This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/oBjKq8D7YtanGgUooThZNZJBCfY.roa File: oBjKq8D7YtanGgUooThZNZJBCfY.roa (raw, json) Hash identifier: Q8Mc9EtbMAXUED7OkrFkGjXFG36weOz2FmafoAYIkKY= Subject key identifier: A0:18:CA:AB:C0:FB:62:D6:A7:1A:05:28:A1:38:59:35:92:41:09:F6 Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70 Certificate serial: 019B7C1124BAC5EDB6D08AD0954698F4A398 Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/oBjKq8D7YtanGgUooThZNZJBCfY.roa Signing time: Fri 02 Jan 2026 00:17:36 +0000 ROA not before: Fri 02 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206072 IP address blocks: 2001:67c:9bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:24:ba:c5:ed:b6:d0:8a:d0:95:46:98:f4:a3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70 Validity Not Before: Jan 2 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a018caabc0fb62d6a71a0528a1385935924109f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:e5:c2:2e:6c:f2:19:2a:54:21:3b:67:00: 39:72:3f:00:e5:de:48:31:e3:ef:64:11:b0:10:9a: da:90:f1:3f:16:f7:17:02:11:cb:ce:56:1c:94:6d: 8e:aa:bc:96:73:4f:4d:45:8b:e6:50:69:33:27:9e: 37:6e:27:80:24:72:3c:96:ac:d2:a6:46:71:7f:42: 59:ed:6f:d9:69:52:d9:65:e0:ae:e5:9d:53:90:64: f9:da:ff:ed:66:8b:81:65:4e:49:6b:52:5b:ab:92: 0a:a9:77:a7:70:28:1f:7e:1a:cc:74:95:c9:cd:43: 95:4f:30:5f:f8:fd:6a:a9:97:9f:08:c1:41:b0:63: ee:fa:97:0e:55:e6:25:62:27:40:98:98:7e:59:cf: 2f:10:9a:4c:9a:f6:c5:66:d7:bc:03:71:a6:7f:11: ba:87:d5:0c:0b:b6:b0:33:9f:82:de:cb:d6:b9:3e: 10:d5:6e:bc:d0:19:63:c2:38:19:53:8c:09:5b:44: 82:40:4c:44:52:bd:91:67:94:14:d1:0d:76:c8:63: 02:1d:b4:57:cd:fd:00:58:b2:c1:bc:e5:25:b9:51: 75:b3:2d:2d:a3:66:ff:34:78:08:17:59:0c:0f:0c: 8c:ec:44:9d:e1:7a:43:00:29:92:82:b5:fb:4e:1c: 79:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:18:CA:AB:C0:FB:62:D6:A7:1A:05:28:A1:38:59:35:92:41:09:F6 X509v3 Authority Key Identifier: keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/oBjKq8D7YtanGgUooThZNZJBCfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:9bc::/48 Signature Algorithm: sha256WithRSAEncryption 08:5d:f3:21:46:34:27:db:06:9d:2f:ca:75:ef:25:0d:05:c4: 5c:ce:72:81:56:70:ea:4f:7e:a4:4b:7c:ac:e9:8b:fb:9f:b1: c1:eb:84:b9:b6:e3:0e:1d:00:2d:50:2e:23:07:b4:58:c7:b2: 9f:d6:75:c2:8f:c0:dc:96:dd:99:45:61:cb:df:1b:11:b1:55: f4:50:68:36:1d:ce:34:f6:f2:73:16:2d:1f:79:c0:a6:59:b6: 90:e5:e3:4e:b6:bf:14:98:3d:cc:2c:00:76:b2:46:4c:a7:d6: ca:44:2a:4b:46:bd:d7:8b:17:49:c9:34:98:88:8e:c9:3b:ae: 6a:82:41:40:7a:58:2c:bf:14:ab:2b:94:22:54:09:c7:39:3c: 08:db:77:bb:2d:90:f6:2f:90:57:db:cd:5c:5a:eb:4d:27:eb: 90:6a:1f:f0:3a:55:32:bf:6b:51:6f:b3:f7:0d:7a:dc:1a:ba: b4:42:24:a7:39:89:46:1d:5d:16:eb:fe:ac:60:c2:49:a4:b8: bc:f3:c5:46:95:b9:bc:bd:1a:08:98:d2:39:58:f1:6f:47:d0: 66:42:8c:72:b2:78:e8:66:e5:c0:06:7c:c6:2a:8c:cc:88:2b: 22:ee:49:32:11:c5:6e:34:32:ed:51:f8:b0:31:d6:85:48:6e: b6:e3:d0:12 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ESS6xe220IrQlUaY9KOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzY2Njc3MmQ3OWJkN2JiMjExOTlhMmFiZGFmZTIyMDI1 MTFjNzAwHhcNMjYwMTAyMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDE4Y2FhYmMwZmI2MmQ2YTcxYTA1MjhhMTM4NTkzNTkyNDEwOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WXlwi5s8hkqVCE7ZwA5cj8A5d5I MePvZBGwEJrakPE/FvcXAhHLzlYclG2OqryWc09NRYvmUGkzJ543bieAJHI8lqzS pkZxf0JZ7W/ZaVLZZeCu5Z1TkGT52v/tZouBZU5Ja1Jbq5IKqXencCgffhrMdJXJ zUOVTzBf+P1qqZefCMFBsGPu+pcOVeYlYidAmJh+Wc8vEJpMmvbFZte8A3GmfxG6 h9UMC7awM5+C3svWuT4Q1W680BljwjgZU4wJW0SCQExEUr2RZ5QU0Q12yGMCHbRX zf0AWLLBvOUluVF1sy0to2b/NHgIF1kMDwyM7ESd4XpDACmSgrX7Thx5OQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKAYyqvA+2LWpxoFKKE4WTWSQQn2MB8GA1UdIwQY MBaAFH7GZncteb17shGZoqva/iICURxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODIt OTE2NTFkOWI4NTZhLzEvb0JqS3E4RDdZdGFuR2dVb29UaFpOWkpCQ2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODItOTE2NTFkOWI4NTZh LzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAm8 MA0GCSqGSIb3DQEBCwUAA4IBAQAIXfMhRjQn2wadL8p17yUNBcRcznKBVnDqT36k S3ys6Yv7n7HB64S5tuMOHQAtUC4jB7RYx7Kf1nXCj8Dclt2ZRWHL3xsRsVX0UGg2 Hc409vJzFi0fecCmWbaQ5eNOtr8UmD3MLAB2skZMp9bKRCpLRr3XixdJyTSYiI7J O65qgkFAelgsvxSrK5QiVAnHOTwI23e7LZD2L5BX281cWutNJ+uQah/wOlUyv2tR b7P3DXrcGrq0QiSnOYlGHV0W6/6sYMJJpLi888VGlbm8vRoImNI5WPFvR9BmQoxy snjoZuXABnzGKozMiCsi7kkyEcVuNDLtUfiwMdaFSG6249AS -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:49 2026 by rpki-client