This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OKMlCyBCMYMCYLXH3-rhwrp6DVc.roa File: OKMlCyBCMYMCYLXH3-rhwrp6DVc.roa (raw, json) Hash identifier: YniSMWMki1NCCyAPXKZwKkWj1Ei8amBcXki1daKydv4= Subject key identifier: 38:A3:25:0B:20:42:31:83:02:60:B5:C7:DF:EA:E1:C2:BA:7A:0D:57 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D11766586E1821BF57D8EA1AD247A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OKMlCyBCMYMCYLXH3-rhwrp6DVc.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208059 IP address blocks: 2a0e:b107:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:11:76:65:86:e1:82:1b:f5:7d:8e:a1:ad:24:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38a3250b204231830260b5c7dfeae1c2ba7a0d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:bd:56:61:bd:97:41:34:65:8e:1d:67:06: b6:51:5b:bb:dd:29:38:ed:62:63:da:12:d4:cd:2e: aa:90:51:9c:08:3a:ec:1b:8f:79:95:93:8f:71:2c: ef:07:63:0a:73:4b:ab:e0:a4:97:5e:46:4f:d1:7f: 66:17:08:87:ae:1a:fa:61:ad:2e:5e:5d:47:a9:fc: 01:e6:c5:39:72:61:e0:ae:0c:8e:c0:7f:57:76:2e: cc:c3:52:a8:cb:d4:d8:58:16:a0:6c:00:88:97:b0: d1:de:b6:39:2e:13:be:70:06:c4:50:bd:c1:2c:70: d1:8e:32:88:bb:d2:4a:80:1a:00:bb:59:e6:48:94: 61:22:0b:8a:7c:7d:ab:41:97:05:ed:87:ec:0a:cc: fd:dd:12:ff:a0:7f:f9:a5:e0:50:e8:f4:18:12:6e: 51:4a:b3:f8:b0:d3:1f:62:01:7d:c5:5d:f6:82:a7: 1e:10:1d:d3:ed:69:b2:b3:7b:3d:5c:02:18:99:96: 59:ee:e1:51:58:75:bf:d9:f4:80:dd:c7:4c:b5:de: 07:fa:77:93:d1:07:37:31:f0:16:5e:4b:aa:a2:6d: f0:ab:d2:3a:6d:10:da:bf:a0:69:41:1d:46:37:b8: 54:55:d0:52:f3:ca:4f:fd:3e:4f:e3:bd:48:56:58: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A3:25:0B:20:42:31:83:02:60:B5:C7:DF:EA:E1:C2:BA:7A:0D:57 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OKMlCyBCMYMCYLXH3-rhwrp6DVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2b::/48 Signature Algorithm: sha256WithRSAEncryption 27:fc:99:16:0a:97:c6:2a:33:8f:f1:49:17:cf:b6:b0:c5:24: 13:23:af:de:b4:a1:87:49:73:eb:89:88:d2:20:7f:67:18:a6: 38:3e:65:aa:2d:f8:9e:94:29:05:7f:71:5e:bd:04:13:1d:02: b7:6d:95:c8:7a:c5:6b:95:ce:71:ec:bf:df:cc:d5:d8:e7:28: c8:19:69:ab:9b:c6:27:76:38:63:f0:30:d8:61:01:52:d5:cc: 48:33:05:05:dc:49:24:08:94:90:9d:8e:97:3c:d3:18:2b:6b: 49:ab:a2:a9:7a:0b:61:d9:9b:e7:72:83:5c:db:37:ec:5a:2b: aa:d6:0a:90:40:03:1c:dd:06:8a:e3:ac:11:47:a6:2f:93:f4: 32:b4:b9:ab:3c:c5:34:97:89:0e:54:13:a5:15:05:5d:40:57: 01:90:a3:bb:be:15:10:38:c1:a1:98:f0:ce:8b:49:f0:df:04: cf:25:a5:7a:b3:fb:be:5a:7d:9b:1d:4d:fc:b7:7a:e8:1b:31: 9e:8c:6a:f7:a3:a1:89:7b:45:1e:62:b0:6f:b9:3e:05:37:a3: 24:8b:95:1c:99:07:7f:ac:69:be:70:a2:b5:d9:37:43:db:ca: 12:b7:b2:57:cf:a6:03:8d:18:32:fd:8d:7c:8a:4c:06:be:d3: 4a:b8:33:12 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRF2ZYbhghv1fY6hrSR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGEzMjUwYjIwNDIzMTgzMDI2MGI1YzdkZmVhZTFjMmJhN2EwZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg29VmG9l0E0ZY4dZwa2UVu73Sk4 7WJj2hLUzS6qkFGcCDrsG495lZOPcSzvB2MKc0ur4KSXXkZP0X9mFwiHrhr6Ya0u Xl1HqfwB5sU5cmHgrgyOwH9Xdi7Mw1Koy9TYWBagbACIl7DR3rY5LhO+cAbEUL3B LHDRjjKIu9JKgBoAu1nmSJRhIguKfH2rQZcF7YfsCsz93RL/oH/5peBQ6PQYEm5R SrP4sNMfYgF9xV32gqceEB3T7Wmys3s9XAIYmZZZ7uFRWHW/2fSA3cdMtd4H+neT 0Qc3MfAWXkuqom3wq9I6bRDav6BpQR1GN7hUVdBS88pP/T5P471IVljcAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDijJQsgQjGDAmC1x9/q4cK6eg1XMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvT0tNbEN5QkNNWU1DWUxYSDMtcmh3cnA2RFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwAr MA0GCSqGSIb3DQEBCwUAA4IBAQAn/JkWCpfGKjOP8UkXz7awxSQTI6/etKGHSXPr iYjSIH9nGKY4PmWqLfielCkFf3FevQQTHQK3bZXIesVrlc5x7L/fzNXY5yjIGWmr m8Yndjhj8DDYYQFS1cxIMwUF3EkkCJSQnY6XPNMYK2tJq6Kpegth2ZvncoNc2zfs Wiuq1gqQQAMc3QaK46wRR6Yvk/QytLmrPMU0l4kOVBOlFQVdQFcBkKO7vhUQOMGh mPDOi0nw3wTPJaV6s/u+Wn2bHU38t3roGzGejGr3o6GJe0UeYrBvuT4FN6Mki5Uc mQd/rGm+cKK12TdD28oSt7JXz6YDjRgy/Y18ikwGvtNKuDMS -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client