This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/o1g6d4IpK0z2pKch2obiVEvKpo0.roa File: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (raw, json) Hash identifier: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE= Subject key identifier: A3:58:3A:77:82:29:2B:4C:F6:A4:A7:21:DA:86:E2:54:4B:CA:A6:8D Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019B78A21B6D3591A3EE0C6A15EE739DD7B6 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/o1g6d4IpK0z2pKch2obiVEvKpo0.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47705 IP address blocks: 2a02:2000:3c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1b:6d:35:91:a3:ee:0c:6a:15:ee:73:9d:d7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3583a7782292b4cf6a4a721da86e2544bcaa68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6b:f0:10:ac:a8:f4:e4:a5:c3:3c:63:35:4b: b7:8d:ab:c3:a4:29:fd:d2:a9:1f:d2:9e:64:d4:3d: 36:db:bc:84:4f:1b:5f:37:a9:12:ce:63:19:68:8a: 65:9e:3e:f6:07:3c:85:55:bd:d5:43:3d:69:7f:69: 16:f6:e6:1e:12:c9:ae:63:a9:d9:87:f4:5c:60:06: 20:b3:44:af:d3:1a:e9:1a:d9:4a:a0:cb:df:bf:34: 6e:3c:29:fc:9f:75:96:83:f5:04:29:68:3f:11:25: 2e:98:7c:df:8a:dd:07:2f:ba:32:08:92:83:57:76: f9:a4:bb:ef:e7:b1:ce:91:6f:4c:b6:c8:06:8c:3a: c0:bc:da:76:e9:89:04:eb:f0:0b:bc:f6:da:1c:ae: 9c:b9:69:bc:e9:e1:a4:cc:48:34:fe:bf:6d:5a:4e: 2e:f2:c3:e5:65:45:7c:66:44:46:fa:97:70:e7:75: 2f:94:1d:94:c8:d9:f2:c2:16:00:76:eb:1e:75:4e: 56:72:eb:4a:9b:bc:25:7b:cb:4d:0e:22:0e:76:f9: 73:af:54:86:6d:c8:30:89:25:27:87:30:5f:8a:13: 0d:e8:fd:4b:05:d1:6e:fe:5f:5a:b9:91:5f:63:7a: 16:d8:2e:c3:3f:54:dd:09:bf:d5:ec:19:99:f1:2d: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:3A:77:82:29:2B:4C:F6:A4:A7:21:DA:86:E2:54:4B:CA:A6:8D X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/o1g6d4IpK0z2pKch2obiVEvKpo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2000:3c7::/48 Signature Algorithm: sha256WithRSAEncryption 10:3f:6f:74:ff:08:77:22:5f:47:0d:cc:81:b5:65:90:42:d1: cc:5b:5f:47:fc:38:eb:3f:85:72:16:0d:63:24:1d:a5:db:d3: ea:7c:1b:b2:ee:b5:f2:bc:d9:4b:12:ba:c5:9a:9f:27:b0:ef: ac:f5:18:e1:cd:20:ab:65:9b:a4:a8:aa:be:b5:84:a7:79:4b: 1e:94:91:1f:c8:ee:b1:3e:91:66:a9:b1:04:34:30:58:ae:e7: b6:dd:bc:99:69:72:8a:bf:a4:d4:6d:eb:31:43:d4:b0:56:44: e8:b9:51:1b:b1:0c:4f:40:43:f7:31:67:50:f3:a6:89:f6:f2: 4a:3d:5e:71:87:76:7a:f6:17:f1:2c:cd:5c:91:cc:7c:92:00: 94:5c:77:54:a1:c2:cd:1f:7f:3a:94:bb:4e:01:8d:e8:81:ac: b7:f3:0c:22:27:0b:f3:3e:70:52:30:75:92:3e:68:2e:42:55: bb:4e:18:09:f5:d2:49:61:35:87:4a:c9:19:c3:62:1f:ac:d2: 2e:5f:62:4c:bb:b7:87:f1:a1:81:6b:b0:f2:ac:cd:01:d7:ea: 6d:0c:b8:41:b8:6e:42:3c:97:6a:aa:1a:e8:4f:6a:5b:56:54: 3f:5a:01:75:28:90:18:e4:ee:cd:55:67:0a:cc:70:ff:84:95: 1e:76:c6:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ohttNZGj7gxqFe5znde2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzU4M2E3NzgyMjkyYjRjZjZhNGE3MjFkYTg2ZTI1NDRiY2FhNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62vwEKyo9OSlwzxjNUu3javDpCn9 0qkf0p5k1D0227yETxtfN6kSzmMZaIplnj72BzyFVb3VQz1pf2kW9uYeEsmuY6nZ h/RcYAYgs0Sv0xrpGtlKoMvfvzRuPCn8n3WWg/UEKWg/ESUumHzfit0HL7oyCJKD V3b5pLvv57HOkW9MtsgGjDrAvNp26YkE6/ALvPbaHK6cuWm86eGkzEg0/r9tWk4u 8sPlZUV8ZkRG+pdw53UvlB2UyNnywhYAdusedU5WcutKm7wle8tNDiIOdvlzr1SG bcgwiSUnhzBfihMN6P1LBdFu/l9auZFfY3oW2C7DP1TdCb/V7BmZ8S0iHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKNYOneCKStM9qSnIdqG4lRLyqaNMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvbzFnNmQ0SXBLMHoycEtjaDJvYmlWRXZLcG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgAAPH MA0GCSqGSIb3DQEBCwUAA4IBAQAQP290/wh3Il9HDcyBtWWQQtHMW19H/DjrP4Vy Fg1jJB2l29PqfBuy7rXyvNlLErrFmp8nsO+s9RjhzSCrZZukqKq+tYSneUselJEf yO6xPpFmqbEENDBYrue23byZaXKKv6TUbesxQ9SwVkTouVEbsQxPQEP3MWdQ86aJ 9vJKPV5xh3Z69hfxLM1ckcx8kgCUXHdUocLNH386lLtOAY3ogay38wwiJwvzPnBS MHWSPmguQlW7ThgJ9dJJYTWHSskZw2IfrNIuX2JMu7eH8aGBa7DyrM0B1+ptDLhB uG5CPJdqqhroT2pbVlQ/WgF1KJAY5O7NVWcKzHD/hJUedsbG -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:36 2026 by rpki-client