This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/oiozD2e9K7oF6d0dsqEIt1wRmUs.roa File: oiozD2e9K7oF6d0dsqEIt1wRmUs.roa (raw, json) Hash identifier: 4Bkg0miagTFlr1mUr9BPWElNFeQdQ0Ya6nOjCsn7J9w= Subject key identifier: A2:2A:33:0F:67:BD:2B:BA:05:E9:DD:1D:B2:A1:08:B7:5C:11:99:4B Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Certificate serial: 019B7C1194626FF5DB69950D6E1B92B74940 Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/oiozD2e9K7oF6d0dsqEIt1wRmUs.roa Signing time: Fri 02 Jan 2026 00:18:05 +0000 ROA not before: Fri 02 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39450 IP address blocks: 2a11:500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:94:62:6f:f5:db:69:95:0d:6e:1b:92:b7:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Validity Not Before: Jan 2 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a22a330f67bd2bba05e9dd1db2a108b75c11994b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:df:83:d7:c9:85:48:32:f4:3e:54:e1:b2:22: ae:49:a6:7d:8e:b6:ff:bf:da:05:01:5b:22:78:0d: a3:b1:51:6a:6c:de:8b:32:c4:87:16:0d:b5:5f:f5: f8:b9:ad:56:08:91:53:76:11:7d:77:bb:8b:f2:77: 6a:3f:2e:8b:44:9c:57:9d:4e:31:88:5a:0f:04:05: 75:f0:5e:f1:54:6c:44:e3:b6:e8:23:71:3f:e4:f0: 52:fe:dc:f0:24:9f:c8:8b:d0:6e:ac:02:aa:8d:c4: 07:b3:bb:45:18:85:a1:af:21:70:78:89:3d:14:ad: df:98:f4:e0:0e:b4:5c:65:a8:a5:dd:58:ba:f5:52: 52:c7:96:66:4e:2a:4a:9e:59:96:dd:5b:3c:1e:97: ca:f6:52:d6:fd:db:45:8a:3d:7d:a2:c1:b3:91:89: 21:f0:99:b6:6d:01:60:bf:4a:6d:01:d2:98:13:e3: 18:cc:39:eb:98:a4:02:bd:c3:f9:81:5b:f1:75:33: 44:c0:48:b5:30:93:22:e7:55:8b:c7:73:2a:f6:38: b6:c4:b7:a0:04:4d:ff:b8:a1:32:c3:6c:60:d2:65: 07:80:72:7c:1a:8d:0f:2a:61:ca:1b:9d:5a:6f:a2: 90:91:16:bd:c2:a1:f5:1c:25:12:64:52:14:0b:36: 4d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2A:33:0F:67:BD:2B:BA:05:E9:DD:1D:B2:A1:08:B7:5C:11:99:4B X509v3 Authority Key Identifier: keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/oiozD2e9K7oF6d0dsqEIt1wRmUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:500::/29 Signature Algorithm: sha256WithRSAEncryption a3:ca:6f:4d:8e:83:4f:29:27:b8:ae:09:88:4e:b0:b2:b9:e0: 53:20:1c:02:c3:1d:6b:0e:cb:39:15:19:42:86:ab:15:f3:bf: cd:9c:c4:01:d9:4f:d6:56:4e:1f:fb:68:1c:e7:f9:fa:d4:15: 31:07:c9:70:40:e3:e5:22:50:bf:99:4a:bf:be:e7:54:d0:1c: b0:8c:3a:ad:d2:cb:59:9e:fc:47:a8:a4:5e:48:ce:f9:a5:15: b7:ae:fa:98:75:79:f0:22:0c:b7:26:65:2f:c0:f6:cd:e5:34: 8e:d8:21:e7:30:65:81:0f:bd:61:d8:d9:28:de:dd:eb:a8:96: 42:43:d3:8e:2c:0a:1a:3b:8d:e8:7d:81:3f:ff:2d:21:78:03: a9:37:0a:aa:0e:53:59:f0:a0:60:49:92:50:95:56:6b:3b:05: 70:be:39:3d:1e:2b:48:5c:b8:d7:93:ec:6b:16:07:a0:72:9e: 2e:20:6c:2a:8f:cd:fa:b6:bf:ad:f4:50:f5:f0:9a:27:82:25: bc:65:c8:23:7b:07:e0:d2:45:eb:35:18:dc:a2:1a:ad:fd:35: 22:b4:dd:86:0a:c2:ff:28:2d:3b:73:3b:e1:8d:06:a9:1c:a6: 5a:b3:13:0f:6f:9b:04:f4:4a:0a:4d:87:4a:de:77:54:14:58: 92:43:6b:cb -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EZRib/XbaZUNbhuSt0lAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3 YjlmYzEwHhcNMjYwMTAyMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjJhMzMwZjY3YmQyYmJhMDVlOWRkMWRiMmExMDhiNzVjMTE5OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd+D18mFSDL0PlThsiKuSaZ9jrb/ v9oFAVsieA2jsVFqbN6LMsSHFg21X/X4ua1WCJFTdhF9d7uL8ndqPy6LRJxXnU4x iFoPBAV18F7xVGxE47boI3E/5PBS/tzwJJ/Ii9BurAKqjcQHs7tFGIWhryFweIk9 FK3fmPTgDrRcZail3Vi69VJSx5ZmTipKnlmW3Vs8HpfK9lLW/dtFij19osGzkYkh 8Jm2bQFgv0ptAdKYE+MYzDnrmKQCvcP5gVvxdTNEwEi1MJMi51WLx3Mq9ji2xLeg BE3/uKEyw2xg0mUHgHJ8Go0PKmHKG51ab6KQkRa9wqH1HCUSZFIUCzZNrwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKIqMw9nvSu6BendHbKhCLdcEZlLMB8GA1UdIwQY MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt YTUyYTg3OTVkOTU2LzEvb2lvekQyZTlLN29GNmQwZHNxRUl0MXdSbVVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2 LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhEFADAN BgkqhkiG9w0BAQsFAAOCAQEAo8pvTY6DTyknuK4JiE6wsrngUyAcAsMdaw7LORUZ QoarFfO/zZzEAdlP1lZOH/toHOf5+tQVMQfJcEDj5SJQv5lKv77nVNAcsIw6rdLL WZ78R6ikXkjO+aUVt676mHV58CIMtyZlL8D2zeU0jtgh5zBlgQ+9YdjZKN7d66iW QkPTjiwKGjuN6H2BP/8tIXgDqTcKqg5TWfCgYEmSUJVWazsFcL45PR4rSFy415Ps axYHoHKeLiBsKo/N+ra/rfRQ9fCaJ4IlvGXII3sH4NJF6zUY3KIarf01IrTdhgrC /ygtO3M74Y0GqRymWrMTD2+bBPRKCk2HSt53VBRYkkNryw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:54 2026 by rpki-client