This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oIp9EMnrzNlrcWOGp2JQvp0tpdk.roa File: oIp9EMnrzNlrcWOGp2JQvp0tpdk.roa (raw, json) Hash identifier: 9rP5K3krWa7XxwgVPQJI85iCDBalY0RqToS2Z6dxal4= Subject key identifier: A0:8A:7D:10:C9:EB:CC:D9:6B:71:63:86:A7:62:50:BE:9D:2D:A5:D9 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BC6F6C5CE8E647CEA0CEEEC8EF9412B01 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oIp9EMnrzNlrcWOGp2JQvp0tpdk.roa Signing time: Fri 16 Jan 2026 13:20:19 +0000 ROA not before: Fri 16 Jan 2026 13:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11404 IP address blocks: 2a06:5280::/29 maxlen: 32 2a09:4900::/29 maxlen: 32 2a0a:2940::/29 maxlen: 32 2a0f:14c0::/29 maxlen: 32 2a0f:1840::/29 maxlen: 32 2a0f:1a40::/29 maxlen: 32 2a0f:28c0::/29 maxlen: 32 2a0f:dac0::/29 maxlen: 32 2a10:33c0::/29 maxlen: 32 2a10:36c0::/29 maxlen: 32 2a10:5c00::/29 maxlen: 32 2a10:6b00::/29 maxlen: 32 2a10:7f00::/29 maxlen: 32 2a11:89c0::/29 maxlen: 32 2a11:b200::/29 maxlen: 32 2a11:d240::/29 maxlen: 32 2a12:d6c0::/29 maxlen: 32 2a13:200::/29 maxlen: 32 2a13:9380::/29 maxlen: 32 2a13:9680::/29 maxlen: 32 2a13:cf00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:f6:c5:ce:8e:64:7c:ea:0c:ee:ec:8e:f9:41:2b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 16 13:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a08a7d10c9ebccd96b716386a76250be9d2da5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:89:0f:48:cb:ba:ac:11:ae:d3:3c:20:4c:da: 54:0a:d9:b0:b6:49:cf:a4:84:99:84:c6:27:63:80: f5:8f:e9:ca:a3:73:08:a8:1d:d3:72:bb:6f:d4:88: 39:57:95:5b:4c:09:72:69:83:a0:ee:6b:41:e2:ca: 6c:43:91:b6:7b:ad:4d:3d:2a:d4:90:b0:3c:af:ee: 7b:15:3d:44:93:9b:5b:61:4a:f5:b4:8f:e8:12:c2: 3a:55:75:6f:76:d8:65:81:4a:a4:e1:b2:32:85:ff: 19:41:d3:34:bf:d2:91:8d:a2:82:9d:ad:62:cf:2f: 90:c5:33:cf:56:44:dc:74:f1:e1:92:33:74:f6:98: 3f:4f:1a:23:ea:25:d9:36:da:56:42:e7:5d:14:e7: b2:2c:4d:da:a8:90:fb:75:23:53:ba:fa:d1:bb:32: f1:74:92:77:13:7a:12:fd:3e:f0:46:d7:fc:d4:5b: 10:ca:6b:a6:50:f7:7d:1f:a9:5f:ab:23:47:f5:5d: cc:25:af:24:8f:50:b2:63:37:62:e5:9a:1b:dc:e2: b2:7c:3d:42:c4:23:15:19:c0:be:86:d9:e9:8c:b3: 02:4b:ad:a3:a3:ad:75:4a:dd:af:22:66:33:23:96: d1:c7:89:d5:e7:7f:b7:a1:fe:f9:3a:2d:f2:d1:1d: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8A:7D:10:C9:EB:CC:D9:6B:71:63:86:A7:62:50:BE:9D:2D:A5:D9 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oIp9EMnrzNlrcWOGp2JQvp0tpdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5280::/29 2a09:4900::/29 2a0a:2940::/29 2a0f:14c0::/29 2a0f:1840::/29 2a0f:1a40::/29 2a0f:28c0::/29 