This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OESYnQ8L_1H2AfEG7VV509kAgPE.roa File: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (raw, json) Hash identifier: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q= Subject key identifier: 38:44:98:9D:0F:0B:FF:51:F6:01:F1:06:ED:55:79:D3:D9:00:80:F1 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37E08B2C5B78FD9E25B9BF45F09BE9 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OESYnQ8L_1H2AfEG7VV509kAgPE.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59449 IP address blocks: 2a14:6781:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e0:8b:2c:5b:78:fd:9e:25:b9:bf:45:f0:9b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3844989d0f0bff51f601f106ed5579d3d90080f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ee:ff:5c:13:dc:90:2b:b0:09:60:e4:63:f0: 9a:9e:35:90:a8:d6:52:8e:9c:cf:05:0a:55:91:b9: fe:b2:1c:21:28:cb:04:67:7b:a7:94:4f:ef:8a:a4: 74:7c:e8:30:0d:86:b4:3e:37:41:36:b9:0d:96:ef: e0:e8:fd:6b:88:94:1e:f2:39:2e:50:05:07:27:27: 19:3b:35:38:f7:c0:a0:20:ec:c8:25:13:13:01:1f: 9c:f2:6f:40:22:5e:b6:8c:1e:84:da:49:4c:d9:01: 21:8f:6c:40:d6:a2:ac:16:7e:a3:5c:6e:73:fd:1f: 7e:b6:05:a9:bf:6a:21:85:84:92:80:1b:92:3b:fb: 19:26:28:cf:21:43:5f:9f:f4:b8:a9:44:5d:9b:30: 89:e9:8b:4d:66:7d:e8:d0:cc:c1:1c:b2:b3:c1:bc: bf:2c:c1:53:cc:a2:c3:42:3c:05:72:c2:c6:c3:d5: cb:f2:7c:ee:1f:31:1b:a1:5f:20:f9:8f:cf:d8:81: a1:9e:0a:3e:8a:95:78:4f:53:65:dd:af:ec:90:37: 25:91:87:af:59:5b:88:41:20:f4:1b:14:7d:57:a7: 79:c7:78:d1:e9:d3:53:50:29:06:da:7f:36:93:a4: 16:4b:f8:f0:1d:20:82:51:25:a4:21:d1:b4:8e:e4: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:98:9D:0F:0B:FF:51:F6:01:F1:06:ED:55:79:D3:D9:00:80:F1 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OESYnQ8L_1H2AfEG7VV509kAgPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6781:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 13:59:c8:51:56:08:20:39:e4:38:81:52:c5:48:0f:2d:6e:28: 4e:8d:c1:15:be:01:60:d1:55:20:b2:ab:ff:4e:a8:8f:ed:7d: e1:e2:1b:08:46:23:8e:1d:00:19:14:5c:80:ee:e9:9a:fd:da: 7a:5b:28:b2:19:b2:8c:24:cb:c3:22:cf:34:34:0b:5e:04:d8: 0f:45:c2:7b:a8:ed:e0:0e:e5:38:f7:51:67:71:84:ec:3c:05: 7f:da:a2:39:fd:27:7a:4e:67:e0:d9:aa:83:56:31:27:aa:7e: 51:d7:fe:5e:8d:dc:08:a9:8b:7a:3b:9c:8a:d2:ac:da:25:1e: b2:de:40:ba:c5:30:38:c4:83:fb:ad:f0:cf:06:b8:bd:5b:70: d6:e9:45:44:4a:d0:e4:d5:bf:30:58:8a:00:ef:08:e1:ea:a0: de:42:79:49:0b:45:24:90:2f:8b:8d:61:26:c4:15:9e:4c:4c: 0f:7d:7d:89:a0:64:c5:7e:f4:f3:7e:13:0b:f6:d1:8f:4e:71: 5c:ff:82:b7:cc:a0:2f:e9:99:73:22:4a:3f:b9:c2:af:83:2a: 2b:2b:df:24:f2:c2:45:17:cf:30:22:a2:21:a4:be:c1:54:5c: 43:9c:19:8d:2d:37:05:78:a0:3b:db:64:c9:cc:34:fe:8c:2e: a9:1a:6b:1e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N+CLLFt4/Z4lub9F8JvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODQ0OTg5ZDBmMGJmZjUxZjYwMWYxMDZlZDU1NzlkM2Q5MDA4MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke7/XBPckCuwCWDkY/CanjWQqNZS jpzPBQpVkbn+shwhKMsEZ3unlE/viqR0fOgwDYa0PjdBNrkNlu/g6P1riJQe8jku UAUHJycZOzU498CgIOzIJRMTAR+c8m9AIl62jB6E2klM2QEhj2xA1qKsFn6jXG5z /R9+tgWpv2ohhYSSgBuSO/sZJijPIUNfn/S4qURdmzCJ6YtNZn3o0MzBHLKzwby/ LMFTzKLDQjwFcsLGw9XL8nzuHzEboV8g+Y/P2IGhngo+ipV4T1Nl3a/skDclkYev WVuIQSD0GxR9V6d5x3jR6dNTUCkG2n82k6QWS/jwHSCCUSWkIdG0juTjZwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDhEmJ0PC/9R9gHxBu1VedPZAIDxMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvT0VTWW5ROExfMUgyQWZFRzdWVjUwOWtBZ1BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRngf8w DQYJKoZIhvcNAQELBQADggEBABNZyFFWCCA55DiBUsVIDy1uKE6NwRW+AWDRVSCy q/9OqI/tfeHiGwhGI44dABkUXIDu6Zr92npbKLIZsowky8MizzQ0C14E2A9Fwnuo 7eAO5Tj3UWdxhOw8BX/aojn9J3pOZ+DZqoNWMSeqflHX/l6N3Aipi3o7nIrSrNol HrLeQLrFMDjEg/ut8M8GuL1bcNbpRURK0OTVvzBYigDvCOHqoN5CeUkLRSSQL4uN YSbEFZ5MTA99fYmgZMV+9PN+Ewv20Y9OcVz/grfMoC/pmXMiSj+5wq+DKisr3yTy wkUXzzAioiGkvsFUXEOcGY0tNwV4oDvbZMnMNP6MLqkaax4= -----END CERTIFICATE-----Generated at Wed Jan 21 11:09:06 2026 by rpki-client