This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/oqYfh27c0a3P7IymPKh064OAmpI.roa File: oqYfh27c0a3P7IymPKh064OAmpI.roa (raw, json) Hash identifier: UiP0Xtlv8Zo5+Xl4iVJi1nirSH+i8Crp8bpdlJo3UMs= Subject key identifier: A2:A6:1F:87:6E:DC:D1:AD:CF:EC:8C:A6:3C:A8:74:EB:83:80:9A:92 Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10 Certificate serial: 019B7CEE0C7689FEBF2D0B2435439C98902F Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/oqYfh27c0a3P7IymPKh064OAmpI.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44534 IP address blocks: 2a0e:fd87::/48 maxlen: 48 2a0e:fd87:1::/48 maxlen: 48 2a0e:fd87:3::/48 maxlen: 48 2a0e:fd87:4::/48 maxlen: 48 2a0e:fd87:5::/48 maxlen: 48 2a0e:fd87:6::/48 maxlen: 48 2a0e:fd87:7::/48 maxlen: 48 2a0e:fd87:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0c:76:89:fe:bf:2d:0b:24:35:43:9c:98:90:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2a61f876edcd1adcfec8ca63ca874eb83809a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:21:b0:ac:e0:ec:b5:0c:75:9c:05:a7:18: bb:e3:e7:68:d4:49:7f:5c:95:e2:ab:83:1f:6f:67: 8a:5f:70:83:83:c7:06:db:74:f1:93:c6:8f:a3:4e: 2a:a4:da:bb:5d:8d:66:5f:52:5c:10:ef:75:c5:41: 80:6e:e6:a7:8d:fc:f1:22:88:da:43:4c:9e:f6:5a: 04:4b:91:42:14:a2:91:5d:0d:c4:b0:85:ea:82:bd: a4:02:c9:a4:48:70:c8:e5:0d:ca:8d:53:c3:ed:a7: db:92:a2:d2:a7:35:89:85:55:a5:50:20:6a:c0:00: 4a:2c:68:12:b4:48:2b:19:c1:df:bc:6e:5a:26:3a: bb:0e:71:f2:a2:94:cc:4a:bc:7e:2e:a4:32:df:86: 25:d8:8c:25:6f:5c:f3:58:0b:5f:b7:f2:2d:66:f4: 1f:7e:aa:a1:87:9e:ee:3a:bf:4d:40:3a:98:21:8b: ea:b9:a6:13:89:57:03:b2:ab:b6:d5:4f:23:22:98: 47:09:7e:83:f7:a0:82:52:5c:c0:97:e3:26:82:9f: 88:ec:16:24:2c:3c:7a:e7:31:8e:0d:0a:d9:e1:80: 9a:6e:9c:c5:68:8b:09:ce:e1:11:95:f0:bb:e7:9d: 46:22:15:e6:eb:62:78:ab:ef:61:94:09:fb:f8:f0: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A6:1F:87:6E:DC:D1:AD:CF:EC:8C:A6:3C:A8:74:EB:83:80:9A:92 X509v3 Authority Key Identifier: keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/oqYfh27c0a3P7IymPKh064OAmpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:fd87::/47 2a0e:fd87:3::-2a0e:fd87:7:ffff:ffff:ffff:ffff:ffff 2a0e:fd87:9::/48 Signature Algorithm: sha256WithRSAEncryption 6f:bd:ab:d0:61:9d:2f:72:22:a0:2f:61:0d:3a:f5:e7:e0:2a: 42:db:97:e5:bc:2b:e1:45:b9:0f:2b:52:87:c3:52:81:62:f3: e8:4b:51:ab:71:91:c3:8c:f2:9a:ba:cc:e2:ca:bb:2a:03:2f: f3:4c:b6:23:d7:bc:bb:ca:42:f2:69:f0:7e:a4:2b:fe:18:89: e3:c4:b5:5e:f4:c9:cc:55:4c:a9:18:4e:93:bd:6a:e0:83:86: 5a:4e:7c:29:07:d0:9a:e0:07:f6:f8:7d:31:b5:43:78:90:9e: 48:37:f3:b0:1c:7c:1f:5b:c9:18:ec:2e:d8:06:77:98:dc:57: d7:9d:7b:67:2a:46:09:2e:ad:f3:f2:b7:c6:9b:33:af:3a:63: 94:66:69:f5:62:00:63:77:c8:c9:54:b8:e5:33:84:b6:42:1d: f7:7a:5c:85:9a:81:0e:7c:a0:87:a2:e2:bf:d8:2f:3a:9d:4d: d6:99:ac:6d:54:0f:78:b3:25:39:58:a1:9d:8f:3b:ce:95:f8: 81:93:5b:0b:07:a0:89:52:a8:d3:9a:ff:37:63:c9:92:f1:aa: b9:22:78:23:54:a4:08:4c:86:43:ec:c5:71:13:b0:20:dc:3a: c9:0d:35:7a:90:d5:37:40:6f:37:81:42:ff:d9:f3:bf:45:66: bc:d4:21:5a -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87gx2if6/LQskNUOcmJAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2 NGRlMTAwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmE2MWY4NzZlZGNkMWFkY2ZlYzhjYTYzY2E4NzRlYjgzODA5YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzghsKzg7LUMdZwFpxi74+do1El/ XJXiq4Mfb2eKX3CDg8cG23Txk8aPo04qpNq7XY1mX1JcEO91xUGAbuanjfzxIoja Q0ye9loES5FCFKKRXQ3EsIXqgr2kAsmkSHDI5Q3KjVPD7afbkqLSpzWJhVWlUCBq wABKLGgStEgrGcHfvG5aJjq7DnHyopTMSrx+LqQy34Yl2Iwlb1zzWAtft/ItZvQf fqqhh57uOr9NQDqYIYvquaYTiVcDsqu21U8jIphHCX6D96CCUlzAl+Mmgp+I7BYk LDx65zGODQrZ4YCabpzFaIsJzuERlfC7551GIhXm62J4q+9hlAn7+PA5oQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKKmH4du3NGtz+yMpjyodOuDgJqSMB8GA1UdIwQY MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt MjY3MDFiMTYyZmMzLzEvb3FZZmgyN2MwYTNQN0l5bVBLaDA2NE9BbXBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcBKg79hwAA MBIDBwAqDv2HAAMDBwMqDv2HAAADBwAqDv2HAAkwDQYJKoZIhvcNAQELBQADggEB AG+9q9BhnS9yIqAvYQ069efgKkLbl+W8K+FFuQ8rUofDUoFi8+hLUatxkcOM8pq6 zOLKuyoDL/NMtiPXvLvKQvJp8H6kK/4YiePEtV70ycxVTKkYTpO9auCDhlpOfCkH 0JrgB/b4fTG1Q3iQnkg387AcfB9byRjsLtgGd5jcV9ede2cqRgkurfPyt8abM686 Y5RmafViAGN3yMlUuOUzhLZCHfd6XIWagQ58oIei4r/YLzqdTdaZrG1UD3izJTlY oZ2PO86V+IGTWwsHoIlSqNOa/zdjyZLxqrkieCNUpAhMhkPsxXETsCDcOskNNXqQ 1TdAbzeBQv/Z879FZrzUIVo= -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:45 2026 by rpki-client