This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/oYXyy77jFFZFt2039BhjAw8G3L0.roa File: oYXyy77jFFZFt2039BhjAw8G3L0.roa (raw, json) Hash identifier: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4= Subject key identifier: A1:85:F2:CB:BE:E3:14:56:45:B7:6D:37:F4:18:63:03:0F:06:DC:BD Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED3A3EACE947FDA5C54E69EC85148 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/oYXyy77jFFZFt2039BhjAw8G3L0.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214431 IP address blocks: 2a03:9382::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:a3:ea:ce:94:7f:da:5c:54:e6:9e:c8:51:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a185f2cbbee3145645b76d37f41863030f06dcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:1b:20:39:04:29:2b:86:71:04:1d:2c:50: 3c:b3:17:42:83:c2:a0:74:c8:69:33:28:3f:89:e3: cb:b5:d0:94:8c:4e:79:26:d8:0b:ba:16:47:61:50: 5f:1f:0e:17:f6:da:ce:44:60:85:7b:a7:a1:bf:e6: cb:71:56:d2:01:1f:33:fd:a9:0f:cf:22:54:09:e6: a9:0b:5e:24:7d:1f:5f:9e:30:34:ce:c2:6c:ff:93: 6f:a3:85:bc:d0:93:11:aa:89:ea:e9:b1:c9:73:be: e2:46:cc:33:8b:25:46:ba:dc:8f:00:0e:6e:21:f2: 9f:5c:bf:49:e5:f5:5c:2d:65:fa:b3:a7:30:85:3b: e2:75:f3:6b:d5:ee:d1:ff:29:66:c5:96:33:78:ea: f6:21:9c:a2:86:09:69:c4:1f:34:ed:ea:bc:cb:7e: fd:b6:7d:6a:e8:07:a7:e3:df:ce:57:67:34:34:53: 7d:50:3f:d9:ba:f2:5b:57:fc:c0:3c:c2:90:ab:3c: 88:92:87:69:68:93:ef:6d:d6:c5:5d:1b:e0:04:d0: 88:20:cc:77:36:65:1c:c2:4f:8e:ee:c7:48:ff:75: 98:fe:87:a9:86:88:d8:3b:ac:9d:93:66:a2:83:89: c3:bd:ba:4e:02:24:40:32:04:5a:60:96:41:0a:62: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:85:F2:CB:BE:E3:14:56:45:B7:6D:37:F4:18:63:03:0F:06:DC:BD X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/oYXyy77jFFZFt2039BhjAw8G3L0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:9382::/48 Signature Algorithm: sha256WithRSAEncryption cc:33:81:9b:a7:82:1b:57:0a:f6:69:b1:57:43:d1:3b:12:dd: 99:c2:08:6a:96:b9:40:eb:db:e8:cf:0f:c2:3a:89:38:fa:61: 0f:9a:af:a3:64:4f:ba:be:19:43:25:4a:04:df:79:5e:c7:2b: 3b:51:92:71:39:8c:16:3d:4a:ce:8f:9d:53:0e:3a:be:ee:bc: 3f:c4:d8:1c:ac:22:90:d7:45:12:0e:23:e7:87:3f:f6:31:6f: 4f:67:8f:65:b6:e8:45:bf:83:a9:b4:ae:f5:31:c7:90:54:2e: c5:88:12:ad:49:bc:5b:80:5b:d9:da:a6:cc:35:bb:33:bc:a3: 16:cf:ac:db:dd:89:72:45:9d:0d:c0:68:da:bf:9d:a5:4b:61: 7e:c4:f5:8a:b9:72:58:fa:9c:51:75:dc:70:13:04:d4:d7:68: e6:57:1d:0a:39:89:ce:eb:46:c8:f3:44:15:25:fd:22:82:2b: 55:19:b3:95:5b:51:93:cb:6a:ca:5c:57:56:7a:dd:2e:19:c3: dd:9b:89:e7:09:65:24:2f:8b:81:e0:f0:4f:2a:e1:ce:b1:f7: 8d:6f:54:cf:a9:92:25:ad:e0:39:57:01:b6:b0:19:1b:4b:fe: ae:28:39:44:7e:bc:25:3f:f9:30:1e:a5:39:c9:84:cf:3d:c4: 91:64:2e:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ftOj6s6Uf9pcVOaeyFFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTg1ZjJjYmJlZTMxNDU2NDViNzZkMzdmNDE4NjMwMzBmMDZkY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkbIDkEKSuGcQQdLFA8sxdCg8Kg dMhpMyg/iePLtdCUjE55JtgLuhZHYVBfHw4X9trORGCFe6ehv+bLcVbSAR8z/akP zyJUCeapC14kfR9fnjA0zsJs/5Nvo4W80JMRqonq6bHJc77iRswziyVGutyPAA5u IfKfXL9J5fVcLWX6s6cwhTvidfNr1e7R/ylmxZYzeOr2IZyihglpxB807eq8y379 tn1q6Aen49/OV2c0NFN9UD/ZuvJbV/zAPMKQqzyIkodpaJPvbdbFXRvgBNCIIMx3 NmUcwk+O7sdI/3WY/oephojYO6ydk2aig4nDvbpOAiRAMgRaYJZBCmIF1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKGF8su+4xRWRbdtN/QYYwMPBty9MB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvb1lYeXk3N2pGRlpGdDIwMzlCaGpBdzhHM0wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOTggAA MA0GCSqGSIb3DQEBCwUAA4IBAQDMM4Gbp4IbVwr2abFXQ9E7Et2ZwghqlrlA69vo zw/COok4+mEPmq+jZE+6vhlDJUoE33lexys7UZJxOYwWPUrOj51TDjq+7rw/xNgc rCKQ10USDiPnhz/2MW9PZ49ltuhFv4OptK71MceQVC7FiBKtSbxbgFvZ2qbMNbsz vKMWz6zb3YlyRZ0NwGjav52lS2F+xPWKuXJY+pxRddxwEwTU12jmVx0KOYnO60bI 80QVJf0igitVGbOVW1GTy2rKXFdWet0uGcPdm4nnCWUkL4uB4PBPKuHOsfeNb1TP qZIlreA5VwG2sBkbS/6uKDlEfrwlP/kwHqU5yYTPPcSRZC5b -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:45 2026 by rpki-client