This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa File: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (raw, json) Hash identifier: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA= Subject key identifier: 8D:3D:20:F2:55:71:DD:D7:00:31:A2:B1:63:13:0E:6B:70:E4:10:86 Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019B7CEE538E71703F91AA47CA47ECFA80FF Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48292 IP address blocks: 2a0f:6580::/48 maxlen: 48 2a0f:6580:1::/48 maxlen: 48 2a0f:6580:2::/48 maxlen: 48 2a0f:6580:3::/48 maxlen: 48 2a0f:6580:4::/48 maxlen: 48 2a0f:6580:5::/48 maxlen: 48 2a0f:6580:6::/48 maxlen: 48 2a0f:6580:7::/48 maxlen: 48 2a0f:6580:8::/48 maxlen: 48 2a0f:6580:9::/48 maxlen: 48 2a0f:6580:a::/48 maxlen: 48 2a0f:6580:b::/48 maxlen: 48 2a0f:6580:c::/48 maxlen: 48 2a0f:6580:d::/48 maxlen: 48 2a0f:6580:e::/48 maxlen: 48 2a0f:6580:f::/48 maxlen: 48 2a0f:6580:101::/48 maxlen: 48 2a0f:6580:102::/48 maxlen: 48 2a0f:6580:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:8e:71:70:3f:91:aa:47:ca:47:ec:fa:80:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d3d20f25571ddd70031a2b163130e6b70e41086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:fb:9c:01:f7:fa:4f:48:61:43:d9:3f:47: 4c:b5:cf:b7:c5:bf:8e:71:44:d6:0f:9e:c6:f8:31: 1c:ba:4e:06:71:35:24:b6:19:63:62:82:25:fd:68: 2d:e5:22:78:bb:ff:ff:f9:0e:50:82:90:85:b6:c0: df:42:88:35:24:2e:68:0f:8b:77:ff:68:93:c7:3c: aa:87:54:53:1e:98:ff:ac:75:0f:70:e2:6c:48:8e: 0a:8e:56:f0:08:88:91:a2:ea:8a:b1:13:cd:bc:ce: b1:1f:49:9f:e3:8c:e5:b3:09:86:53:53:84:91:f4: d0:47:02:bc:fe:11:b6:6c:47:8d:c1:4b:e9:e2:6f: 94:e0:3d:c0:4c:29:79:e7:5b:78:08:6f:47:b4:2c: f2:e8:b4:95:69:08:3b:4e:e4:61:2d:d5:e8:48:8d: 48:1f:ae:0b:a1:bc:25:99:b3:77:e2:48:77:91:9d: 2f:63:b5:80:59:6d:b1:15:4b:2f:a6:d0:14:54:f8: 15:0c:f1:97:c1:3c:3a:19:8f:78:7c:28:c3:5e:a1: e9:26:56:33:1a:0d:f6:2e:a9:ab:a3:3e:74:99:6e: a3:3b:41:fc:20:97:84:33:3f:5a:ac:37:0d:be:43: c4:e7:59:21:d0:dc:0d:5d:ba:34:3f:32:da:ab:10: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3D:20:F2:55:71:DD:D7:00:31:A2:B1:63:13:0E:6B:70:E4:10:86 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6580::/44 2a0f:6580:101::-2a0f:6580:103:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption d2:47:be:2a:ba:4b:04:7b:0e:4f:8e:d4:13:7f:a1:9b:52:67: 3f:be:be:f2:46:bb:2d:5b:56:05:36:17:0f:b9:b4:fb:30:87: ae:a2:7c:0f:5e:63:b1:ed:ec:30:b8:98:23:01:c1:64:f2:6f: 7e:aa:17:49:92:98:f6:55:8f:0d:e5:6d:a0:af:46:98:ad:d1: 92:1a:f2:5f:6a:95:24:fe:c3:03:21:0a:b2:3e:b8:53:4a:d6: e5:82:b6:fd:2d:80:82:5f:3a:b6:ef:fb:0f:35:e7:6d:e7:23: 64:d2:48:6d:bf:5b:38:81:18:00:78:1d:e4:55:04:8f:fd:8a: 9d:cd:ac:b8:17:dc:df:eb:77:e0:36:17:aa:6b:b5:10:cf:20: 55:df:ed:59:19:67:2a:0e:70:3c:e3:5a:db:79:60:2a:97:58: 85:9b:8f:03:60:43:e6:05:4f:dc:44:6a:a6:c8:eb:0b:0d:80: 75:a9:41:80:81:c3:4c:f0:f9:33:65:99:a2:14:9f:e1:0d:58: f8:f9:75:bd:4c:78:5d:64:0d:36:fc:38:b1:5d:ab:62:e6:f8: ab:39:9f:f4:c5:7c:d5:63:83:c6:f1:61:d3:69:5c:aa:08:57: 99:0b:26:76:cc:67:a8:75:bc:f3:ff:5a:50:ae:6a:e5:7b:52: e5:da:dd:5a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87lOOcXA/kapHykfs+oD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDNkMjBmMjU1NzFkZGQ3MDAzMWEyYjE2MzEzMGU2YjcwZTQxMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorH7nAH3+k9IYUPZP0dMtc+3xb+O cUTWD57G+DEcuk4GcTUkthljYoIl/Wgt5SJ4u///+Q5QgpCFtsDfQog1JC5oD4t3 /2iTxzyqh1RTHpj/rHUPcOJsSI4KjlbwCIiRouqKsRPNvM6xH0mf44zlswmGU1OE kfTQRwK8/hG2bEeNwUvp4m+U4D3ATCl551t4CG9HtCzy6LSVaQg7TuRhLdXoSI1I H64LobwlmbN34kh3kZ0vY7WAWW2xFUsvptAUVPgVDPGXwTw6GY94fCjDXqHpJlYz Gg32Lqmroz50mW6jO0H8IJeEMz9arDcNvkPE51kh0NwNXbo0PzLaqxDtjQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFI09IPJVcd3XADGisWMTDmtw5BCGMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvalQwZzhsVngzZGNBTWFLeFl4TU9hM0RrRUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcEKg9lgAAA MBIDBwAqD2WAAQEDBwIqD2WAAQAwDQYJKoZIhvcNAQELBQADggEBANJHviq6SwR7 Dk+O1BN/oZtSZz++vvJGuy1bVgU2Fw+5tPswh66ifA9eY7Ht7DC4mCMBwWTyb36q F0mSmPZVjw3lbaCvRpit0ZIa8l9qlST+wwMhCrI+uFNK1uWCtv0tgIJfOrbv+w81 523nI2TSSG2/WziBGAB4HeRVBI/9ip3NrLgX3N/rd+A2F6prtRDPIFXf7VkZZyoO cDzjWtt5YCqXWIWbjwNgQ+YFT9xEaqbI6wsNgHWpQYCBw0zw+TNlmaIUn+ENWPj5 db1MeF1kDTb8OLFdq2Lm+Ks5n/TFfNVjg8bxYdNpXKoIV5kLJnbMZ6h1vPP/WlCu auV7UuXa3Vo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:06 2026 by rpki-client