This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/o6CKLxYggPeiiX1D9vYaNcoUmok.roa File: o6CKLxYggPeiiX1D9vYaNcoUmok.roa (raw, json) Hash identifier: yjKnYZloxvwn6n8eF6XO6CXodzrxTjJCVdcAnVEjNN4= Subject key identifier: A3:A0:8A:2F:16:20:80:F7:A2:89:7D:43:F6:F6:1A:35:CA:14:9A:89 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE1A64136C3920FFFD4B4AAB0B427 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/o6CKLxYggPeiiX1D9vYaNcoUmok.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142146 IP address blocks: 217.25.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e1:a6:41:36:c3:92:0f:ff:d4:b4:aa:b0:b4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3a08a2f162080f7a2897d43f6f61a35ca149a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:38:9d:78:bf:c3:55:f7:7a:c9:b4:42:56: c5:ed:fe:cf:f4:75:b7:d5:9c:9a:a4:6f:97:56:4c: 28:31:7c:ae:c9:39:62:a7:76:dd:e8:b8:65:fd:41: 1e:cd:d7:dd:ff:2c:f4:ca:8d:08:e0:96:ff:3a:fb: 09:0f:5e:66:f3:8b:0b:8e:76:a3:92:e5:b6:87:8d: d3:a1:8c:78:9f:a1:52:33:81:6b:b8:ba:7e:60:f4: 4e:33:ca:5c:a7:b7:43:70:01:bb:a6:f3:03:84:7d: 2b:7d:e1:80:09:e7:51:d2:6d:01:f4:8f:7a:12:81: de:a1:64:4e:9a:5f:4e:b7:08:4a:49:9a:46:21:19: cf:66:c7:f1:6b:6a:f9:64:2c:9c:11:50:1f:7d:87: 2a:fc:57:dc:b6:c4:85:2d:ed:56:2a:bb:4f:ff:ce: 99:1c:f7:38:9c:5a:1a:0b:dc:52:b8:bf:a5:89:6c: 1b:8f:8b:e3:0b:7b:86:23:c7:0d:c5:a4:ce:34:f7: 93:6a:2a:08:a5:c3:cf:23:81:22:32:71:f0:ec:1a: 70:7a:46:04:8c:cf:be:93:5b:53:34:b2:9a:99:f0: e3:86:8a:31:8b:94:06:3b:3b:a1:8d:6f:47:97:61: d0:43:9d:a2:e6:31:5c:fe:09:02:17:7e:99:73:74: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A0:8A:2F:16:20:80:F7:A2:89:7D:43:F6:F6:1A:35:CA:14:9A:89 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/o6CKLxYggPeiiX1D9vYaNcoUmok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.25.4.0/24 Signature Algorithm: sha256WithRSAEncryption 81:5f:8e:6f:f3:95:b3:88:0a:50:ac:00:8b:72:6d:b0:06:c2: 5b:74:ca:72:df:55:f5:d2:e5:55:9f:a0:70:ac:15:25:2b:fb: fe:d7:f5:3a:1f:57:2a:74:02:11:0c:26:83:4b:a0:9b:a3:9e: cd:8c:f4:b7:e3:58:35:1e:af:21:71:66:ae:73:84:82:75:b2: 57:82:84:e6:c5:67:2c:e4:e5:12:fe:7a:63:e1:77:a8:ad:12: 3f:ce:29:fa:9f:7b:6c:90:b5:b6:05:7c:5e:3f:31:6f:a5:1a: 9b:a4:58:1f:ca:b7:29:5e:cc:fb:f5:0f:6a:cd:9f:1d:dd:b2: a9:e7:04:6a:43:34:a7:a8:83:7c:af:0d:72:ee:96:92:94:3d: 8b:01:19:3a:a0:8d:2e:1b:e1:2c:fa:ea:2e:d4:df:f2:46:6c: 14:bf:4d:76:0f:d1:3e:ce:44:42:42:0e:a9:79:62:74:cd:ce: 79:c0:45:0b:5e:bb:c1:97:08:6b:6a:bd:65:f4:cf:c5:f9:be: f4:95:1d:d0:1f:8e:e4:e7:b1:2b:3f:94:82:c1:6e:45:e1:c2: f2:55:9e:f4:79:3e:e4:c3:bf:a4:14:4c:ea:ee:66:e6:0c:8a: 63:c5:ae:4e:e1:68:2d:34:d3:32:5d:51:1b:6e:d7:89:20:0d: f0:c7:94:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuGmQTbDkg//1LSqsLQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2EwOGEyZjE2MjA4MGY3YTI4OTdkNDNmNmY2MWEzNWNhMTQ5YTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6o4nXi/w1X3esm0QlbF7f7P9HW3 1ZyapG+XVkwoMXyuyTlip3bd6Lhl/UEezdfd/yz0yo0I4Jb/OvsJD15m84sLjnaj kuW2h43ToYx4n6FSM4FruLp+YPROM8pcp7dDcAG7pvMDhH0rfeGACedR0m0B9I96 EoHeoWROml9OtwhKSZpGIRnPZsfxa2r5ZCycEVAffYcq/FfctsSFLe1WKrtP/86Z HPc4nFoaC9xSuL+liWwbj4vjC3uGI8cNxaTONPeTaioIpcPPI4EiMnHw7BpwekYE jM++k1tTNLKamfDjhooxi5QGOzuhjW9Hl2HQQ52i5jFc/gkCF36Zc3Rj6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKOgii8WIID3ool9Q/b2GjXKFJqJMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvbzZDS0x4WWdnUGVpaVgxRDl2WWFOY29VbW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RkEMA0G CSqGSIb3DQEBCwUAA4IBAQCBX45v85WziApQrACLcm2wBsJbdMpy31X10uVVn6Bw rBUlK/v+1/U6H1cqdAIRDCaDS6Cbo57NjPS341g1Hq8hcWauc4SCdbJXgoTmxWcs 5OUS/npj4XeorRI/zin6n3tskLW2BXxePzFvpRqbpFgfyrcpXsz79Q9qzZ8d3bKp 5wRqQzSnqIN8rw1y7paSlD2LARk6oI0uG+Es+uou1N/yRmwUv012D9E+zkRCQg6p eWJ0zc55wEULXrvBlwhrar1l9M/F+b70lR3QH47k57ErP5SCwW5F4cLyVZ70eT7k w7+kFEzq7mbmDIpjxa5O4WgtNNMyXVEbbteJIA3wx5QB -----END CERTIFICATE-----Generated at Wed Jan 21 21:32:01 2026 by rpki-client