This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/OLCDzI5xxlDKzka6lWJFVjNvDPw.roa File: OLCDzI5xxlDKzka6lWJFVjNvDPw.roa (raw, json) Hash identifier: Qs0OIV8lR1PaADu190zcJgT0XahHOWsjHenFFst/arg= Subject key identifier: 38:B0:83:CC:8E:71:C6:50:CA:CE:46:BA:95:62:45:56:33:6F:0C:FC Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E9EED2DAFCB867A46BC93D0A52E4 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/OLCDzI5xxlDKzka6lWJFVjNvDPw.roa Signing time: Thu 01 Jan 2026 18:19:05 +0000 ROA not before: Thu 01 Jan 2026 18:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208157 IP address blocks: 2a00:7180:8000::/46 maxlen: 46 2a04:800:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e9:ee:d2:da:fc:b8:67:a4:6b:c9:3d:0a:52:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b083cc8e71c650cace46ba95624556336f0cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:be:50:15:ed:c3:1d:72:e1:53:e0:f1:c8: 8a:3d:2b:88:fb:54:1a:a9:2f:58:cd:fe:e2:14:eb: 53:fe:93:9d:3a:3f:e7:38:7a:23:a3:4a:4c:a7:96: 22:43:b3:93:35:f0:49:1a:38:9f:5e:77:ae:fb:88: 7e:fc:c5:27:b9:bc:1c:ea:b0:ec:55:e6:03:3b:f6: 12:70:57:1d:1c:10:9a:43:ba:07:61:3c:12:58:78: 80:7e:96:d9:70:01:76:cc:ff:1a:33:52:b6:05:33: f3:51:49:e9:e3:b9:8a:61:33:24:e4:44:91:18:ad: 71:06:43:30:55:1a:36:c0:27:bb:c8:09:94:c5:29: 70:e2:e2:a0:cd:08:2f:68:7c:8d:bb:58:ed:cc:16: f6:80:37:19:76:f4:35:cd:07:79:21:5e:89:7b:42: b7:9c:d4:43:18:8d:e5:f1:ae:a8:bf:70:a8:69:e9: 8d:80:8e:10:9e:71:84:d4:bc:3f:e9:d1:61:ed:c5: 9d:5d:00:f4:ca:65:1b:93:22:98:a4:66:25:e1:de: aa:8a:da:6c:ac:04:6c:e5:00:a4:b4:bf:c4:24:72: 31:20:09:89:0f:77:2d:3b:67:90:bc:90:db:f9:cf: ee:92:4b:6c:06:ee:c7:22:59:98:43:8f:bc:55:14: 51:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B0:83:CC:8E:71:C6:50:CA:CE:46:BA:95:62:45:56:33:6F:0C:FC X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/OLCDzI5xxlDKzka6lWJFVjNvDPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7180:8000::/46 2a04:800:7000::/36 Signature Algorithm: sha256WithRSAEncryption a1:6a:a4:b0:fb:59:38:38:64:28:e8:c3:35:e3:51:5f:10:36: e6:09:06:d8:a8:ee:79:19:a1:fb:4b:92:e7:50:d8:d9:7d:32: 4f:d7:d6:08:1b:53:bc:e0:5e:90:6f:d3:fb:ef:6f:6b:6c:fa: 65:bd:0b:23:10:f0:20:a2:51:6f:ce:67:82:64:2a:e2:7c:88: bc:1b:b6:d6:af:b3:26:45:28:ca:b5:e2:0f:57:85:df:d1:f5: d8:62:18:bd:f3:5f:0e:bf:7a:c3:50:01:1d:e4:d6:0e:7c:99: 14:1a:fa:56:04:b7:9a:82:5e:9d:e0:19:19:19:4d:49:8c:6a: 33:3d:04:32:31:fa:10:21:59:66:2c:82:63:34:4d:85:ed:b8: 11:d1:75:8a:e0:94:59:5a:b0:0d:de:6b:b7:75:7b:ca:79:53: 1b:c1:ad:fe:2e:5d:da:a5:2d:44:72:72:f6:80:e5:b6:60:5f: 38:8d:96:e7:16:66:cc:fa:f8:c8:f6:31:87:e5:ed:b9:36:cd: 48:b9:f3:fa:ed:dd:51:a3:d8:a4:4e:32:c0:30:ea:37:2c:0d: cc:02:b4:98:07:97:b7:cb:2a:6b:02:6b:4d:5e:e8:24:0b:95: 24:14:4f:20:e2:72:cc:85:73:a7:e2:7f:44:c0:99:d5:7a:7c: 85:67:fc:b3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt6yOnu0tr8uGeka8k9ClLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGIwODNjYzhlNzFjNjUwY2FjZTQ2YmE5NTYyNDU1NjMzNmYwY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz2+UBXtwx1y4VPg8ciKPSuI+1Qa qS9Yzf7iFOtT/pOdOj/nOHojo0pMp5YiQ7OTNfBJGjifXneu+4h+/MUnubwc6rDs VeYDO/YScFcdHBCaQ7oHYTwSWHiAfpbZcAF2zP8aM1K2BTPzUUnp47mKYTMk5ESR GK1xBkMwVRo2wCe7yAmUxSlw4uKgzQgvaHyNu1jtzBb2gDcZdvQ1zQd5IV6Je0K3 nNRDGI3l8a6ov3CoaemNgI4QnnGE1Lw/6dFh7cWdXQD0ymUbkyKYpGYl4d6qitps rARs5QCktL/EJHIxIAmJD3ctO2eQvJDb+c/ukktsBu7HIlmYQ4+8VRRRFQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFDiwg8yOccZQys5GupViRVYzbwz8MB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvT0xDRHpJNXh4bERLemthNmxXSkZWak52RFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcCKgBxgIAA AwYEKgQIAHAwDQYJKoZIhvcNAQELBQADggEBAKFqpLD7WTg4ZCjowzXjUV8QNuYJ Btio7nkZoftLkudQ2Nl9Mk/X1ggbU7zgXpBv0/vvb2ts+mW9CyMQ8CCiUW/OZ4Jk KuJ8iLwbttavsyZFKMq14g9Xhd/R9dhiGL3zXw6/esNQAR3k1g58mRQa+lYEt5qC Xp3gGRkZTUmMajM9BDIx+hAhWWYsgmM0TYXtuBHRdYrglFlasA3ea7d1e8p5UxvB rf4uXdqlLURycvaA5bZgXziNlucWZsz6+Mj2MYfl7bk2zUi58/rt3VGj2KROMsAw 6jcsDcwCtJgHl7fLKmsCa01e6CQLlSQUTyDicsyFc6fif0TAmdV6fIVn/LM= -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:28 2026 by rpki-client