This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/84fcfSOjnphSDe7dtZLQTGLV-OA.roa File: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (raw, json) Hash identifier: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc= Subject key identifier: F3:87:DC:7D:23:A3:9E:98:52:0D:EE:DD:B5:92:D0:4C:62:D5:F8:E0 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 019B7F83841DC6001F37BDDE58547DAC5444 Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/84fcfSOjnphSDe7dtZLQTGLV-OA.roa Signing time: Fri 02 Jan 2026 16:21:23 +0000 ROA not before: Fri 02 Jan 2026 16:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18747 IP address blocks: 2a0e:1c80:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:84:1d:c6:00:1f:37:bd:de:58:54:7d:ac:54:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Jan 2 16:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f387dc7d23a39e98520deeddb592d04c62d5f8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:42:e6:63:2a:c2:0e:39:a0:c0:6e:2d:f2: c8:c5:46:2f:76:b1:9b:9e:1d:4a:7c:36:dc:44:25: f5:4c:44:5e:33:13:71:75:5a:e0:90:4f:fe:bd:dc: 99:0a:0c:af:39:b9:93:6f:3a:8a:11:e1:6e:77:7e: 9c:db:51:f9:33:b4:0d:ac:aa:13:76:5a:d8:49:fd: bb:0f:c1:b4:8e:c7:e8:d2:e6:ec:4d:d7:4d:4e:c0: f2:f5:6e:03:5d:38:e4:dc:13:79:88:11:9f:d5:1a: db:7b:98:f1:ca:85:47:49:95:11:84:1d:0a:55:26: 47:9e:95:95:26:0f:a9:04:99:e1:e7:5f:13:c0:ae: a7:6c:23:d9:17:cb:9a:77:f7:10:f8:bc:d6:63:6b: ac:e3:71:39:14:2d:27:b8:22:cd:2d:69:20:c8:49: 13:ae:b7:b8:2f:a1:af:e8:89:d0:f2:47:a7:d1:c7: 88:fd:e7:19:27:d9:5f:43:a8:b2:05:ca:4f:99:64: 94:4c:b1:be:4e:38:85:a0:5f:eb:81:f8:bd:0b:13: 49:67:73:bb:13:89:27:a2:37:b1:d5:1b:31:12:30: 15:51:23:88:cf:ee:42:bb:38:3d:52:99:46:d1:c0: 58:97:07:fc:5a:a4:f4:b8:34:d7:25:da:06:6e:e5: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:87:DC:7D:23:A3:9E:98:52:0D:EE:DD:B5:92:D0:4C:62:D5:F8:E0 X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/84fcfSOjnphSDe7dtZLQTGLV-OA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1c80:1d::/48 Signature Algorithm: sha256WithRSAEncryption 17:90:d8:23:16:6a:76:d9:29:d6:f9:6d:08:e7:11:71:cc:8c: e4:59:8a:94:34:11:19:c0:0e:bb:76:11:8b:2e:30:f7:e3:8e: 5c:de:41:0f:2d:a2:8f:30:f2:23:6a:d5:63:6a:42:a3:03:b1: 97:7c:0a:78:e9:d8:ce:57:93:5c:cb:51:f5:19:b1:24:93:e1: 9c:0f:a7:c4:7f:75:0c:a1:a7:19:9c:ff:2b:be:ed:75:e6:16: d9:d3:02:8f:4a:50:7b:b8:27:98:14:16:41:b5:55:7f:f4:3e: 03:9b:09:81:7f:ff:0f:f2:7f:28:ac:67:35:48:a4:10:96:f8: 94:a3:e3:7c:bc:e7:dd:49:a4:2b:fb:8b:3b:26:23:97:7f:e3: c6:3e:21:1d:06:1c:e8:38:0f:0a:26:37:bd:10:64:f9:ea:6d: 38:f2:ca:4e:76:58:f8:b9:fe:88:c1:f2:aa:db:8a:8f:47:04: 44:da:0b:83:7e:c2:1e:13:c3:84:3c:e4:1a:6e:fd:a3:57:b9: 5e:a3:1b:3f:29:42:dd:8d:11:97:22:12:9f:5f:f2:f9:e8:fa: 18:e5:d3:6f:fa:47:0b:c0:90:97:90:ac:29:89:07:96:ce:a0: d1:9f:2e:31:eb:d3:15:1a:e1:fb:bb:19:20:f0:f9:33:61:0e: 7f:de:07:a5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g4QdxgAfN73eWFR9rFREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjYwMTAyMTYyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzg3ZGM3ZDIzYTM5ZTk4NTIwZGVlZGRiNTkyZDA0YzYyZDVmOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ9C5mMqwg45oMBuLfLIxUYvdrGb nh1KfDbcRCX1TEReMxNxdVrgkE/+vdyZCgyvObmTbzqKEeFud36c21H5M7QNrKoT dlrYSf27D8G0jsfo0ubsTddNTsDy9W4DXTjk3BN5iBGf1Rrbe5jxyoVHSZURhB0K VSZHnpWVJg+pBJnh518TwK6nbCPZF8uad/cQ+LzWY2us43E5FC0nuCLNLWkgyEkT rre4L6Gv6InQ8ken0ceI/ecZJ9lfQ6iyBcpPmWSUTLG+TjiFoF/rgfi9CxNJZ3O7 E4knojex1RsxEjAVUSOIz+5Cuzg9UplG0cBYlwf8WqT0uDTXJdoGbuUzqQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPOH3H0jo56YUg3u3bWS0Exi1fjgMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvODRmY2ZTT2pucGhTRGU3ZHRaTFFUR0xWLU9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cgAAd MA0GCSqGSIb3DQEBCwUAA4IBAQAXkNgjFmp22SnW+W0I5xFxzIzkWYqUNBEZwA67 dhGLLjD3445c3kEPLaKPMPIjatVjakKjA7GXfAp46djOV5Ncy1H1GbEkk+GcD6fE f3UMoacZnP8rvu115hbZ0wKPSlB7uCeYFBZBtVV/9D4DmwmBf/8P8n8orGc1SKQQ lviUo+N8vOfdSaQr+4s7JiOXf+PGPiEdBhzoOA8KJje9EGT56m048spOdlj4uf6I wfKq24qPRwRE2guDfsIeE8OEPOQabv2jV7leoxs/KULdjRGXIhKfX/L56PoY5dNv +kcLwJCXkKwpiQeWzqDRny4x69MVGuH7uxkg8PkzYQ5/3gel -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:52 2026 by rpki-client