This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OwwcOi8wVAr9srD7XnX1ElkaXQI.roa File: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (raw, json) Hash identifier: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k= Subject key identifier: 3B:0C:1C:3A:2F:30:54:0A:FD:B2:B0:FB:5E:75:F5:12:59:1A:5D:02 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A78BC9F3321537869C2A1B9DB083 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OwwcOi8wVAr9srD7XnX1ElkaXQI.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29574 IP address blocks: 2a01:5c40:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a7:8b:c9:f3:32:15:37:86:9c:2a:1b:9d:b0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b0c1c3a2f30540afdb2b0fb5e75f512591a5d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:43:84:19:37:1b:1c:1c:f0:b7:1d:16:93: b1:e3:33:9f:a0:52:4c:0b:67:56:a1:14:79:e2:53: af:4c:f6:8d:b3:de:38:03:75:b6:57:0b:1b:95:6b: e9:1a:95:1e:58:18:aa:95:35:98:16:ce:13:b6:e3: 23:ac:9b:63:1b:fb:1c:ab:c9:3e:23:5e:0a:f8:a0: bf:d0:00:46:87:77:f2:8e:0b:8a:8a:d4:e4:52:3d: 3a:93:0e:e3:bb:31:97:ee:16:25:b5:a2:2d:6d:f3: 97:69:30:35:06:79:ae:69:8e:6a:57:72:55:0e:0d: 1f:4b:ba:37:0c:f1:36:ca:28:7f:3f:7a:95:75:29: 31:f1:6f:31:6a:24:a3:7c:6d:47:16:ed:72:de:71: 54:51:21:da:53:74:51:96:69:1b:28:74:a5:e2:45: 54:9d:25:ec:58:3e:a8:19:be:80:e4:24:0c:6b:4d: 20:bb:87:92:2d:ae:0e:97:07:5a:d2:4e:64:f6:52: 2d:ba:23:bb:9e:10:ee:d3:84:bd:84:c0:bc:a1:2c: eb:39:49:c0:e1:7d:70:fb:08:6a:0e:16:c5:40:7b: 52:69:56:8a:83:ac:64:8e:fe:5c:26:4e:0e:11:c0: 41:fe:cc:ff:22:88:db:dd:b3:1a:26:a0:f5:bc:75: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0C:1C:3A:2F:30:54:0A:FD:B2:B0:FB:5E:75:F5:12:59:1A:5D:02 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OwwcOi8wVAr9srD7XnX1ElkaXQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:5c40:7::/48 Signature Algorithm: sha256WithRSAEncryption 9c:35:70:23:23:01:10:60:9e:a2:09:77:eb:5e:c9:04:74:cb: c6:a1:71:2e:c6:01:68:0f:24:44:aa:94:8b:7c:0b:7b:5e:29: a9:01:45:99:aa:37:37:bf:35:d1:a8:cd:15:d2:de:da:eb:7e: b8:b8:c9:1d:db:0c:85:3d:20:db:58:ec:86:d8:7b:ea:e0:77: ea:25:5f:01:c4:19:19:68:8f:2d:fb:05:f6:f4:5d:de:1d:90: 49:cb:3a:9f:0d:6e:a4:cd:79:fb:56:e8:73:b7:56:cd:58:01: f0:a6:15:fa:bc:68:93:ee:2e:ea:9f:01:fd:49:5a:91:72:7d: 65:c0:2d:21:2e:48:29:05:de:2d:47:f6:2b:ab:a3:8c:3c:6e: c3:da:c3:1b:6c:6f:e8:65:c4:8f:aa:6b:f0:0a:b3:1d:d3:60: 16:42:0f:84:5b:45:2a:59:08:a1:ff:65:39:21:fb:d9:fb:2c: fe:48:80:a7:db:fc:46:03:24:78:1d:f1:12:15:2f:79:2e:37: 04:54:94:1e:c0:3e:c4:7a:d4:ee:a3:0b:67:ba:c2:07:a9:d1: 6b:16:e0:95:05:d2:03:ff:b9:8f:05:90:ec:0e:ce:e3:c4:b1: ce:c0:fa:8d:65:a8:17:0c:30:1b:05:e5:74:10:2e:f7:2f:a4: fd:65:64:a3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKeLyfMyFTeGnCobnbCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjBjMWMzYTJmMzA1NDBhZmRiMmIwZmI1ZTc1ZjUxMjU5MWE1ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl19DhBk3Gxwc8LcdFpOx4zOfoFJM C2dWoRR54lOvTPaNs944A3W2VwsblWvpGpUeWBiqlTWYFs4TtuMjrJtjG/scq8k+ I14K+KC/0ABGh3fyjguKitTkUj06kw7juzGX7hYltaItbfOXaTA1BnmuaY5qV3JV Dg0fS7o3DPE2yih/P3qVdSkx8W8xaiSjfG1HFu1y3nFUUSHaU3RRlmkbKHSl4kVU nSXsWD6oGb6A5CQMa00gu4eSLa4Olwda0k5k9lItuiO7nhDu04S9hMC8oSzrOUnA 4X1w+whqDhbFQHtSaVaKg6xkjv5cJk4OEcBB/sz/Iojb3bMaJqD1vHVCdwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDsMHDovMFQK/bKw+1519RJZGl0CMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvT3d3Y09pOHdWQXI5c3JEN1huWDFFbGthWFFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFcQAAH MA0GCSqGSIb3DQEBCwUAA4IBAQCcNXAjIwEQYJ6iCXfrXskEdMvGoXEuxgFoDyRE qpSLfAt7XimpAUWZqjc3vzXRqM0V0t7a6364uMkd2wyFPSDbWOyG2Hvq4HfqJV8B xBkZaI8t+wX29F3eHZBJyzqfDW6kzXn7Vuhzt1bNWAHwphX6vGiT7i7qnwH9SVqR cn1lwC0hLkgpBd4tR/Yrq6OMPG7D2sMbbG/oZcSPqmvwCrMd02AWQg+EW0UqWQih /2U5IfvZ+yz+SICn2/xGAyR4HfESFS95LjcEVJQewD7EetTuowtnusIHqdFrFuCV BdID/7mPBZDsDs7jxLHOwPqNZagXDDAbBeV0EC73L6T9ZWSj -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:53 2026 by rpki-client