This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OmZVD-LDnEcjbbA2eV8w2PHWUd0.roa File: OmZVD-LDnEcjbbA2eV8w2PHWUd0.roa (raw, json) Hash identifier: Y95jCqTFIPRDqmjuL6QRQBJKcNSaTWlinLaSofbYWKM= Subject key identifier: 3A:66:55:0F:E2:C3:9C:47:23:6D:B0:36:79:5F:30:D8:F1:D6:51:DD Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B1E491B690016F187D0A446CA51B Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OmZVD-LDnEcjbbA2eV8w2PHWUd0.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41108 IP address blocks: 2a0f:ea40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b1:e4:91:b6:90:01:6f:18:7d:0a:44:6c:a5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a66550fe2c39c47236db036795f30d8f1d651dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:bc:25:32:15:b2:a4:0b:49:91:fb:04:93: 41:0c:37:46:50:66:5e:85:7a:54:f5:44:90:30:88: 4d:9d:32:0f:40:a8:23:39:2e:63:eb:54:8f:cc:cf: 54:34:ee:69:80:08:fd:8f:48:3d:12:e5:41:c7:58: 5b:86:7c:94:0c:6e:5a:1e:ff:0b:13:2a:1e:94:95: 97:2f:8d:b2:0d:8a:0d:d2:9b:07:88:19:00:06:ab: 95:99:a2:7b:7b:8a:b1:02:75:d4:59:7a:40:b6:19: 9e:84:7b:a7:f2:32:47:0e:ce:02:6b:40:f5:5d:65: 15:ab:3f:24:46:1e:3d:c6:ed:e8:9f:d7:e4:0b:0e: 58:06:71:64:2c:cd:58:6d:1b:c0:a7:c7:9c:54:d3: df:7d:3d:93:4f:f2:10:48:9a:62:8f:e4:43:63:bd: 68:f9:69:e6:3f:c7:c5:62:54:2f:59:87:b3:63:82: df:2f:82:09:22:6b:cb:27:90:d1:26:93:64:7d:e0: 65:f1:9f:98:c4:b1:7e:dc:b7:41:b0:4e:1c:67:bb: c4:e7:38:40:58:37:8e:4d:e2:ee:a9:e7:b1:ce:65: ce:0a:fc:55:f2:50:e1:c1:f3:27:9c:5e:b5:83:c3: c0:6d:8a:ec:e3:50:1c:df:41:39:49:85:50:53:83: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:66:55:0F:E2:C3:9C:47:23:6D:B0:36:79:5F:30:D8:F1:D6:51:DD X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OmZVD-LDnEcjbbA2eV8w2PHWUd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 1a:f3:33:13:72:57:f8:08:f7:fc:0d:5c:12:22:52:20:e1:87: fb:73:19:c5:7b:7d:87:43:42:d0:58:77:f6:f0:c1:43:82:73: d3:16:73:91:68:e9:86:8c:16:b2:24:64:96:6a:c3:83:87:f3: 1b:ba:77:78:a8:ba:e1:bd:74:01:21:c1:2f:a7:08:ad:96:d9: 2c:e1:4c:20:4d:2b:bc:fc:ec:1b:0a:fa:ec:5c:37:4d:d9:34: c1:72:0f:0c:88:a4:38:76:66:f1:b7:20:a7:88:2a:b3:71:75: 9d:96:10:52:03:c9:fd:3e:7e:e0:d3:3e:9d:37:34:8a:6f:24: 54:39:05:9d:b4:bd:fa:7c:73:33:fb:73:60:72:e9:93:85:f6: 4b:64:76:b8:65:5a:50:fc:c1:8c:68:f0:18:1c:15:13:58:46: c2:79:97:96:51:2f:44:ba:71:14:11:60:3d:27:ed:05:80:b9: fa:4a:ab:42:b5:b1:41:0a:7c:db:fc:85:fb:2b:b3:07:49:e1: f4:3c:cf:ec:48:d9:b8:67:c1:56:cd:e2:57:e7:98:ef:eb:51: b9:e8:e4:bc:8a:04:d1:85:60:d3:0d:e8:3d:af:30:1e:76:81: f4:26:89:14:20:c8:f9:da:4e:f4:9d:44:8f:e7:05:9d:dd:2d: 6b:f1:05:65 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8bHkkbaQAW8YfQpEbKUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTY2NTUwZmUyYzM5YzQ3MjM2ZGIwMzY3OTVmMzBkOGYxZDY1MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ke8JTIVsqQLSZH7BJNBDDdGUGZe hXpU9USQMIhNnTIPQKgjOS5j61SPzM9UNO5pgAj9j0g9EuVBx1hbhnyUDG5aHv8L EyoelJWXL42yDYoN0psHiBkABquVmaJ7e4qxAnXUWXpAthmehHun8jJHDs4Ca0D1 XWUVqz8kRh49xu3on9fkCw5YBnFkLM1YbRvAp8ecVNPffT2TT/IQSJpij+RDY71o +WnmP8fFYlQvWYezY4LfL4IJImvLJ5DRJpNkfeBl8Z+YxLF+3LdBsE4cZ7vE5zhA WDeOTeLuqeexzmXOCvxV8lDhwfMnnF61g8PAbYrs41Ac30E5SYVQU4OeyQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDpmVQ/iw5xHI22wNnlfMNjx1lHdMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvT21aVkQtTERuRWNqYmJBMmVWOHcyUEhXVWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg/qQDAN BgkqhkiG9w0BAQsFAAOCAQEAGvMzE3JX+Aj3/A1cEiJSIOGH+3MZxXt9h0NC0Fh3 9vDBQ4Jz0xZzkWjphowWsiRklmrDg4fzG7p3eKi64b10ASHBL6cIrZbZLOFMIE0r vPzsGwr67Fw3Tdk0wXIPDIikOHZm8bcgp4gqs3F1nZYQUgPJ/T5+4NM+nTc0im8k VDkFnbS9+nxzM/tzYHLpk4X2S2R2uGVaUPzBjGjwGBwVE1hGwnmXllEvRLpxFBFg PSftBYC5+kqrQrWxQQp82/yF+yuzB0nh9DzP7EjZuGfBVs3iV+eY7+tRuejkvIoE 0YVg0w3oPa8wHnaB9CaJFCDI+dpO9J1Ej+cFnd0ta/EFZQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:01:33 2026 by rpki-client