This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/0OeNkvd-8MMdjkKEPWgT5tWh42M.roa File: 0OeNkvd-8MMdjkKEPWgT5tWh42M.roa (raw, json) Hash identifier: 14QSl+lc6zLbErHcCROg/UYo6UZFnpjBPJYqshbFvSQ= Subject key identifier: D0:E7:8D:92:F7:7E:F0:C3:1D:8E:42:84:3D:68:13:E6:D5:A1:E3:63 Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Certificate serial: 019A9AB55B7F8FDA077D3F3A683830276F60 Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/0OeNkvd-8MMdjkKEPWgT5tWh42M.roa Signing time: Wed 19 Nov 2025 06:02:47 +0000 ROA not before: Wed 19 Nov 2025 06:02:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139317 IP address blocks: 2a0a:d680::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:b5:5b:7f:8f:da:07:7d:3f:3a:68:38:30:27:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Validity Not Before: Nov 19 06:02:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0e78d92f77ef0c31d8e42843d6813e6d5a1e363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:a5:fc:fe:ec:b1:b5:df:da:12:73:39:a1: fa:e4:16:e3:60:54:9d:61:b5:49:ee:18:ad:54:b8: 63:10:4c:19:44:b4:d9:83:94:d1:0d:02:63:13:09: fb:e5:36:a0:cc:dd:22:87:73:db:12:f8:3a:e1:45: 6a:39:ba:e1:4a:a0:4c:c4:ec:ef:25:9e:94:6e:b7: 4d:08:4c:53:72:b2:b4:b8:42:b2:af:7e:5d:ff:db: 92:98:11:a4:ee:b9:2e:45:50:21:e0:3e:e0:56:28: 7a:43:a9:39:a4:37:f9:75:99:b7:d2:27:54:70:0b: 88:d9:17:9f:3e:80:6d:cb:9f:42:d1:c5:38:fd:ef: fa:bb:75:a8:ff:c3:97:f4:99:94:86:3a:4a:df:50: 5c:c3:d9:8d:93:9c:cd:cf:e8:1a:38:8b:e4:ed:e4: 01:a0:ca:f2:bb:4b:fb:9e:32:39:db:65:d0:44:ff: 21:31:42:99:51:d9:a0:1b:6a:46:12:ad:55:7f:42: fe:f4:18:4a:cd:40:22:01:5f:4c:95:22:5c:35:85: f4:9d:1b:4c:3f:ac:26:94:7d:aa:6c:36:5f:59:69: a7:99:da:d1:6b:cc:e5:93:69:5b:9f:a2:4a:78:48: 88:24:13:5b:00:8b:ac:78:26:d8:a4:e3:88:20:2c: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E7:8D:92:F7:7E:F0:C3:1D:8E:42:84:3D:68:13:E6:D5:A1:E3:63 X509v3 Authority Key Identifier: keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/0OeNkvd-8MMdjkKEPWgT5tWh42M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d680::/29 Signature Algorithm: sha256WithRSAEncryption 81:60:98:12:b6:f1:16:74:93:65:99:3f:3b:4e:c6:a2:2b:f6: f1:25:a2:6d:58:a1:10:e1:1b:d6:31:40:01:9b:67:c0:59:01: f9:ba:94:9a:dd:19:d1:04:26:6b:68:f1:a1:83:3c:d0:a4:1c: 47:7f:c4:7b:a3:79:53:a4:6b:04:07:b3:b7:a8:12:02:98:24: 75:77:94:31:bf:59:da:87:fb:a2:df:b0:11:c0:17:2e:a5:63: 4e:3f:68:73:6d:b1:ec:bd:a7:28:6d:8e:4b:42:06:ec:5b:f7: ba:7a:43:41:b9:b2:f1:ea:b4:84:f1:9e:fa:88:47:cf:d7:76: 54:27:79:d2:b7:15:07:f6:a4:79:10:ea:6b:fd:f4:fc:b0:32: ca:2f:d4:8c:6a:ef:bc:05:e0:be:bf:2e:ab:45:7b:40:fd:f9: a3:af:71:00:d8:18:fe:36:78:53:99:d2:4f:4f:5c:8c:26:d5: 53:b6:e9:7c:dd:67:5d:ed:f5:9c:09:f5:c7:2f:bf:3d:dd:a6: 67:f5:25:cf:aa:28:da:dc:22:92:fd:6d:ec:12:c1:a0:fe:6b: 23:29:da:12:2f:77:fa:0b:3d:db:29:67:37:39:5e:6e:ee:e5: 80:54:9e:ff:db:35:b1:88:f2:03:e2:ff:9f:6a:25:24:91:62: 8b:11:2b:92 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqatVt/j9oHfT86aDgwJ29gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzQ0ZGE3OWYwNTMxYTczYWQ2ZjRiYWYwODM3ZTkzZWI2 ODAxYjEwHhcNMjUxMTE5MDYwMjQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGU3OGQ5MmY3N2VmMGMzMWQ4ZTQyODQzZDY4MTNlNmQ1YTFlMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ul/P7ssbXf2hJzOaH65BbjYFSd YbVJ7hitVLhjEEwZRLTZg5TRDQJjEwn75TagzN0ih3PbEvg64UVqObrhSqBMxOzv JZ6UbrdNCExTcrK0uEKyr35d/9uSmBGk7rkuRVAh4D7gVih6Q6k5pDf5dZm30idU cAuI2RefPoBty59C0cU4/e/6u3Wo/8OX9JmUhjpK31Bcw9mNk5zNz+gaOIvk7eQB oMryu0v7njI522XQRP8hMUKZUdmgG2pGEq1Vf0L+9BhKzUAiAV9MlSJcNYX0nRtM P6wmlH2qbDZfWWmnmdrRa8zlk2lbn6JKeEiIJBNbAIuseCbYpOOIICzzXQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNDnjZL3fvDDHY5ChD1oE+bVoeNjMB8GA1UdIwQY MBaAFJt0TaefBTGnOtb0uvCDfpPraAGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUt OTJhYjgwZTJlZmQ1LzEvME9lTmt2ZC04TU1kamtLRVBXZ1Q1dFdoNDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUtOTJhYjgwZTJlZmQ1 LzEvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrWgDAN BgkqhkiG9w0BAQsFAAOCAQEAgWCYErbxFnSTZZk/O07Goiv28SWibVihEOEb1jFA AZtnwFkB+bqUmt0Z0QQma2jxoYM80KQcR3/Ee6N5U6RrBAezt6gSApgkdXeUMb9Z 2of7ot+wEcAXLqVjTj9oc22x7L2nKG2OS0IG7Fv3unpDQbmy8eq0hPGe+ohHz9d2 VCd50rcVB/akeRDqa/30/LAyyi/UjGrvvAXgvr8uq0V7QP35o69xANgY/jZ4U5nS T09cjCbVU7bpfN1nXe31nAn1xy+/Pd2mZ/Ulz6oo2twikv1t7BLBoP5rIynaEi93 +gs92ylnNzlebu7lgFSe/9s1sYjyA+L/n2olJJFiixErkg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:03 2025 by rpki-client