This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/olOemexvNklicqxW22C_r27x8hI.roa File: olOemexvNklicqxW22C_r27x8hI.roa (raw, json) Hash identifier: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE= Subject key identifier: A2:53:9E:99:EC:6F:36:49:62:72:AC:56:DB:60:BF:AF:6E:F1:F2:12 Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B79ED41D8645F9D9A12D25762F3F8143A Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/olOemexvNklicqxW22C_r27x8hI.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a12:6d80::/29 maxlen: 29 2a13:c540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:41:d8:64:5f:9d:9a:12:d2:57:62:f3:f8:14:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2539e99ec6f36496272ac56db60bfaf6ef1f212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:31:9b:28:32:45:7f:fd:7a:d7:5f:89:eb: 25:eb:9a:1d:8e:db:ab:e7:9a:2f:e6:41:7c:e6:46: 9b:1a:f7:21:ba:65:b8:0b:fc:46:58:50:87:c1:3b: 51:fe:6d:ba:af:dd:c3:35:ab:ab:3f:74:40:a7:85: 68:d3:c9:50:b4:3a:a0:e0:06:1d:60:08:63:83:6b: 75:4b:a0:46:12:44:36:09:8d:03:b8:46:0a:fc:18: 47:09:da:b7:3c:50:7c:28:f7:f1:6b:34:86:52:45: a0:f7:03:53:a5:11:a0:0d:97:ed:cf:bb:7c:29:83: 8e:bc:c7:13:44:25:b8:42:0f:63:9f:61:79:0e:01: d1:ff:e7:42:7c:82:2e:06:fb:0f:38:86:0e:ae:f6: da:00:7a:1c:9d:e5:6b:a6:24:d9:9a:97:92:4b:90: 88:b2:46:85:9a:91:9e:5f:04:5c:57:86:6b:72:66: 40:3a:a5:79:c3:6f:d9:a5:c4:db:db:c3:45:cd:13: ba:43:62:4e:17:a5:4a:ed:2f:f2:03:b5:f2:af:32: 9d:50:78:2c:da:40:76:a9:1a:9d:d8:7e:8a:6f:88: a9:92:2d:14:7f:f5:49:82:a7:88:c8:4b:02:ab:df: c2:78:bf:cd:ab:64:46:2e:d5:ad:c4:ad:c3:69:7f: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:9E:99:EC:6F:36:49:62:72:AC:56:DB:60:BF:AF:6E:F1:F2:12 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/olOemexvNklicqxW22C_r27x8hI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:6d80::/29 2a13:c540::/29 Signature Algorithm: sha256WithRSAEncryption 94:d5:91:e5:9d:ab:86:98:d9:5f:f2:81:2c:87:39:e6:4d:d9: 2d:c2:1e:e3:f7:1c:bc:9f:39:ea:65:f2:40:88:f7:11:c2:43: 59:e1:b7:1b:98:64:69:74:e8:73:65:59:65:b5:d6:d6:dc:c0: 6d:58:6e:79:85:84:9a:4a:72:76:a2:af:a6:24:cb:f8:d5:a6: 77:07:3d:0b:10:89:2a:d7:98:de:25:58:ed:cd:3e:a4:fa:9d: 66:8c:11:13:0c:f6:cd:a0:8a:b3:67:4f:fc:b8:cf:e7:7f:b2: d0:9c:39:0a:dc:4e:08:39:2b:a9:39:eb:95:76:46:9d:27:b4: 5b:1a:f4:bd:ad:0d:59:2d:cb:6e:b6:6a:03:5c:d2:80:dc:86: e6:dc:9c:c3:e8:58:ff:ae:de:9d:28:70:13:2a:6d:e9:08:32: 14:65:89:86:81:1a:cf:2e:0e:56:eb:92:73:e3:15:80:37:6d: 24:d4:dc:57:2c:27:e8:38:dd:2a:e3:d0:a3:e4:01:99:cf:9d: 5c:4d:da:dc:a7:02:7c:a5:ba:e8:16:12:98:2f:a4:76:b9:83: f1:b0:1a:90:47:b8:52:ab:e0:b7:66:59:03:f1:4b:06:d7:85: 4c:2e:1f:ee:31:40:3f:bf:52:e8:b9:da:27:41:5a:67:69:72: f0:48:f3:3f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57UHYZF+dmhLSV2Lz+BQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjUzOWU5OWVjNmYzNjQ5NjI3MmFjNTZkYjYwYmZhZjZlZjFmMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArywxmygyRX/9etdfiesl65odjtur 55ov5kF85kabGvchumW4C/xGWFCHwTtR/m26r93DNaurP3RAp4Vo08lQtDqg4AYd YAhjg2t1S6BGEkQ2CY0DuEYK/BhHCdq3PFB8KPfxazSGUkWg9wNTpRGgDZftz7t8 KYOOvMcTRCW4Qg9jn2F5DgHR/+dCfIIuBvsPOIYOrvbaAHocneVrpiTZmpeSS5CI skaFmpGeXwRcV4ZrcmZAOqV5w2/ZpcTb28NFzRO6Q2JOF6VK7S/yA7XyrzKdUHgs 2kB2qRqd2H6Kb4ipki0Uf/VJgqeIyEsCq9/CeL/Nq2RGLtWtxK3DaX/6ewIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKJTnpnsbzZJYnKsVttgv69u8fISMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvb2xPZW1leHZOa2xpY3F4VzIyQ19yMjd4OGhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhJtgAMF AyoTxUAwDQYJKoZIhvcNAQELBQADggEBAJTVkeWdq4aY2V/ygSyHOeZN2S3CHuP3 HLyfOepl8kCI9xHCQ1nhtxuYZGl06HNlWWW11tbcwG1YbnmFhJpKcnair6Yky/jV pncHPQsQiSrXmN4lWO3NPqT6nWaMERMM9s2girNnT/y4z+d/stCcOQrcTgg5K6k5 65V2Rp0ntFsa9L2tDVkty262agNc0oDchubcnMPoWP+u3p0ocBMqbekIMhRliYaB Gs8uDlbrknPjFYA3bSTU3FcsJ+g43Srj0KPkAZnPnVxN2tynAnyluugWEpgvpHa5 g/GwGpBHuFKr4LdmWQPxSwbXhUwuH+4xQD+/Uui52idBWmdpcvBI8z8= -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:16 2026 by rpki-client