This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/o2VO5oX-mcICPglQ6TuJXF-puG0.roa File: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (raw, json) Hash identifier: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E= Subject key identifier: A3:65:4E:E6:85:FE:99:C2:02:3E:09:50:E9:3B:89:5C:5F:A9:B8:6D Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b Certificate serial: 019B78348AF783CD347C7A47D2936050748F Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/o2VO5oX-mcICPglQ6TuJXF-puG0.roa Signing time: Thu 01 Jan 2026 06:17:47 +0000 ROA not before: Thu 01 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211661 IP address blocks: 2a0e:d580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8a:f7:83:cd:34:7c:7a:47:d2:93:60:50:74:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b Validity Not Before: Jan 1 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3654ee685fe99c2023e0950e93b895c5fa9b86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:03:f7:2f:1e:4f:03:3d:5d:e2:41:81:f1: 82:6d:d9:96:31:ec:30:fc:3a:fd:ec:7a:ff:28:6d: e6:9b:ca:aa:39:90:10:3d:2d:9b:00:a6:9e:64:ba: e1:ce:55:e0:df:0c:e3:d5:f9:c6:8d:e4:32:3d:10: 8a:fd:dd:de:6c:3a:0d:03:fe:15:4b:c2:87:d4:09: 90:65:b5:b5:11:87:63:23:41:1c:52:9d:82:64:73: ab:be:af:3b:13:41:cf:d1:e7:a7:69:17:e0:84:57: 33:b2:4c:3f:ff:e9:be:e1:67:e6:46:00:c9:af:89: 69:16:bb:b6:5a:4f:c1:18:85:a7:fa:88:62:1f:24: 1d:1c:4e:8e:19:8a:35:46:9e:d2:38:81:a0:57:b1: 4a:9c:cd:81:29:50:4d:39:2b:21:f2:0b:24:0b:35: 1a:63:ac:9c:b9:5f:d2:ba:6d:4a:5d:ba:a6:1c:17: 39:f5:ed:8e:7a:5d:14:da:2c:4c:e8:af:e6:51:1b: e0:89:1e:1a:5c:5d:34:f5:f0:b8:81:a1:93:7c:7d: f4:14:6d:e9:55:ec:28:22:ce:e7:8a:e6:c2:20:d4: 1c:3f:0d:4f:e5:a2:4a:bb:46:99:8a:fd:02:d3:2d: bc:d0:07:9a:6e:a6:53:ec:cd:53:4e:18:a2:2e:1b: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:4E:E6:85:FE:99:C2:02:3E:09:50:E9:3B:89:5C:5F:A9:B8:6D X509v3 Authority Key Identifier: keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/o2VO5oX-mcICPglQ6TuJXF-puG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:d580::/29 Signature Algorithm: sha256WithRSAEncryption 82:ee:57:c3:7e:4c:88:b5:70:4c:d0:d7:d5:90:39:eb:ed:25: d3:40:bc:ef:79:02:dd:ed:1b:f8:5a:d5:3e:d2:50:ab:8c:4d: 4c:1d:24:46:b6:d5:50:d8:77:be:72:e5:b2:37:68:b7:25:75: b6:3e:ca:0d:2a:e2:aa:54:be:79:a6:2f:2d:a3:08:b1:a1:42: 72:29:94:2a:dc:ca:75:f7:c7:5e:88:5e:12:8e:33:92:68:e6: ee:4c:30:11:40:5c:af:12:2e:af:19:ac:b4:10:5a:ad:65:b0: 87:7f:fd:b8:15:1b:67:9a:b9:94:9a:77:28:e8:ab:99:c1:74: c6:04:96:be:d4:94:c6:ff:2e:b6:8b:ca:e8:86:a8:2f:bd:b3: 15:d8:64:67:93:b5:10:e6:77:ff:3a:5c:e9:b5:a5:12:ca:3d: 43:99:0d:cd:72:66:3b:a0:75:af:28:d6:74:c6:a7:14:a6:83: 04:f9:42:ba:64:8b:8f:c7:99:8e:69:7a:4a:15:bc:e5:92:4b: 92:ca:d1:a6:d8:9f:60:15:58:2c:bf:ad:df:fe:33:e5:ec:b8: 32:86:75:00:d4:8d:c9:dd:bc:c1:f8:79:53:ab:63:af:32:6b: e4:c5:44:be:c1:41:d0:ad:14:08:2f:57:20:06:b1:b8:9c:2d: 80:1e:48:73 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NIr3g800fHpH0pNgUHSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzBkMTZlZjE5NTg2NGYwZGJlOGE4NjcxYWZiNjM3Njgz Yjc2M2IwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzY1NGVlNjg1ZmU5OWMyMDIzZTA5NTBlOTNiODk1YzVmYTliODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw18D9y8eTwM9XeJBgfGCbdmWMeww /Dr97Hr/KG3mm8qqOZAQPS2bAKaeZLrhzlXg3wzj1fnGjeQyPRCK/d3ebDoNA/4V S8KH1AmQZbW1EYdjI0EcUp2CZHOrvq87E0HP0eenaRfghFczskw//+m+4WfmRgDJ r4lpFru2Wk/BGIWn+ohiHyQdHE6OGYo1Rp7SOIGgV7FKnM2BKVBNOSsh8gskCzUa Y6ycuV/Sum1KXbqmHBc59e2Oel0U2ixM6K/mURvgiR4aXF009fC4gaGTfH30FG3p VewoIs7niubCINQcPw1P5aJKu0aZiv0C0y280AeabqZT7M1TThiiLhsMlwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKNlTuaF/pnCAj4JUOk7iVxfqbhtMB8GA1UdIwQY MBaAFHcw0W7xlYZPDb6KhnGvtjdoO3Y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEt OGQ3YzhhYzA2MjFhLzEvbzJWTzVvWC1tY0lDUGdsUTZUdUpYRi1wdUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEtOGQ3YzhhYzA2MjFh LzEvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7VgDAN BgkqhkiG9w0BAQsFAAOCAQEAgu5Xw35MiLVwTNDX1ZA56+0l00C873kC3e0b+FrV PtJQq4xNTB0kRrbVUNh3vnLlsjdotyV1tj7KDSriqlS+eaYvLaMIsaFCcimUKtzK dffHXoheEo4zkmjm7kwwEUBcrxIurxmstBBarWWwh3/9uBUbZ5q5lJp3KOirmcF0 xgSWvtSUxv8utovK6IaoL72zFdhkZ5O1EOZ3/zpc6bWlEso9Q5kNzXJmO6B1ryjW dManFKaDBPlCumSLj8eZjml6ShW85ZJLksrRptifYBVYLL+t3/4z5ey4MoZ1ANSN yd28wfh5U6tjrzJr5MVEvsFB0K0UCC9XIAaxuJwtgB5Icw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:59 2026 by rpki-client