This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/OH0fOXq_6EsT3aKlr7ZZrv4sV6I.roa File: OH0fOXq_6EsT3aKlr7ZZrv4sV6I.roa (raw, json) Hash identifier: FLFCrwPPJhuPUaS222PemjeBNo7gcU+ThIJnhpcn6UQ= Subject key identifier: 38:7D:1F:39:7A:BF:E8:4B:13:DD:A2:A5:AF:B6:59:AE:FE:2C:57:A2 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CED031E859A055B9A2BAFD8213FFB96 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/OH0fOXq_6EsT3aKlr7ZZrv4sV6I.roa Signing time: Fri 02 Jan 2026 04:17:46 +0000 ROA not before: Fri 02 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47616 IP address blocks: 2001:648:22b0::/48 maxlen: 48 2001:648:25e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:03:1e:85:9a:05:5b:9a:2b:af:d8:21:3f:fb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=387d1f397abfe84b13dda2a5afb659aefe2c57a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:f9:b5:97:60:83:17:0a:ad:17:e2:db:39: 59:bf:18:e4:05:8c:05:21:95:d9:21:e9:e3:21:25: 13:7c:c6:80:e2:d0:ff:6c:77:9a:6e:25:7a:0f:56: 17:2d:38:1f:1b:9f:40:56:45:f8:6b:c2:25:68:22: 1d:80:20:42:28:77:65:ea:ce:fb:80:8a:8c:ba:08: 42:02:37:95:1a:7d:68:71:6f:9e:20:29:64:d0:ae: 0b:32:41:bc:f7:55:94:a6:5d:b4:7e:27:43:49:9e: 01:01:f9:3c:40:2b:aa:92:c1:ad:33:65:7c:1b:2b: fd:c1:b1:ca:d5:93:07:6d:62:9a:a1:7c:5c:b9:99: a7:69:e9:30:d1:fa:21:3c:2c:89:52:07:fc:34:21: a9:0a:a7:31:82:1c:6d:db:67:3b:ca:94:b8:48:4f: 3d:79:c1:ad:cf:4d:37:cc:94:35:52:10:d6:7b:69: 35:bd:1e:05:ab:15:aa:ea:de:41:fb:d3:b8:79:5c: 34:6a:53:0d:c9:58:cc:6f:6f:3d:e8:a6:ba:df:e2: c0:3c:4d:5f:98:2a:21:99:d7:0c:0e:7e:64:47:ad: 72:0b:b3:04:e7:c0:e9:7d:d3:5d:a2:c1:ac:4d:22: 42:0c:90:b2:a7:88:5d:4a:06:ba:a5:2b:2f:98:a1: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7D:1F:39:7A:BF:E8:4B:13:DD:A2:A5:AF:B6:59:AE:FE:2C:57:A2 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/OH0fOXq_6EsT3aKlr7ZZrv4sV6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:648:22b0::/48 2001:648:25e0::/48 Signature Algorithm: sha256WithRSAEncryption 7d:f1:33:0a:ec:cd:cd:54:75:8e:45:36:e9:23:ca:a4:61:00: 65:f3:09:a3:c8:fb:47:74:0a:3b:e4:99:63:b5:c5:9c:5d:a8: ff:1d:07:cc:45:2e:6b:87:7e:78:11:3e:ac:0c:1b:54:f5:f9: cf:13:36:33:7b:9e:1b:2b:bd:b2:e7:5c:53:76:db:ba:2a:24: b4:ba:57:58:2e:3b:ac:2e:58:26:07:0c:ac:eb:18:54:d0:75: ab:09:87:ca:4b:b2:97:0e:03:af:da:04:a2:2e:c3:b3:83:dd: 3b:45:bf:c3:75:3b:3b:ea:9c:85:06:42:57:b8:0d:b7:2c:7c: a4:92:e4:f9:1d:98:eb:b9:e7:22:a7:31:3d:12:3d:80:eb:e4: f9:ea:5a:df:fa:c0:90:25:77:21:82:c8:66:5d:b6:34:1d:cc: ce:57:85:24:c1:3f:ef:83:f1:e9:58:d0:88:4f:71:30:9a:6f: 75:2c:18:4d:b5:ac:ff:ae:64:3b:2a:71:31:53:00:00:6a:0c: 24:b5:f3:ad:be:d0:5e:ec:e7:9e:12:97:92:51:ca:75:f3:ab: 87:9b:04:18:58:42:84:1a:72:6e:66:9e:f6:2a:6d:cb:9c:07: d3:02:de:35:cb:68:1c:dc:a8:75:30:8f:d1:f1:b8:38:e4:d9: aa:3a:4d:eb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87QMehZoFW5orr9ghP/uWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODdkMWYzOTdhYmZlODRiMTNkZGEyYTVhZmI2NTlhZWZlMmM1N2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mv5tZdggxcKrRfi2zlZvxjkBYwF IZXZIenjISUTfMaA4tD/bHeabiV6D1YXLTgfG59AVkX4a8IlaCIdgCBCKHdl6s77 gIqMughCAjeVGn1ocW+eIClk0K4LMkG891WUpl20fidDSZ4BAfk8QCuqksGtM2V8 Gyv9wbHK1ZMHbWKaoXxcuZmnaekw0fohPCyJUgf8NCGpCqcxghxt22c7ypS4SE89 ecGtz003zJQ1UhDWe2k1vR4FqxWq6t5B+9O4eVw0alMNyVjMb2896Ka63+LAPE1f mCohmdcMDn5kR61yC7ME58DpfdNdosGsTSJCDJCyp4hdSga6pSsvmKGgBQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDh9Hzl6v+hLE92ipa+2Wa7+LFeiMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvT0gwZk9YcV82RXNUM2FLbHI3WlpydjRzVjZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGSCKw AwcAIAEGSCXgMA0GCSqGSIb3DQEBCwUAA4IBAQB98TMK7M3NVHWORTbpI8qkYQBl 8wmjyPtHdAo75JljtcWcXaj/HQfMRS5rh354ET6sDBtU9fnPEzYze54bK72y51xT dtu6KiS0uldYLjusLlgmBwys6xhU0HWrCYfKS7KXDgOv2gSiLsOzg907Rb/DdTs7 6pyFBkJXuA23LHykkuT5HZjruecipzE9Ej2A6+T56lrf+sCQJXchgshmXbY0HczO V4UkwT/vg/HpWNCIT3Ewmm91LBhNtaz/rmQ7KnExUwAAagwktfOtvtBe7OeeEpeS Ucp186uHmwQYWEKEGnJuZp72Km3LnAfTAt41y2gc3Kh1MI/R8bg45NmqOk3r -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:25 2026 by rpki-client