This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU-q4B4QnUOpBfxenPCJVgsuWyg.roa File: oU-q4B4QnUOpBfxenPCJVgsuWyg.roa (raw, json) Hash identifier: 1tLfSrSI+uOjUubwwfKqAlIKBAwTWWwwErb5BEgPjlM= Subject key identifier: A1:4F:AA:E0:1E:10:9D:43:A9:05:FC:5E:9C:F0:89:56:0B:2E:5B:28 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC58BB31C776B1CFB44A50CAA0111 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU-q4B4QnUOpBfxenPCJVgsuWyg.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137256 IP address blocks: 2a0e:b107:c10::/48 maxlen: 48 2a0e:b107:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c5:8b:b3:1c:77:6b:1c:fb:44:a5:0c:aa:01:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a14faae01e109d43a905fc5e9cf089560b2e5b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:50:d7:31:75:ac:6b:63:d5:e7:be:9f:3b: e1:c9:c9:08:59:d8:67:76:df:9c:70:74:bf:7c:81: b8:c8:91:69:08:d1:e8:89:e5:eb:ca:31:9d:7d:16: 8a:1b:76:b9:85:55:86:20:01:51:07:83:7d:32:23: e8:f2:bd:f5:e6:64:b3:29:0e:2c:20:c2:3f:fc:fd: e6:c0:fb:72:8c:8f:7d:74:7b:2f:33:1d:8f:eb:65: 0d:e7:ef:f8:d6:ca:63:74:59:b2:32:21:d0:ec:59: 97:f9:eb:ad:9c:a6:c1:3b:4e:47:62:8d:54:48:18: 73:2b:84:00:c2:86:ca:a2:8c:01:c6:f5:1c:05:6b: ba:e9:98:a8:d2:d5:43:d0:6e:a8:00:0f:40:64:43: 50:3f:4b:7c:f5:5b:82:54:a2:85:aa:70:1b:92:8f: 2b:91:20:d5:6f:77:aa:05:3d:d2:95:90:d0:3f:4f: 84:4e:84:5c:4e:a1:a1:2a:32:fb:90:dd:34:93:85: 2d:26:f9:ad:2a:58:1f:02:76:fb:e1:cf:e1:2a:b9: 9f:59:cd:3d:44:41:ce:39:28:99:67:ff:02:88:8f: 4e:fe:8e:86:f6:73:3e:fc:d0:1b:db:b0:18:3a:3b: d8:89:33:02:9d:fb:a1:f2:19:d6:1a:5f:94:87:42: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4F:AA:E0:1E:10:9D:43:A9:05:FC:5E:9C:F0:89:56:0B:2E:5B:28 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU-q4B4QnUOpBfxenPCJVgsuWyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:c10::/47 Signature Algorithm: sha256WithRSAEncryption a0:b3:4c:08:50:e2:0f:55:3e:25:5e:7a:12:6b:56:90:63:8d: a1:fc:46:44:91:a4:15:ac:03:b5:a5:0f:5f:13:e0:cb:fb:a5: 3a:b0:c7:c8:0d:35:d4:ae:4e:d5:d7:a2:cd:05:47:08:5a:41: 2e:f4:d7:48:31:cd:c6:ba:7c:52:c4:5a:ab:b3:db:05:ff:20: e9:d6:ed:0b:1c:4d:d2:dc:da:9c:55:97:c3:f1:f9:34:c8:e6: a3:6e:ad:96:9d:4f:fa:6a:dc:99:2e:26:e3:68:3b:56:e9:57: a7:5d:1c:7a:61:a4:32:c9:eb:38:a0:76:25:03:b2:e5:14:20: f9:b3:bc:90:97:38:ca:3e:5d:aa:01:d7:82:65:65:0d:1a:5d: e0:96:5d:52:af:bc:12:93:41:64:e2:d3:c4:3c:47:43:08:8e: a3:a4:2d:24:74:11:e1:03:00:df:7d:01:a4:ee:cc:5a:4e:8c: b5:39:52:5b:5e:11:fc:6a:7c:40:6b:fa:14:77:87:e7:b3:71: ba:3c:2a:56:4b:cc:d2:3f:1c:75:9a:fd:85:21:af:dc:8b:12: 11:e1:b3:4d:a6:04:ab:7a:d5:49:8c:d7:3f:b6:05:4d:e5:51: ea:a6:75:42:0e:2c:24:76:7a:66:a8:bc:44:cf:ad:87:7e:26: 99:12:3f:79 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMWLsxx3axz7RKUMqgERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTRmYWFlMDFlMTA5ZDQzYTkwNWZjNWU5Y2YwODk1NjBiMmU1YjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX1Q1zF1rGtj1ee+nzvhyckIWdhn dt+ccHS/fIG4yJFpCNHoieXryjGdfRaKG3a5hVWGIAFRB4N9MiPo8r315mSzKQ4s IMI//P3mwPtyjI99dHsvMx2P62UN5+/41spjdFmyMiHQ7FmX+eutnKbBO05HYo1U SBhzK4QAwobKoowBxvUcBWu66Zio0tVD0G6oAA9AZENQP0t89VuCVKKFqnAbko8r kSDVb3eqBT3SlZDQP0+EToRcTqGhKjL7kN00k4UtJvmtKlgfAnb74c/hKrmfWc09 REHOOSiZZ/8CiI9O/o6G9nM+/NAb27AYOjvYiTMCnfuh8hnWGl+Uh0KF7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKFPquAeEJ1DqQX8XpzwiVYLLlsoMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvb1UtcTRCNFFuVU9wQmZ4ZW5QQ0pWZ3N1V3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6xBwwQ MA0GCSqGSIb3DQEBCwUAA4IBAQCgs0wIUOIPVT4lXnoSa1aQY42h/EZEkaQVrAO1 pQ9fE+DL+6U6sMfIDTXUrk7V16LNBUcIWkEu9NdIMc3GunxSxFqrs9sF/yDp1u0L HE3S3NqcVZfD8fk0yOajbq2WnU/6atyZLibjaDtW6VenXRx6YaQyyes4oHYlA7Ll FCD5s7yQlzjKPl2qAdeCZWUNGl3gll1Sr7wSk0Fk4tPEPEdDCI6jpC0kdBHhAwDf fQGk7sxaToy1OVJbXhH8anxAa/oUd4fns3G6PCpWS8zSPxx1mv2FIa/cixIR4bNN pgSretVJjNc/tgVN5VHqpnVCDiwkdnpmqLxEz62HfiaZEj95 -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:32 2026 by rpki-client