This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/oy6YGnI1tgVRTk-nYNf6Oj1ty_A.roa File: oy6YGnI1tgVRTk-nYNf6Oj1ty_A.roa (raw, json) Hash identifier: n+xGlQJ9PKisT5uNbmDxJgPK8Ls92DjlJDEtC3P1OH0= Subject key identifier: A3:2E:98:1A:72:35:B6:05:51:4E:4F:A7:60:D7:FA:3A:3D:6D:CB:F0 Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f Certificate serial: 019B7FF219B7F54F3D6A86CB6873201E7520 Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/oy6YGnI1tgVRTk-nYNf6Oj1ty_A.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3261 IP address blocks: 2a02:300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:19:b7:f5:4f:3d:6a:86:cb:68:73:20:1e:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a32e981a7235b605514e4fa760d7fa3a3d6dcbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:8b:9f:a6:c0:da:f1:f8:78:c3:0c:8e:c9: 05:a6:10:55:2b:50:77:77:5f:5e:f3:ff:33:c3:ec: e1:fc:89:54:dd:e4:2c:0f:25:fb:46:ee:8c:7f:23: db:90:fb:a9:d7:9e:c9:27:c2:cd:13:8c:4e:84:bd: fd:39:27:e2:36:d5:1f:55:46:36:c2:bb:cc:53:db: 95:fd:c5:07:34:fd:df:12:c9:c3:01:d8:e8:1d:e6: 86:fc:88:63:70:fb:68:df:da:15:af:60:6a:06:1a: 4f:79:f5:97:bf:18:df:60:ec:53:eb:9b:40:bc:38: dd:af:b0:dc:98:a4:01:ac:5b:92:3d:ed:5e:a9:98: 53:83:63:17:ca:21:64:83:45:0b:9c:a5:0d:2d:ea: b1:d3:93:34:fd:f1:dc:cc:21:c5:72:d9:9e:4e:f9: 78:89:48:88:b7:ff:24:2f:ab:3f:0d:07:a7:c0:5b: 16:71:e0:9f:aa:82:04:59:ca:19:82:1c:69:f3:44: e6:9a:e0:ec:a3:f7:97:3e:28:61:4b:e8:d2:66:04: df:0a:bf:f3:b7:f2:24:b5:80:0f:bd:9d:03:50:58: 26:e3:5a:d5:42:00:c1:df:db:27:6c:c2:da:0b:a2: b2:df:21:72:96:d3:87:1d:6a:eb:b2:2a:5b:3d:72: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2E:98:1A:72:35:B6:05:51:4E:4F:A7:60:D7:FA:3A:3D:6D:CB:F0 X509v3 Authority Key Identifier: keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/oy6YGnI1tgVRTk-nYNf6Oj1ty_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:300::/32 Signature Algorithm: sha256WithRSAEncryption 09:1c:24:32:f1:48:6a:02:41:e2:6e:a2:3d:d0:c5:b4:16:77: c7:73:f2:13:e5:a9:0c:dd:bd:df:27:e7:5f:dd:0a:e4:c6:de: 12:c8:54:50:88:f6:7a:66:30:73:fe:34:18:2f:ef:c2:8f:cd: 5e:64:3c:83:9b:50:30:50:2e:79:9e:32:95:11:17:b3:4d:29: d0:88:9b:5b:92:42:16:15:c6:88:6e:03:51:2d:75:1f:66:40: 32:0f:b7:ad:70:53:4c:b9:76:38:81:97:e1:15:48:ba:19:ca: 35:96:f3:48:ea:d5:83:1b:bf:7d:01:40:b3:e4:58:63:eb:7c: e4:e5:fc:f7:dc:c0:30:c7:15:fc:32:f5:4f:60:24:10:55:52: 63:9b:f7:eb:11:09:6c:05:b6:93:81:c9:26:f9:a7:3d:32:ee: c1:8a:6f:e9:d1:d2:fe:af:e5:60:d5:a0:e0:d1:59:d7:bd:ae: 52:67:49:fa:0e:57:ef:76:3b:60:65:ad:38:4e:dc:fe:11:7d: a8:25:ad:d4:e2:27:15:78:ff:3c:71:08:2f:69:e9:d4:7b:89: 9d:5b:64:62:d5:9b:cd:3c:4a:71:e4:0f:da:89:fd:c7:c5:a5: 99:0c:3d:07:0a:ed:1e:fa:ea:90:2c:4c:12:18:5d:a5:f4:7c: e2:a5:60:c0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8hm39U89aobLaHMgHnUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDc5OWFlMGVmZGQ5ODZkZGU3N2ZiMzVhZDBhMTA4MjNj Yjk3MmYwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzJlOTgxYTcyMzViNjA1NTE0ZTRmYTc2MGQ3ZmEzYTNkNmRjYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4iLn6bA2vH4eMMMjskFphBVK1B3 d19e8/8zw+zh/IlU3eQsDyX7Ru6MfyPbkPup157JJ8LNE4xOhL39OSfiNtUfVUY2 wrvMU9uV/cUHNP3fEsnDAdjoHeaG/IhjcPto39oVr2BqBhpPefWXvxjfYOxT65tA vDjdr7DcmKQBrFuSPe1eqZhTg2MXyiFkg0ULnKUNLeqx05M0/fHczCHFctmeTvl4 iUiIt/8kL6s/DQenwFsWceCfqoIEWcoZghxp80TmmuDso/eXPihhS+jSZgTfCr/z t/IktYAPvZ0DUFgm41rVQgDB39snbMLaC6Ky3yFyltOHHWrrsipbPXLfpQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKMumBpyNbYFUU5Pp2DX+jo9bcvwMB8GA1UdIwQY MBaAFOfXma4O/dmG3ed/s1rQoQgjy5cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMt Mjg3OTM3OTQwZDdiLzEvb3k2WUduSTF0Z1ZSVGstbllOZjZPajF0eV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMtMjg3OTM3OTQwZDdi LzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIDADAN BgkqhkiG9w0BAQsFAAOCAQEACRwkMvFIagJB4m6iPdDFtBZ3x3PyE+WpDN293yfn X90K5MbeEshUUIj2emYwc/40GC/vwo/NXmQ8g5tQMFAueZ4ylREXs00p0IibW5JC FhXGiG4DUS11H2ZAMg+3rXBTTLl2OIGX4RVIuhnKNZbzSOrVgxu/fQFAs+RYY+t8 5OX899zAMMcV/DL1T2AkEFVSY5v36xEJbAW2k4HJJvmnPTLuwYpv6dHS/q/lYNWg 4NFZ172uUmdJ+g5X73Y7YGWtOE7c/hF9qCWt1OInFXj/PHEIL2np1HuJnVtkYtWb zTxKceQP2on9x8WlmQw9BwrtHvrqkCxMEhhdpfR84qVgwA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:04 2026 by rpki-client