This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OCsj8o8eDq-LupOAwwodUcUkFoE.roa File: OCsj8o8eDq-LupOAwwodUcUkFoE.roa (raw, json) Hash identifier: I7mQhZroNcx8tyoLXEVqIIDtlPXhFZMX+/Snr3zvglw= Subject key identifier: 38:2B:23:F2:8F:1E:0E:AF:8B:BA:93:80:C3:0A:1D:51:C5:24:16:81 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3601B1A1189FAD003B15ED20326698 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OCsj8o8eDq-LupOAwwodUcUkFoE.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 2a02:afc1::/32 maxlen: 40 2a06:da41::/32 maxlen: 40 2a0b:1f01::/32 maxlen: 40 2a0e:31c1::/32 maxlen: 40 2a0f:22c1::/32 maxlen: 40 2a0f:cf41::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:01:b1:a1:18:9f:ad:00:3b:15:ed:20:32:66:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382b23f28f1e0eaf8bba9380c30a1d51c5241681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:ff:68:79:80:a0:95:48:0d:c5:c3:b9:55: cf:c8:c9:60:0d:01:2c:c3:d0:ab:ac:e9:39:aa:2e: 35:c1:51:4d:5a:d5:92:78:25:23:85:a2:b4:74:cb: 12:aa:37:8e:3d:bc:e1:9f:19:dd:c4:c5:dd:6d:13: 71:0e:3b:ba:95:1f:e5:2b:ea:ea:d4:e0:32:5f:66: 5f:5c:c1:40:69:db:13:6e:5a:46:cb:ae:31:67:96: 75:a9:cc:4d:92:99:1f:11:d5:78:83:77:2d:93:46: 49:9b:df:65:a3:fc:30:76:03:2c:8a:89:a6:64:8e: f6:a3:28:56:a6:c8:96:5d:d9:1f:48:bf:09:7a:4d: 78:50:fc:12:5f:9a:86:91:6c:51:45:54:3b:3b:c2: eb:17:8b:a9:1b:45:68:fa:e2:7b:ca:f8:a1:20:ea: ed:45:4c:8c:6d:e4:ec:21:5b:ce:47:e1:d5:b3:48: 96:0d:65:cf:3a:5e:ab:3b:dc:00:f9:2d:5a:4d:37: 98:b5:8a:c5:be:1a:c1:10:86:21:b5:86:ba:da:f2: 38:f0:85:05:1d:10:83:45:a8:d3:4c:12:4d:4f:2a: cb:3c:a7:f7:1f:24:ec:21:c2:eb:8f:f4:67:c3:97: aa:84:3c:ad:65:b5:ba:00:3c:99:88:a2:0c:0c:ab: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2B:23:F2:8F:1E:0E:AF:8B:BA:93:80:C3:0A:1D:51:C5:24:16:81 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OCsj8o8eDq-LupOAwwodUcUkFoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:afc1::/32 2a06:da41::/32 2a0b:1f01::/32 2a0e:31c1::/32 2a0f:22c1::/32 2a0f:cf41::/32 Signature Algorithm: sha256WithRSAEncryption 61:11:de:c0:7a:b7:a1:a3:cd:0d:c3:9d:3a:b6:3f:6a:ee:06: 32:61:fb:8e:cc:17:c8:33:9b:5b:ae:7a:41:06:20:97:01:d5: 4d:59:5b:a6:a0:ce:ef:07:e8:c0:a7:be:c0:aa:7c:a1:95:61: 68:f9:57:f6:3b:67:36:aa:df:31:86:3b:9c:6b:ef:86:d1:7c: 08:41:7f:d9:d8:e3:c9:a9:6c:03:d7:97:0a:8f:31:e4:34:59: b0:ff:8d:13:fb:35:fe:5f:e0:3e:c4:cf:a7:12:22:b9:8c:a3: b0:e2:01:e0:0e:64:ee:c6:84:82:94:78:a0:a2:59:2a:b7:12: 60:ba:9e:0f:e3:f8:2c:63:51:5d:6b:7f:3d:e4:b6:92:62:70: 84:34:76:74:ad:cd:7a:2d:ef:2e:52:1d:c9:90:d4:e6:5c:ee: 00:e0:0c:cd:c9:ff:3c:ad:8b:4e:6a:6e:85:9b:e2:55:8e:d4: 69:0f:b1:15:d5:a8:f9:7d:b8:8d:8c:e5:92:23:2f:25:28:85: aa:3b:e6:d8:0f:47:bc:74:6b:11:f8:5d:17:40:dc:1c:f6:2a: 38:68:e2:43:62:af:c8:95:b5:d1:53:fd:dd:14:65:5a:ce:21: db:8c:a4:5f:a7:5a:83:56:c4:19:17:04:3f:8f:7b:d3:a5:fa: 46:48:7b:d5 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7NgGxoRifrQA7Fe0gMmaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJiMjNmMjhmMWUwZWFmOGJiYTkzODBjMzBhMWQ1MWM1MjQxNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02n/aHmAoJVIDcXDuVXPyMlgDQEs w9CrrOk5qi41wVFNWtWSeCUjhaK0dMsSqjeOPbzhnxndxMXdbRNxDju6lR/lK+rq 1OAyX2ZfXMFAadsTblpGy64xZ5Z1qcxNkpkfEdV4g3ctk0ZJm99lo/wwdgMsiomm ZI72oyhWpsiWXdkfSL8Jek14UPwSX5qGkWxRRVQ7O8LrF4upG0Vo+uJ7yvihIOrt RUyMbeTsIVvOR+HVs0iWDWXPOl6rO9wA+S1aTTeYtYrFvhrBEIYhtYa62vI48IUF HRCDRajTTBJNTyrLPKf3HyTsIcLrj/Rnw5eqhDytZbW6ADyZiKIMDKt+OwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFDgrI/KPHg6vi7qTgMMKHVHFJBaBMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvT0NzajhvOGVEcS1MdXBPQXd3b2RVY1VrRm9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUAKgKvwQMF ACoG2kEDBQAqCx8BAwUAKg4xwQMFACoPIsEDBQAqD89BMA0GCSqGSIb3DQEBCwUA A4IBAQBhEd7Aereho80Nw506tj9q7gYyYfuOzBfIM5tbrnpBBiCXAdVNWVumoM7v B+jAp77AqnyhlWFo+Vf2O2c2qt8xhjuca++G0XwIQX/Z2OPJqWwD15cKjzHkNFmw /40T+zX+X+A+xM+nEiK5jKOw4gHgDmTuxoSClHigolkqtxJgup4P4/gsY1Fda389 5LaSYnCENHZ0rc16Le8uUh3JkNTmXO4A4AzNyf88rYtOam6Fm+JVjtRpD7EV1aj5 fbiNjOWSIy8lKIWqO+bYD0e8dGsR+F0XQNwc9io4aOJDYq/IlbXRU/3dFGVaziHb jKRfp1qDVsQZFwQ/j3vTpfpGSHvV -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:18 2026 by rpki-client