This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa File: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (raw, json) Hash identifier: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A= Subject key identifier: CC:E8:54:F0:45:09:C3:E8:D7:4F:BA:00:F0:B0:D6:B5:21:EE:34:EC Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED4752694148D9B85BD90401E77F2E Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43126 IP address blocks: 2a0f:607:1060::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:47:52:69:41:48:d9:b8:5b:d9:04:01:e7:7f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce854f04509c3e8d74fba00f0b0d6b521ee34ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:cf:69:e6:39:ff:c6:85:6a:87:99:d5:9d: 3a:97:d9:5d:21:0d:66:fc:72:18:5b:e0:57:34:ce: 1d:86:54:29:23:0d:8c:39:a1:c1:d0:0a:d2:7c:11: a7:06:cf:63:f3:54:9b:10:50:d8:f3:5a:e5:c7:c7: cb:1f:57:20:06:ba:01:9f:73:32:fe:6c:56:4e:1c: d3:3c:6e:74:b2:ae:7b:59:38:a7:8c:c7:9c:9b:7e: 4b:36:66:b5:5c:fd:bf:17:bb:c9:29:27:41:cd:06: 42:3c:9a:b7:e5:9e:77:ba:7b:95:4d:49:0e:8f:bf: 85:a5:8c:8e:6e:9f:c1:50:96:7d:fe:36:18:6c:bf: 6a:93:54:2c:ef:9f:7b:cb:b9:5c:2d:6c:e4:7b:c9: 0c:bd:83:d7:cf:5a:69:06:39:29:6e:6a:6c:f4:c7: 45:ba:7f:37:4b:84:4c:6d:96:fd:c7:58:be:37:d9: ec:93:17:9a:b2:9f:2f:52:b4:ce:86:b4:d4:55:1c: 9f:cd:f2:79:26:fb:ee:09:2e:b9:15:ca:44:83:75: 04:9d:e0:f3:62:31:fc:7f:18:08:6d:68:86:e0:82: 4d:fb:8d:14:fd:24:d7:cb:cb:cb:a1:25:f2:da:73: 48:7e:8b:af:a9:bb:af:a2:64:83:ff:96:1c:5a:47: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E8:54:F0:45:09:C3:E8:D7:4F:BA:00:F0:B0:D6:B5:21:EE:34:EC X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1060::/44 Signature Algorithm: sha256WithRSAEncryption 9a:2a:86:8b:e3:8a:fc:22:37:89:de:25:6f:b6:fe:59:e8:a1: 63:64:23:07:4c:e9:76:28:3b:dd:43:1d:42:ad:5d:02:2c:1c: f9:ec:a2:87:80:c4:4b:57:7f:2d:7e:70:43:7a:80:4e:13:6a: 53:8a:16:8c:7e:87:ef:4a:eb:72:19:29:67:c4:32:27:ae:25: 91:34:e3:b0:67:69:3a:4c:0e:48:9c:d8:7f:c7:1b:05:48:3a: 67:9f:fb:aa:29:7c:6b:14:be:75:4a:e7:25:bc:ab:06:59:c9: 8d:b5:04:bc:da:05:55:89:73:3d:81:08:8b:6c:92:3c:85:c8: cc:af:7a:b0:78:04:81:38:d3:b7:7a:57:b2:52:0f:13:70:03: 87:82:e0:20:24:3d:b6:4c:fe:95:6e:69:59:20:3e:cd:ee:92: 26:67:87:57:f9:41:ed:77:5b:8f:8d:c7:0a:d5:17:36:da:c2: b7:c4:ba:f5:ab:d2:a8:39:d1:4b:72:7f:4e:f0:eb:46:12:7a: 60:eb:65:b9:2a:b4:9b:45:26:d3:fd:db:60:e6:8b:8f:0a:60: 5b:40:23:0d:98:6c:39:d5:b7:ea:07:61:3d:71:1b:17:dd:e7: 43:1a:ff:5a:ac:cd:f0:e5:c7:da:b5:d3:e3:ed:db:c8:a7:9f: 05:74:36:45 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UdSaUFI2bhb2QQB538uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2U4NTRmMDQ1MDljM2U4ZDc0ZmJhMDBmMGIwZDZiNTIxZWUzNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV/PaeY5/8aFaoeZ1Z06l9ldIQ1m /HIYW+BXNM4dhlQpIw2MOaHB0ArSfBGnBs9j81SbEFDY81rlx8fLH1cgBroBn3My /mxWThzTPG50sq57WTinjMecm35LNma1XP2/F7vJKSdBzQZCPJq35Z53unuVTUkO j7+FpYyObp/BUJZ9/jYYbL9qk1Qs7597y7lcLWzke8kMvYPXz1ppBjkpbmps9MdF un83S4RMbZb9x1i+N9nskxeasp8vUrTOhrTUVRyfzfJ5JvvuCS65FcpEg3UEneDz YjH8fxgIbWiG4IJN+40U/STXy8vLoSXy2nNIfouvqbuvomSD/5YcWkcEeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMzoVPBFCcPo10+6APCw1rUh7jTsMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvek9oVThFVUp3LWpYVDdvQThMRFd0U0h1Tk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg8GBxBg MA0GCSqGSIb3DQEBCwUAA4IBAQCaKoaL44r8IjeJ3iVvtv5Z6KFjZCMHTOl2KDvd Qx1CrV0CLBz57KKHgMRLV38tfnBDeoBOE2pTihaMfofvSutyGSlnxDInriWRNOOw Z2k6TA5InNh/xxsFSDpnn/uqKXxrFL51SuclvKsGWcmNtQS82gVViXM9gQiLbJI8 hcjMr3qweASBONO3eleyUg8TcAOHguAgJD22TP6VbmlZID7N7pImZ4dX+UHtd1uP jccK1Rc22sK3xLr1q9KoOdFLcn9O8OtGEnpg62W5KrSbRSbT/dtg5ouPCmBbQCMN mGw51bfqB2E9cRsX3edDGv9arM3w5cfatdPj7dvIp58FdDZF -----END CERTIFICATE-----Generated at Thu Jan 8 00:47:36 2026 by rpki-client