This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/ovUvt1pWliISM3HaoCAcadW0xKw.roa File: ovUvt1pWliISM3HaoCAcadW0xKw.roa (raw, json) Hash identifier: H639MxSrvwDoO2fDDqrmu0kQ4erJQr6FKFxoVbpwHPU= Subject key identifier: A2:F5:2F:B7:5A:56:96:22:12:33:71:DA:A0:20:1C:69:D5:B4:C4:AC Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d Certificate serial: 019B78A3552E12D8DA84054B965C6536B5CD Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/ovUvt1pWliISM3HaoCAcadW0xKw.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 2a12:e100:1::/48 maxlen: 48 2a12:e100:2::/48 maxlen: 48 2a12:e100:3::/48 maxlen: 48 2a12:e100:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:55:2e:12:d8:da:84:05:4b:96:5c:65:36:b5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f52fb75a569622123371daa0201c69d5b4c4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:22:3e:1a:f6:65:46:7b:e8:bf:45:07:b2: b8:f9:94:1f:97:2b:f0:b4:bd:ca:f9:82:f4:d5:59: 8b:ee:5e:f9:c5:58:5f:f6:ca:df:6c:f3:55:ea:49: cd:33:d1:2c:bf:cc:8b:4d:51:1a:f0:36:16:a9:b1: a7:21:0a:2d:16:3a:06:22:e3:ce:7a:c0:d2:9d:e0: 28:8c:bc:80:1c:f4:ef:6f:b1:94:26:a0:2e:6c:0c: cd:0c:54:19:2a:d3:11:4a:13:a4:d5:71:30:66:29: 27:4c:13:0f:6e:01:09:34:43:82:f7:9d:c5:9b:a8: 56:90:04:03:d6:a8:fe:dc:b3:40:0d:a4:6b:29:26: c0:5d:ef:5d:e7:6c:f3:6d:56:f0:a9:08:96:eb:9f: a4:a7:5f:c1:03:8c:c4:d2:d1:30:3d:50:51:76:6e: be:72:3e:10:2f:6b:67:71:85:ae:6c:a1:4b:a5:f1: 93:72:ae:5d:02:01:8b:2f:74:9b:38:7e:dc:07:4b: a4:b3:84:53:b3:69:03:59:46:0e:86:51:c3:26:29: 3c:8b:3f:f0:9e:d5:e3:9c:9d:e1:09:8d:ae:16:9d: 4f:02:10:a5:b0:fa:d6:82:db:4a:7f:ed:b5:f6:ac: 7e:34:68:ad:f5:ef:f1:95:9a:ac:14:e3:90:a6:a8: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F5:2F:B7:5A:56:96:22:12:33:71:DA:A0:20:1C:69:D5:B4:C4:AC X509v3 Authority Key Identifier: keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/ovUvt1pWliISM3HaoCAcadW0xKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:e100:1::-2a12:e100:3:ffff:ffff:ffff:ffff:ffff 2a12:e100:10::/44 Signature Algorithm: sha256WithRSAEncryption 0f:f4:34:a5:bb:09:e4:5f:ec:45:d8:df:91:ed:95:a9:23:1b: 1d:ea:b1:f8:e4:9c:39:b5:20:d6:3e:ca:08:aa:f2:9c:b9:60: 05:31:fb:7b:35:4a:62:8e:60:54:46:fe:0b:e4:84:6b:85:f5: 34:d8:d4:9e:79:71:bf:26:f9:d9:b3:0d:76:30:59:d5:b5:52: a4:1b:0e:a9:fe:ea:4e:7a:46:6c:ed:13:dc:0a:14:3d:6d:8b: 23:90:d0:15:9e:33:69:2f:ea:88:cc:2f:9c:d1:0f:77:35:24: 92:2b:34:9b:5e:4e:b7:ff:31:0d:be:e2:20:fc:f2:bc:9f:6f: 5f:48:9a:d4:62:41:f2:d5:88:ee:3f:76:d0:e2:e8:17:65:25: 3f:91:9e:1c:c4:bb:c1:56:62:9a:72:e5:c4:45:c4:e6:ae:39: af:37:1c:ab:83:3e:aa:61:5c:4c:3b:fd:28:53:00:d8:1b:cd: df:1d:3a:3f:52:8e:19:7f:14:d3:c4:9c:41:d7:9d:4a:c1:d3: 75:73:0e:44:d1:82:8f:0b:04:86:d2:57:53:f0:f9:45:df:63: f2:c3:93:5a:c9:a9:a8:3e:14:0a:b6:be:6f:1d:ac:0a:33:32: b9:ae:bc:05:84:35:75:ed:5a:c4:b7:30:43:34:67:e8:18:07: 35:fb:23:71 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4o1UuEtjahAVLllxlNrXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGY3ZjViNjYxOGJkYTIzYzgzYmVkMTFiNDQyMDQxZjFm YjQ1NmQwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmY1MmZiNzVhNTY5NjIyMTIzMzcxZGFhMDIwMWM2OWQ1YjRjNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEgiPhr2ZUZ76L9FB7K4+ZQflyvw tL3K+YL01VmL7l75xVhf9srfbPNV6knNM9Esv8yLTVEa8DYWqbGnIQotFjoGIuPO esDSneAojLyAHPTvb7GUJqAubAzNDFQZKtMRShOk1XEwZiknTBMPbgEJNEOC953F m6hWkAQD1qj+3LNADaRrKSbAXe9d52zzbVbwqQiW65+kp1/BA4zE0tEwPVBRdm6+ cj4QL2tncYWubKFLpfGTcq5dAgGLL3SbOH7cB0uks4RTs2kDWUYOhlHDJik8iz/w ntXjnJ3hCY2uFp1PAhClsPrWgttKf+219qx+NGit9e/xlZqsFOOQpqgq6QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKL1L7daVpYiEjNx2qAgHGnVtMSsMB8GA1UdIwQY MBaAFKDff1tmGL2iPIO+0RtEIEHx+0VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEt NWY0YmM5MDBjMDNkLzEvb3ZVdnQxcFdsaUlTTTNIYW9DQWNhZFcweEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEtNWY0YmM5MDBjMDNk LzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAqEuEA AAEDBwIqEuEAAAADBwQqEuEAABAwDQYJKoZIhvcNAQELBQADggEBAA/0NKW7CeRf 7EXY35HtlakjGx3qsfjknDm1INY+ygiq8py5YAUx+3s1SmKOYFRG/gvkhGuF9TTY 1J55cb8m+dmzDXYwWdW1UqQbDqn+6k56RmztE9wKFD1tiyOQ0BWeM2kv6ojML5zR D3c1JJIrNJteTrf/MQ2+4iD88ryfb19ImtRiQfLViO4/dtDi6BdlJT+RnhzEu8FW Yppy5cRFxOauOa83HKuDPqphXEw7/ShTANgbzd8dOj9Sjhl/FNPEnEHXnUrB03Vz DkTRgo8LBIbSV1Pw+UXfY/LDk1rJqag+FAq2vm8drAozMrmuvAWENXXtWsS3MEM0 Z+gYBzX7I3E= -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:27 2026 by rpki-client