This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/ODwSvh8QvIx4C5RaxVj3WEz78js.roa File: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (raw, json) Hash identifier: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw= Subject key identifier: 38:3C:12:BE:1F:10:BC:8C:78:0B:94:5A:C5:58:F7:58:4C:FB:F2:3B Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC9426959C6C9F90618D2942662E7A5 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/ODwSvh8QvIx4C5RaxVj3WEz78js.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214784 IP address blocks: 2a04:5b81:21c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:42:69:59:c6:c9:f9:06:18:d2:94:26:62:e7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=383c12be1f10bc8c780b945ac558f7584cfbf23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:35:1f:5b:09:36:fa:4b:4b:d6:c6:83:ba:c9: b0:af:d0:6c:89:b3:1e:4c:cd:a5:a5:31:75:27:0a: 8f:3f:b8:7f:0c:90:f8:77:5a:97:9f:56:89:e5:ee: 6f:71:86:eb:92:25:1a:3b:59:04:9c:0b:94:11:de: fa:c9:fe:0f:32:14:01:c0:ab:01:34:8c:88:c4:93: 3f:bd:24:59:33:be:41:5c:e9:f6:38:e7:e5:a1:01: 24:05:16:0a:81:b6:e1:52:10:78:77:ae:27:d6:a0: 34:33:8a:e2:a2:70:ec:1e:04:41:fd:17:0a:ca:92: d0:69:76:98:2e:17:10:7d:64:ea:9f:d6:98:85:77: 07:c8:f3:bf:99:4e:83:35:c2:f2:0d:72:49:1c:ad: 63:ea:61:1e:a8:8b:e8:a1:13:98:27:9b:9c:43:2a: 50:db:3f:9c:c0:10:46:73:16:3e:51:bc:89:66:72: 3f:dc:eb:df:c0:e3:79:5b:77:fd:50:50:3f:dd:a7: 44:10:50:0e:a3:c1:ec:01:e7:e3:b0:e4:c6:8c:b9: 1f:75:95:ba:26:5b:93:eb:b6:77:77:ce:e1:96:25: 16:01:ff:36:f0:24:7d:a0:82:ed:21:77:bd:73:a9: b3:60:7a:8c:5b:e2:0b:62:93:f5:5d:6c:06:26:c3: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3C:12:BE:1F:10:BC:8C:78:0B:94:5A:C5:58:F7:58:4C:FB:F2:3B X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/ODwSvh8QvIx4C5RaxVj3WEz78js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:21c0::/44 Signature Algorithm: sha256WithRSAEncryption 43:a4:a6:8b:75:da:a3:0d:d8:a5:09:e9:65:e0:46:e8:a2:e1: f0:0c:36:f5:25:13:a7:6b:37:1c:88:09:87:04:8d:fb:e0:1c: 02:bd:8e:1a:dd:a5:b1:29:16:97:4f:25:1a:33:67:51:51:54: 20:64:12:89:77:0e:3f:fa:94:63:50:91:74:ec:94:d5:26:25: 82:6c:d1:98:9c:c4:bc:7d:1b:64:53:5d:e0:51:a9:18:e6:4d: 8a:a7:58:ee:a1:7b:34:33:22:92:2c:20:b7:b4:f0:eb:c1:dc: 9b:18:e6:d5:5a:94:3a:9c:9a:cc:0b:91:d8:98:52:b0:36:08: 32:dd:70:fd:f7:4d:eb:5b:93:c9:ef:fc:3f:1e:b5:64:51:ff: bb:e0:93:6a:8c:19:e7:ef:e1:e4:84:c7:d0:92:1a:51:78:39: 08:fc:ee:2c:92:b0:a3:a6:56:3b:9b:95:3a:42:59:fb:f5:dc: 7d:98:4f:51:9c:18:c1:43:75:da:d7:23:76:72:69:0d:ce:48: 47:d3:4c:f2:21:d5:62:8e:98:d7:54:3e:b6:12:f8:85:63:e8: 4f:37:dd:2a:63:34:53:e0:d2:a0:e3:e6:16:70:28:2b:e6:98: 3b:72:b2:9a:83:be:83:da:11:45:6c:48:10:a0:ff:c5:6a:25: 9c:f8:2b:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yUJpWcbJ+QYY0pQmYuelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODNjMTJiZTFmMTBiYzhjNzgwYjk0NWFjNTU4Zjc1ODRjZmJmMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DUfWwk2+ktL1saDusmwr9BsibMe TM2lpTF1JwqPP7h/DJD4d1qXn1aJ5e5vcYbrkiUaO1kEnAuUEd76yf4PMhQBwKsB NIyIxJM/vSRZM75BXOn2OOfloQEkBRYKgbbhUhB4d64n1qA0M4rionDsHgRB/RcK ypLQaXaYLhcQfWTqn9aYhXcHyPO/mU6DNcLyDXJJHK1j6mEeqIvooROYJ5ucQypQ 2z+cwBBGcxY+UbyJZnI/3OvfwON5W3f9UFA/3adEEFAOo8HsAefjsOTGjLkfdZW6 JluT67Z3d87hliUWAf828CR9oILtIXe9c6mzYHqMW+ILYpP1XWwGJsM30wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDg8Er4fELyMeAuUWsVY91hM+/I7MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvT0R3U3ZoOFF2SXg0QzVSYXhWajNXRXo3OGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgRbgSHA MA0GCSqGSIb3DQEBCwUAA4IBAQBDpKaLddqjDdilCell4EboouHwDDb1JROnazcc iAmHBI374BwCvY4a3aWxKRaXTyUaM2dRUVQgZBKJdw4/+pRjUJF07JTVJiWCbNGY nMS8fRtkU13gUakY5k2Kp1juoXs0MyKSLCC3tPDrwdybGObVWpQ6nJrMC5HYmFKw Nggy3XD9903rW5PJ7/w/HrVkUf+74JNqjBnn7+HkhMfQkhpReDkI/O4skrCjplY7 m5U6Qln79dx9mE9RnBjBQ3Xa1yN2cmkNzkhH00zyIdVijpjXVD62EviFY+hPN90q YzRT4NKg4+YWcCgr5pg7crKag76D2hFFbEgQoP/FaiWc+CtS -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:54 2026 by rpki-client