This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/oa7xclPWOANlu86ailSyWI_SQhI.roa File: oa7xclPWOANlu86ailSyWI_SQhI.roa (raw, json) Hash identifier: o8aDlt3R/Sz/MaNPGXv2qlYMmPH0QqPJXMaia7wcAjM= Subject key identifier: A1:AE:F1:72:53:D6:38:03:65:BB:CE:9A:8A:54:B2:58:8F:D2:42:12 Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Certificate serial: 019B7E3876308E35FB0F356DED4B23B939E8 Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/oa7xclPWOANlu86ailSyWI_SQhI.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215655 IP address blocks: 2a05:7a80:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:76:30:8e:35:fb:0f:35:6d:ed:4b:23:b9:39:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1aef17253d6380365bbce9a8a54b2588fd24212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:3f:98:58:76:01:d1:cb:e3:c3:a3:62:d4: 78:45:f4:33:c5:39:e3:29:3e:24:eb:b4:63:d4:c2: 32:0c:c6:2d:d5:c0:5c:49:91:0a:c1:c5:ba:30:19: b9:48:43:c3:59:58:f9:6b:b1:66:b8:10:ae:89:92: 85:c9:ff:2b:53:af:07:1d:da:92:19:30:ea:e4:4c: 2d:5c:4d:6f:bc:c7:88:39:14:da:58:88:ca:d9:e3: 7f:34:67:9f:f7:b5:c5:a7:3d:5f:52:8d:50:74:49: 6f:d9:36:f9:0d:4f:75:e5:9b:2f:c4:b6:f0:fa:81: 65:48:6e:80:94:cb:35:b0:f5:a6:1a:0e:c3:58:50: 8a:48:38:d1:29:d8:21:f9:a4:78:24:b6:3f:31:d3: e8:8e:9c:19:48:41:58:9f:2d:c0:13:5f:aa:cb:b8: b3:77:bc:4e:36:a5:55:2f:e6:0c:c0:d4:7c:23:e1: da:ed:2b:0d:29:68:19:bc:69:6a:b2:78:f9:9a:be: 64:ff:cf:78:41:97:bc:36:ec:5e:7d:1d:7a:16:f6: 75:63:5e:49:b9:49:57:fc:80:69:9d:ca:87:d2:be: d5:8a:a8:c0:29:20:72:b0:93:31:82:24:01:8e:91: af:e8:47:c9:5a:05:25:4e:7a:45:bf:03:f8:4c:e2: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AE:F1:72:53:D6:38:03:65:BB:CE:9A:8A:54:B2:58:8F:D2:42:12 X509v3 Authority Key Identifier: keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/oa7xclPWOANlu86ailSyWI_SQhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:7a80:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 8b:bf:74:78:88:c7:7e:5f:56:57:e5:44:e1:76:ce:d2:1e:0b: b0:71:15:2e:7c:18:a3:5c:2e:10:01:6c:54:be:14:89:8b:28: 07:7a:a6:21:60:c5:b1:07:a0:e8:89:ef:81:59:b4:b4:95:93: b1:01:23:c1:db:c4:aa:38:37:3f:d4:f8:ff:1c:b6:a5:8d:f8: c4:55:a4:bf:ec:3a:e0:61:2e:c2:84:7c:55:71:ce:04:77:4b: 55:7a:8d:cd:19:e3:f8:ca:a8:94:05:45:85:5a:82:70:e6:c5: 88:e0:f1:2f:ba:a8:a7:63:72:8f:bd:b1:7f:45:f4:da:a3:b2: c4:76:e0:55:2d:97:0f:b2:18:72:b6:40:fa:b2:08:04:0b:20: 0a:80:fc:1f:28:85:bf:91:28:e0:db:ab:31:71:2e:37:fb:49: 32:06:dc:aa:66:d5:0e:df:d5:55:9d:a4:cc:0b:5d:b8:f2:f7: d5:0f:36:79:04:1e:51:fc:42:66:da:f3:dd:3b:69:ab:34:97: c2:ee:32:c5:50:e0:20:3a:39:5c:96:34:22:0b:ef:27:73:f1: df:b2:58:3c:ed:eb:d9:35:ae:dc:39:8f:1c:8d:94:04:01:1a: 6a:b0:69:71:98:9f:0b:08:6f:d4:6c:20:3a:f8:b9:01:54:7c: 4c:2a:e1:03 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OHYwjjX7DzVt7UsjuTnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy YmRhYjMwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWFlZjE3MjUzZDYzODAzNjViYmNlOWE4YTU0YjI1ODhmZDI0MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWE/mFh2AdHL48OjYtR4RfQzxTnj KT4k67Rj1MIyDMYt1cBcSZEKwcW6MBm5SEPDWVj5a7FmuBCuiZKFyf8rU68HHdqS GTDq5EwtXE1vvMeIORTaWIjK2eN/NGef97XFpz1fUo1QdElv2Tb5DU915ZsvxLbw +oFlSG6AlMs1sPWmGg7DWFCKSDjRKdgh+aR4JLY/MdPojpwZSEFYny3AE1+qy7iz d7xONqVVL+YMwNR8I+Ha7SsNKWgZvGlqsnj5mr5k/894QZe8NuxefR16FvZ1Y15J uUlX/IBpncqH0r7ViqjAKSBysJMxgiQBjpGv6EfJWgUlTnpFvwP4TOIX2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKGu8XJT1jgDZbvOmopUsliP0kISMB8GA1UdIwQY MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt OWNmYTJjN2Q4MTZlLzEvb2E3eGNsUFdPQU5sdTg2YWlsU3lXSV9TUWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgV6gP// MA0GCSqGSIb3DQEBCwUAA4IBAQCLv3R4iMd+X1ZX5UThds7SHguwcRUufBijXC4Q AWxUvhSJiygHeqYhYMWxB6Doie+BWbS0lZOxASPB28SqODc/1Pj/HLaljfjEVaS/ 7DrgYS7ChHxVcc4Ed0tVeo3NGeP4yqiUBUWFWoJw5sWI4PEvuqinY3KPvbF/RfTa o7LEduBVLZcPshhytkD6sggECyAKgPwfKIW/kSjg26sxcS43+0kyBtyqZtUO39VV naTMC1248vfVDzZ5BB5R/EJm2vPdO2mrNJfC7jLFUOAgOjlcljQiC+8nc/Hfslg8 7evZNa7cOY8cjZQEARpqsGlxmJ8LCG/UbCA6+LkBVHxMKuED -----END CERTIFICATE-----Generated at Tue Jan 27 00:06:24 2026 by rpki-client