This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/oWslWTdsPisLu5dLVq8YM202DZ8.roa File: oWslWTdsPisLu5dLVq8YM202DZ8.roa (raw, json) Hash identifier: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA= Subject key identifier: A1:6B:25:59:37:6C:3E:2B:0B:BB:97:4B:56:AF:18:33:6D:36:0D:9F Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019B7C110D83216B38049E7434947E6C2910 Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/oWslWTdsPisLu5dLVq8YM202DZ8.roa Signing time: Fri 02 Jan 2026 00:17:30 +0000 ROA not before: Fri 02 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211444 IP address blocks: 2a09:be41::/32 maxlen: 32 2a09:be42::/32 maxlen: 32 2a09:be43::/32 maxlen: 32 2a09:be44::/32 maxlen: 32 2a09:be45::/32 maxlen: 32 2a09:be46::/32 maxlen: 32 2a09:be47::/32 maxlen: 32 2a0e:ec02::/32 maxlen: 48 2a0e:ec03::/32 maxlen: 48 2a12:49c0::/32 maxlen: 32 2a12:49c1::/32 maxlen: 32 2a12:49c2::/32 maxlen: 32 2a12:49c3::/32 maxlen: 32 2a12:49c4::/32 maxlen: 32 2a12:49c5::/32 maxlen: 32 2a12:49c6::/32 maxlen: 32 2a12:49c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:0d:83:21:6b:38:04:9e:74:34:94:7e:6c:29:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Jan 2 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a16b2559376c3e2b0bbb974b56af18336d360d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1f:c8:71:f1:f6:54:7e:61:08:11:ba:12:d9: c6:b2:75:7f:f4:df:c6:39:7b:14:07:46:cd:7b:24: 0f:86:31:08:37:05:01:e5:ed:fd:bd:6a:2c:f2:61: 86:56:7c:08:a5:0f:6f:29:1e:3e:67:ce:89:6e:93: 4f:42:cd:c2:a2:8f:45:ff:62:52:b9:f5:62:39:f9: b1:74:05:76:a5:7a:e1:d8:4c:4b:f5:05:d2:d2:a0: 24:3f:e5:a2:b4:70:92:1b:9c:61:79:30:31:fe:77: 2b:58:48:88:77:09:8f:48:21:02:15:c6:62:77:d3: ed:28:c8:da:13:73:01:04:b7:da:53:aa:f1:e4:01: 00:90:ff:e4:2d:b9:64:44:74:de:d7:f6:d2:f0:c3: ba:8c:4e:21:01:16:8d:37:f6:8a:40:2c:8c:d6:4f: 5a:99:52:78:6b:44:95:d1:7c:9c:de:9a:53:2f:7a: 28:08:43:75:20:dd:9b:8e:28:28:01:b2:d8:31:57: ee:f3:53:50:2b:f7:e5:30:d5:4f:eb:0c:21:45:0d: f6:fb:cf:a1:7b:51:23:d1:ba:af:67:54:45:22:92: 7e:cb:ae:7b:93:68:02:1d:e4:e9:40:18:3a:5a:b6: 96:36:72:d7:0e:a6:07:02:0b:31:06:53:9f:88:52: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6B:25:59:37:6C:3E:2B:0B:BB:97:4B:56:AF:18:33:6D:36:0D:9F X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/oWslWTdsPisLu5dLVq8YM202DZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:ec02::/31 2a12:49c0::/29 Signature Algorithm: sha256WithRSAEncryption b9:8a:3c:88:ef:b7:0e:97:d6:10:e1:5a:9e:5c:3d:32:f2:8a: 26:26:fe:05:a0:2a:27:19:79:b0:6b:c3:3d:58:63:4f:20:c8: 81:93:f3:cf:05:3d:db:ff:4b:d8:69:a2:ce:5d:1f:0b:8a:6e: 0e:73:67:52:8f:35:26:44:a2:1b:c4:fd:03:a0:9e:88:36:89: cd:58:5c:81:b0:7f:9c:43:18:31:95:22:41:7e:4e:49:74:9d: 02:44:6f:5c:1f:9a:ba:8a:1e:17:31:c5:54:9a:24:7f:59:61: e8:45:2d:cd:c0:01:7c:a0:8f:97:2d:a2:f2:f5:00:bd:6e:11: 11:94:f7:4a:1c:b9:86:df:7a:96:07:26:b2:02:50:eb:f1:d0: 6a:43:8c:66:11:14:20:69:ec:21:20:7a:94:de:6c:79:8f:f1: 8d:76:44:a2:0d:f4:d5:0d:ec:8a:9c:0a:45:39:5f:29:8a:79: c9:55:a2:e7:92:1e:c3:4b:0c:63:9a:19:6b:06:fd:ee:df:62: 4a:27:33:fc:ed:14:50:b7:32:d2:48:40:61:76:6c:20:7f:9a: be:fa:dc:95:2a:9c:7a:f5:ba:b4:40:49:14:dd:cb:a6:57:db: a2:33:ba:04:6c:2b:f3:d2:b8:f7:14:dd:91:2e:85:e2:66:83: 76:39:20:cd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8EQ2DIWs4BJ50NJR+bCkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjYwMTAyMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTZiMjU1OTM3NmMzZTJiMGJiYjk3NGI1NmFmMTgzMzZkMzYwZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x/IcfH2VH5hCBG6EtnGsnV/9N/G OXsUB0bNeyQPhjEINwUB5e39vWos8mGGVnwIpQ9vKR4+Z86JbpNPQs3Coo9F/2JS ufViOfmxdAV2pXrh2ExL9QXS0qAkP+WitHCSG5xheTAx/ncrWEiIdwmPSCECFcZi d9PtKMjaE3MBBLfaU6rx5AEAkP/kLblkRHTe1/bS8MO6jE4hARaNN/aKQCyM1k9a mVJ4a0SV0Xyc3ppTL3ooCEN1IN2bjigoAbLYMVfu81NQK/flMNVP6wwhRQ32+8+h e1Ej0bqvZ1RFIpJ+y657k2gCHeTpQBg6WraWNnLXDqYHAgsxBlOfiFLn2QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKFrJVk3bD4rC7uXS1avGDNtNg2fMB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvb1dzbFdUZHNQaXNMdTVkTFZxOFlNMjAyRFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAAjAeMA4DBQAqCb5B AwUDKgm+QAMFASoO7AIDBQMqEknAMA0GCSqGSIb3DQEBCwUAA4IBAQC5ijyI77cO l9YQ4VqeXD0y8oomJv4FoConGXmwa8M9WGNPIMiBk/PPBT3b/0vYaaLOXR8Lim4O c2dSjzUmRKIbxP0DoJ6INonNWFyBsH+cQxgxlSJBfk5JdJ0CRG9cH5q6ih4XMcVU miR/WWHoRS3NwAF8oI+XLaLy9QC9bhERlPdKHLmG33qWByayAlDr8dBqQ4xmERQg aewhIHqU3mx5j/GNdkSiDfTVDeyKnApFOV8pinnJVaLnkh7DSwxjmhlrBv3u32JK JzP87RRQtzLSSEBhdmwgf5q++tyVKpx69bq0QEkU3cumV9uiM7oEbCvz0rj3FN2R LoXiZoN2OSDN -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:23 2026 by rpki-client