This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa File: owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa (raw, json) Hash identifier: 9TpRwQpuHtfrhW+ZMSGdpj4DGSlbRkJ1Rg7NyhKguk8= Subject key identifier: A3:01:2F:A1:A2:D8:98:0B:6D:DB:1E:8B:76:B8:E4:F5:14:48:64:09 Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Certificate serial: 019B78A22C2AAF2947801A9B9023FF47C1BA Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50838 IP address blocks: 2001:67c:2c84::/48 maxlen: 48 2001:67c:2ca0::/48 maxlen: 48 2001:67c:2ca1::/48 maxlen: 48 2001:67c:2ca2::/48 maxlen: 48 2001:67c:2ca3::/48 maxlen: 48 2001:67c:2ca4::/48 maxlen: 48 2001:67c:2ca5::/48 maxlen: 48 2001:67c:2ca6::/48 maxlen: 48 2001:67c:2ca7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2c:2a:af:29:47:80:1a:9b:90:23:ff:47:c1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3012fa1a2d8980b6ddb1e8b76b8e4f514486409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:4d:91:50:3d:9e:04:f2:74:a4:fa:7e:8e: 2b:4f:89:9d:9c:b1:2a:0a:ed:7d:5c:60:99:32:ef: ec:bf:50:bf:22:56:d1:d9:3d:66:5b:05:74:e3:7e: e0:d6:1e:39:98:7b:c1:4b:5e:42:58:6e:b8:8f:6d: b1:d7:5a:9d:d8:fc:9a:63:1d:88:a2:35:f4:82:3c: 2e:26:d0:44:38:f3:d6:6f:51:88:db:b0:c1:48:6a: e0:c3:4f:d6:f8:6b:c0:e3:da:39:9f:d8:24:45:e3: 3d:b9:40:b8:a0:0a:87:ad:44:5d:d7:fc:e0:48:db: c3:d6:08:05:e6:bc:4c:f1:45:e2:24:78:49:11:aa: 2d:42:ec:d0:98:41:ba:d7:74:da:9b:2b:0e:a3:5a: 83:23:15:2e:0f:54:6e:5c:8c:1f:c4:f7:8b:4a:71: 94:14:e6:13:f8:34:9b:5d:60:0f:6d:d3:38:c1:d8: 24:a5:b0:8a:d6:c8:c2:10:6d:dd:ab:9f:ff:24:27: c9:a9:11:07:89:37:37:9b:79:ce:cf:d8:3e:db:8c: 48:db:08:b4:1c:36:9f:c9:bd:9a:57:75:e6:2d:b4: 62:02:be:27:c8:98:05:4e:02:77:27:dc:77:e9:3f: 61:63:89:e7:56:b7:a4:fd:7a:7d:19:34:f4:ed:61: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:01:2F:A1:A2:D8:98:0B:6D:DB:1E:8B:76:B8:E4:F5:14:48:64:09 X509v3 Authority Key Identifier: keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c84::/48 2001:67c:2ca0::/45 Signature Algorithm: sha256WithRSAEncryption 30:0c:e8:62:ea:2b:b0:8e:59:44:6c:3d:51:9e:be:4b:2c:49: 91:23:c0:6d:79:00:a5:73:f3:59:c2:30:16:83:29:d7:d5:88: ef:df:be:9b:d8:76:34:f6:0e:1b:93:02:f1:61:5c:85:e3:27: 08:ef:5d:50:d0:e1:28:e0:24:de:06:38:32:9f:3e:10:23:7d: 2b:a5:0e:c3:2f:be:26:da:2a:d9:82:9c:0e:96:9d:60:a3:22: e1:80:8d:05:1b:e1:02:6e:21:62:30:83:cb:2c:a6:ae:85:90: e8:12:c6:b2:a3:86:55:83:91:7b:ab:1e:2c:39:c3:ac:35:d0: b0:cf:95:6d:cd:75:e8:b1:c1:89:4d:f7:ad:c4:0f:f3:4a:66: f9:e0:f3:0f:40:51:b5:d3:72:26:af:5a:ec:99:ee:33:f9:6c: a5:76:bf:ce:b0:51:7b:14:4c:e8:39:6b:70:bf:9e:36:8a:44: dd:4f:c2:e7:91:e8:c7:59:12:85:9d:67:a6:9e:90:87:bd:e3: da:9c:35:77:46:76:79:ec:e0:7f:eb:55:d6:5b:d9:7a:67:37: c9:b2:e7:af:85:b0:be:ee:76:dd:43:f5:40:9e:6a:ea:85:11: 9e:4c:f3:e2:37:54:12:5d:38:dc:b7:86:26:2c:7d:f4:0c:32: 55:05:44:94 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oiwqrylHgBqbkCP/R8G6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNWY4M2VlMDJiMTczNzQ4YmU1ZGUzYjNiOWMyNTMxNzk5 MjY4ZTgwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzAxMmZhMWEyZDg5ODBiNmRkYjFlOGI3NmI4ZTRmNTE0NDg2NDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojhNkVA9ngTydKT6fo4rT4mdnLEq Cu19XGCZMu/sv1C/IlbR2T1mWwV0437g1h45mHvBS15CWG64j22x11qd2PyaYx2I ojX0gjwuJtBEOPPWb1GI27DBSGrgw0/W+GvA49o5n9gkReM9uUC4oAqHrURd1/zg SNvD1ggF5rxM8UXiJHhJEaotQuzQmEG613TamysOo1qDIxUuD1RuXIwfxPeLSnGU FOYT+DSbXWAPbdM4wdgkpbCK1sjCEG3dq5//JCfJqREHiTc3m3nOz9g+24xI2wi0 HDafyb2aV3XmLbRiAr4nyJgFTgJ3J9x36T9hY4nnVrek/Xp9GTT07WH1kwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKMBL6Gi2JgLbdsei3a45PUUSGQJMB8GA1UdIwQY MBaAFG1fg+4CsXN0i+XeOzucJTF5kmjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzIt YjJlN2ZlZmY0MDJmLzEvb3dFdm9hTFltQXR0Mng2TGRyams5UlJJWkFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzItYjJlN2ZlZmY0MDJm LzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfCyE AwcDIAEGfCygMA0GCSqGSIb3DQEBCwUAA4IBAQAwDOhi6iuwjllEbD1Rnr5LLEmR I8BteQClc/NZwjAWgynX1Yjv376b2HY09g4bkwLxYVyF4ycI711Q0OEo4CTeBjgy nz4QI30rpQ7DL74m2irZgpwOlp1goyLhgI0FG+ECbiFiMIPLLKauhZDoEsayo4ZV g5F7qx4sOcOsNdCwz5VtzXXoscGJTfetxA/zSmb54PMPQFG103Imr1rsme4z+Wyl dr/OsFF7FEzoOWtwv542ikTdT8LnkejHWRKFnWemnpCHvePanDV3RnZ57OB/61XW W9l6ZzfJsuevhbC+7nbdQ/VAnmrqhRGeTPPiN1QSXTjct4YmLH30DDJVBUSU -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:46 2026 by rpki-client