This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/oZaTMKE7E4FwqTm79QuG6ASibB0.roa File: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (raw, json) Hash identifier: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI= Subject key identifier: A1:96:93:30:A1:3B:13:81:70:A9:39:BB:F5:0B:86:E8:04:A2:6C:1D Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21 Certificate serial: 019B7FF25693269E2D00348DC785B9B1DC32 Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/oZaTMKE7E4FwqTm79QuG6ASibB0.roa Signing time: Fri 02 Jan 2026 18:22:26 +0000 ROA not before: Fri 02 Jan 2026 18:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204146 IP address blocks: 194.31.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:56:93:26:9e:2d:00:34:8d:c7:85:b9:b1:dc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21 Validity Not Before: Jan 2 18:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1969330a13b138170a939bbf50b86e804a26c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9a:7a:90:43:4d:a1:6b:43:38:03:9e:ae:19: f5:43:26:48:9e:65:f1:39:ec:29:d0:50:10:ba:88: 16:e2:b3:8d:ce:de:7f:3a:76:55:eb:8c:d0:de:e2: 8c:9d:d2:44:55:58:30:4d:db:80:63:c3:ec:46:d1: cc:23:7f:5e:9c:6f:f6:5b:f4:0a:4e:82:f0:63:47: 30:4d:cb:3d:53:0b:f9:cd:06:95:48:9e:a6:10:46: 18:82:28:e9:dc:72:ef:e6:26:30:98:c4:2f:53:7d: 87:7d:a2:de:b1:b1:4d:da:f0:88:ab:44:cb:e4:31: a2:76:81:87:5f:de:53:83:65:d2:33:2c:9e:72:36: 77:60:83:f5:b4:e1:56:51:e3:1d:58:72:37:28:04: aa:db:ff:e9:20:72:21:15:9e:b6:12:d9:0e:5b:76: 6a:22:69:4e:e5:84:1a:19:92:c3:68:6c:b5:29:a4: a7:98:bd:45:48:6b:b1:93:3c:ce:6d:1d:75:d5:c8: 2d:f1:fe:96:ce:82:aa:ce:30:b8:6c:04:b6:88:fe: e5:22:cc:1d:50:54:65:23:2f:0a:72:8e:25:ab:bf: 31:25:77:e0:3f:b1:52:4e:ae:a8:cd:3c:48:99:82: 91:18:4b:03:d2:f4:b9:83:10:d6:78:79:0c:20:74: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:93:30:A1:3B:13:81:70:A9:39:BB:F5:0B:86:E8:04:A2:6C:1D X509v3 Authority Key Identifier: keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/oZaTMKE7E4FwqTm79QuG6ASibB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.112.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:5e:55:7a:2c:5a:60:a7:6f:88:d2:1e:7f:42:27:91:1d:bb: c9:8c:14:48:62:93:d9:0e:60:6a:f6:c5:c5:6e:d0:f2:8a:09: a6:a9:ef:7a:cb:79:fc:d7:94:e9:a4:33:18:20:91:65:9b:59: 8d:9b:61:5f:55:cb:d8:59:96:db:39:0d:8d:ed:a1:b7:7b:92: 00:52:99:d2:8a:70:c1:1e:25:ea:07:00:18:7b:02:ed:d0:80: 46:25:56:26:48:5d:0f:4f:cb:6b:d9:95:48:14:2e:a1:1b:1b: 1b:7a:85:07:7f:94:99:9a:40:5d:d4:77:61:e8:4f:81:81:4f: 82:12:9c:94:3e:3c:16:60:bd:b6:09:f1:1a:a3:4b:5b:38:b7: 31:3d:c1:1f:b4:62:f0:cd:bf:0f:b3:46:96:8e:02:cb:2b:ff: b3:b3:61:43:41:12:83:ca:2c:91:ed:99:d6:48:1b:95:0b:9d: 30:f5:58:33:66:68:a8:4c:3a:1b:3f:85:63:70:e9:77:c6:52: 09:d1:f6:6a:e6:2e:92:d2:65:3d:2d:c2:5c:2a:b0:f5:57:c9: 07:ef:bb:75:ad:58:8b:ed:28:d1:d8:f7:4f:c9:91:cf:8d:c4: 18:63:d4:ef:af:e6:cb:39:b5:64:85:b8:51:fd:32:e1:1a:47: 09:43:38:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8laTJp4tADSNx4W5sdwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm NjFhMjEwHhcNMjYwMTAyMTgyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTk2OTMzMGExM2IxMzgxNzBhOTM5YmJmNTBiODZlODA0YTI2YzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pp6kENNoWtDOAOerhn1QyZInmXx Oewp0FAQuogW4rONzt5/OnZV64zQ3uKMndJEVVgwTduAY8PsRtHMI39enG/2W/QK ToLwY0cwTcs9Uwv5zQaVSJ6mEEYYgijp3HLv5iYwmMQvU32HfaLesbFN2vCIq0TL 5DGidoGHX95Tg2XSMyyecjZ3YIP1tOFWUeMdWHI3KASq2//pIHIhFZ62EtkOW3Zq ImlO5YQaGZLDaGy1KaSnmL1FSGuxkzzObR111cgt8f6WzoKqzjC4bAS2iP7lIswd UFRlIy8Kco4lq78xJXfgP7FSTq6ozTxImYKRGEsD0vS5gxDWeHkMIHR1HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKGWkzChOxOBcKk5u/ULhugEomwdMB8GA1UdIwQY MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt ZGFiOWY4YmE4ZmI2LzEvb1phVE1LRTdFNEZ3cVRtNzlRdUc2QVNpYkIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2 LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwh9wMA0G CSqGSIb3DQEBCwUAA4IBAQBrXlV6LFpgp2+I0h5/QieRHbvJjBRIYpPZDmBq9sXF btDyigmmqe96y3n815TppDMYIJFlm1mNm2FfVcvYWZbbOQ2N7aG3e5IAUpnSinDB HiXqBwAYewLt0IBGJVYmSF0PT8tr2ZVIFC6hGxsbeoUHf5SZmkBd1Hdh6E+BgU+C EpyUPjwWYL22CfEao0tbOLcxPcEftGLwzb8Ps0aWjgLLK/+zs2FDQRKDyiyR7ZnW SBuVC50w9VgzZmioTDobP4VjcOl3xlIJ0fZq5i6S0mU9LcJcKrD1V8kH77t1rViL 7SjR2PdPyZHPjcQYY9Tvr+bLObVkhbhR/TLhGkcJQzhD -----END CERTIFICATE-----Generated at Mon Jan 12 16:07:00 2026 by rpki-client