This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/odgbcVTW40GjoPx1yJKtm3RIfJY.roa File: odgbcVTW40GjoPx1yJKtm3RIfJY.roa (raw, json) Hash identifier: xD5XiEkm1WAWFTQwkEyD2ilCVTzjQYh9n7ZBvY51ATI= Subject key identifier: A1:D8:1B:71:54:D6:E3:41:A3:A0:FC:75:C8:92:AD:9B:74:48:7C:96 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC48189509B96BE8E9C713FD0984D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/odgbcVTW40GjoPx1yJKtm3RIfJY.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134478 IP address blocks: 2a0e:b107:ea2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c4:81:89:50:9b:96:be:8e:9c:71:3f:d0:98:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d81b7154d6e341a3a0fc75c892ad9b74487c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:b4:1c:38:4d:a3:b5:43:0f:68:1e:85:41: 8b:c3:5d:fe:71:3d:a8:7d:99:32:ca:fb:c7:82:d0: b9:7f:a2:bc:0b:f9:02:22:bd:43:2d:3c:0f:f7:9d: d4:e6:57:0b:4c:c3:b9:41:1a:16:fb:2b:8d:9e:19: d4:7e:02:29:00:15:67:dc:bc:4c:ed:c9:f3:f9:fb: a2:a0:77:9a:94:32:58:4a:5c:37:51:7e:1a:b5:1b: 50:a4:be:f7:75:7b:22:b1:61:b6:66:79:a7:30:db: d1:fd:62:9b:38:25:aa:34:8a:50:8d:2f:19:32:f6: 55:a1:9c:8b:19:a9:c0:84:34:85:d7:7c:a6:80:a5: f4:c8:86:c1:49:87:bd:4a:10:1d:8a:0e:f6:66:f1: 04:e0:05:a3:ef:8c:0c:a6:2c:6a:a7:70:e0:92:97: f9:c9:1f:c7:32:a3:dd:02:eb:3d:4e:9c:48:44:70: e8:6e:f6:77:b8:cd:3e:52:18:34:9d:48:da:67:37: ba:c7:45:73:ff:82:29:05:40:57:cc:8e:0e:0a:f7: a9:f7:29:0f:7c:d6:36:3c:68:3f:89:a9:77:0c:77: d1:59:28:06:d9:cf:12:20:64:6b:5c:9d:6a:c8:71: 5e:41:ad:02:a5:3e:dc:f9:71:c8:c5:6a:d5:40:62: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D8:1B:71:54:D6:E3:41:A3:A0:FC:75:C8:92:AD:9B:74:48:7C:96 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/odgbcVTW40GjoPx1yJKtm3RIfJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:ea2::/48 Signature Algorithm: sha256WithRSAEncryption 0f:0d:7f:ef:d8:8b:20:4f:ce:63:5d:b0:ed:22:bd:b1:0a:74: d6:1e:1e:eb:ce:18:bf:13:c5:4d:0f:8a:b1:0b:d3:a2:e9:8c: 41:d8:e9:7a:df:94:f3:f9:5a:83:7f:9b:83:77:ac:b9:04:7c: 61:c3:5c:7f:a4:a8:9f:ad:08:34:a1:23:22:d0:40:81:9c:5f: 5a:2b:80:69:72:14:27:9b:5d:f0:af:fa:cd:6e:02:9f:44:fb: 60:7b:be:9b:bb:8e:2a:4f:a1:99:3b:b5:9d:df:86:c4:d0:62: 21:e2:48:2f:5f:4a:ec:7c:bb:d9:c2:00:24:b2:16:05:99:ae: a7:df:5b:17:36:40:65:ba:0d:10:f8:41:5d:bc:d1:78:1c:72: 24:d0:d8:ba:ed:8e:85:a3:87:60:95:5d:bc:3a:48:ea:d3:ee: 1c:0a:ef:6d:39:be:ec:5b:40:9d:dc:1b:1f:e5:48:60:d6:a6: de:c2:a5:99:7e:07:9b:35:a8:57:ab:27:15:35:9e:e9:d6:18: 31:dd:fb:9f:37:5f:13:77:13:81:35:e1:eb:a8:80:25:a2:09: a8:1f:1a:4f:ec:38:5f:27:95:39:2a:28:b6:6d:87:cf:ac:47: b8:10:1e:24:69:bc:05:04:48:d5:9c:84:ef:b8:de:91:c2:74: 74:12:17:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMSBiVCblr6OnHE/0JhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQ4MWI3MTU0ZDZlMzQxYTNhMGZjNzVjODkyYWQ5Yjc0NDg3Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcO0HDhNo7VDD2gehUGLw13+cT2o fZkyyvvHgtC5f6K8C/kCIr1DLTwP953U5lcLTMO5QRoW+yuNnhnUfgIpABVn3LxM 7cnz+fuioHealDJYSlw3UX4atRtQpL73dXsisWG2ZnmnMNvR/WKbOCWqNIpQjS8Z MvZVoZyLGanAhDSF13ymgKX0yIbBSYe9ShAdig72ZvEE4AWj74wMpixqp3Dgkpf5 yR/HMqPdAus9TpxIRHDobvZ3uM0+Uhg0nUjaZze6x0Vz/4IpBUBXzI4OCvep9ykP fNY2PGg/ial3DHfRWSgG2c8SIGRrXJ1qyHFeQa0CpT7c+XHIxWrVQGLRUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKHYG3FU1uNBo6D8dciSrZt0SHyWMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvb2RnYmNWVFc0MEdqb1B4MXlKS3RtM1JJZkpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw6i MA0GCSqGSIb3DQEBCwUAA4IBAQAPDX/v2IsgT85jXbDtIr2xCnTWHh7rzhi/E8VN D4qxC9Oi6YxB2Ol635Tz+VqDf5uDd6y5BHxhw1x/pKifrQg0oSMi0ECBnF9aK4Bp chQnm13wr/rNbgKfRPtge76bu44qT6GZO7Wd34bE0GIh4kgvX0rsfLvZwgAkshYF ma6n31sXNkBlug0Q+EFdvNF4HHIk0Ni67Y6Fo4dglV28Okjq0+4cCu9tOb7sW0Cd 3Bsf5Uhg1qbewqWZfgebNahXqycVNZ7p1hgx3fufN18TdxOBNeHrqIAlogmoHxpP 7DhfJ5U5Kii2bYfPrEe4EB4kabwFBEjVnITvuN6RwnR0Ehcw -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:06 2026 by rpki-client