This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/O-Nsor2Oxzxu124oYRh9Vy2FhcE.roa File: O-Nsor2Oxzxu124oYRh9Vy2FhcE.roa (raw, json) Hash identifier: vNKhSbKaqeLsUwPvhYAEM7HcTpg7XKHPofG0cQtlia0= Subject key identifier: 3B:E3:6C:A2:BD:8E:C7:3C:6E:D7:6E:28:61:18:7D:57:2D:85:85:C1 Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c Certificate serial: 019B797EEA6330C60C4F8120298037CC0130 Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/O-Nsor2Oxzxu124oYRh9Vy2FhcE.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209105 IP address blocks: 2001:67c:99c::/48 maxlen: 48 2001:67c:9a0::/48 maxlen: 48 2001:67c:9a4::/48 maxlen: 48 2001:67c:9a8::/48 maxlen: 48 2001:67c:9ac::/48 maxlen: 48 2001:67c:9b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ea:63:30:c6:0c:4f:81:20:29:80:37:cc:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be36ca2bd8ec73c6ed76e2861187d572d8585c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:35:51:76:75:e8:72:01:26:50:61:ff:20: 7f:ae:a0:a4:6c:b7:88:fb:c4:d9:4a:00:6a:97:d8: d7:87:3e:fd:30:90:3d:85:45:1d:f3:a7:44:8c:c6: 3b:f5:d9:55:b9:e8:a3:27:02:30:0a:57:cc:e1:1c: 70:57:f0:12:73:8e:6b:78:8a:3e:64:b3:4d:12:45: 3c:c0:40:ce:76:4e:0c:07:1f:f6:eb:60:a2:ea:0e: be:03:bc:7f:78:52:d7:f6:35:73:3c:dc:5b:f2:9d: e0:7e:c8:68:65:f6:24:ad:e7:c0:c9:05:a9:94:52: b7:ad:dc:ae:1f:95:cb:2b:26:07:46:ce:5f:3f:d4: 98:80:3e:00:a4:5e:4a:df:53:10:ca:04:82:51:14: 16:f9:88:5b:29:3d:30:7b:9a:5e:a0:e6:4e:ed:ae: 75:a3:b6:56:f7:73:c8:1a:67:90:e4:6f:5a:42:7e: ee:1e:da:0e:82:2e:f8:2f:3d:af:49:88:ef:51:74: f9:c1:b3:9d:db:4c:b1:63:f1:2d:e1:56:40:7a:dc: 4f:38:ca:82:b6:db:e3:11:ac:a3:ab:2c:b2:10:e2: 56:76:ba:c8:a5:3e:62:92:6e:55:e2:a6:fc:b1:3b: 41:57:d0:89:75:7e:2c:bf:4d:b5:6d:07:af:77:38: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:6C:A2:BD:8E:C7:3C:6E:D7:6E:28:61:18:7D:57:2D:85:85:C1 X509v3 Authority Key Identifier: keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/O-Nsor2Oxzxu124oYRh9Vy2FhcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:99c::/48 2001:67c:9a0::/48 2001:67c:9a4::/48 2001:67c:9a8::/48 2001:67c:9ac::/48 2001:67c:9b0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:bb:f5:b5:51:ce:fa:b7:42:1a:52:c2:1a:0e:e6:dc:89:31: 6d:eb:22:24:06:d5:99:08:29:39:65:99:54:60:23:60:22:61: ef:48:66:45:cb:38:03:9b:82:e6:e3:02:0f:0b:0e:49:44:4b: 1e:fd:79:45:81:05:28:33:e5:3c:8f:02:c7:eb:3a:78:78:dc: 24:49:22:4c:e6:4c:d9:e7:73:b7:d8:e0:10:b0:b6:5c:1a:c0: 96:1e:e5:f7:96:fb:2b:c1:c9:ed:37:57:e7:57:b4:02:6d:5b: 6f:69:ee:38:fd:eb:89:a7:c9:23:5e:87:ed:e5:50:92:a1:cc: 35:3a:b2:18:a2:f3:ea:2b:93:aa:e7:87:39:8f:63:58:e7:b0: d2:81:48:8f:ea:85:f6:61:98:eb:69:e5:15:d7:79:81:85:73: 66:50:a8:52:6e:97:d8:6d:aa:58:d2:8c:80:a9:68:10:b7:90: e3:56:9e:30:3d:58:07:26:a1:b9:e9:15:c0:b6:92:a5:c9:c7: 91:76:bf:47:70:88:d6:2a:d9:41:59:c1:ed:6c:45:94:ba:31: b0:69:62:d0:0c:2d:c0:54:cc:2d:73:4d:94:25:60:87:77:58: 0b:ab:c5:6d:37:46:6b:54:5b:20:c4:e3:9c:cd:92:16:82:7c: f0:da:fb:35 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt5fupjMMYMT4EgKYA3zAEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZGQwZTQ4ZDkwMTFhZGYzNzY2NjVhZDRkNjJjZjMxY2U2 MzA1OGMwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmUzNmNhMmJkOGVjNzNjNmVkNzZlMjg2MTE4N2Q1NzJkODU4NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZw1UXZ16HIBJlBh/yB/rqCkbLeI +8TZSgBql9jXhz79MJA9hUUd86dEjMY79dlVueijJwIwClfM4RxwV/ASc45reIo+ ZLNNEkU8wEDOdk4MBx/262Ci6g6+A7x/eFLX9jVzPNxb8p3gfshoZfYkrefAyQWp lFK3rdyuH5XLKyYHRs5fP9SYgD4ApF5K31MQygSCURQW+YhbKT0we5peoOZO7a51 o7ZW93PIGmeQ5G9aQn7uHtoOgi74Lz2vSYjvUXT5wbOd20yxY/Et4VZAetxPOMqC ttvjEayjqyyyEOJWdrrIpT5ikm5V4qb8sTtBV9CJdX4sv021bQevdzi1PwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFDvjbKK9jsc8btduKGEYfVcthYXBMB8GA1UdIwQY MBaAFJHdDkjZARrfN2ZlrU1izzHOYwWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2QwT1NOa0JHdDgzWm1XdFRXTFBNYzVqQll3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xZTlkMDQtZDk0Zi00ZjEzLWJlM2Mt MTBmMzRmNTU4MzYzLzEvTy1Oc29yMk94enh1MTI0b1lSaDlWeTJGaGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xZTlkMDQtZDk0Zi00ZjEzLWJlM2MtMTBmMzRmNTU4MzYz LzEva2QwT1NOa0JHdDgzWm1XdFRXTFBNYzVqQll3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEGfAmc AwcAIAEGfAmgAwcAIAEGfAmkAwcAIAEGfAmoAwcAIAEGfAmsAwcAIAEGfAmwMA0G CSqGSIb3DQEBCwUAA4IBAQAau/W1Uc76t0IaUsIaDubciTFt6yIkBtWZCCk5ZZlU YCNgImHvSGZFyzgDm4Lm4wIPCw5JREse/XlFgQUoM+U8jwLH6zp4eNwkSSJM5kzZ 53O32OAQsLZcGsCWHuX3lvsrwcntN1fnV7QCbVtvae44/euJp8kjXoft5VCSocw1 OrIYovPqK5Oq54c5j2NY57DSgUiP6oX2YZjraeUV13mBhXNmUKhSbpfYbapY0oyA qWgQt5DjVp4wPVgHJqG56RXAtpKlyceRdr9HcIjWKtlBWcHtbEWUujGwaWLQDC3A VMwtc02UJWCHd1gLq8VtN0ZrVFsgxOOczZIWgnzw2vs1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:13 2026 by rpki-client