This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/o0QAPM1ESuNP2J0PU6laacOjs-Y.roa File: o0QAPM1ESuNP2J0PU6laacOjs-Y.roa (raw, json) Hash identifier: KnHtoHGfNF+Yd+wrjg38jV7CFUUuu9lVP3v5WBtPzNA= Subject key identifier: A3:44:00:3C:CD:44:4A:E3:4F:D8:9D:0F:53:A9:5A:69:C3:A3:B3:E6 Certificate issuer: /CN=993e814676f32f264771c7ad767a4df87d3c63e2 Certificate serial: 019B7A5AD430FF9397BBC1E79A00C9ADD5E2 Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/o0QAPM1ESuNP2J0PU6laacOjs-Y.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215563 IP address blocks: 2a0d:b083::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d4:30:ff:93:97:bb:c1:e7:9a:00:c9:ad:d5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a344003ccd444ae34fd89d0f53a95a69c3a3b3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:b0:fb:6d:6b:1b:a2:d3:70:e8:e2:a0:3a: 08:0f:94:33:d9:0f:1d:12:45:91:c5:f6:17:8c:19: 2f:6a:e2:29:b2:5b:ed:38:b9:5a:15:78:69:1d:e8: 63:1d:5f:f5:c9:1d:30:38:58:2a:a0:01:a8:52:42: 84:5d:1a:93:98:77:c7:7c:f1:86:21:6a:03:0b:30: ab:0c:1a:71:1a:ae:aa:ab:50:1f:04:7a:94:f9:d8: 2c:f3:2f:d1:1c:48:57:69:c5:a0:4c:fe:90:a4:93: 3a:dd:85:0c:d9:4a:5f:09:30:e4:74:74:a6:c1:7d: 34:2b:f4:5f:1a:14:d2:ce:ab:50:92:18:a9:2e:a5: 8f:e8:5f:ca:3b:0f:aa:46:c8:67:70:f7:02:5d:1c: b5:2e:1c:ba:fe:ad:f3:45:a4:ee:b3:2f:ef:e7:dd: 9f:36:00:d4:26:cb:08:36:93:55:0b:ca:11:cc:e9: e4:8e:ec:45:25:16:bc:b8:31:57:7b:18:3b:2a:bc: 74:d0:a1:df:73:14:c7:a6:67:2f:18:d1:91:67:4c: 4e:fe:28:95:86:f5:b8:a1:1a:a9:a4:e2:84:60:53: eb:42:dd:13:0c:f0:9d:1e:69:ef:28:b0:8a:b6:d5: 88:c6:32:60:3a:6a:4d:48:34:14:d1:04:b6:8f:7e: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:44:00:3C:CD:44:4A:E3:4F:D8:9D:0F:53:A9:5A:69:C3:A3:B3:E6 X509v3 Authority Key Identifier: keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/o0QAPM1ESuNP2J0PU6laacOjs-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:b083::/32 Signature Algorithm: sha256WithRSAEncryption 4d:06:47:46:d2:ea:52:2f:57:82:7a:f2:94:7b:d5:dd:1b:82: 35:48:34:67:0f:09:c9:5f:b2:ff:93:39:f3:6a:d5:55:ce:d7: b5:57:de:38:0b:79:6c:4e:76:41:fc:cd:89:e2:07:5d:b7:71: 64:b0:1e:b1:eb:b7:59:ac:c4:f3:7f:ad:72:09:a7:f4:4c:c7: e3:38:ca:ba:33:1e:b7:1f:bf:3b:69:50:18:96:de:89:2a:45: be:54:0c:b8:20:bc:82:5b:44:f1:26:df:d7:75:f6:59:40:ee: 2f:d4:29:47:32:e4:f8:45:97:20:52:ab:34:9d:a3:da:92:57: ed:5b:52:e1:87:ae:1f:f7:b1:7d:d2:e8:ef:b9:d1:ae:a0:18: a9:28:60:d9:25:53:c9:2f:e2:6a:14:e2:9d:46:97:ae:ed:01: 7d:16:8d:f1:90:75:22:8c:af:2f:cb:80:e0:14:35:f8:6d:c5: ea:ce:94:12:7b:97:e3:a7:41:e6:25:4d:39:66:f6:47:c5:43: 8f:47:52:1a:31:19:a9:5e:15:85:04:4d:e6:3b:f1:ca:92:f6: d4:1e:7a:94:42:96:6d:7f:83:c8:24:48:9b:64:c6:1b:86:ab: 7f:39:9e:cd:a9:82:34:2c:f1:1a:26:2d:11:58:f9:66:84:f8: 31:56:92:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6WtQw/5OXu8HnmgDJrdXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5M2U4MTQ2NzZmMzJmMjY0NzcxYzdhZDc2N2E0ZGY4N2Qz YzYzZTIwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQ0MDAzY2NkNDQ0YWUzNGZkODlkMGY1M2E5NWE2OWMzYTNiM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23uw+21rG6LTcOjioDoID5Qz2Q8d EkWRxfYXjBkvauIpslvtOLlaFXhpHehjHV/1yR0wOFgqoAGoUkKEXRqTmHfHfPGG IWoDCzCrDBpxGq6qq1AfBHqU+dgs8y/RHEhXacWgTP6QpJM63YUM2UpfCTDkdHSm wX00K/RfGhTSzqtQkhipLqWP6F/KOw+qRshncPcCXRy1Lhy6/q3zRaTusy/v592f NgDUJssINpNVC8oRzOnkjuxFJRa8uDFXexg7Krx00KHfcxTHpmcvGNGRZ0xO/iiV hvW4oRqppOKEYFPrQt0TDPCdHmnvKLCKttWIxjJgOmpNSDQU0QS2j34F9QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKNEADzNRErjT9idD1OpWmnDo7PmMB8GA1UdIwQY MBaAFJk+gUZ28y8mR3HHrXZ6Tfh9PGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVQ2QlJuYnpMeVpIY2NldGRucE4tSDA4WS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMzIxZjUtZDYxMS00MjE4LWFmMWYt NDhjYjBmY2I5MGMzLzEvbzBRQVBNMUVTdU5QMkowUFU2bGFhY09qcy1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMzIxZjUtZDYxMS00MjE4LWFmMWYtNDhjYjBmY2I5MGMz LzEvbVQ2QlJuYnpMeVpIY2NldGRucE4tSDA4WS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg2wgzAN BgkqhkiG9w0BAQsFAAOCAQEATQZHRtLqUi9XgnrylHvV3RuCNUg0Zw8JyV+y/5M5 82rVVc7XtVfeOAt5bE52QfzNieIHXbdxZLAeseu3WazE83+tcgmn9EzH4zjKujMe tx+/O2lQGJbeiSpFvlQMuCC8gltE8Sbf13X2WUDuL9QpRzLk+EWXIFKrNJ2j2pJX 7VtS4YeuH/exfdLo77nRrqAYqShg2SVTyS/iahTinUaXru0BfRaN8ZB1IoyvL8uA 4BQ1+G3F6s6UEnuX46dB5iVNOWb2R8VDj0dSGjEZqV4VhQRN5jvxypL21B56lEKW bX+DyCRIm2TGG4arfzmezamCNCzxGiYtEVj5ZoT4MVaSFA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:25 2026 by rpki-client