This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/6OdumX9U3TNQ_BDfNTi9HAvC11E.roa File: 6OdumX9U3TNQ_BDfNTi9HAvC11E.roa (raw, json) Hash identifier: 479EKbeun2aU00GF/z6lmnGk3H57D4kV5EAf3nlCMns= Subject key identifier: E8:E7:6E:99:7F:54:DD:33:50:FC:10:DF:35:38:BD:1C:0B:C2:D7:51 Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0 Certificate serial: 019B7BA4339FF59790A2D295458EA6706FAC Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/6OdumX9U3TNQ_BDfNTi9HAvC11E.roa Signing time: Thu 01 Jan 2026 22:18:37 +0000 ROA not before: Thu 01 Jan 2026 22:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30893 IP address blocks: 2a01:298:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:33:9f:f5:97:90:a2:d2:95:45:8e:a6:70:6f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0 Validity Not Before: Jan 1 22:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8e76e997f54dd3350fc10df3538bd1c0bc2d751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:bf:a1:57:d5:90:d7:c4:75:b9:f0:14:be: 2f:52:05:89:e9:94:9f:84:d3:ae:4f:19:71:f5:6c: 0c:15:72:39:0d:53:78:ff:97:57:33:14:03:f0:6f: 7c:59:c1:0b:a5:e3:01:fa:eb:42:59:96:7f:13:43: 94:d7:01:51:90:3e:25:80:87:f9:88:b4:49:ed:5c: b3:49:20:cd:55:7e:32:e3:58:97:d1:1a:91:43:ff: d4:b7:a2:96:00:22:00:33:7a:a9:bd:90:f7:bd:a0: 2f:c3:f9:33:34:7d:a4:fc:41:5f:30:2a:2d:85:26: 18:d8:3a:38:28:db:c9:85:aa:ba:53:1f:a9:fd:33: 6c:1f:43:95:f7:f5:b4:08:71:83:b7:38:42:c1:bf: a8:8e:38:d5:c4:a7:fc:fd:9f:a3:ad:28:ce:e0:cb: c7:62:50:89:ed:a8:e8:50:b1:a5:63:fe:82:dc:af: e8:67:bd:80:29:0c:36:c1:e8:69:46:c4:d8:71:c2: 3a:44:53:cf:37:e4:91:78:63:5f:fb:2d:b4:a6:03: 77:2e:22:32:6d:9c:3d:0a:9b:cb:5f:96:0e:f1:9c: b5:6d:30:bd:c4:61:b4:fb:87:56:30:a3:f9:c2:ad: 64:b6:47:48:15:60:23:08:ff:70:41:bf:18:c3:8e: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E7:6E:99:7F:54:DD:33:50:FC:10:DF:35:38:BD:1C:0B:C2:D7:51 X509v3 Authority Key Identifier: keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/6OdumX9U3TNQ_BDfNTi9HAvC11E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:298:f001::/48 Signature Algorithm: sha256WithRSAEncryption a5:63:fa:3b:6b:30:ad:5c:bb:91:b1:33:d2:5d:ee:5d:4b:c2: 6b:6c:16:07:d0:96:2d:57:44:61:cc:17:d4:a8:03:8f:d0:26: d7:4a:49:9b:74:19:90:d0:c2:a1:44:cc:73:36:b6:08:2a:a7: 43:e4:10:39:1e:6e:66:60:9a:db:de:97:a5:07:88:e1:1a:8b: af:18:3b:62:b4:78:1b:59:7e:63:1c:2b:43:61:50:cf:38:f9: a5:c5:d2:7c:db:69:40:3c:56:b3:b4:b2:bf:97:b8:c7:48:f4: b3:19:fd:1c:7b:e4:e3:8e:72:d9:a0:ec:ea:4a:a5:00:c9:8c: ac:e6:08:35:83:72:c5:c5:c8:d1:c8:14:56:c4:4f:2d:64:aa: 57:d6:86:6a:3b:4f:2c:47:ca:25:e1:60:f3:73:7d:9f:10:16: ef:ea:fb:37:ab:6b:12:dc:f0:fb:94:99:86:03:41:e4:ac:95: a1:a8:79:dd:fc:db:d4:e2:bc:13:f7:7c:65:ef:63:5a:bf:04: c3:ac:07:13:91:9a:55:99:33:c7:10:84:36:be:df:f2:3c:4f: d1:96:7f:39:a0:ef:6f:4a:72:66:ee:93:a6:0b:42:7a:37:8c: 7e:f0:b4:a8:d1:a2:19:94:a9:57:ad:9e:8c:2c:34:0a:14:b3: 7b:e2:8a:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pDOf9ZeQotKVRY6mcG+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NzY3YmM1ZmJjYmNlZmIxYzFjNzQ3YmIwZWI1MzM3ZGFi NjkxYzAwHhcNMjYwMTAxMjIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGU3NmU5OTdmNTRkZDMzNTBmYzEwZGYzNTM4YmQxYzBiYzJkNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm2/oVfVkNfEdbnwFL4vUgWJ6ZSf hNOuTxlx9WwMFXI5DVN4/5dXMxQD8G98WcELpeMB+utCWZZ/E0OU1wFRkD4lgIf5 iLRJ7VyzSSDNVX4y41iX0RqRQ//Ut6KWACIAM3qpvZD3vaAvw/kzNH2k/EFfMCot hSYY2Do4KNvJhaq6Ux+p/TNsH0OV9/W0CHGDtzhCwb+ojjjVxKf8/Z+jrSjO4MvH YlCJ7ajoULGlY/6C3K/oZ72AKQw2wehpRsTYccI6RFPPN+SReGNf+y20pgN3LiIy bZw9CpvLX5YO8Zy1bTC9xGG0+4dWMKP5wq1ktkdIFWAjCP9wQb8Yw47kTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOjnbpl/VN0zUPwQ3zU4vRwLwtdRMB8GA1UdIwQY MBaAFKR2e8X7y877HBx0e7DrUzfatpHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEhaN3hmdkx6dnNjSEhSN3NPdFROOXEya2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84MDY1ZDUtMDRkMC00M2U1LWEyZjQt MDQxYTQ4ZDIxMjNmLzEvNk9kdW1YOVUzVE5RX0JEZk5UaTlIQXZDMTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84MDY1ZDUtMDRkMC00M2U1LWEyZjQtMDQxYTQ4ZDIxMjNm LzEvcEhaN3hmdkx6dnNjSEhSN3NPdFROOXEya2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgECmPAB MA0GCSqGSIb3DQEBCwUAA4IBAQClY/o7azCtXLuRsTPSXe5dS8JrbBYH0JYtV0Rh zBfUqAOP0CbXSkmbdBmQ0MKhRMxzNrYIKqdD5BA5Hm5mYJrb3pelB4jhGouvGDti tHgbWX5jHCtDYVDPOPmlxdJ822lAPFaztLK/l7jHSPSzGf0ce+TjjnLZoOzqSqUA yYys5gg1g3LFxcjRyBRWxE8tZKpX1oZqO08sR8ol4WDzc32fEBbv6vs3q2sS3PD7 lJmGA0HkrJWhqHnd/NvU4rwT93xl72NavwTDrAcTkZpVmTPHEIQ2vt/yPE/Rln85 oO9vSnJm7pOmC0J6N4x+8LSo0aIZlKlXrZ6MLDQKFLN74orp -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:24 2026 by rpki-client