This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/0QgAlgZPZqrv19rDzeh3eHUVUjI.roa File: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (raw, json) Hash identifier: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs= Subject key identifier: D1:08:00:96:06:4F:66:AA:EF:D7:DA:C3:CD:E8:77:78:75:15:52:32 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A0EFAD9247DB642696ABAB3970F4 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/0QgAlgZPZqrv19rDzeh3eHUVUjI.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58083 IP address blocks: 2a07:3500:10a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a0:ef:ad:92:47:db:64:26:96:ab:ab:39:70:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1080096064f66aaefd7dac3cde8777875155232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c0:3b:36:01:35:3d:7b:59:5e:8e:2b:fc:7f: 8b:0e:79:59:fa:40:0f:11:86:66:85:09:ab:5d:ea: b7:2e:1a:ef:5a:6f:02:2e:f7:f0:15:2a:d0:a4:a6: fd:54:c5:36:4a:95:6b:35:6a:c2:5c:a4:54:92:55: 6d:44:57:67:c4:28:f9:b8:74:00:98:de:30:90:e0: 8a:b2:63:d4:09:6b:8b:ae:28:fc:07:ce:c9:94:37: d5:04:36:25:fa:f4:75:f7:39:3f:c4:da:32:50:2b: 6e:aa:8f:93:be:3a:ff:3c:51:0f:12:6e:4e:c4:bb: 30:c2:69:2e:58:4a:a6:8c:b3:8b:47:e7:f2:32:cb: 9f:be:5a:80:2d:e2:05:1d:52:86:b8:fa:0b:6a:69: c0:7b:ed:41:44:3f:e6:a4:a5:8c:b5:6b:6f:c5:6a: b0:21:f2:60:15:e9:e6:8c:77:9a:a9:ec:f7:5f:0a: c0:e2:45:18:5d:66:aa:54:06:51:35:91:ca:c6:2f: 72:52:38:2e:42:ee:cd:af:b2:df:5c:65:f5:c2:ad: 4f:d3:38:2b:86:e5:b6:e2:2e:0a:35:70:28:54:f6: 1e:e4:94:f5:03:fb:fb:22:b1:e2:d2:2b:f4:bc:25: 84:23:49:f8:e5:da:f6:e8:77:d4:e4:ae:15:ec:8d: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:08:00:96:06:4F:66:AA:EF:D7:DA:C3:CD:E8:77:78:75:15:52:32 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/0QgAlgZPZqrv19rDzeh3eHUVUjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:10a0::/48 Signature Algorithm: sha256WithRSAEncryption 4b:60:a9:79:18:18:54:15:4b:16:2d:a3:d5:83:0d:a7:fa:fb: 5a:c2:e6:c0:17:e1:46:fb:45:16:ca:a0:c7:cb:95:9c:e3:dc: 6c:f2:25:9f:65:51:38:01:27:32:5b:b7:29:e4:be:70:50:81: 1c:91:09:e5:d1:b1:8d:ab:72:1a:3c:07:35:56:c8:73:88:b1: 00:3a:ae:14:70:23:05:47:02:47:b4:6e:62:a7:fa:be:19:e7: 46:5b:eb:37:fd:49:9e:1e:71:4d:5f:f2:e5:7a:4e:82:57:5e: b8:27:5f:34:98:52:ff:cf:57:ee:8d:13:78:ee:bf:46:cd:07: 47:4c:24:f0:f2:62:9f:75:d2:fd:e4:23:bf:36:86:59:52:2a: 6b:57:55:ea:cc:b3:61:a2:76:0c:b5:46:5a:00:98:0e:6b:3f: 58:47:9c:3a:17:8f:76:78:2a:02:29:fb:f7:4c:8d:cf:1f:d6: ca:fd:a7:23:5d:c1:6d:b6:31:ed:0b:63:03:01:11:2e:aa:ce: dd:a9:15:0f:03:73:c9:3c:fb:43:a8:56:9f:a7:5c:06:73:bb: c3:73:e0:76:7a:d8:4d:ed:09:0b:7d:23:64:07:a1:75:1c:71: f1:86:45:ca:fa:cb:c2:1c:2b:c4:b9:13:c0:0a:e9:9c:04:20: a0:a2:ce:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKDvrZJH22QmlqurOXD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTA4MDA5NjA2NGY2NmFhZWZkN2RhYzNjZGU4Nzc3ODc1MTU1MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8A7NgE1PXtZXo4r/H+LDnlZ+kAP EYZmhQmrXeq3LhrvWm8CLvfwFSrQpKb9VMU2SpVrNWrCXKRUklVtRFdnxCj5uHQA mN4wkOCKsmPUCWuLrij8B87JlDfVBDYl+vR19zk/xNoyUCtuqo+Tvjr/PFEPEm5O xLswwmkuWEqmjLOLR+fyMsufvlqALeIFHVKGuPoLamnAe+1BRD/mpKWMtWtvxWqw IfJgFenmjHeaqez3XwrA4kUYXWaqVAZRNZHKxi9yUjguQu7Nr7LfXGX1wq1P0zgr huW24i4KNXAoVPYe5JT1A/v7IrHi0iv0vCWEI0n45dr26HfU5K4V7I2ZvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNEIAJYGT2aq79faw83od3h1FVIyMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvMFFnQWxnWlBacXJ2MTlyRHplaDNlSFVWVWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ABCg MA0GCSqGSIb3DQEBCwUAA4IBAQBLYKl5GBhUFUsWLaPVgw2n+vtawubAF+FG+0UW yqDHy5Wc49xs8iWfZVE4AScyW7cp5L5wUIEckQnl0bGNq3IaPAc1VshziLEAOq4U cCMFRwJHtG5ip/q+GedGW+s3/UmeHnFNX/Llek6CV164J180mFL/z1fujRN47r9G zQdHTCTw8mKfddL95CO/NoZZUiprV1XqzLNhonYMtUZaAJgOaz9YR5w6F492eCoC Kfv3TI3PH9bK/acjXcFttjHtC2MDAREuqs7dqRUPA3PJPPtDqFafp1wGc7vDc+B2 ethN7QkLfSNkB6F1HHHxhkXK+svCHCvEuRPACumcBCCgos4H -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:59 2026 by rpki-client