This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa File: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (raw, json) Hash identifier: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8= Subject key identifier: D0:DA:08:03:80:75:A3:F4:70:50:E9:BD:07:25:3C:38:5A:BE:EE:19 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A098D79695B271CD1D72914F684F Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51647 IP address blocks: 2a07:3500:1020::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a0:98:d7:96:95:b2:71:cd:1d:72:91:4f:68:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0da08038075a3f47050e9bd07253c385abeee19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:86:80:51:ff:76:a8:df:a9:05:ad:6a:44: 50:33:65:b0:57:33:10:dd:04:88:c5:bc:a2:a5:87: 09:7e:e2:c2:61:5b:04:6b:ef:f0:84:e0:56:19:10: 55:19:a3:95:70:05:ce:d9:e6:77:ad:5b:23:7f:56: 5e:38:8f:3b:f7:58:d2:fe:1d:86:ae:8e:d4:b0:83: 72:1d:22:9f:a8:bb:7d:03:fa:78:1f:87:48:2a:57: 45:5a:a6:d3:5a:0f:49:f2:9f:d9:86:08:69:09:78: 62:d3:e7:1f:8f:de:db:3e:e2:db:49:72:4a:64:9a: ad:b4:fe:f7:03:a5:c7:17:76:7c:78:26:e1:ad:37: 3e:53:ac:55:1c:a4:c9:54:36:b5:b6:37:44:57:70: ad:3b:1d:3a:14:83:88:ea:7a:2d:3f:65:a9:de:65: d8:d4:48:ce:35:40:71:a4:cd:6d:6f:15:74:96:c6: b9:21:49:5c:c1:c3:7f:2f:3c:6f:38:fe:e3:d4:28: 84:d3:23:4b:8a:8a:df:aa:1d:ca:cc:e2:b7:ba:08: a1:8c:85:0b:59:d2:2d:80:b9:c0:cf:7c:c9:ce:c6: 1e:2f:ed:48:a8:7d:cd:66:99:46:46:50:41:99:08: db:38:3b:b8:88:45:c9:24:58:dc:26:e7:a0:7f:ea: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:08:03:80:75:A3:F4:70:50:E9:BD:07:25:3C:38:5A:BE:EE:19 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1020::/46 Signature Algorithm: sha256WithRSAEncryption 2a:19:1a:2e:7d:ab:83:84:de:2c:dd:ec:79:34:e8:62:b1:c7: ad:7e:4a:59:85:95:78:f8:93:c3:49:ec:2a:3e:8c:90:bf:41: 9f:56:ff:16:e4:54:c1:ce:af:b7:b3:9c:a7:e6:fa:e7:2f:c8: 17:8e:40:4b:bf:10:62:e9:b4:85:5d:f6:af:99:51:83:36:41: 80:f4:15:43:1a:cd:80:01:28:42:5d:6a:20:17:fa:c5:3f:29: f5:11:cd:bc:7f:a8:91:ba:61:99:1c:a6:bf:cf:58:12:bc:d3: 7d:61:c0:d1:fd:30:df:5d:eb:c0:29:34:05:24:fd:00:d7:2d: 54:6b:8f:51:cb:11:88:76:f3:a3:ae:03:9e:18:19:8f:da:96: 8e:f8:64:97:c2:98:21:17:e9:46:94:c6:58:d4:6d:d4:1e:97: 87:2c:73:f0:ec:4a:1a:01:11:cc:b5:cc:20:c8:4c:00:64:1f: b2:61:67:fc:0b:6d:76:9b:d7:7a:c3:90:67:d5:a3:a3:0b:a2: cb:5e:5b:1e:93:c9:d2:3c:3c:d7:16:7c:51:86:61:20:75:91: ff:f8:b5:c7:b5:92:e0:dc:81:77:c6:9c:be:99:b5:9e:96:e8: 41:3f:be:df:3d:01:a5:ab:d7:75:b9:17:94:44:55:4b:dc:a1: 4b:49:17:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKCY15aVsnHNHXKRT2hPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGRhMDgwMzgwNzVhM2Y0NzA1MGU5YmQwNzI1M2MzODVhYmVlZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgaGgFH/dqjfqQWtakRQM2WwVzMQ 3QSIxbyipYcJfuLCYVsEa+/whOBWGRBVGaOVcAXO2eZ3rVsjf1ZeOI8791jS/h2G ro7UsINyHSKfqLt9A/p4H4dIKldFWqbTWg9J8p/ZhghpCXhi0+cfj97bPuLbSXJK ZJqttP73A6XHF3Z8eCbhrTc+U6xVHKTJVDa1tjdEV3CtOx06FIOI6notP2Wp3mXY 1EjONUBxpM1tbxV0lsa5IUlcwcN/LzxvOP7j1CiE0yNLiorfqh3KzOK3ugihjIUL WdItgLnAz3zJzsYeL+1IqH3NZplGRlBBmQjbODu4iEXJJFjcJuegf+qIvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNDaCAOAdaP0cFDpvQclPDhavu4ZMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvME5vSUE0QjFvX1J3VU9tOUJ5VThPRnEtN2hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgc1ABAg MA0GCSqGSIb3DQEBCwUAA4IBAQAqGRoufauDhN4s3ex5NOhiscetfkpZhZV4+JPD SewqPoyQv0GfVv8W5FTBzq+3s5yn5vrnL8gXjkBLvxBi6bSFXfavmVGDNkGA9BVD Gs2AAShCXWogF/rFPyn1Ec28f6iRumGZHKa/z1gSvNN9YcDR/TDfXevAKTQFJP0A 1y1Ua49RyxGIdvOjrgOeGBmP2paO+GSXwpghF+lGlMZY1G3UHpeHLHPw7EoaARHM tcwgyEwAZB+yYWf8C212m9d6w5Bn1aOjC6LLXlsek8nSPDzXFnxRhmEgdZH/+LXH tZLg3IF3xpy+mbWeluhBP77fPQGlq9d1uReURFVL3KFLSRe/ -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:49 2026 by rpki-client