This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/wOpotjYca3hIDPpRRC4dKRWIXpY.roa File: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (raw, json) Hash identifier: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w= Subject key identifier: C0:EA:68:B6:36:1C:6B:78:48:0C:FA:51:44:2E:1D:29:15:88:5E:96 Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156 Certificate serial: 019B7CED7EDE47CD8CEFEEEC70A3813E6E55 Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/wOpotjYca3hIDPpRRC4dKRWIXpY.roa Signing time: Fri 02 Jan 2026 04:18:17 +0000 ROA not before: Fri 02 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39591 IP address blocks: 2a14:6880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7e:de:47:cd:8c:ef:ee:ec:70:a3:81:3e:6e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156 Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0ea68b6361c6b78480cfa51442e1d2915885e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:a0:09:ba:19:4c:51:71:b5:d9:2a:37:06: 8f:ed:ce:f2:0c:87:b8:2c:47:8b:05:d1:01:b1:13: 65:0d:4c:21:4b:77:af:d5:12:6f:71:06:d7:5e:f9: 3e:2e:a0:62:6c:fe:80:0d:51:d0:8c:86:82:8f:29: a9:d4:45:31:00:39:b9:f7:04:6a:f4:ec:d4:29:18: 7f:03:05:b1:86:d8:ca:fb:e7:78:b3:f1:cc:c9:ad: 7b:58:8e:a0:be:8c:8c:57:85:77:7c:ea:92:4a:43: 45:e3:b9:92:03:9e:60:c6:bf:65:3f:1b:99:4a:26: 5e:f0:d2:99:ee:68:fa:20:a0:14:6d:49:36:51:e6: af:08:86:7c:c0:b0:d5:cc:8b:c3:6a:34:97:af:a8: d6:74:2c:5b:a6:3e:76:7f:c3:a2:ce:06:cf:07:8d: df:c7:3f:bb:9d:b6:60:b6:2f:05:a8:73:fd:02:6a: 68:9a:12:e9:88:f1:8e:5b:b8:3b:78:bc:e2:3c:3f: d3:ff:fc:13:eb:15:74:12:5e:e5:b1:fa:50:05:42: e5:0e:4e:f6:7f:bb:1b:8a:87:03:2e:0b:71:6d:71: b6:4f:99:65:5e:80:8e:82:26:c2:2c:bd:1c:46:19: 8e:18:b4:cb:6a:53:63:19:d0:0a:37:9d:8f:73:b6: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EA:68:B6:36:1C:6B:78:48:0C:FA:51:44:2E:1D:29:15:88:5E:96 X509v3 Authority Key Identifier: keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/wOpotjYca3hIDPpRRC4dKRWIXpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6880::/32 Signature Algorithm: sha256WithRSAEncryption 36:bb:43:6b:e2:8e:57:e9:01:74:35:e4:30:5f:e8:1f:2c:d5: 82:de:8f:54:2b:7f:6f:ec:34:a9:a7:53:e3:3f:2e:cb:9a:09: 80:a0:4e:77:5f:3b:52:47:95:22:09:f4:47:51:2f:cd:01:a3: c1:53:5d:bd:a4:de:67:4e:dd:25:7a:71:57:ac:d7:4c:9c:9f: a9:72:31:15:0b:1f:05:6e:89:a7:14:be:0e:05:0e:05:b4:b3: c1:19:aa:74:b0:79:37:25:24:05:10:9c:39:fe:d5:8e:ae:24: 29:44:1d:60:41:3c:2b:06:7e:0d:5b:0d:5d:95:98:7f:c2:83: d9:6e:29:e3:d8:cc:43:0c:6a:00:3c:c9:24:a2:b7:d7:23:d2: 00:bd:1f:e5:4e:f1:ee:4f:c8:4b:80:4d:45:f2:3a:78:4a:fe: d6:18:c9:1f:bd:a4:ac:c0:1c:25:59:d1:e4:00:28:b6:80:15: f3:a0:97:6f:0b:3a:38:fd:4f:00:ae:81:83:76:f6:f9:f1:5c: cf:9c:bd:8c:a2:47:41:e0:05:44:82:53:7a:55:ad:1e:88:e1: ee:d5:e7:fa:b4:39:ea:0e:47:7d:0e:dc:3b:8e:2e:07:a8:3b: 23:f9:c4:86:fb:fc:c8:d8:f3:a5:0e:35:8f:5f:1a:92:13:6f: 97:5a:65:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87X7eR82M7+7scKOBPm5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmNkN2JjMTkxNDIwNTZhY2FmOTU3M2NhYTFhZjhkZTg3 MTgxNTYwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGVhNjhiNjM2MWM2Yjc4NDgwY2ZhNTE0NDJlMWQyOTE1ODg1ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXqgCboZTFFxtdkqNwaP7c7yDIe4 LEeLBdEBsRNlDUwhS3ev1RJvcQbXXvk+LqBibP6ADVHQjIaCjymp1EUxADm59wRq 9OzUKRh/AwWxhtjK++d4s/HMya17WI6gvoyMV4V3fOqSSkNF47mSA55gxr9lPxuZ SiZe8NKZ7mj6IKAUbUk2UeavCIZ8wLDVzIvDajSXr6jWdCxbpj52f8OizgbPB43f xz+7nbZgti8FqHP9AmpomhLpiPGOW7g7eLziPD/T//wT6xV0El7lsfpQBULlDk72 f7sbiocDLgtxbXG2T5llXoCOgibCLL0cRhmOGLTLalNjGdAKN52Pc7YdmwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMDqaLY2HGt4SAz6UUQuHSkViF6WMB8GA1UdIwQY MBaAFIRs17wZFCBWrK+Vc8qhr43ocYFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMt ZDE5NTlmM2UyZjc2LzEvd09wb3RqWWNhM2hJRFBwUlJDNGRLUldJWHBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMtZDE5NTlmM2UyZjc2 LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRogDAN BgkqhkiG9w0BAQsFAAOCAQEANrtDa+KOV+kBdDXkMF/oHyzVgt6PVCt/b+w0qadT 4z8uy5oJgKBOd187UkeVIgn0R1EvzQGjwVNdvaTeZ07dJXpxV6zXTJyfqXIxFQsf BW6JpxS+DgUOBbSzwRmqdLB5NyUkBRCcOf7Vjq4kKUQdYEE8KwZ+DVsNXZWYf8KD 2W4p49jMQwxqADzJJKK31yPSAL0f5U7x7k/IS4BNRfI6eEr+1hjJH72krMAcJVnR 5AAotoAV86CXbws6OP1PAK6Bg3b2+fFcz5y9jKJHQeAFRIJTelWtHojh7tXn+rQ5 6g5HfQ7cO44uB6g7I/nEhvv8yNjzpQ41j18akhNvl1plFA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:17 2026 by rpki-client