This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa File: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (raw, json) Hash identifier: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM= Subject key identifier: A0:57:2F:E2:9E:C4:31:A6:67:FF:E1:D3:62:C9:3B:C5:AF:0F:C2:64 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCCC6573DF983F88AE20F8EE06936 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51396 IP address blocks: 2a11:5780::/30 maxlen: 30 2a11:5784::/30 maxlen: 30 2a12:5a00::/30 maxlen: 30 2a12:5a04::/30 maxlen: 30 2a12:8100::/30 maxlen: 30 2a12:8104::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:c6:57:3d:f9:83:f8:8a:e2:0f:8e:e0:69:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0572fe29ec431a667ffe1d362c93bc5af0fc264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:4c:38:08:8f:d1:33:dc:0f:72:f2:c5:f7: 2c:c6:6f:c3:d7:f2:64:e9:0b:ae:27:37:81:e1:a0: cd:fd:14:59:65:84:ad:55:9d:2d:16:0e:f2:99:6f: f8:ee:dc:77:fe:a5:e3:f8:ae:e0:24:32:38:ee:29: 39:34:e3:d9:e4:a4:14:99:5d:ec:f6:c9:ff:d8:bc: 25:66:4a:05:e8:e8:fe:02:6d:8c:fa:10:53:a8:32: b2:cc:e6:35:69:50:bc:ee:3d:87:d4:63:83:39:0e: c7:7f:89:9c:4b:15:fb:4d:2b:68:59:c2:1b:7b:67: 7c:d5:ea:55:da:4a:49:ef:26:6b:39:2c:02:4d:11: 27:89:a8:77:c4:47:bc:4b:78:90:a1:4a:fe:b3:27: 6c:cb:49:e5:0d:b2:bb:c2:09:83:bb:cf:6b:87:f7: 99:13:ce:ec:74:68:a0:e7:19:fa:88:3d:92:ec:bd: 14:be:d9:c7:4c:0a:2a:20:d0:9c:a3:b2:fa:67:ea: d5:3d:cf:65:f4:b2:42:be:4e:dd:a0:50:77:c7:71: e5:86:df:14:55:f1:e8:41:36:61:7f:a3:5e:ac:0d: fe:be:52:fb:d8:ca:52:f1:84:1e:59:3b:50:e2:20: 06:78:59:64:ce:6f:0b:dc:52:49:b5:4b:99:3f:da: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:57:2F:E2:9E:C4:31:A6:67:FF:E1:D3:62:C9:3B:C5:AF:0F:C2:64 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:5780::/29 2a12:5a00::/29 2a12:8100::/29 Signature Algorithm: sha256WithRSAEncryption 78:7a:74:5c:9f:cb:2e:9a:a4:62:0f:bf:46:65:9c:2e:70:de: 35:28:48:c0:34:19:85:b0:8a:20:56:6f:69:63:df:64:eb:fb: bd:d0:38:91:28:b2:5b:33:fb:45:1f:db:cd:c4:af:01:f0:0b: 43:ab:0b:f7:a3:f3:9e:ee:d0:8c:dc:78:be:00:0d:b8:07:ec: a7:40:86:a3:1f:0c:24:39:0a:42:2b:88:17:22:56:ce:1a:85: 48:7e:ec:67:72:61:af:51:b9:fb:3a:ed:40:ab:ab:98:48:a5: a5:18:84:12:f0:ea:a7:95:3f:e2:9d:02:d8:e3:69:b3:e0:96: d6:af:87:5f:98:71:2f:78:fe:85:b5:9a:44:f1:73:0c:14:8e: 2a:a8:fe:e2:00:5f:fa:6b:43:b4:77:30:c6:c8:01:b6:57:e9: f2:80:60:31:46:39:89:28:32:6f:93:68:10:a8:0f:e6:cd:79: b0:1f:fd:d9:dc:87:91:c5:5c:63:76:4f:23:5c:cd:2d:1a:02: 6b:50:4a:b4:6b:dd:fe:f7:6a:a8:f6:ac:cd:ab:2b:5f:b3:7d: fc:a9:0f:97:5c:01:66:17:c2:59:fb:6b:69:20:52:ef:c5:17: 1d:b1:41:e7:fb:e3:f4:f6:02:14:6b:01:1f:7a:cf:20:10:b8: 37:9c:f2:db -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XMzGVz35g/iK4g+O4Gk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDU3MmZlMjllYzQzMWE2NjdmZmUxZDM2MmM5M2JjNWFmMGZjMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXFMOAiP0TPcD3Lyxfcsxm/D1/Jk 6QuuJzeB4aDN/RRZZYStVZ0tFg7ymW/47tx3/qXj+K7gJDI47ik5NOPZ5KQUmV3s 9sn/2LwlZkoF6Oj+Am2M+hBTqDKyzOY1aVC87j2H1GODOQ7Hf4mcSxX7TStoWcIb e2d81epV2kpJ7yZrOSwCTREniah3xEe8S3iQoUr+sydsy0nlDbK7wgmDu89rh/eZ E87sdGig5xn6iD2S7L0UvtnHTAoqINCco7L6Z+rVPc9l9LJCvk7doFB3x3Hlht8U VfHoQTZhf6NerA3+vlL72MpS8YQeWTtQ4iAGeFlkzm8L3FJJtUuZP9rZ7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKBXL+KexDGmZ//h02LJO8WvD8JkMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvb0ZjdjRwN0VNYVpuXy1IVFlzazd4YThQd21RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhFXgAMF AyoSWgADBQMqEoEAMA0GCSqGSIb3DQEBCwUAA4IBAQB4enRcn8sumqRiD79GZZwu cN41KEjANBmFsIogVm9pY99k6/u90DiRKLJbM/tFH9vNxK8B8AtDqwv3o/Oe7tCM 3Hi+AA24B+ynQIajHwwkOQpCK4gXIlbOGoVIfuxncmGvUbn7Ou1Aq6uYSKWlGIQS 8OqnlT/inQLY42mz4JbWr4dfmHEveP6FtZpE8XMMFI4qqP7iAF/6a0O0dzDGyAG2 V+nygGAxRjmJKDJvk2gQqA/mzXmwH/3Z3IeRxVxjdk8jXM0tGgJrUEq0a93+92qo 9qzNqytfs338qQ+XXAFmF8JZ+2tpIFLvxRcdsUHn++P09gIUawEfes8gELg3nPLb -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:21 2026 by rpki-client