This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/0wjE02Yih3QAwuX89YG9WK4LcqU.roa File: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (raw, json) Hash identifier: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc= Subject key identifier: D3:08:C4:D3:66:22:87:74:00:C2:E5:FC:F5:81:BD:58:AE:0B:72:A5 Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019B7D5C55BB5D07278155DF7D84391C33E5 Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/0wjE02Yih3QAwuX89YG9WK4LcqU.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33667 IP address blocks: 2a03:2887:ff31::/48 maxlen: 48 2a03:2887:ff32::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:55:bb:5d:07:27:81:55:df:7d:84:39:1c:33:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d308c4d36622877400c2e5fcf581bd58ae0b72a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:14:c5:d5:a0:83:04:02:4a:43:17:d7:da: 1c:89:a3:81:e6:53:0a:3a:5a:b6:97:2f:5e:2e:db: 70:91:82:21:4d:b7:ee:12:42:83:48:91:c7:63:e5: d5:79:eb:46:fa:28:85:45:75:b2:8c:92:7c:d3:40: d2:a0:3a:f5:81:3a:ce:e5:14:93:e3:7a:9a:9b:c7: 9a:2b:0d:4d:c8:72:29:26:7d:4d:9f:89:a4:34:2b: 59:4f:ea:80:a7:0d:a4:64:e5:cc:ba:5d:36:06:00: 32:af:76:d5:20:f6:8d:20:ab:39:b6:90:4c:cd:cc: 3a:02:61:f8:85:f7:d4:ce:8f:b0:8f:bd:ea:78:92: 60:4d:03:ed:c5:4b:aa:64:ec:a4:a4:0b:3a:a8:70: 2a:2b:cf:75:ec:b1:2f:4a:29:87:29:55:03:84:82: 1d:a7:43:4c:e7:28:8f:84:c3:a5:09:99:37:c0:fa: 1e:a7:c5:b2:eb:87:a0:e4:2f:db:9e:cb:86:bb:17: d5:0e:3b:31:83:b1:4c:24:ae:cc:f5:28:16:96:90: 5c:9e:da:60:fa:1d:30:0f:6f:28:ac:49:e5:a5:fa: 55:21:e7:bb:e8:49:c9:f3:c5:6c:93:a6:81:66:08: 59:ba:76:49:1b:9f:08:0e:08:6c:1f:6c:ae:87:6f: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:08:C4:D3:66:22:87:74:00:C2:E5:FC:F5:81:BD:58:AE:0B:72:A5 X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/0wjE02Yih3QAwuX89YG9WK4LcqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2887:ff31::-2a03:2887:ff32:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3e:47:27:5e:01:5a:91:da:1e:98:e8:f4:a6:ce:83:e5:0a:57: 77:84:05:df:25:60:82:9b:33:1f:0e:97:c3:50:f6:97:4a:fa: 66:28:34:92:b7:92:98:7e:25:c3:3a:f2:c4:a7:44:8a:51:86: 9e:b3:1e:d0:da:76:02:63:f3:3e:c2:04:2a:d2:50:ca:6b:c0: 90:9f:7b:a1:73:d1:f4:56:40:b4:4a:b2:ab:16:54:de:52:2d: ce:b3:5d:1d:81:8d:7c:b1:ed:b9:22:f9:59:af:8e:2e:e0:e7: 9d:69:ea:40:6e:a5:20:d7:9c:69:9a:58:80:3e:7a:ea:29:89: ac:01:74:c2:fa:9b:20:d7:16:e9:76:b6:f2:be:12:a8:bb:7e: ea:4f:63:1d:42:f9:43:cc:10:29:47:8e:60:80:3e:9f:f7:79: 82:85:f7:a6:e7:cc:46:3e:e9:f7:af:eb:86:0c:4d:e6:8c:db: 87:22:4a:fa:2e:b4:37:1f:45:d6:5e:ba:03:13:3d:fa:44:21: eb:74:35:0d:6a:9f:26:ed:06:df:7c:8d:b9:73:7d:8e:b4:31: a8:1d:e4:76:60:22:93:48:41:51:fe:97:31:5d:2e:8f:e9:ed: 55:86:85:90:cf:ae:41:96:4c:ad:fb:b3:5d:6e:5e:01:65:68: dc:41:9b:d5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XFW7XQcngVXffYQ5HDPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzA4YzRkMzY2MjI4Nzc0MDBjMmU1ZmNmNTgxYmQ1OGFlMGI3MmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pMUxdWggwQCSkMX19ociaOB5lMK Olq2ly9eLttwkYIhTbfuEkKDSJHHY+XVeetG+iiFRXWyjJJ800DSoDr1gTrO5RST 43qam8eaKw1NyHIpJn1Nn4mkNCtZT+qApw2kZOXMul02BgAyr3bVIPaNIKs5tpBM zcw6AmH4hffUzo+wj73qeJJgTQPtxUuqZOykpAs6qHAqK8917LEvSimHKVUDhIId p0NM5yiPhMOlCZk3wPoep8Wy64eg5C/bnsuGuxfVDjsxg7FMJK7M9SgWlpBcntpg +h0wD28orEnlpfpVIee76EnJ88Vsk6aBZghZunZJG58IDghsH2yuh29LswIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNMIxNNmIod0AMLl/PWBvViuC3KlMB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvMHdqRTAyWWloM1FBd3VYODlZRzlXSzRMY3FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqAyiH /zEDBwAqAyiH/zIwDQYJKoZIhvcNAQELBQADggEBAD5HJ14BWpHaHpjo9KbOg+UK V3eEBd8lYIKbMx8Ol8NQ9pdK+mYoNJK3kph+JcM68sSnRIpRhp6zHtDadgJj8z7C BCrSUMprwJCfe6Fz0fRWQLRKsqsWVN5SLc6zXR2BjXyx7bki+Vmvji7g551p6kBu pSDXnGmaWIA+euopiawBdML6myDXFul2tvK+Eqi7fupPYx1C+UPMEClHjmCAPp/3 eYKF96bnzEY+6fev64YMTeaM24ciSvoutDcfRdZeugMTPfpEIet0NQ1qnybtBt98 jblzfY60Magd5HZgIpNIQVH+lzFdLo/p7VWGhZDPrkGWTK37s11uXgFlaNxBm9U= -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:32 2026 by rpki-client