This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OdJJJkl_HyfDmTQV3KiZi3U8pXQ.roa File: OdJJJkl_HyfDmTQV3KiZi3U8pXQ.roa (raw, json) Hash identifier: o+RtwIxP+Mu7q1NdauSn3jMUeb6RmDj/Sl3v2mbppNE= Subject key identifier: 39:D2:49:26:49:7F:1F:27:C3:99:34:15:DC:A8:99:8B:75:3C:A5:74 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75B42CA7D904CA88E11BD57D49D51 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OdJJJkl_HyfDmTQV3KiZi3U8pXQ.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201207 IP address blocks: 2a10:b43::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:42:ca:7d:90:4c:a8:8e:11:bd:57:d4:9d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39d24926497f1f27c3993415dca8998b753ca574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:3c:df:21:65:c5:f7:74:1e:f5:4b:22:f9: 87:33:3f:f4:21:98:a6:e6:6c:0b:6d:72:a8:47:bb: 25:6c:e5:20:51:e7:5b:9c:df:33:15:b6:df:2a:f5: 5b:20:d5:a5:fe:6e:21:91:b3:07:e1:f3:1d:d9:f8: 18:e6:60:d6:97:29:a1:f4:d2:0a:cf:77:be:da:f1: 60:c3:77:f5:bd:97:22:f5:d5:ff:df:b6:d4:80:6a: 4a:ce:8d:84:67:fe:24:7b:f9:1b:2c:66:b4:f4:ad: 9c:4a:a3:39:f9:62:68:86:15:2a:31:4f:06:a1:ce: 46:a1:bf:79:08:64:df:d0:03:48:78:eb:3c:cf:4b: 5e:8c:01:c2:66:0d:f3:f1:e5:2c:13:33:c0:eb:d1: 1f:95:b1:b1:13:ac:3f:51:e5:d5:52:62:5d:43:c6: 3e:7b:da:4f:1f:37:25:f1:68:49:e8:14:1e:9c:67: 03:83:63:e3:c4:9b:44:0c:d6:81:0b:44:16:63:17: 8a:aa:da:5a:31:2f:6b:96:c6:43:99:eb:df:d1:53: 5f:ed:c9:a6:8b:37:3d:03:e8:e3:88:c3:6b:24:2f: 9e:72:47:28:71:44:a1:4f:1b:73:36:d8:35:7f:23: b7:7d:ae:e1:e5:20:cd:dd:72:05:b4:1d:d3:41:d2: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D2:49:26:49:7F:1F:27:C3:99:34:15:DC:A8:99:8B:75:3C:A5:74 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OdJJJkl_HyfDmTQV3KiZi3U8pXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:b43::/32 Signature Algorithm: sha256WithRSAEncryption ce:e5:f3:52:22:16:7b:eb:f2:7f:13:8b:ae:3f:e7:fc:0d:c5: e6:aa:67:8b:c6:bb:ff:b9:33:2d:6c:81:17:ee:0c:b0:ba:f0: f4:e5:4f:45:9d:60:24:a9:3d:6d:23:0c:b0:c1:f2:42:16:53: 06:d1:4a:53:aa:56:81:50:c5:fc:a4:2b:8a:25:b1:60:6a:bf: 0c:fd:b5:c9:07:7f:6c:d3:0d:5a:7c:81:bc:6c:a6:da:de:1c: f3:4d:7d:90:a7:01:5e:3a:12:b3:27:db:9e:5b:ff:b0:cb:97: 9e:b3:ad:84:13:a6:09:13:dc:6c:0d:5e:ff:78:92:43:28:09: f1:a4:22:5f:1b:44:35:a9:a8:dd:34:be:75:f8:79:fb:76:6d: 9d:b0:d1:a8:f8:cd:ca:2d:66:3d:d6:d8:b8:24:10:82:9e:35: 6f:01:b2:5e:33:fd:78:ba:c9:16:29:ab:00:5b:d6:8b:7e:06: 3f:6b:73:8b:e1:f0:a1:b3:38:90:d6:e2:9b:05:a9:71:33:3f: 48:1f:ed:61:eb:f7:c7:62:b4:51:89:2e:2e:3f:07:d4:70:0f: 5a:48:fb:89:e9:1b:ba:3f:27:cb:16:d1:01:f6:72:e7:86:e9: 50:29:48:8f:24:ab:cd:9e:5e:03:6a:a6:a4:7a:00:4e:24:b2: 27:4d:3f:19 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+p1tCyn2QTKiOEb1X1J1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQyNDkyNjQ5N2YxZjI3YzM5OTM0MTVkY2E4OTk4Yjc1M2NhNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2I83yFlxfd0HvVLIvmHMz/0IZim 5mwLbXKoR7slbOUgUedbnN8zFbbfKvVbINWl/m4hkbMH4fMd2fgY5mDWlymh9NIK z3e+2vFgw3f1vZci9dX/37bUgGpKzo2EZ/4ke/kbLGa09K2cSqM5+WJohhUqMU8G oc5Gob95CGTf0ANIeOs8z0tejAHCZg3z8eUsEzPA69EflbGxE6w/UeXVUmJdQ8Y+ e9pPHzcl8WhJ6BQenGcDg2PjxJtEDNaBC0QWYxeKqtpaMS9rlsZDmevf0VNf7cmm izc9A+jjiMNrJC+eckcocUShTxtzNtg1fyO3fa7h5SDN3XIFtB3TQdI7YwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDnSSSZJfx8nw5k0FdyomYt1PKV0MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvT2RKSkprbF9IeWZEbVRRVjNLaVppM1U4cFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhALQzAN BgkqhkiG9w0BAQsFAAOCAQEAzuXzUiIWe+vyfxOLrj/n/A3F5qpni8a7/7kzLWyB F+4MsLrw9OVPRZ1gJKk9bSMMsMHyQhZTBtFKU6pWgVDF/KQriiWxYGq/DP21yQd/ bNMNWnyBvGym2t4c8019kKcBXjoSsyfbnlv/sMuXnrOthBOmCRPcbA1e/3iSQygJ 8aQiXxtENamo3TS+dfh5+3ZtnbDRqPjNyi1mPdbYuCQQgp41bwGyXjP9eLrJFimr AFvWi34GP2tzi+HwobM4kNbimwWpcTM/SB/tYev3x2K0UYkuLj8H1HAPWkj7iekb uj8nyxbRAfZy54bpUClIjySrzZ5eA2qmpHoATiSyJ00/GQ== -----END CERTIFICATE-----Generated at Sat Jan 3 18:58:52 2026 by rpki-client