This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa File: o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa (raw, json) Hash identifier: nvE8qeryTr//Reac2hWZ5hljnKgUhEZaoFIZpYMG4H0= Subject key identifier: A3:80:8A:00:70:9E:5D:AD:D5:52:FB:53:13:F6:D9:F0:C8:22:09:2D Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149 Certificate serial: 019B7E37856591397AB7AE1ED7F0E009F148 Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5400 IP address blocks: 2a0c:8480::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:85:65:91:39:7a:b7:ae:1e:d7:f0:e0:09:f1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3808a00709e5dadd552fb5313f6d9f0c822092d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:29:8b:4f:30:26:bc:42:95:0f:2a:d2:02: dc:be:51:d4:f3:1b:13:df:15:e0:f2:04:e7:d8:6d: 05:9c:5d:f4:33:e1:4d:a0:e2:88:ce:84:af:d5:fb: 52:81:e6:02:a1:90:03:90:c9:72:03:e3:39:39:fc: b1:06:8f:8c:6e:cd:b3:d3:8d:82:33:db:53:41:ef: c0:de:97:60:db:5c:ab:53:d6:04:44:92:7b:00:de: 17:d5:03:8d:50:4c:e4:9d:43:e3:79:29:99:d0:a6: af:a0:b5:b6:29:3e:70:e6:82:aa:e5:03:56:6d:ef: 54:65:ed:2c:38:78:a4:41:22:57:30:ac:6e:d0:9e: ce:90:6a:70:aa:ac:e1:5c:6d:e9:a6:4a:15:25:16: 0b:eb:28:30:e6:3e:b7:48:34:a8:6f:e3:69:86:c6: 7a:00:cc:ec:27:e1:15:3f:cc:0f:1f:d1:07:5a:b4: 58:ed:56:fd:5f:d2:22:c4:4d:24:d6:17:d1:11:36: 74:f5:33:cd:97:eb:86:65:a2:e5:d1:df:a7:1f:c3: 9f:cf:f2:4b:27:72:01:2e:76:80:c1:52:76:2f:44: 16:0a:ea:c1:91:ae:50:5a:d8:c7:9d:be:79:ab:f6: db:ef:b8:12:33:ea:9d:f7:3d:78:7e:ea:73:af:8f: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:80:8A:00:70:9E:5D:AD:D5:52:FB:53:13:F6:D9:F0:C8:22:09:2D X509v3 Authority Key Identifier: keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/o4CKAHCeXa3VUvtTE_bZ8MgiCS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:8480::/30 Signature Algorithm: sha256WithRSAEncryption 1f:cf:b2:56:ec:65:12:a7:02:62:2e:bd:1a:0c:2f:d5:88:8c: 42:fd:fe:76:47:ef:6e:51:48:e1:0f:8e:a0:4b:fa:8b:a4:0c: 6b:e2:26:e7:1c:53:68:2f:f8:1b:19:dd:28:9c:ca:67:8d:08: fd:62:33:b0:3f:80:ed:ef:68:2f:48:84:c1:4a:ca:6b:d6:aa: 28:ab:c8:91:cb:6b:1f:de:f5:1f:11:1b:da:c7:8d:52:82:e3: 8e:06:87:52:26:83:66:37:c2:71:30:b7:52:13:75:24:36:eb: 5d:f3:2e:84:0a:cb:9d:4a:39:c1:d3:86:d6:9d:e5:93:a5:17: 3a:28:15:46:27:90:8a:4b:1c:46:83:17:18:24:32:5d:db:52: 99:ea:9f:d0:d9:03:81:92:bd:c1:31:af:71:25:65:64:fd:77: ea:3d:a0:fc:2b:9f:df:1f:07:53:e4:54:c7:2d:a6:eb:1b:07: 25:7e:d0:97:a8:55:61:38:9f:79:e6:42:0b:2d:c7:67:b7:4a: 64:55:0b:41:b5:09:48:aa:2a:e5:09:df:75:80:37:84:d2:2e: 6c:55:7b:60:72:72:04:72:57:7a:49:d5:ba:56:1c:b6:66:b8: dc:e3:87:a4:d7:1f:ef:df:f9:5c:69:33:ad:59:c7:7e:cb:fa: d1:cd:41:9b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+N4VlkTl6t64e1/DgCfFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh NWIxNDkwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzgwOGEwMDcwOWU1ZGFkZDU1MmZiNTMxM2Y2ZDlmMGM4MjIwOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl8pi08wJrxClQ8q0gLcvlHU8xsT 3xXg8gTn2G0FnF30M+FNoOKIzoSv1ftSgeYCoZADkMlyA+M5OfyxBo+Mbs2z042C M9tTQe/A3pdg21yrU9YERJJ7AN4X1QONUEzknUPjeSmZ0KavoLW2KT5w5oKq5QNW be9UZe0sOHikQSJXMKxu0J7OkGpwqqzhXG3ppkoVJRYL6ygw5j63SDSob+NphsZ6 AMzsJ+EVP8wPH9EHWrRY7Vb9X9IixE0k1hfRETZ09TPNl+uGZaLl0d+nH8Ofz/JL J3IBLnaAwVJ2L0QWCurBka5QWtjHnb55q/bb77gSM+qd9z14fupzr4/jCwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKOAigBwnl2t1VL7UxP22fDIIgktMB8GA1UdIwQY MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt MjQwNjk4ZmJkZGZmLzEvbzRDS0FIQ2VYYTNWVXZ0VEVfYlo4TWdpQ1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgyEgDAN BgkqhkiG9w0BAQsFAAOCAQEAH8+yVuxlEqcCYi69Ggwv1YiMQv3+dkfvblFI4Q+O oEv6i6QMa+Im5xxTaC/4GxndKJzKZ40I/WIzsD+A7e9oL0iEwUrKa9aqKKvIkctr H971HxEb2seNUoLjjgaHUiaDZjfCcTC3UhN1JDbrXfMuhArLnUo5wdOG1p3lk6UX OigVRieQikscRoMXGCQyXdtSmeqf0NkDgZK9wTGvcSVlZP136j2g/Cuf3x8HU+RU xy2m6xsHJX7Ql6hVYTifeeZCCy3HZ7dKZFULQbUJSKoq5QnfdYA3hNIubFV7YHJy BHJXeknVulYctma43OOHpNcf79/5XGkzrVnHfsv60c1Bmw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:06 2026 by rpki-client