This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/oX2NoeenvY6od0noJwHOC0vVDFU.roa File: oX2NoeenvY6od0noJwHOC0vVDFU.roa (raw, json) Hash identifier: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4= Subject key identifier: A1:7D:8D:A1:E7:A7:BD:8E:A8:77:49:E8:27:01:CE:0B:4B:D5:0C:55 Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019B7C129BF79FC9A816220A56282CCE2C28 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/oX2NoeenvY6od0noJwHOC0vVDFU.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48518 IP address blocks: 2a04:9ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9b:f7:9f:c9:a8:16:22:0a:56:28:2c:ce:2c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a17d8da1e7a7bd8ea87749e82701ce0b4bd50c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:db:eb:35:a3:b4:9f:92:9e:2f:d3:cd:8e: 89:d3:a0:4a:e7:70:95:80:24:0c:1c:e7:da:f5:ff: 0f:cb:b6:82:06:bb:61:15:2a:b0:a8:49:51:a4:45: 4e:93:cb:12:3d:4a:c4:11:fe:01:a2:99:e4:ea:5d: b1:11:99:cb:c7:db:0d:78:ff:79:a0:71:44:b3:47: 72:01:a2:97:b4:ea:7a:18:35:8a:0b:0c:61:94:f3: 6d:a0:e7:d7:f4:cf:f6:99:12:91:1d:e5:e6:eb:d1: 45:fb:02:ca:2d:76:07:46:43:f0:fd:93:a2:88:fa: a5:39:ba:bb:8e:f3:d2:59:7d:ad:14:59:15:e0:f7: 96:35:dc:dc:3f:02:85:91:7f:1d:4d:f8:6d:17:40: 1a:c7:cd:82:38:e3:e5:4b:70:01:05:14:fb:83:b2: f6:ee:5b:2e:cd:e2:fb:03:49:8b:8f:6b:ca:7d:68: 74:bb:f6:2f:50:bb:bd:54:c0:93:cf:78:10:bd:27: c6:4a:45:f0:60:3c:82:ff:5e:98:b9:9a:b6:e5:ef: 18:88:78:f5:fb:15:57:55:c3:a1:9d:4d:1d:9b:db: 24:7e:68:3f:3e:b0:57:da:48:c7:75:77:ea:23:26: cd:03:ce:e7:f3:a1:50:15:f5:b6:b5:11:04:02:92: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7D:8D:A1:E7:A7:BD:8E:A8:77:49:E8:27:01:CE:0B:4B:D5:0C:55 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/oX2NoeenvY6od0noJwHOC0vVDFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9ac0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:4e:2c:59:bf:86:26:1d:9e:57:fb:cf:e8:53:0f:98:f8:df: 3e:d4:25:95:f6:b3:cd:61:f4:a5:c6:31:43:82:5f:27:6d:e3: dc:13:79:11:7d:c1:b4:de:fc:ee:44:af:65:8f:42:7c:2a:3e: dc:30:ea:dd:5f:e8:45:d8:f3:db:58:4e:b6:0d:64:20:50:59: 8b:aa:ec:13:dd:61:60:67:97:9a:82:18:49:d6:c0:35:2d:63: 04:1b:eb:b6:c3:ea:be:36:46:79:8b:6e:50:fe:a5:4d:fb:3a: fd:65:29:74:32:63:f5:9c:a2:64:b9:f6:b0:71:2e:69:07:5c: 66:81:a4:a6:cd:91:30:db:19:e4:c3:ee:ad:e6:bb:34:f1:73: fa:3a:1c:1c:89:4f:bd:b3:b9:e6:81:c9:63:d8:61:d1:28:48: d8:7a:ce:1b:ce:9a:cf:a4:15:11:b5:4c:96:c3:8e:c1:c6:ba: 10:c4:9e:49:83:4f:69:73:28:e7:69:c2:f0:1c:8d:c3:2f:bf: d1:1c:e6:09:0d:85:dd:e4:da:88:47:26:2f:a3:2b:b1:76:d6: 8a:13:c6:e8:47:15:96:cc:8b:ec:b5:09:f9:29:6a:20:61:bb: a6:e4:08:cb:7d:f3:7d:01:8c:ef:b9:f2:c5:12:85:82:50:e8: 75:85:07:e8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8Epv3n8moFiIKVigsziwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTdkOGRhMWU3YTdiZDhlYTg3NzQ5ZTgyNzAxY2UwYjRiZDUwYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGXb6zWjtJ+Sni/TzY6J06BK53CV gCQMHOfa9f8Py7aCBrthFSqwqElRpEVOk8sSPUrEEf4Bopnk6l2xEZnLx9sNeP95 oHFEs0dyAaKXtOp6GDWKCwxhlPNtoOfX9M/2mRKRHeXm69FF+wLKLXYHRkPw/ZOi iPqlObq7jvPSWX2tFFkV4PeWNdzcPwKFkX8dTfhtF0Aax82COOPlS3ABBRT7g7L2 7lsuzeL7A0mLj2vKfWh0u/YvULu9VMCTz3gQvSfGSkXwYDyC/16YuZq25e8YiHj1 +xVXVcOhnU0dm9skfmg/PrBX2kjHdXfqIybNA87n86FQFfW2tREEApL8gwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKF9jaHnp72OqHdJ6CcBzgtL1QxVMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvb1gyTm9lZW52WTZvZDBub0p3SE9DMHZWREZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgSawDAN BgkqhkiG9w0BAQsFAAOCAQEAnk4sWb+GJh2eV/vP6FMPmPjfPtQllfazzWH0pcYx Q4JfJ23j3BN5EX3BtN787kSvZY9CfCo+3DDq3V/oRdjz21hOtg1kIFBZi6rsE91h YGeXmoIYSdbANS1jBBvrtsPqvjZGeYtuUP6lTfs6/WUpdDJj9ZyiZLn2sHEuaQdc ZoGkps2RMNsZ5MPurea7NPFz+jocHIlPvbO55oHJY9hh0ShI2HrOG86az6QVEbVM lsOOwca6EMSeSYNPaXMo52nC8ByNwy+/0RzmCQ2F3eTaiEcmL6MrsXbWihPG6EcV lsyL7LUJ+SlqIGG7puQIy33zfQGM77nyxRKFglDodYUH6A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:32 2026 by rpki-client