This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_OTJJGsOugf6eMg5v2eePb1UxUo.roa File: _OTJJGsOugf6eMg5v2eePb1UxUo.roa (raw, json) Hash identifier: lrvbUwX+2fxPlZf8mEljLLMeeSXSCF06l3iau63RBN0= Subject key identifier: FC:E4:C9:24:6B:0E:BA:07:FA:78:C8:39:BF:67:9E:3D:BD:54:C5:4A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1BCC973D0C61CC4172AAAA2A6D798 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_OTJJGsOugf6eMg5v2eePb1UxUo.roa Signing time: Fri 02 Jan 2026 18:21:47 +0000 ROA not before: Fri 02 Jan 2026 18:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152920 IP address blocks: 2a0f:ac00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:bc:c9:73:d0:c6:1c:c4:17:2a:aa:a2:a6:d7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fce4c9246b0eba07fa78c839bf679e3dbd54c54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:84:2d:6d:6a:4c:60:e2:06:2c:a2:de:ac: 51:26:2e:79:49:96:6a:83:f3:33:62:0e:25:49:8b: 09:df:06:b0:ef:67:15:d5:1a:52:9a:25:48:c2:07: de:80:7b:7f:81:95:9a:4e:37:5f:ed:59:47:45:61: fd:23:f6:57:de:74:36:88:7a:db:80:aa:f8:a0:0c: b0:11:74:fc:a6:20:13:7c:00:23:5f:7d:b0:20:bf: e9:ee:d5:c0:5d:56:58:41:77:8e:d0:59:e9:8a:54: c4:40:75:ce:c7:39:97:c1:83:92:95:26:bb:07:f7: 63:ef:49:44:2c:51:80:a7:da:8c:e6:b4:c4:fb:8e: d4:2e:68:4a:85:41:9d:71:ba:99:f9:26:5b:74:e6: d6:40:5a:4e:50:1a:3e:ae:5b:f5:99:c3:b9:90:b1: 0f:b3:83:7b:cd:6e:68:cb:43:8c:fd:74:bc:9b:08: b0:9f:29:67:87:2e:7a:d5:71:63:25:8e:f6:a8:3d: e3:ce:5d:5b:4a:fe:d5:cc:27:16:a1:54:44:30:c8: f7:d3:a5:f4:fb:8e:97:0f:d3:45:8b:fc:aa:b0:c1: b5:53:2c:e9:b4:dc:91:84:d3:db:f8:b6:58:78:1d: 44:43:f0:f3:69:22:02:f9:e9:63:98:cb:d9:05:24: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:C9:24:6B:0E:BA:07:FA:78:C8:39:BF:67:9E:3D:BD:54:C5:4A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_OTJJGsOugf6eMg5v2eePb1UxUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ac00::/29 Signature Algorithm: sha256WithRSAEncryption 20:d9:d9:e9:08:62:e8:a0:c6:82:97:29:17:44:31:f4:10:4c: e9:15:ed:d2:8f:b4:78:b7:4a:d3:9c:c3:61:5c:67:13:37:16: a7:59:fc:fb:68:cf:89:5a:ec:f4:6d:0d:7b:82:f7:cb:d8:6e: c6:16:0c:c0:8e:da:33:8b:75:98:67:e4:d6:d4:d8:c9:96:97: 1e:1a:30:1d:20:d4:95:c3:01:09:8c:af:7b:9a:5e:c8:ab:71: 27:34:68:d6:e9:c9:58:81:29:f4:01:72:a6:ac:29:65:27:57: 6d:5b:52:58:ff:07:4c:ba:d3:a3:b7:18:18:e2:8e:2b:5c:f5: 94:b9:64:5e:c9:3f:8b:45:61:a0:75:c4:a7:08:9b:3d:7a:13: 36:c9:89:23:79:59:3c:72:69:78:8b:95:59:29:47:e2:80:c6: a5:6e:88:dd:1a:6f:c7:4b:13:5a:56:9a:da:02:6b:41:b1:dd: 3c:31:b2:cc:0a:00:3e:2b:2a:e8:8f:f8:99:b9:9f:fb:1a:2f: 5c:91:04:29:a5:c9:a0:1d:78:04:a3:23:7a:5d:17:a5:ee:da: b0:23:80:6c:50:e8:56:94:cf:8e:f4:fd:c2:07:b3:25:82:ac: f8:39:b0:5b:83:62:00:05:8c:87:87:8c:c1:44:2c:06:cc:88: bd:0d:4b:b8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8bzJc9DGHMQXKqqipteYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2U0YzkyNDZiMGViYTA3ZmE3OGM4MzliZjY3OWUzZGJkNTRjNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+WELW1qTGDiBiyi3qxRJi55SZZq g/MzYg4lSYsJ3waw72cV1RpSmiVIwgfegHt/gZWaTjdf7VlHRWH9I/ZX3nQ2iHrb gKr4oAywEXT8piATfAAjX32wIL/p7tXAXVZYQXeO0FnpilTEQHXOxzmXwYOSlSa7 B/dj70lELFGAp9qM5rTE+47ULmhKhUGdcbqZ+SZbdObWQFpOUBo+rlv1mcO5kLEP s4N7zW5oy0OM/XS8mwiwnylnhy561XFjJY72qD3jzl1bSv7VzCcWoVREMMj306X0 +46XD9NFi/yqsMG1UyzptNyRhNPb+LZYeB1EQ/DzaSIC+eljmMvZBSS0+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPzkySRrDroH+njIOb9nnj29VMVKMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvX09USkpHc091Z2Y2ZU1nNXYyZWVQYjFVeFVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+sADAN BgkqhkiG9w0BAQsFAAOCAQEAINnZ6Qhi6KDGgpcpF0Qx9BBM6RXt0o+0eLdK05zD YVxnEzcWp1n8+2jPiVrs9G0Ne4L3y9huxhYMwI7aM4t1mGfk1tTYyZaXHhowHSDU lcMBCYyve5peyKtxJzRo1unJWIEp9AFypqwpZSdXbVtSWP8HTLrTo7cYGOKOK1z1 lLlkXsk/i0VhoHXEpwibPXoTNsmJI3lZPHJpeIuVWSlH4oDGpW6I3Rpvx0sTWlaa 2gJrQbHdPDGyzAoAPisq6I/4mbmf+xovXJEEKaXJoB14BKMjel0Xpe7asCOAbFDo VpTPjvT9wgezJYKs+DmwW4NiAAWMh4eMwUQsBsyIvQ1LuA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:36 2026 by rpki-client