This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/opV5K4TDIZwg2_Ke6wz0k_YRsno.roa File: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (raw, json) Hash identifier: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U= Subject key identifier: A2:95:79:2B:84:C3:21:9C:20:DB:F2:9E:EB:0C:F4:93:F6:11:B2:7A Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2 Certificate serial: 019B7CED5309CA61CAC87F786C7F56174FF2 Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/opV5K4TDIZwg2_Ke6wz0k_YRsno.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 2a0d:3c0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:53:09:ca:61:ca:c8:7f:78:6c:7f:56:17:4f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2 Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a295792b84c3219c20dbf29eeb0cf493f611b27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:cc:99:de:a8:c4:ec:8f:4b:52:40:ed:61: e4:e6:a9:03:df:4b:77:9e:f1:77:12:4b:41:71:ce: c0:d7:39:3d:28:e5:8f:78:28:f0:7c:80:0d:dd:c7: a0:75:69:6d:c3:18:a1:99:16:db:96:d5:e2:cf:76: 5f:41:86:f0:7d:a7:72:e2:d3:b8:52:d1:b2:04:a6: 12:17:8f:29:94:b7:02:b4:bc:96:75:b5:42:fc:90: e8:c5:db:18:11:a5:20:8d:06:46:c2:be:49:7b:ec: c4:f1:e7:0a:4a:90:55:0e:56:3b:ba:9b:25:01:bf: b7:86:92:85:34:7b:a0:73:7b:88:56:b4:4e:99:4c: 8c:d3:fc:a7:5a:28:f3:d2:bb:e2:de:fd:ed:57:4f: 15:a1:88:bc:e3:62:2b:c5:bf:c2:f0:b0:fa:37:a3: 10:5d:dc:03:67:05:9f:f6:08:98:5d:29:bd:d1:d0: 81:83:2e:32:25:29:de:c6:e7:67:c6:e6:63:a5:14: 32:39:e6:ad:dd:ac:e4:c6:7f:44:f7:41:83:c5:84: 4b:b1:bc:10:53:4d:78:da:05:82:9c:03:f8:df:79: 56:47:4c:18:46:97:fc:73:9f:73:5a:10:fa:3c:14: ed:bc:1e:da:c0:e5:94:c3:61:09:94:82:d0:59:11: 0d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:79:2B:84:C3:21:9C:20:DB:F2:9E:EB:0C:F4:93:F6:11:B2:7A X509v3 Authority Key Identifier: keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/opV5K4TDIZwg2_Ke6wz0k_YRsno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:3c0::/40 Signature Algorithm: sha256WithRSAEncryption 5c:c7:9e:7a:98:15:76:3f:09:a1:64:04:19:04:c3:93:dc:9c: 79:7f:e5:ce:5e:7c:e7:1e:9a:ee:7a:5a:a1:d0:5f:6c:f6:40: 99:71:e8:e6:a8:84:08:9a:ac:64:a2:f5:38:e0:4e:c5:55:a0: 84:27:5a:f2:e7:88:41:bd:06:8d:48:0d:2c:f8:b5:bc:5e:b7: 8f:6c:24:ab:00:b5:0b:e9:71:3b:6e:dc:7b:91:3c:d2:39:8e: 78:56:ca:2a:5d:d3:82:43:08:9a:60:8b:1c:4b:2b:bd:37:58: 85:3b:d4:0c:f2:d4:94:b0:6e:61:bd:5a:8d:d8:52:f8:26:a7: a4:b3:39:e9:57:3f:4e:b6:00:ea:72:0c:6d:7f:5c:cd:af:41: ec:e1:4b:4a:fd:3e:34:6e:0c:1f:fe:53:9d:51:03:53:28:6c: d5:fd:c9:01:4b:5b:bc:e7:cf:da:64:ce:f4:59:21:5e:59:fd: ad:42:d0:46:07:01:e0:07:e2:93:1a:8c:23:dc:ee:3d:2f:14: 6e:04:5b:bd:3c:45:c3:08:89:92:d2:c2:d7:b0:ac:1a:4e:08: d4:f9:70:b6:ba:b5:ee:de:a5:ea:d5:81:4a:54:a5:2e:a4:ca: f4:88:e0:1a:7d:3f:21:3e:45:e0:38:e7:22:1c:a4:93:6e:e6: 3c:bb:3a:6d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87VMJymHKyH94bH9WF0/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3 NzJjZDIwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjk1NzkyYjg0YzMyMTljMjBkYmYyOWVlYjBjZjQ5M2Y2MTFiMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4XMmd6oxOyPS1JA7WHk5qkD30t3 nvF3EktBcc7A1zk9KOWPeCjwfIAN3cegdWltwxihmRbbltXiz3ZfQYbwfady4tO4 UtGyBKYSF48plLcCtLyWdbVC/JDoxdsYEaUgjQZGwr5Je+zE8ecKSpBVDlY7upsl Ab+3hpKFNHugc3uIVrROmUyM0/ynWijz0rvi3v3tV08VoYi842Irxb/C8LD6N6MQ XdwDZwWf9giYXSm90dCBgy4yJSnexudnxuZjpRQyOeat3azkxn9E90GDxYRLsbwQ U0142gWCnAP433lWR0wYRpf8c59zWhD6PBTtvB7awOWUw2EJlILQWREN8QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKKVeSuEwyGcINvynusM9JP2EbJ6MB8GA1UdIwQY MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt ZWM1NzhlMWNjZWVkLzEvb3BWNUs0VERJWndnMl9LZTZ3ejBrX1lSc25vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg0DwAAw DQYJKoZIhvcNAQELBQADggEBAFzHnnqYFXY/CaFkBBkEw5PcnHl/5c5efOcemu56 WqHQX2z2QJlx6OaohAiarGSi9TjgTsVVoIQnWvLniEG9Bo1IDSz4tbxet49sJKsA tQvpcTtu3HuRPNI5jnhWyipd04JDCJpgixxLK703WIU71Azy1JSwbmG9Wo3YUvgm p6SzOelXP062AOpyDG1/XM2vQezhS0r9PjRuDB/+U51RA1MobNX9yQFLW7znz9pk zvRZIV5Z/a1C0EYHAeAH4pMajCPc7j0vFG4EW708RcMIiZLSwtewrBpOCNT5cLa6 te7eperVgUpUpS6kyvSI4Bp9PyE+ReA45yIcpJNu5jy7Om0= -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:02 2026 by rpki-client