This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/d68f291cIHUCCkamC_5Dky9_oNI.roa File: d68f291cIHUCCkamC_5Dky9_oNI.roa (raw, json) Hash identifier: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco= Subject key identifier: 77:AF:1F:DB:DD:5C:20:75:02:0A:46:A6:0B:FE:43:93:2F:7F:A0:D2 Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Certificate serial: 019B7E38CA587C31208F5E7CABE884C6C804 Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/d68f291cIHUCCkamC_5Dky9_oNI.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25091 IP address blocks: 2a0c:4144:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ca:58:7c:31:20:8f:5e:7c:ab:e8:84:c6:c8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77af1fdbdd5c2075020a46a60bfe43932f7fa0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ce:7f:69:98:40:ae:ef:6d:4c:f5:96:84:9c: db:8e:c8:5c:9d:f8:73:76:fa:eb:4e:be:22:1e:ee: 2a:7d:08:44:f9:92:31:b9:54:82:e6:39:e4:eb:f2: e6:92:4d:64:b2:3c:54:00:5a:0e:c4:a4:a4:01:53: 09:43:6e:99:0f:d3:12:79:66:00:f9:13:ac:21:f0: 48:fe:aa:f9:60:06:f8:a7:a2:75:82:46:18:cc:16: 69:6b:c0:eb:55:48:73:47:14:b3:35:9c:5f:bd:be: bb:48:86:8d:45:e6:71:1b:07:16:77:9f:3b:41:89: 5d:84:61:95:34:73:34:21:89:3d:f9:e2:ff:8d:7a: 6a:b6:a4:03:e6:d7:19:96:4d:c5:b5:b6:b1:df:d8: 06:03:93:ab:e0:4d:95:77:dd:f6:b2:db:ef:67:4c: a5:cf:d2:34:53:99:a2:07:6d:16:8e:4b:69:40:c9: 72:e9:5c:e2:d6:8f:6b:2a:51:12:fc:fe:a0:d6:6b: 27:dc:63:8e:08:a2:1a:8c:99:42:50:07:d7:91:79: 27:81:77:7f:71:55:cf:ed:06:03:7c:58:98:99:4b: fb:98:e9:7f:79:2a:9d:b4:06:7e:9d:5f:8e:09:90: bd:d0:0d:dc:5d:46:10:bb:18:1d:a9:5a:68:6d:f9: d9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:1F:DB:DD:5C:20:75:02:0A:46:A6:0B:FE:43:93:2F:7F:A0:D2 X509v3 Authority Key Identifier: keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/d68f291cIHUCCkamC_5Dky9_oNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:4144:100::/48 Signature Algorithm: sha256WithRSAEncryption 22:0b:ec:4c:8d:e6:b7:6a:c9:55:06:ae:6a:a4:59:e6:5b:fc: ff:b5:ab:43:a4:85:77:e4:18:81:e3:fa:8b:b3:0b:c1:b5:37: a2:e7:a5:40:72:37:49:35:07:63:72:bc:df:6c:74:95:ae:c6: 77:fa:8f:9a:a1:cf:c0:34:0b:f2:65:67:6f:c5:6a:cd:86:7e: d0:ff:63:ef:8d:2a:86:ed:91:dc:95:36:c1:f6:e5:de:e4:3c: c3:05:ea:70:3d:ee:9b:ff:f3:21:f0:d9:60:32:c8:06:eb:56: 64:26:df:a0:d3:92:bd:9f:e6:75:3c:1e:a5:54:d3:d1:cc:51: 86:2c:fb:63:7d:77:9a:e4:64:77:3c:dc:a7:5d:8e:aa:2b:72: 31:3d:c1:39:1c:89:11:ce:a1:39:5f:ef:05:cf:56:dd:56:12: 79:81:21:75:76:a2:20:b6:a1:62:f3:50:59:ba:7f:77:bc:8f: 1f:55:f7:13:c7:66:24:40:48:8a:8b:4d:17:0f:46:d1:6c:99: 77:74:ae:8f:b9:c8:fd:1c:61:86:aa:2a:af:26:f4:5a:9b:fd: ac:39:5c:61:66:83:ad:37:6a:f5:6f:6c:02:36:83:14:2e:71: 73:68:32:0c:c0:25:b9:df:f6:a1:91:85:49:21:ea:fe:1d:e9: cf:82:0a:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OMpYfDEgj158q+iExsgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1 ODEzOTAwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2FmMWZkYmRkNWMyMDc1MDIwYTQ2YTYwYmZlNDM5MzJmN2ZhMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s5/aZhAru9tTPWWhJzbjshcnfhz dvrrTr4iHu4qfQhE+ZIxuVSC5jnk6/Lmkk1ksjxUAFoOxKSkAVMJQ26ZD9MSeWYA +ROsIfBI/qr5YAb4p6J1gkYYzBZpa8DrVUhzRxSzNZxfvb67SIaNReZxGwcWd587 QYldhGGVNHM0IYk9+eL/jXpqtqQD5tcZlk3Ftbax39gGA5Or4E2Vd932stvvZ0yl z9I0U5miB20WjktpQMly6Vzi1o9rKlES/P6g1msn3GOOCKIajJlCUAfXkXkngXd/ cVXP7QYDfFiYmUv7mOl/eSqdtAZ+nV+OCZC90A3cXUYQuxgdqVpobfnZhwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHevH9vdXCB1AgpGpgv+Q5Mvf6DSMB8GA1UdIwQY MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt YTIyZmZlZTRhNTE1LzEvZDY4ZjI5MWNJSFVDQ2thbUNfNURreTlfb05JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1 LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxBRAEA MA0GCSqGSIb3DQEBCwUAA4IBAQAiC+xMjea3aslVBq5qpFnmW/z/tatDpIV35BiB 4/qLswvBtTei56VAcjdJNQdjcrzfbHSVrsZ3+o+aoc/ANAvyZWdvxWrNhn7Q/2Pv jSqG7ZHclTbB9uXe5DzDBepwPe6b//Mh8NlgMsgG61ZkJt+g05K9n+Z1PB6lVNPR zFGGLPtjfXea5GR3PNynXY6qK3IxPcE5HIkRzqE5X+8Fz1bdVhJ5gSF1dqIgtqFi 81BZun93vI8fVfcTx2YkQEiKi00XD0bRbJl3dK6Pucj9HGGGqiqvJvRam/2sOVxh ZoOtN2r1b2wCNoMULnFzaDIMwCW53/ahkYVJIer+HenPggrU -----END CERTIFICATE-----Generated at Sun Jan 18 17:54:50 2026 by rpki-client