This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ot8PJD0rgEtgxLGYO3PSanTuS5s.roa File: Ot8PJD0rgEtgxLGYO3PSanTuS5s.roa (raw, json) Hash identifier: C5ZiA9c3p7s2z/8HzxQO8yux/ju/fcIyyeH54u4odq8= Subject key identifier: 3A:DF:0F:24:3D:2B:80:4B:60:C4:B1:98:3B:73:D2:6A:74:EE:4B:9B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8B086A1962564253EAC70A90D9C1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ot8PJD0rgEtgxLGYO3PSanTuS5s.roa Signing time: Fri 02 Jan 2026 06:20:41 +0000 ROA not before: Fri 02 Jan 2026 06:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216364 IP address blocks: 2a10:2f00:199::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8b:08:6a:19:62:56:42:53:ea:c7:0a:90:d9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3adf0f243d2b804b60c4b1983b73d26a74ee4b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:c4:6e:2e:53:00:ab:9d:d5:1d:e4:fc:4d: 1c:3d:93:73:f1:76:24:b7:d2:97:fd:a7:5d:81:56: 77:4f:96:ae:79:b4:4a:f0:bb:18:04:2f:c4:a4:e7: 4b:89:1c:dd:5a:be:f4:de:6e:61:25:d7:1b:06:9d: f5:7c:63:1e:01:62:3b:c9:8e:40:e1:78:b3:10:f2: e9:6e:f3:57:44:9a:e0:fc:8c:32:b9:7f:20:5c:b9: 4b:3a:a8:22:e9:91:5b:a0:ab:5c:47:ef:38:bd:30: e9:1e:e3:67:76:0f:28:48:b4:07:53:01:d9:d6:59: 53:74:16:61:9a:a6:f6:4a:ff:a4:65:15:4c:89:e2: 58:98:bc:a2:fc:61:b7:a4:8f:b1:5c:89:d0:87:aa: 68:eb:1f:6c:d7:21:04:d4:a2:9e:a7:b7:b5:57:7a: 6a:be:5c:b0:3a:99:0a:6c:4a:56:c9:0b:a3:c7:22: db:ee:eb:20:e5:2f:ee:61:f0:51:82:4e:b4:a2:4b: ac:57:0a:e4:df:6e:b4:53:99:9d:72:72:5d:ab:47: b5:21:bd:d6:2e:0f:a8:c3:69:98:ad:c6:71:dc:93: 61:9e:56:63:de:ec:b9:bc:17:9e:5a:ee:da:ca:27: e1:70:d3:d6:99:b0:21:74:47:a0:bc:5f:a9:6c:ba: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DF:0F:24:3D:2B:80:4B:60:C4:B1:98:3B:73:D2:6A:74:EE:4B:9B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ot8PJD0rgEtgxLGYO3PSanTuS5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:199::/48 Signature Algorithm: sha256WithRSAEncryption 26:dd:8d:cc:6d:a4:e8:1d:a0:4a:50:64:9c:2d:0a:3f:cc:57: a1:84:06:7b:20:d0:09:7e:b7:bd:e1:37:16:f0:56:72:95:9f: 97:f4:86:37:d2:5d:82:17:96:b4:a3:a3:68:78:d3:8b:99:d4: 06:b5:fc:52:91:b2:e7:f6:c6:f2:6d:6e:8a:71:6d:62:c1:22: e6:c3:c8:65:aa:8f:f3:0d:78:b4:d6:65:2f:ec:97:1e:f1:73: 96:e7:03:a7:9b:e7:41:b7:d4:c8:c3:93:18:c4:60:9b:92:83: ab:c9:f1:74:6e:eb:2a:ed:b3:a3:94:af:c0:53:f5:24:7e:9c: 05:cf:90:b7:f0:05:0f:b9:d6:4c:d6:e6:43:c5:31:7a:e6:05: e6:bc:49:f2:2e:60:1f:9c:e0:22:e7:74:ce:d7:f0:ee:9e:69: c5:72:ba:86:6f:86:01:93:b1:a6:52:44:89:12:04:58:53:c1: ae:fb:01:57:27:3a:27:c0:24:6f:9b:a8:e1:fd:da:5c:71:b5: 0a:8c:89:79:0f:59:64:05:99:24:40:f5:09:38:65:a2:8c:df: b2:c6:27:18:90:ee:88:77:80:e3:0a:12:96:4f:50:ad:d3:ff: c6:1f:ad:a4:78:74:ed:81:6f:3d:ca:9e:35:1d:ac:9e:96:02: 91:22:de:43 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYsIahliVkJT6scKkNnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWRmMGYyNDNkMmI4MDRiNjBjNGIxOTgzYjczZDI2YTc0ZWU0YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z7Ebi5TAKud1R3k/E0cPZNz8XYk t9KX/addgVZ3T5auebRK8LsYBC/EpOdLiRzdWr703m5hJdcbBp31fGMeAWI7yY5A 4XizEPLpbvNXRJrg/IwyuX8gXLlLOqgi6ZFboKtcR+84vTDpHuNndg8oSLQHUwHZ 1llTdBZhmqb2Sv+kZRVMieJYmLyi/GG3pI+xXInQh6po6x9s1yEE1KKep7e1V3pq vlywOpkKbEpWyQujxyLb7usg5S/uYfBRgk60okusVwrk3260U5mdcnJdq0e1Ib3W Lg+ow2mYrcZx3JNhnlZj3uy5vBeeWu7ayifhcNPWmbAhdEegvF+pbLoIDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDrfDyQ9K4BLYMSxmDtz0mp07kubMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvT3Q4UEpEMHJnRXRneExHWU8zUFNhblR1UzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGZ MA0GCSqGSIb3DQEBCwUAA4IBAQAm3Y3MbaToHaBKUGScLQo/zFehhAZ7INAJfre9 4TcW8FZylZ+X9IY30l2CF5a0o6NoeNOLmdQGtfxSkbLn9sbybW6KcW1iwSLmw8hl qo/zDXi01mUv7Jce8XOW5wOnm+dBt9TIw5MYxGCbkoOryfF0busq7bOjlK/AU/Uk fpwFz5C38AUPudZM1uZDxTF65gXmvEnyLmAfnOAi53TO1/DunmnFcrqGb4YBk7Gm UkSJEgRYU8Gu+wFXJzonwCRvm6jh/dpccbUKjIl5D1lkBZkkQPUJOGWijN+yxicY kO6Id4DjChKWT1Ct0//GH62keHTtgW89yp41HayelgKRIt5D -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:04 2026 by rpki-client