This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/onVncy3rkEcarCXT7bvTswvDGRQ.roa File: onVncy3rkEcarCXT7bvTswvDGRQ.roa (raw, json) Hash identifier: mvPv5vOxjEbvAnquN5EE+wU5EFCKr+Skx4a9SyCzTGY= Subject key identifier: A2:75:67:73:2D:EB:90:47:1A:AC:25:D3:ED:BB:D3:B3:0B:C3:19:14 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F1510C91A47FC46501B8090EA0F35FA Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/onVncy3rkEcarCXT7bvTswvDGRQ.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206540 IP address blocks: 2a14:c380:13::/48 maxlen: 48 2a14:c380:c10::/44 maxlen: 48 2a14:c380:c20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:10:c9:1a:47:fc:46:50:1b:80:90:ea:0f:35:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a27567732deb90471aac25d3edbbd3b30bc31914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bf:ce:7f:62:3e:fb:c7:f9:37:95:38:62:be: 15:5e:82:33:9a:ab:3a:16:d4:19:02:9b:50:eb:ee: 52:15:88:8d:84:09:71:10:fa:06:8f:30:0a:f0:74: 25:b9:14:ad:e9:ff:1b:1c:bc:d7:a3:7b:1b:e4:75: bc:33:79:23:28:13:b0:0d:be:01:db:06:b5:ce:e7: d9:69:6a:11:06:85:8a:a9:54:5e:80:ed:47:3d:e9: 6c:49:97:b6:c2:b9:03:57:17:e2:46:f5:d0:dc:49: 74:1e:e7:9f:fb:07:e1:3d:23:81:e3:19:ae:3e:46: 4a:62:de:13:91:5d:73:0d:34:5c:c2:5b:a8:a9:72: d1:52:5f:43:ae:2b:1e:e4:53:d0:47:fd:8b:6e:27: 75:fe:71:86:71:fa:17:a4:ca:37:30:5b:f9:9c:7a: b2:a4:8b:34:5b:75:6d:ac:41:0c:e1:1c:9c:40:50: a2:7e:c5:db:bb:3e:1d:d1:52:00:45:d9:9d:24:1f: d7:d4:2d:ad:a3:bc:67:a1:8a:4d:27:e6:90:8b:9b: c8:17:21:94:b1:d4:f5:b6:c6:f4:49:70:6d:59:5f: 60:b4:70:6c:d8:09:b3:d8:89:f0:7e:e6:ad:82:5a: c3:8c:c9:fe:a4:da:ed:c9:c7:a1:c3:60:2e:c4:2b: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:75:67:73:2D:EB:90:47:1A:AC:25:D3:ED:BB:D3:B3:0B:C3:19:14 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/onVncy3rkEcarCXT7bvTswvDGRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:13::/48 2a14:c380:c10::-2a14:c380:c2f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3b:39:21:19:84:18:1c:95:7b:ac:8c:99:d1:14:fa:67:04:4c: 94:a7:fb:3f:60:15:5c:e0:a5:d2:29:06:66:ff:b3:a9:31:06: 81:69:ba:78:77:21:c9:13:86:d4:91:96:96:49:15:a4:75:9b: 2a:ce:2d:d4:d2:99:7b:f2:b0:8f:26:10:33:18:6f:68:c1:da: cc:3c:95:81:65:1e:c9:09:60:54:7b:75:af:eb:ef:df:97:db: 39:17:19:9c:88:e0:f2:ed:5b:52:3d:6f:72:fb:e2:7a:26:b1: 8d:9c:fa:40:71:93:78:82:54:90:1d:7d:cb:77:68:fb:bd:b0: c7:69:a3:41:1e:6b:1c:6f:61:d9:23:8e:a5:9a:a8:21:98:b7: 46:dc:f2:13:88:49:c3:8b:eb:fd:e4:ab:1e:34:fc:1a:f0:4b: c5:8c:5f:04:35:61:ad:60:63:da:12:58:76:05:3d:ba:ae:99: d1:12:58:0d:aa:b3:39:64:dc:d3:0b:5d:4c:29:70:f7:77:5b: da:4c:ca:44:53:1c:29:16:3b:40:f2:7a:1e:cc:a0:40:6e:24: 2b:5d:e1:3a:19:0c:be:4e:57:cc:68:12:e4:40:8e:07:f0:6e: 7d:2a:29:1e:24:0d:b5:55:26:dc:1c:27:c2:1f:dc:c5:fe:71: f1:fb:db:78 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/FRDJGkf8RlAbgJDqDzX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjc1Njc3MzJkZWI5MDQ3MWFhYzI1ZDNlZGJiZDNiMzBiYzMxOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b/Of2I++8f5N5U4Yr4VXoIzmqs6 FtQZAptQ6+5SFYiNhAlxEPoGjzAK8HQluRSt6f8bHLzXo3sb5HW8M3kjKBOwDb4B 2wa1zufZaWoRBoWKqVRegO1HPelsSZe2wrkDVxfiRvXQ3El0Huef+wfhPSOB4xmu PkZKYt4TkV1zDTRcwluoqXLRUl9Drise5FPQR/2Lbid1/nGGcfoXpMo3MFv5nHqy pIs0W3VtrEEM4RycQFCifsXbuz4d0VIARdmdJB/X1C2to7xnoYpNJ+aQi5vIFyGU sdT1tsb0SXBtWV9gtHBs2Amz2InwfuatglrDjMn+pNrtycehw2AuxCswpwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKJ1Z3Mt65BHGqwl0+2707MLwxkUMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvb25WbmN5M3JrRWNhckNYVDdidlRzd3ZER1JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKhTDgAAT MBIDBwQqFMOADBADBwQqFMOADCAwDQYJKoZIhvcNAQELBQADggEBADs5IRmEGByV e6yMmdEU+mcETJSn+z9gFVzgpdIpBmb/s6kxBoFpunh3IckThtSRlpZJFaR1myrO LdTSmXvysI8mEDMYb2jB2sw8lYFlHskJYFR7da/r79+X2zkXGZyI4PLtW1I9b3L7 4nomsY2c+kBxk3iCVJAdfct3aPu9sMdpo0EeaxxvYdkjjqWaqCGYt0bc8hOIScOL 6/3kqx40/BrwS8WMXwQ1Ya1gY9oSWHYFPbqumdESWA2qszlk3NMLXUwpcPd3W9pM ykRTHCkWO0Dyeh7MoEBuJCtd4ToZDL5OV8xoEuRAjgfwbn0qKR4kDbVVJtwcJ8If 3MX+cfH723g= -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:20 2026 by rpki-client