This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/oZdr4l7WGJxFmSBw9dK5ckQatJ0.roa File: oZdr4l7WGJxFmSBw9dK5ckQatJ0.roa (raw, json) Hash identifier: yawK27NUkai0HCgzgDJwOXKqNSn2XlBC0dvfIltlwV4= Subject key identifier: A1:97:6B:E2:5E:D6:18:9C:45:99:20:70:F5:D2:B9:72:44:1A:B4:9D Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Certificate serial: 019A5CA8CC8569D72A6B04575669D14D3333 Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/oZdr4l7WGJxFmSBw9dK5ckQatJ0.roa Signing time: Fri 07 Nov 2025 04:52:37 +0000 ROA not before: Fri 07 Nov 2025 04:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136501 IP address blocks: 2a14:60c7:8100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5c:a8:cc:85:69:d7:2a:6b:04:57:56:69:d1:4d:33:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Validity Not Before: Nov 7 04:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a1976be25ed6189c45992070f5d2b972441ab49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:52:7d:e0:5e:cf:59:7f:b6:e8:4c:df:0d:17: 97:4d:e4:ee:b0:94:2f:67:19:0d:0c:da:01:56:e7: ee:94:a3:5a:e1:5a:38:1e:f7:81:2d:ee:52:f1:19: d8:a1:b0:e5:8e:85:9e:18:8a:dc:d7:9f:c4:91:5e: 34:c0:49:87:68:84:a6:35:ba:f3:14:bc:e2:5c:8b: 5a:14:95:40:65:23:85:45:6c:fd:bb:ab:ce:58:89: a0:49:2e:fc:7a:ac:05:54:3b:7e:f6:60:a7:e2:f5: ce:72:0b:20:7f:76:37:6b:08:4a:2a:3e:6f:d2:64: 1e:4a:98:de:b7:3c:d0:4a:f6:f0:19:3c:84:9d:a8: 2a:47:aa:eb:ef:92:39:43:57:6d:bf:90:bc:c3:cb: 83:15:c2:e7:0f:1f:74:cc:56:54:7e:bc:aa:50:70: f3:9a:40:e7:e8:0b:a1:db:86:d2:1c:9e:98:b1:22: c1:c1:6c:59:cb:53:f4:85:3a:2c:a3:23:11:a9:8b: 0a:e4:0a:06:45:4c:56:5a:b6:18:88:12:80:f7:fe: 29:e0:50:e3:d0:b1:26:82:39:ea:f2:1f:73:3a:7b: 41:ae:e5:17:83:8a:50:eb:c3:08:dd:18:5f:03:9c: 85:36:c3:84:69:94:97:60:2d:f0:12:e8:02:d3:e0: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:97:6B:E2:5E:D6:18:9C:45:99:20:70:F5:D2:B9:72:44:1A:B4:9D X509v3 Authority Key Identifier: keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/oZdr4l7WGJxFmSBw9dK5ckQatJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:60c7:8100::/48 Signature Algorithm: sha256WithRSAEncryption 61:fe:31:e7:12:f2:18:d5:d9:64:40:0f:47:a7:29:22:cd:be: 57:c4:24:70:48:69:bd:67:fd:5d:0a:ad:2b:37:52:40:ef:2c: 1a:b0:0b:0c:d2:9b:52:f9:55:44:b2:77:a6:ec:04:14:c2:99: 29:30:2e:9d:2d:1c:6e:5c:0c:cf:48:d1:43:f6:3c:34:61:33: 01:d0:c2:21:94:47:b1:1b:ff:2f:ca:77:c7:7d:e9:2a:76:c2: b4:81:fb:61:22:86:bd:9d:ec:20:92:1c:b1:04:a9:02:60:16: 43:18:47:4f:74:f5:d9:f8:d8:f0:6d:f1:b3:c4:31:ba:fe:cc: b8:02:96:c8:ac:79:e7:55:68:28:64:bb:36:e3:28:1d:ed:b7: 95:9f:6e:75:f1:13:70:a0:21:6d:e7:85:59:b5:a8:1b:20:9a: 9a:69:2b:65:49:5e:ce:93:b4:6f:47:d0:cb:11:ad:9a:e5:45: 26:21:8a:95:aa:8f:c8:9a:80:00:20:7d:00:05:51:2a:b9:dc: 3b:8e:72:72:44:aa:3f:55:fe:25:d9:2b:60:9f:15:c3:e1:88: 56:38:82:36:7d:1d:68:54:aa:7a:45:c7:06:25:4f:19:37:b8: 17:76:8c:a1:c8:83:9f:c0:29:f7:e3:2d:38:26:b7:1e:ae:a1: 12:95:30:7e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZpcqMyFadcqawRXVmnRTTMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTEzMThkNGJkZDNlYzU5NDMzODZlNzAxZDdkMDJiZDY4 MzAwYWQwHhcNMjUxMTA3MDQ1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTk3NmJlMjVlZDYxODljNDU5OTIwNzBmNWQyYjk3MjQ0MWFiNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lJ94F7PWX+26EzfDReXTeTusJQv ZxkNDNoBVufulKNa4Vo4HveBLe5S8RnYobDljoWeGIrc15/EkV40wEmHaISmNbrz FLziXItaFJVAZSOFRWz9u6vOWImgSS78eqwFVDt+9mCn4vXOcgsgf3Y3awhKKj5v 0mQeSpjetzzQSvbwGTyEnagqR6rr75I5Q1dtv5C8w8uDFcLnDx90zFZUfryqUHDz mkDn6Auh24bSHJ6YsSLBwWxZy1P0hTosoyMRqYsK5AoGRUxWWrYYiBKA9/4p4FDj 0LEmgjnq8h9zOntBruUXg4pQ68MI3RhfA5yFNsOEaZSXYC3wEugC0+ArkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKGXa+Je1hicRZkgcPXSuXJEGrSdMB8GA1UdIwQY MBaAFHsRMY1L3T7FlDOG5wHX0CvWgwCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYt ODhlYzU3OWY4OGNhLzEvb1pkcjRsN1dHSnhGbVNCdzlkSzVja1FhdEowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYtODhlYzU3OWY4OGNh LzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRgx4EA MA0GCSqGSIb3DQEBCwUAA4IBAQBh/jHnEvIY1dlkQA9Hpykizb5XxCRwSGm9Z/1d Cq0rN1JA7ywasAsM0ptS+VVEsnem7AQUwpkpMC6dLRxuXAzPSNFD9jw0YTMB0MIh lEexG/8vynfHfekqdsK0gfthIoa9newgkhyxBKkCYBZDGEdPdPXZ+NjwbfGzxDG6 /sy4ApbIrHnnVWgoZLs24ygd7beVn2518RNwoCFt54VZtagbIJqaaStlSV7Ok7Rv R9DLEa2a5UUmIYqVqo/ImoAAIH0ABVEqudw7jnJyRKo/Vf4l2StgnxXD4YhWOII2 fR1oVKp6RccGJU8ZN7gXdoyhyIOfwCn34y04JrcerqESlTB+ -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:02 2025 by rpki-client