This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/odrSHWi-etzbs5Qgz4Wi0eML4Y8.roa File: odrSHWi-etzbs5Qgz4Wi0eML4Y8.roa (raw, json) Hash identifier: cbVvJtHc49wuP2kM+c8E8HbvQTmGPzRwfkVKDRKo62E= Subject key identifier: A1:DA:D2:1D:68:BE:7A:DC:DB:B3:94:20:CF:85:A2:D1:E3:0B:E1:8F Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B1E1B623EF8EB254D96A0238BC3BFBBA8 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/odrSHWi-etzbs5Qgz4Wi0eML4Y8.roa Signing time: Sun 14 Dec 2025 18:24:29 +0000 ROA not before: Sun 14 Dec 2025 18:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210464 IP address blocks: 2a0a:79c7:f100::/40 maxlen: 40 2a0a:79c7:f200::/40 maxlen: 40 2a0a:79c7:f300::/40 maxlen: 40 2a0a:79c7:f500::/40 maxlen: 40 2a0a:79c7:f600::/40 maxlen: 40 2a0a:79c7:f800::/40 maxlen: 40 2a0a:79c7:fa00::/40 maxlen: 40 2a0a:79c7:fc00::/40 maxlen: 40 2a0a:79c7:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:1b:62:3e:f8:eb:25:4d:96:a0:23:8b:c3:bf:bb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Dec 14 18:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a1dad21d68be7adcdbb39420cf85a2d1e30be18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:d1:f8:a8:1d:bc:7a:38:d8:94:36:b0:86: d7:95:d1:b6:ab:b1:36:73:a2:ae:76:3e:a4:85:7d: eb:bf:f7:e5:40:1f:33:77:05:cb:a1:f2:9d:4a:b5: 23:2d:2c:d2:e9:eb:92:1c:de:39:44:a0:a2:fa:d0: 1a:1a:78:e9:99:ec:19:4d:5c:57:33:a1:7d:93:dd: a5:80:02:f3:3b:5b:d5:e9:27:ca:51:b3:9e:60:21: b6:39:39:d0:3d:64:bc:fa:2f:9b:5e:5a:15:73:76: 1a:1e:28:b2:a4:18:40:24:77:ae:92:55:4e:a8:67: 30:60:60:6a:74:20:f7:9c:b6:88:62:6c:57:09:50: 90:fc:68:ce:7f:e0:47:f7:86:09:1b:51:20:77:f1: 51:be:75:97:e2:be:de:66:df:f7:ce:5b:b7:07:e5: 18:bb:af:1f:58:bc:4b:6a:01:ac:3a:36:50:5d:bb: 89:9a:70:ff:c2:f5:bb:20:82:2a:b1:27:9b:3e:e3: 39:e6:49:48:34:c8:c2:04:03:ee:fc:64:d1:02:9e: eb:ce:69:a1:e6:6e:df:9f:ba:9f:84:c6:44:6b:74: 4e:30:e9:49:92:9c:de:87:7e:67:e9:0b:d5:62:76: 48:55:82:d2:6d:ae:02:5b:2f:fd:d8:ed:ae:4e:ac: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DA:D2:1D:68:BE:7A:DC:DB:B3:94:20:CF:85:A2:D1:E3:0B:E1:8F X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/odrSHWi-etzbs5Qgz4Wi0eML4Y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c7:f100::-2a0a:79c7:f3ff:ffff:ffff:ffff:ffff:ffff 2a0a:79c7:f500::-2a0a:79c7:f6ff:ffff:ffff:ffff:ffff:ffff 2a0a:79c7:f800::/40 2a0a:79c7:fa00::/40 2a0a:79c7:fc00::/40 2a0a:79c7:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 64:98:8b:7c:c6:32:6a:b2:9e:c2:6d:f1:3b:01:b3:5b:ac:a2: 7b:c2:9e:4d:7f:db:97:a5:01:0a:98:0c:4a:e0:4f:cf:cc:3f: 46:b3:4c:b0:8f:04:3b:9e:6f:76:04:32:7b:42:c8:18:92:09: 39:82:3c:88:5c:64:79:46:bc:b0:fd:fb:ef:65:16:f6:a8:e8: bf:b0:48:66:fe:12:41:6f:28:e0:9c:e3:7e:9b:5b:d7:34:f9: 31:8d:95:86:46:80:c6:e6:4e:60:2a:a3:41:c0:e6:62:24:36: 6e:90:8f:33:a1:54:a2:9e:ae:7e:cb:a9:d4:fc:05:78:62:7f: fb:d9:4b:da:fa:8e:59:e0:f9:01:a5:e1:2d:96:d0:6c:ac:43: 7a:fa:41:7e:6b:7b:68:a8:ab:81:93:a9:15:06:e5:5a:28:6f: 31:3d:1a:e4:22:31:82:87:fa:45:17:75:dd:d9:be:28:f1:9a: 64:e6:43:95:5b:71:92:c2:37:e2:a4:66:e2:ac:b5:42:cb:f9: 80:1b:b2:e5:ac:34:26:be:aa:89:7b:bf:2d:e5:16:20:e0:60: 79:0b:71:07:f3:85:29:96:12:20:94:79:cb:36:41:ab:0e:a3: ed:1d:37:96:29:ee:7f:46:b7:51:8c:24:2f:e3:ab:4a:c1:74: 13:b4:a7:21 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZseG2I++OslTZagI4vDv7uoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjUxMjE0MTgyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWRhZDIxZDY4YmU3YWRjZGJiMzk0MjBjZjg1YTJkMWUzMGJlMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPnR+KgdvHo42JQ2sIbXldG2q7E2 c6Kudj6khX3rv/flQB8zdwXLofKdSrUjLSzS6euSHN45RKCi+tAaGnjpmewZTVxX M6F9k92lgALzO1vV6SfKUbOeYCG2OTnQPWS8+i+bXloVc3YaHiiypBhAJHeuklVO qGcwYGBqdCD3nLaIYmxXCVCQ/GjOf+BH94YJG1Egd/FRvnWX4r7eZt/3zlu3B+UY u68fWLxLagGsOjZQXbuJmnD/wvW7IIIqsSebPuM55klINMjCBAPu/GTRAp7rzmmh 5m7fn7qfhMZEa3ROMOlJkpzeh35n6QvVYnZIVYLSba4CWy/92O2uTqzQTwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFKHa0h1ovnrc27OUIM+FotHjC+GPMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvb2RyU0hXaS1ldHpiczVRZ3o0V2kwZU1MNFk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAAjBEMBADBgAqCnnH 8QMGAioKecfwMBADBgAqCnnH9QMGACoKecf2AwYAKgp5x/gDBgAqCnnH+gMGACoK ecf8AwYAKgp5x/8wDQYJKoZIhvcNAQELBQADggEBAGSYi3zGMmqynsJt8TsBs1us onvCnk1/25elAQqYDErgT8/MP0azTLCPBDueb3YEMntCyBiSCTmCPIhcZHlGvLD9 ++9lFvao6L+wSGb+EkFvKOCc436bW9c0+TGNlYZGgMbmTmAqo0HA5mIkNm6QjzOh VKKern7LqdT8BXhif/vZS9r6jlng+QGl4S2W0GysQ3r6QX5re2ioq4GTqRUG5Voo bzE9GuQiMYKH+kUXdd3ZvijxmmTmQ5VbcZLCN+KkZuKstULL+YAbsuWsNCa+qol7 vy3lFiDgYHkLcQfzhSmWEiCUecs2QasOo+0dN5Yp7n9Gt1GMJC/jq0rBdBO0pyE= -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:55 2025 by rpki-client