This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OFa12_J0YITxt-LOx563ljwPTpo.roa File: OFa12_J0YITxt-LOx563ljwPTpo.roa (raw, json) Hash identifier: RpAZKLUoLOIHxvARKWHe8v/gAznUhM+F4/4NEBEN48w= Subject key identifier: 38:56:B5:DB:F2:74:60:84:F1:B7:E2:CE:C7:9E:B7:96:3C:0F:4E:9A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D41896F32192E913789B648FC668B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OFa12_J0YITxt-LOx563ljwPTpo.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211575 IP address blocks: 2a10:ccc6:66ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:41:89:6f:32:19:2e:91:37:89:b6:48:fc:66:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3856b5dbf2746084f1b7e2cec79eb7963c0f4e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:83:bd:74:b7:99:32:b6:6f:92:42:4f:b3: 44:70:9b:ec:94:76:b2:81:f0:d4:a0:da:0e:6c:36: 96:68:40:10:30:d9:e7:4a:24:87:be:06:71:3a:29: 7a:22:f2:0d:7f:24:6a:b4:50:ce:0a:93:8c:da:e9: 2c:d4:c1:79:16:44:94:57:3a:6b:5f:0e:dc:62:48: 8d:d6:5d:91:56:f8:79:b3:35:f1:7e:76:cd:2b:74: e9:a4:92:53:9d:b0:64:5d:9c:a1:df:c7:dc:2c:5b: 56:8a:4d:fc:0e:f5:43:eb:a6:f9:18:d3:4f:be:8e: 1c:a1:e8:c3:09:4a:fa:33:12:f7:40:9c:31:0f:f7: b8:63:0b:20:32:45:04:52:42:d7:12:7e:7f:5e:41: 00:fc:0f:b3:6d:28:28:48:aa:e5:6f:96:85:c6:ba: 08:e4:f8:95:3c:d2:73:91:84:ee:70:15:de:22:ea: 2c:7f:75:e3:b2:c3:d4:0c:11:1e:d4:6b:1b:cf:db: 80:29:05:d6:30:d4:04:18:3b:76:cb:b1:ed:6e:96: da:32:71:57:ef:d3:23:b2:b6:b2:6c:a4:f3:98:50: 7c:a4:e5:35:dc:a5:21:78:3e:fa:43:49:34:4e:5d: 4e:9b:cf:10:ff:b8:49:1d:c1:35:f8:ef:65:6c:9f: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:56:B5:DB:F2:74:60:84:F1:B7:E2:CE:C7:9E:B7:96:3C:0F:4E:9A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OFa12_J0YITxt-LOx563ljwPTpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc6:66ce::/48 Signature Algorithm: sha256WithRSAEncryption 12:e1:a9:68:af:ed:33:d9:b7:7f:8b:99:4d:dc:32:91:02:5d: 37:90:0c:ba:6b:eb:7f:8e:d0:29:9c:e5:55:76:a1:50:16:4f: e4:96:91:85:37:0a:4d:c7:19:3b:46:55:c0:4a:5e:17:60:b6: 2d:01:f2:69:68:c9:04:b8:18:b3:ca:19:ef:e3:8a:17:de:23: 05:02:0a:00:64:7e:ad:23:f6:2b:22:e2:0b:c4:0d:db:aa:12: c2:c5:c9:84:b4:02:7a:b2:f3:cf:82:7d:26:84:6e:89:9e:cc: ca:ce:96:ab:e2:ae:79:3a:f5:35:92:5b:5b:b1:52:38:b6:f0: 4b:ce:12:0f:fa:db:d6:ae:6d:32:00:1e:c1:52:e0:92:ae:8e: 20:89:af:4c:53:60:5a:90:88:12:6c:75:47:fd:86:3f:54:53: 13:82:9d:a6:dd:56:93:3f:46:7e:af:9b:56:2c:c3:97:43:87: 76:c5:9b:01:14:4c:99:4e:34:ff:4e:65:cb:58:f0:93:47:c8: ae:4f:f1:d2:c3:4a:8c:9b:c9:aa:d8:9f:d7:7a:cb:1d:31:4f: 7b:2a:89:e8:b1:27:13:09:85:d3:d0:4c:a2:55:5d:9d:8a:7e: ec:cf:a5:4b:79:35:65:0b:98:6d:45:62:28:6b:b6:7f:73:ed: ff:96:6d:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUGJbzIZLpE3ibZI/GaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODU2YjVkYmYyNzQ2MDg0ZjFiN2UyY2VjNzllYjc5NjNjMGY0ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUWDvXS3mTK2b5JCT7NEcJvslHay gfDUoNoObDaWaEAQMNnnSiSHvgZxOil6IvINfyRqtFDOCpOM2uks1MF5FkSUVzpr Xw7cYkiN1l2RVvh5szXxfnbNK3TppJJTnbBkXZyh38fcLFtWik38DvVD66b5GNNP vo4coejDCUr6MxL3QJwxD/e4YwsgMkUEUkLXEn5/XkEA/A+zbSgoSKrlb5aFxroI 5PiVPNJzkYTucBXeIuosf3XjssPUDBEe1Gsbz9uAKQXWMNQEGDt2y7HtbpbaMnFX 79MjsraybKTzmFB8pOU13KUheD76Q0k0Tl1Om88Q/7hJHcE1+O9lbJ9gawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDhWtdvydGCE8bfizseet5Y8D06aMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvT0ZhMTJfSjBZSVR4dC1MT3g1NjNsandQVHBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDMxmbO MA0GCSqGSIb3DQEBCwUAA4IBAQAS4alor+0z2bd/i5lN3DKRAl03kAy6a+t/jtAp nOVVdqFQFk/klpGFNwpNxxk7RlXASl4XYLYtAfJpaMkEuBizyhnv44oX3iMFAgoA ZH6tI/YrIuILxA3bqhLCxcmEtAJ6svPPgn0mhG6JnszKzpar4q55OvU1kltbsVI4 tvBLzhIP+tvWrm0yAB7BUuCSro4gia9MU2BakIgSbHVH/YY/VFMTgp2m3VaTP0Z+ r5tWLMOXQ4d2xZsBFEyZTjT/TmXLWPCTR8iuT/HSw0qMm8mq2J/XessdMU97Kono sScTCYXT0EyiVV2din7sz6VLeTVlC5htRWIoa7Z/c+3/lm17 -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:04 2026 by rpki-client