This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/oSUSV9XksEu-hj7frAtIPDI4QUc.roa File: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (raw, json) Hash identifier: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s= Subject key identifier: A1:25:12:57:D5:E4:B0:4B:BE:86:3E:DF:AC:0B:48:3C:32:38:41:47 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B7A5AABC90373DAA0B7A0FBBCEFE8ECE4 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/oSUSV9XksEu-hj7frAtIPDI4QUc.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50395 IP address blocks: 2001:67c:1b0::/48 maxlen: 48 2a0d:2d45::/32 maxlen: 32 2a0e:c6c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ab:c9:03:73:da:a0:b7:a0:fb:bc:ef:e8:ec:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1251257d5e4b04bbe863edfac0b483c32384147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:0f:3c:96:a4:6a:6b:c7:be:58:58:3c:70: b3:7c:3e:0a:4e:8b:6d:0e:fa:85:c5:60:d3:4e:64: 22:2d:96:c3:b5:92:f6:01:91:1c:31:56:9c:1c:f2: 3a:13:d2:c6:cb:e9:05:34:cd:ce:da:85:54:6b:0f: 2a:b7:31:1f:15:33:58:08:fc:42:45:ee:1b:9e:37: e9:d3:1e:69:5b:f7:c4:57:db:7b:4f:64:de:8a:8a: ca:84:17:92:c2:be:51:54:f2:f1:4e:6e:f3:a4:b9: 7e:25:ad:ac:f1:6d:3b:af:fd:4c:ed:0e:e1:f8:27: ad:be:20:c3:b4:d2:ca:d2:ee:7a:66:8d:25:78:de: 7f:e2:47:91:f6:a7:6c:21:a9:5c:e1:a5:ba:fe:89: 33:b1:52:b2:99:7a:b6:5b:a9:65:03:1c:38:44:76: 4d:cd:65:a9:9a:ba:65:bc:b5:b8:2c:f7:65:9b:52: 62:49:fb:ff:fa:4b:01:08:e3:49:1b:5a:36:0e:bd: 7c:c1:76:23:62:4c:47:f4:b1:8f:b8:c5:73:62:ce: 06:f9:99:04:d4:ca:01:12:a7:4c:b2:2a:17:7e:56: 66:c9:be:ed:d0:fe:19:b2:91:9b:33:f0:a9:f6:ce: bf:7c:b3:0a:83:40:1c:7f:bd:47:6e:9e:95:69:9c: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:12:57:D5:E4:B0:4B:BE:86:3E:DF:AC:0B:48:3C:32:38:41:47 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/oSUSV9XksEu-hj7frAtIPDI4QUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1b0::/48 2a0d:2d45::/32 2a0e:c6c6::/32 Signature Algorithm: sha256WithRSAEncryption 71:26:89:d5:64:25:12:29:df:f7:9f:40:00:b3:46:c0:28:cb: 2c:22:b5:70:46:74:3f:57:a8:99:c2:47:ff:96:4f:45:4f:1a: 81:cd:be:f4:67:5e:a8:a9:d6:ea:95:fd:0a:6d:02:fa:f2:ec: 9a:9c:5d:fc:53:cb:93:29:e4:20:02:5e:7f:f6:be:ae:7a:ff: dc:5c:c1:ba:19:10:56:ef:40:7b:fd:9a:d5:3f:2a:10:a3:39: ad:29:e4:63:d7:0c:48:eb:74:15:91:21:9d:b9:b5:bd:d3:7d: 64:00:7a:d4:53:d1:c6:f7:a2:11:49:63:3b:5f:6a:33:bc:dd: 21:33:15:73:ca:f0:7d:1e:ca:a7:31:ee:f4:2d:d9:50:5a:6b: 5c:40:05:2d:07:6c:ec:3e:e5:b2:77:31:56:e7:97:4b:0b:3a: 0e:65:c0:d4:56:aa:c1:ba:ee:78:7b:f3:d4:25:6f:ef:2e:df: 8c:a5:2e:db:a8:6a:6d:00:58:2c:df:c1:7b:93:f5:7d:eb:c3: da:3f:72:fb:3e:e7:ef:de:e8:c3:87:e0:a2:30:10:94:de:60: 31:f6:ef:57:07:7b:a8:4b:1a:cd:6e:43:49:b2:da:3e:b3:dc: 50:b4:77:79:23:23:88:d5:2d:d3:49:88:53:a0:67:db:a6:21: 6a:91:ae:4c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WqvJA3PaoLeg+7zv6OzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTI1MTI1N2Q1ZTRiMDRiYmU4NjNlZGZhYzBiNDgzYzMyMzg0MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/kPPJakamvHvlhYPHCzfD4KTott DvqFxWDTTmQiLZbDtZL2AZEcMVacHPI6E9LGy+kFNM3O2oVUaw8qtzEfFTNYCPxC Re4bnjfp0x5pW/fEV9t7T2TeiorKhBeSwr5RVPLxTm7zpLl+Ja2s8W07r/1M7Q7h +CetviDDtNLK0u56Zo0leN5/4keR9qdsIalc4aW6/okzsVKymXq2W6llAxw4RHZN zWWpmrplvLW4LPdlm1JiSfv/+ksBCONJG1o2Dr18wXYjYkxH9LGPuMVzYs4G+ZkE 1MoBEqdMsioXflZmyb7t0P4ZspGbM/Cp9s6/fLMKg0Acf71Hbp6VaZz/2wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKElElfV5LBLvoY+36wLSDwyOEFHMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvb1NVU1Y5WGtzRXUtaGo3ZnJBdElQREk0UVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXAwcAIAEGfAGw AwUAKg0tRQMFACoOxsYwDQYJKoZIhvcNAQELBQADggEBAHEmidVkJRIp3/efQACz RsAoyywitXBGdD9XqJnCR/+WT0VPGoHNvvRnXqip1uqV/QptAvry7JqcXfxTy5Mp 5CACXn/2vq56/9xcwboZEFbvQHv9mtU/KhCjOa0p5GPXDEjrdBWRIZ25tb3TfWQA etRT0cb3ohFJYztfajO83SEzFXPK8H0eyqcx7vQt2VBaa1xABS0HbOw+5bJ3MVbn l0sLOg5lwNRWqsG67nh789Qlb+8u34ylLtuoam0AWCzfwXuT9X3rw9o/cvs+5+/e 6MOH4KIwEJTeYDH271cHe6hLGs1uQ0my2j6z3FC0d3kjI4jVLdNJiFOgZ9umIWqR rkw= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:04 2026 by rpki-client