This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/o0zy2PIJKQJUCGXdBu2GTTLsK1w.roa File: o0zy2PIJKQJUCGXdBu2GTTLsK1w.roa (raw, json) Hash identifier: JMAJ2diz0rDcpnOliCZ1PbTa/8anGPpInGm0KE37C9U= Subject key identifier: A3:4C:F2:D8:F2:09:29:02:54:08:65:DD:06:ED:86:4D:32:EC:2B:5C Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e Certificate serial: 019B78A311CC805CFD5886FC10090F791F9B Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/o0zy2PIJKQJUCGXdBu2GTTLsK1w.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58247 IP address blocks: 2001:67c:29d4::/48 maxlen: 48 2001:67c:29d4:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:11:cc:80:5c:fd:58:86:fc:10:09:0f:79:1f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a34cf2d8f2092902540865dd06ed864d32ec2b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:cd:0d:e1:b9:ba:50:6e:5a:d4:42:1d:cd: 53:0a:5c:52:46:7c:3b:f9:08:b5:8e:d4:4e:8d:6c: 3a:f7:e1:33:91:2b:d5:e6:2a:4c:79:78:45:cd:3e: f4:19:87:bd:44:50:19:f9:98:07:ef:cb:a9:e2:a3: 23:64:82:43:72:40:e3:b6:68:37:a5:d9:31:c7:78: 31:b9:43:18:3f:46:8c:ee:7b:44:dc:b4:4b:38:dd: 2f:ba:6b:2b:48:0b:fd:c9:9e:c8:5a:6b:11:42:90: 47:f9:13:3e:09:31:05:a2:19:2a:e5:13:05:06:a0: 00:d9:13:92:40:b4:95:ab:10:5d:5f:0e:11:7b:d8: 37:13:14:7b:00:17:75:f2:25:a9:14:ab:1d:e7:0b: 8a:94:f6:94:1e:12:5a:07:2e:5a:37:5c:e4:37:19: 8d:ff:5a:62:3d:ae:6f:84:1e:bd:44:4b:95:9e:82: 4e:f5:f2:23:89:5b:77:b2:43:b9:3e:7c:55:7b:0f: 08:73:9e:c4:90:8f:1f:29:93:9f:8b:69:d2:dc:a0: 15:ce:dd:72:45:30:37:c0:01:74:68:93:bb:8d:b9: ae:71:50:5c:b1:30:55:1f:cd:b7:0d:8d:e0:8e:dd: 64:06:41:bf:34:ad:49:14:d5:39:73:b1:b1:b2:38: 66:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:F2:D8:F2:09:29:02:54:08:65:DD:06:ED:86:4D:32:EC:2B:5C X509v3 Authority Key Identifier: keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/o0zy2PIJKQJUCGXdBu2GTTLsK1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:29d4::/48 Signature Algorithm: sha256WithRSAEncryption 9a:9e:5a:1d:0d:f0:a7:e3:69:47:08:fe:04:43:7e:c9:39:1b: 3b:a6:48:71:a1:de:f5:61:1d:f4:5a:cd:b4:91:d1:0a:5f:3a: 86:9c:0b:1d:56:36:5c:2f:fb:11:dd:eb:d9:79:ad:b7:10:00: 8c:c1:2a:10:9a:73:10:9d:04:fe:69:1f:9a:86:89:10:64:39: fc:b7:29:01:4d:a8:20:01:18:dd:ab:eb:a9:59:f5:6a:57:bb: 1b:a5:03:c1:9f:40:e9:23:ab:39:05:6c:2f:d5:e4:5b:70:fa: 42:6c:36:9c:9b:6a:01:54:5e:07:8a:4a:75:88:4d:8d:6a:1b: ed:b3:f7:28:4c:a6:02:0f:1d:48:95:ed:bd:8c:92:b8:25:d0: 1d:02:9f:ee:bb:f7:6b:b3:0e:82:e0:5e:0b:d8:cb:11:d5:85: 58:87:bf:e7:24:46:38:77:e7:f0:ed:3c:7c:f6:3a:f4:86:85: 19:47:c3:0a:6f:c4:bb:d0:19:ec:99:96:fc:07:f3:eb:4f:56: e1:d1:d6:7c:31:bf:18:c0:6d:1c:9f:dd:66:c4:f2:36:0d:64: 0c:e0:7c:ef:05:3a:b4:21:fe:ba:75:d5:89:18:a2:90:1a:16: c2:53:23:68:07:6e:e3:c2:a9:a0:ee:0e:ee:76:a1:3a:ba:e0: 28:fb:05:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oxHMgFz9WIb8EAkPeR+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGUyMjViZmI0NTIxOGI5OTc3MTk4MDRlYTI4N2YxNzUx Y2YyMGUwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzRjZjJkOGYyMDkyOTAyNTQwODY1ZGQwNmVkODY0ZDMyZWMyYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVnNDeG5ulBuWtRCHc1TClxSRnw7 +Qi1jtROjWw69+EzkSvV5ipMeXhFzT70GYe9RFAZ+ZgH78up4qMjZIJDckDjtmg3 pdkxx3gxuUMYP0aM7ntE3LRLON0vumsrSAv9yZ7IWmsRQpBH+RM+CTEFohkq5RMF BqAA2ROSQLSVqxBdXw4Re9g3ExR7ABd18iWpFKsd5wuKlPaUHhJaBy5aN1zkNxmN /1piPa5vhB69REuVnoJO9fIjiVt3skO5PnxVew8Ic57EkI8fKZOfi2nS3KAVzt1y RTA3wAF0aJO7jbmucVBcsTBVH823DY3gjt1kBkG/NK1JFNU5c7GxsjhmMQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKNM8tjyCSkCVAhl3Qbthk0y7CtcMB8GA1UdIwQY MBaAFPUOIlv7RSGLmXcZgE6ih/F1HPIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUt NDQ2MmExMjZkMDdkLzEvbzB6eTJQSUpLUUpVQ0dYZEJ1MkdUVExzSzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUtNDQ2MmExMjZkMDdk LzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCnU MA0GCSqGSIb3DQEBCwUAA4IBAQCanlodDfCn42lHCP4EQ37JORs7pkhxod71YR30 Ws20kdEKXzqGnAsdVjZcL/sR3evZea23EACMwSoQmnMQnQT+aR+ahokQZDn8tykB TaggARjdq+upWfVqV7sbpQPBn0DpI6s5BWwv1eRbcPpCbDacm2oBVF4Hikp1iE2N ahvts/coTKYCDx1Ile29jJK4JdAdAp/uu/drsw6C4F4L2MsR1YVYh7/nJEY4d+fw 7Tx89jr0hoUZR8MKb8S70BnsmZb8B/PrT1bh0dZ8Mb8YwG0cn91mxPI2DWQM4Hzv BTq0If66ddWJGKKQGhbCUyNoB27jwqmg7g7udqE6uuAo+wXY -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:34 2026 by rpki-client