This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/oCbAeYqdQHysgnvekIPnmC9jZA8.roa File: oCbAeYqdQHysgnvekIPnmC9jZA8.roa (raw, json) Hash identifier: tT/00eXln6mQVEeggw5rLSVO3yyyNvI7r5tRv7ldnxc= Subject key identifier: A0:26:C0:79:8A:9D:40:7C:AC:82:7B:DE:90:83:E7:98:2F:63:64:0F Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF3E1098E95A5A88A21D6D284088D Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/oCbAeYqdQHysgnvekIPnmC9jZA8.roa Signing time: Fri 02 Jan 2026 04:18:47 +0000 ROA not before: Fri 02 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211013 IP address blocks: 2a05:1082:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f3:e1:09:8e:95:a5:a8:8a:21:d6:d2:84:08:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a026c0798a9d407cac827bde9083e7982f63640f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:1e:dc:b5:f0:34:2f:4f:48:6b:4c:ba:45: 84:91:01:a6:f8:e6:44:51:ea:1d:d4:f0:7a:93:26: 61:80:cb:6c:67:51:79:31:d3:e4:30:f4:d7:38:f8: a6:df:9b:90:3e:a7:ad:74:b1:f2:de:aa:29:76:63: 52:33:d6:4e:1e:64:ea:67:16:40:3e:cb:57:b6:ce: ff:80:22:69:bc:73:e4:ac:6e:e9:35:02:63:43:19: 2d:53:8e:5d:ea:88:24:d1:73:55:88:1c:05:fa:18: 60:5a:34:87:bb:98:88:c8:68:6f:21:d9:03:ab:a8: d2:9e:18:56:31:14:89:76:b3:76:87:92:07:ca:9c: eb:38:e7:7b:d3:65:2b:10:7b:e3:c9:ce:b1:3c:0c: 3c:25:0c:26:45:15:e6:6a:6f:fa:a2:c2:9a:84:df: 4f:56:95:bd:1f:fb:60:3e:ec:fb:c5:bf:d0:56:a3: 16:ef:da:76:31:b8:e5:05:8f:03:51:06:d2:44:6a: d4:03:95:83:15:96:43:73:a4:37:06:d7:2a:dc:60: cc:5f:d9:29:76:6e:90:5f:b8:9d:91:f4:d1:0a:89: bd:df:a4:cb:6b:b2:e7:fd:79:14:28:76:38:58:17: 52:18:45:49:f0:c4:77:fc:1d:e3:1b:76:c8:28:fa: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:26:C0:79:8A:9D:40:7C:AC:82:7B:DE:90:83:E7:98:2F:63:64:0F X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/oCbAeYqdQHysgnvekIPnmC9jZA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:1082:f000::/48 Signature Algorithm: sha256WithRSAEncryption 57:c2:a7:8c:04:40:31:bb:c6:b3:51:08:a3:32:09:ff:90:9d: 0a:3e:d3:5e:34:fa:07:e1:3e:eb:41:ef:a2:23:e7:cc:94:89: 0d:7d:fb:cf:6e:a3:24:90:4c:57:51:25:05:72:e9:3b:ad:75: 76:08:4f:43:34:4b:c9:25:18:ba:53:ac:d9:dc:4c:45:d7:d2: 93:96:57:1c:6a:2f:e4:3b:31:c8:1a:08:72:93:6f:3a:da:27: 93:dd:a8:1b:f6:cb:3e:2b:13:5a:68:40:31:6c:a1:e9:30:7c: df:9a:79:1e:78:7f:3c:d7:4e:5e:c8:7d:93:14:54:3d:d2:6a: f7:f6:6e:40:69:54:5d:92:3e:a1:26:87:59:5c:81:19:1e:60: dc:f8:c8:07:1c:10:60:c1:73:c5:77:a4:0d:63:99:19:95:af: f7:9d:70:b2:9e:ef:ea:0e:0f:d2:94:81:0d:f8:30:a9:17:43: b7:0f:23:68:b2:b6:ea:b1:f0:62:0f:f5:43:62:51:8d:29:52: ca:74:45:21:4b:46:92:d5:dc:97:46:75:e8:b8:62:b3:bd:9b: ee:2d:21:8d:c2:64:56:6f:17:e9:ec:f7:7f:05:56:85:ed:66: 69:e1:f5:71:e5:f2:c3:9d:a0:25:1e:b7:06:79:4c:6d:64:d8: e8:cc:d1:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87fPhCY6VpaiKIdbShAiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDI2YzA3OThhOWQ0MDdjYWM4MjdiZGU5MDgzZTc5ODJmNjM2NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx34e3LXwNC9PSGtMukWEkQGm+OZE Ueod1PB6kyZhgMtsZ1F5MdPkMPTXOPim35uQPqetdLHy3qopdmNSM9ZOHmTqZxZA PstXts7/gCJpvHPkrG7pNQJjQxktU45d6ogk0XNViBwF+hhgWjSHu5iIyGhvIdkD q6jSnhhWMRSJdrN2h5IHypzrOOd702UrEHvjyc6xPAw8JQwmRRXmam/6osKahN9P VpW9H/tgPuz7xb/QVqMW79p2MbjlBY8DUQbSRGrUA5WDFZZDc6Q3Btcq3GDMX9kp dm6QX7idkfTRCom936TLa7Ln/XkUKHY4WBdSGEVJ8MR3/B3jG3bIKPoIzQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKAmwHmKnUB8rIJ73pCD55gvY2QPMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvb0NiQWVZcWRRSHlzZ252ZWtJUG5tQzlqWkE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgUQgvAA MA0GCSqGSIb3DQEBCwUAA4IBAQBXwqeMBEAxu8azUQijMgn/kJ0KPtNeNPoH4T7r Qe+iI+fMlIkNffvPbqMkkExXUSUFcuk7rXV2CE9DNEvJJRi6U6zZ3ExF19KTllcc ai/kOzHIGghyk2862ieT3agb9ss+KxNaaEAxbKHpMHzfmnkeeH88105eyH2TFFQ9 0mr39m5AaVRdkj6hJodZXIEZHmDc+MgHHBBgwXPFd6QNY5kZla/3nXCynu/qDg/S lIEN+DCpF0O3DyNosrbqsfBiD/VDYlGNKVLKdEUhS0aS1dyXRnXouGKzvZvuLSGN wmRWbxfp7Pd/BVaF7WZp4fVx5fLDnaAlHrcGeUxtZNjozNFx -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:36 2026 by rpki-client