2a0f:dac0::/29 2a10:33c0::/29 2a10:36c0::/29 2a10:5c00::/29 2a10:6b00::/29 2a10:7f00::/29 2a11:89c0::/29 2a11:b200::/29 2a11:d240::/29 2a12:d6c0::/29 2a13:200::/29 2a13:9380::/29 2a13:9680::/29 2a13:cf00::/29 Signature Algorithm: sha256WithRSAEncryption 0f:8e:e1:09:26:b7:0f:01:8b:93:da:9d:1a:1c:23:cf:7a:22: a9:78:a3:3c:ed:a4:1d:91:9d:5f:29:60:f9:a1:81:28:10:25: 6d:17:f5:da:29:5a:aa:60:10:c2:64:8f:d5:0b:ac:e0:05:f6: 7d:e8:b3:46:95:00:c3:d6:52:0b:98:0a:d6:2b:bb:e3:99:eb: 15:d2:6a:7c:05:83:31:f9:56:33:74:a2:a6:ba:22:a2:6a:59: 99:c6:30:de:b2:43:28:ca:78:73:60:25:1d:a3:37:29:58:d0: 79:5b:5e:bc:ab:5d:37:6a:4d:7d:b6:08:d9:f5:d2:f0:11:fd: 16:8f:78:aa:36:f9:2e:69:d4:38:93:d7:78:a8:8d:79:b0:aa: 35:34:55:80:8c:68:98:ba:c6:c8:dd:52:f2:09:e6:5e:06:fe: 17:0a:bd:eb:1b:dd:4d:2f:b8:79:2c:34:69:2c:fa:c0:97:4c: 89:ef:e9:33:4c:cb:7f:ee:fb:14:d6:41:b2:64:8b:2c:56:46: 4a:7f:f2:91:32:ba:d1:14:bc:5c:47:14:d0:4b:87:f7:1d:11: 5f:da:64:76:b3:7b:d8:f8:cd:3e:18:4d:db:26:d0:bc:08:d8: 6d:f9:c6:a6:e1:b9:07:97:7e:c4:e6:67:3a:29:b5:18:18:ee: ab:d1:03:84 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZvG9sXOjmR86gzu7I75QSsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE2MTMyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDhhN2QxMGM5ZWJjY2Q5NmI3MTYzODZhNzYyNTBiZTlkMmRhNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiokPSMu6rBGu0zwgTNpUCtmwtknP pISZhMYnY4D1j+nKo3MIqB3Tcrtv1Ig5V5VbTAlyaYOg7mtB4spsQ5G2e61NPSrU kLA8r+57FT1Ek5tbYUr1tI/oEsI6VXVvdthlgUqk4bIyhf8ZQdM0v9KRjaKCna1i zy+QxTPPVkTcdPHhkjN09pg/Txoj6iXZNtpWQuddFOeyLE3aqJD7dSNTuvrRuzLx dJJ3E3oS/T7wRtf81FsQymumUPd9H6lfqyNH9V3MJa8kj1CyYzdi5Zob3OKyfD1C xCMVGcC+htnpjLMCS62jo611St2vImYzI5bRx4nV53+3of75Oi3y0R0BXQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFKCKfRDJ68zZa3FjhqdiUL6dLaXZMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvb0lwOUVNbnJ6TmxyY1dPR3AySlF2cDB0cGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAIwgZMDBQMq BlKAAwUDKglJAAMFAyoKKUADBQMqDxTAAwUDKg8YQAMFAyoPGkADBQMqDyjAAwUD Kg/awAMFAyoQM8ADBQMqEDbAAwUDKhBcAAMFAyoQawADBQMqEH8AAwUDKhGJwAMF AyoRsgADBQMqEdJAAwUDKhLWwAMFAyoTAgADBQMqE5OAAwUDKhOWgAMFAyoTzwAw DQYJKoZIhvcNAQELBQADggEBAA+O4Qkmtw8Bi5PanRocI896Iql4ozztpB2RnV8p YPmhgSgQJW0X9dopWqpgEMJkj9ULrOAF9n3os0aVAMPWUguYCtYru+OZ6xXSanwF gzH5VjN0oqa6IqJqWZnGMN6yQyjKeHNgJR2jNylY0HlbXryrXTdqTX22CNn10vAR /RaPeKo2+S5p1DiT13iojXmwqjU0VYCMaJi6xsjdUvIJ5l4G/hcKvesb3U0vuHks NGks+sCXTInv6TNMy3/u+xTWQbJkiyxWRkp/8pEyutEUvFxHFNBLh/cdEV/aZHaz e9j4zT4YTdsm0LwI2G35xqbhuQeXfsTmZzoptRgY7qvRA4Q= -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:39 2026 by rpki-client