This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa File: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (raw, json) Hash identifier: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ= Subject key identifier: AE:87:A7:38:E9:40:18:0D:3F:38:58:F0:AC:5C:03:44:84:34:63:F6 Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Certificate serial: 019B7CEDF2738CC6C9B60D18E90131DF9140 Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa Signing time: Fri 02 Jan 2026 04:18:47 +0000 ROA not before: Fri 02 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 2a02:7720::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f2:73:8c:c6:c9:b6:0d:18:e9:01:31:df:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae87a738e940180d3f3858f0ac5c0344843463f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:85:af:3b:97:82:54:35:dc:8f:15:ed:0e: eb:42:bb:9b:85:aa:2e:f5:31:6c:2c:f3:90:e4:ab: cd:50:bc:37:e1:f2:c2:4c:58:2d:4b:3e:46:0f:b6: 09:92:b7:4c:b6:8f:5f:3f:c3:df:60:f6:e5:80:be: 84:f3:5a:90:fc:da:73:2b:6f:d6:90:35:2f:a0:f6: 00:c8:35:f3:bd:0e:c7:8d:ee:e9:92:6f:5f:2c:7c: 8e:06:9b:a3:a9:34:5b:c9:5a:df:f2:e0:7d:42:c9: 66:ee:32:9a:3f:d4:90:d1:92:e2:90:b9:05:a0:7c: a4:56:fe:66:23:2b:f0:c8:29:91:49:19:0c:a2:b2: df:b3:c1:f0:6d:27:bf:b9:60:42:06:0e:9b:59:20: d4:3f:d5:17:3c:33:47:54:de:c6:e6:d2:1e:59:b0: 90:7c:a6:63:fe:63:3d:17:ca:08:ce:83:e5:7b:9c: db:9e:65:61:65:3b:e5:d9:eb:bf:61:5d:48:4d:4d: 0c:4c:93:d6:4d:4d:95:18:1c:1d:ae:9b:33:f8:06: 52:59:6b:4f:76:05:4f:df:7d:d1:52:d1:d2:89:fc: 48:2b:8f:32:16:6c:aa:8c:bb:60:5e:87:5a:4e:25: 7b:64:c8:9b:01:13:34:c3:e2:5b:72:3e:64:d0:54: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:87:A7:38:E9:40:18:0D:3F:38:58:F0:AC:5C:03:44:84:34:63:F6 X509v3 Authority Key Identifier: keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:7720::/32 Signature Algorithm: sha256WithRSAEncryption 32:56:4b:5c:14:b1:66:cb:61:f7:3e:fe:bf:f1:9c:65:84:1e: 38:e5:c8:92:9e:55:73:3a:ee:60:7e:53:9c:44:3a:d5:4b:a8: 19:31:f2:d1:a0:66:fa:d6:40:93:e4:7a:c0:b7:71:b0:a9:a2: 94:65:23:34:a7:41:ed:95:9a:72:ff:61:2c:37:ed:52:8f:fc: 5b:2d:ad:ce:8b:6d:90:5e:48:e5:7f:01:89:ab:e8:3d:62:a9: da:68:25:df:ed:4c:17:fa:24:9f:a6:87:b8:ad:ca:ec:7c:8f: 76:cb:8f:25:57:7a:8a:11:23:d9:7d:51:dd:35:f1:7f:b8:91: 7c:79:9a:ae:5a:61:92:2c:fb:48:bc:29:11:e4:bc:a8:6e:11: 82:2a:ab:7e:eb:57:79:44:05:25:46:17:9e:95:d2:e3:7e:60: a8:9e:15:cc:37:b5:31:1e:35:2e:a3:93:25:44:6c:e5:46:27: 7d:0e:ac:89:98:4c:54:a8:c4:78:41:96:41:60:4b:95:99:27: 1c:8a:1e:46:30:c8:45:b8:1a:f3:90:cd:61:00:51:4a:ec:fa: b2:30:3b:a2:21:98:d8:a8:5b:68:16:50:37:c1:39:61:0f:18: b8:0d:c4:7e:17:25:21:db:41:14:20:04:41:5e:28:1e:19:d5: e4:9b:84:f1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87fJzjMbJtg0Y6QEx35FAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl NmRiMGUwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTg3YTczOGU5NDAxODBkM2YzODU4ZjBhYzVjMDM0NDg0MzQ2M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokmFrzuXglQ13I8V7Q7rQrubhaou 9TFsLPOQ5KvNULw34fLCTFgtSz5GD7YJkrdMto9fP8PfYPblgL6E81qQ/NpzK2/W kDUvoPYAyDXzvQ7Hje7pkm9fLHyOBpujqTRbyVrf8uB9Qslm7jKaP9SQ0ZLikLkF oHykVv5mIyvwyCmRSRkMorLfs8HwbSe/uWBCBg6bWSDUP9UXPDNHVN7G5tIeWbCQ fKZj/mM9F8oIzoPle5zbnmVhZTvl2eu/YV1ITU0MTJPWTU2VGBwdrpsz+AZSWWtP dgVP333RUtHSifxIK48yFmyqjLtgXodaTiV7ZMibARM0w+Jbcj5k0FRjcQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK6HpzjpQBgNPzhY8KxcA0SENGP2MB8GA1UdIwQY MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt ZTU5NDc2MTRlZjNmLzEvcm9lbk9PbEFHQTBfT0Zqd3JGd0RSSVEwWV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgJ3IDAN BgkqhkiG9w0BAQsFAAOCAQEAMlZLXBSxZsth9z7+v/GcZYQeOOXIkp5VczruYH5T nEQ61UuoGTHy0aBm+tZAk+R6wLdxsKmilGUjNKdB7ZWacv9hLDftUo/8Wy2tzott kF5I5X8BiavoPWKp2mgl3+1MF/okn6aHuK3K7HyPdsuPJVd6ihEj2X1R3TXxf7iR fHmarlphkiz7SLwpEeS8qG4RgiqrfutXeUQFJUYXnpXS435gqJ4VzDe1MR41LqOT JURs5UYnfQ6siZhMVKjEeEGWQWBLlZknHIoeRjDIRbga85DNYQBRSuz6sjA7oiGY 2KhbaBZQN8E5YQ8YuA3EfhclIdtBFCAEQV4oHhnV5JuE8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:28 2026 by rpki-client