtM1VpA= Subject key identifier: 46:8A:0E:8D:A7:BA:CA:1E:86:B1:73:5A:73:58:91:D4:5C:AF:09:07 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B791092EAB52A661CE0881A15FC65813E Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RooOjae6yh6GsXNac1iR1FyvCQc.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199423 IP address blocks: 2a12:bec0:1b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:92:ea:b5:2a:66:1c:e0:88:1a:15:fc:65:81:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=468a0e8da7baca1e86b1735a735891d45caf0907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:cc:89:93:4e:b1:98:ee:c7:06:d3:04:cd: 79:58:df:d9:ab:c5:63:3c:17:3a:17:cf:fe:5d:9c: ff:ec:c6:c8:61:e5:93:ae:31:61:08:e5:28:eb:1c: 25:b7:bb:86:48:06:e7:92:08:d3:98:46:ba:1a:d2: e7:df:8d:f6:b7:28:fd:29:34:52:85:ad:de:52:eb: 24:ba:80:61:87:16:44:75:25:e8:d5:aa:8a:03:4b: 1d:a4:77:81:16:3d:b8:95:29:0c:c6:a9:2b:2b:3b: a8:ba:d1:47:5e:90:ef:fc:1d:ac:27:c3:81:de:b5: 73:b7:34:fa:32:4e:9c:76:08:7e:2b:18:53:b1:08: 71:06:41:7f:21:83:d5:8d:46:13:f7:10:b0:4d:4e: 63:ff:57:58:2d:63:57:7f:25:40:b5:fe:15:3b:f8: 3e:43:1e:50:2d:a8:cd:57:08:58:fe:45:a1:d8:7b: 96:d1:e2:b4:43:61:97:ec:a9:1a:40:b1:9b:68:44: 43:ed:5d:50:5e:e7:a3:a2:17:f9:c1:ff:c9:ba:37: f7:9a:be:02:e7:b1:54:21:c4:e7:12:09:f9:15:69: 00:a5:63:26:58:7e:9b:10:3c:0a:68:c6:c2:c3:2b: b4:33:02:f0:ff:44:7c:ff:d3:5c:d7:1f:0d:51:23: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8A:0E:8D:A7:BA:CA:1E:86:B1:73:5A:73:58:91:D4:5C:AF:09:07 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RooOjae6yh6GsXNac1iR1FyvCQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:1b0::/44 Signature Algorithm: sha256WithRSAEncryption 43:cf:18:a7:4b:5b:22:14:f4:d6:a5:f0:7b:30:bb:c0:8c:19: 76:73:e8:39:bd:aa:a4:3e:c6:d5:cb:22:c3:18:cb:d7:e6:8c: 3e:14:ef:28:a9:ce:7b:0e:15:08:83:00:27:4a:f3:bd:e2:a7: d3:20:89:5f:78:d5:d4:e5:f5:b9:e4:5d:b9:99:79:c3:2c:99: 1f:1e:9c:59:d6:be:5c:41:54:f0:bd:95:8f:73:a8:6c:99:5e: c5:f6:2f:41:e7:bf:61:c5:c3:f6:99:0d:83:f4:6e:36:81:49: 42:17:4a:23:29:b9:36:6a:c8:79:27:f5:2a:00:c8:3e:be:23: 8a:02:d7:21:49:6b:f3:61:6e:3a:5a:41:27:51:88:13:0f:f3: ff:fd:bc:07:90:f8:ce:c2:b9:1d:9e:28:0f:0a:ff:36:9a:a0: 89:07:3b:05:b7:fc:c4:77:6d:f3:52:55:68:ec:83:b2:db:1f: d3:a9:84:58:27:61:68:5b:08:8c:80:4d:5e:9d:ed:38:ab:56: 50:e8:50:2a:3b:6f:c9:35:19:07:bd:27:ec:74:0c:70:33:29: b8:2f:3d:4c:67:ae:c3:6c:9a:cf:83:f0:4b:f0:19:a7:34:ff: 64:00:d2:fe:55:44:ee:59:43:93:f2:46:51:75:6a:e4:ac:ce: 2a:37:6c:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJLqtSpmHOCIGhX8ZYE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjhhMGU4ZGE3YmFjYTFlODZiMTczNWE3MzU4OTFkNDVjYWYwOTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp7MiZNOsZjuxwbTBM15WN/Zq8Vj PBc6F8/+XZz/7MbIYeWTrjFhCOUo6xwlt7uGSAbnkgjTmEa6GtLn3432tyj9KTRS ha3eUuskuoBhhxZEdSXo1aqKA0sdpHeBFj24lSkMxqkrKzuoutFHXpDv/B2sJ8OB 3rVztzT6Mk6cdgh+KxhTsQhxBkF/IYPVjUYT9xCwTU5j/1dYLWNXfyVAtf4VO/g+ Qx5QLajNVwhY/kWh2HuW0eK0Q2GX7KkaQLGbaERD7V1QXuejohf5wf/Jujf3mr4C 57FUIcTnEgn5FWkApWMmWH6bEDwKaMbCwyu0MwLw/0R8/9Nc1x8NUSM5DQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEaKDo2nusoehrFzWnNYkdRcrwkHMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvUm9vT2phZTZ5aDZHc1hOYWMxaVIxRnl2Q1FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAGw MA0GCSqGSIb3DQEBCwUAA4IBAQBDzxinS1siFPTWpfB7MLvAjBl2c+g5vaqkPsbV yyLDGMvX5ow+FO8oqc57DhUIgwAnSvO94qfTIIlfeNXU5fW55F25mXnDLJkfHpxZ 1r5cQVTwvZWPc6hsmV7F9i9B579hxcP2mQ2D9G42gUlCF0ojKbk2ash5J/UqAMg+ viOKAtchSWvzYW46WkEnUYgTD/P//bwHkPjOwrkdnigPCv82mqCJBzsFt/zEd23z UlVo7IOy2x/TqYRYJ2FoWwiMgE1ene04q1ZQ6FAqO2/JNRkHvSfsdAxwMym4Lz1M Z67DbJrPg/BL8BmnNP9kANL+VUTuWUOT8kZRdWrkrM4qN2xn -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:19 2026 by rpki-client