This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/48gsZW50uLUlR46Ix3iYOx-Oil4.roa File: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (raw, json) Hash identifier: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM= Subject key identifier: E3:C8:2C:65:6E:74:B8:B5:25:47:8E:88:C7:78:98:3B:1F:8E:8A:5E Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019B7D5CFA5A2690AB411FBEC604E2867107 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/48gsZW50uLUlR46Ix3iYOx-Oil4.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16097 IP address blocks: 2a12:6900:1200::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fa:5a:26:90:ab:41:1f:be:c6:04:e2:86:71:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3c82c656e74b8b525478e88c778983b1f8e8a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7d:38:b2:e2:ff:7c:0c:7e:71:41:30:51:3b: 4b:6f:14:cb:ed:3d:b1:0b:c0:f4:34:6a:0c:2b:3d: 21:8b:59:01:e9:ab:70:54:06:4c:07:77:12:d5:88: 48:6e:e0:fd:a5:6d:f0:01:15:ff:09:15:c6:82:cb: 42:fc:29:2c:f2:66:75:1f:60:dd:b7:48:1a:86:9d: a5:0d:6f:61:e0:17:08:57:2a:4e:b8:f9:17:a2:d8: ff:5a:58:03:9c:f7:5e:57:bc:15:21:1e:4d:36:f9: 7e:7c:5a:26:f2:1b:8a:93:9d:36:6e:8a:de:32:bd: 84:dd:e4:f6:f9:ff:45:55:72:ac:3f:c6:92:4e:ff: 37:33:b6:39:3c:41:70:66:96:dc:97:4d:c8:ee:39: c0:54:12:21:db:68:e8:b0:3a:ef:f8:74:d4:fd:16: 8a:d8:a8:c0:78:76:57:25:ca:7d:93:b0:44:a5:be: de:92:67:5d:42:6b:b2:7a:5b:7c:3d:d9:a0:d8:62: 56:03:4a:03:58:b0:54:8e:b4:79:ec:a9:fc:67:08: 7a:87:37:10:e9:2c:f4:91:e6:25:be:cb:4e:32:26: cf:d2:46:e6:e9:f1:e0:b8:87:24:bc:6f:1c:eb:5b: 7c:4f:e0:d9:a5:d0:47:58:24:34:24:80:de:23:14: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C8:2C:65:6E:74:B8:B5:25:47:8E:88:C7:78:98:3B:1F:8E:8A:5E X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/48gsZW50uLUlR46Ix3iYOx-Oil4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:6900:1200::/40 Signature Algorithm: sha256WithRSAEncryption 41:bd:aa:c9:26:ad:e4:19:6d:d3:f3:c5:cf:e1:29:49:86:bc: 43:ea:b6:c6:19:dd:73:a2:d6:71:7c:12:f0:b7:f3:6e:57:8f: 00:9c:2c:a7:3c:58:09:00:63:8a:9a:56:ca:3a:0d:3d:da:77: 55:17:e3:1c:8d:ec:fb:2d:cb:b3:af:89:80:21:34:d4:d0:44: 19:c2:3a:bd:94:6b:36:ce:95:30:65:03:0b:a8:f8:be:24:c1: 70:3d:53:6a:26:2b:3f:ee:27:f0:43:42:ae:f7:81:fe:fa:ad: cf:95:17:2f:b0:fb:c0:3b:ac:76:1b:21:68:86:2d:8a:7a:ed: 2c:10:e6:c9:49:c7:d6:f0:49:bc:84:41:f9:48:f4:ff:c5:bb: d4:83:29:97:44:b9:dc:24:19:4c:d8:28:62:aa:23:bc:f6:28: a9:f8:7e:98:a1:d1:02:b9:f8:67:cb:a4:03:36:10:64:16:20: cc:4f:c5:c8:b3:15:cb:4a:8a:89:ad:4d:c4:c9:91:6f:3e:e0: cc:58:c0:78:39:66:da:fc:8c:25:f9:47:c0:b3:ff:00:0c:15: 16:8f:8d:10:69:d9:c2:86:ea:82:d0:cb:d7:f2:b7:d7:64:18: b5:dc:a9:32:93:21:41:a2:d9:cc:1e:f6:91:65:f1:10:05:d9: 9c:2f:43:5f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XPpaJpCrQR++xgTihnEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2M4MmM2NTZlNzRiOGI1MjU0NzhlODhjNzc4OTgzYjFmOGU4YTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn04suL/fAx+cUEwUTtLbxTL7T2x C8D0NGoMKz0hi1kB6atwVAZMB3cS1YhIbuD9pW3wARX/CRXGgstC/Cks8mZ1H2Dd t0gahp2lDW9h4BcIVypOuPkXotj/WlgDnPdeV7wVIR5NNvl+fFom8huKk502bore Mr2E3eT2+f9FVXKsP8aSTv83M7Y5PEFwZpbcl03I7jnAVBIh22josDrv+HTU/RaK 2KjAeHZXJcp9k7BEpb7ekmddQmuyelt8Pdmg2GJWA0oDWLBUjrR57Kn8Zwh6hzcQ 6Sz0keYlvstOMibP0kbm6fHguIckvG8c61t8T+DZpdBHWCQ0JIDeIxQBlwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOPILGVudLi1JUeOiMd4mDsfjopeMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvNDhnc1pXNTB1TFVsUjQ2SXgzaVlPeC1PaWw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhJpABIw DQYJKoZIhvcNAQELBQADggEBAEG9qskmreQZbdPzxc/hKUmGvEPqtsYZ3XOi1nF8 EvC3825XjwCcLKc8WAkAY4qaVso6DT3ad1UX4xyN7Psty7OviYAhNNTQRBnCOr2U azbOlTBlAwuo+L4kwXA9U2omKz/uJ/BDQq73gf76rc+VFy+w+8A7rHYbIWiGLYp6 7SwQ5slJx9bwSbyEQflI9P/Fu9SDKZdEudwkGUzYKGKqI7z2KKn4fpih0QK5+GfL pAM2EGQWIMxPxcizFctKiomtTcTJkW8+4MxYwHg5Ztr8jCX5R8Cz/wAMFRaPjRBp 2cKG6oLQy9fyt9dkGLXcqTKTIUGi2cwe9pFl8RAF2ZwvQ18= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:33 2026 by rpki-client