This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa File: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (raw, json) Hash identifier: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw= Subject key identifier: 3A:3D:63:6B:C3:74:A3:11:90:89:2D:96:CB:94:AC:C2:CF:CB:C0:91 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA71A0A2C9FEACB6580C9FAB16B04D6 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215787 IP address blocks: 2a0d:2146:bde0::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1a:0a:2c:9f:ea:cb:65:80:c9:fa:b1:6b:04:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3d636bc374a31190892d96cb94acc2cfcbc091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:84:d8:85:28:cc:7a:34:e9:b3:44:a3:a0:0f: 67:81:71:f7:8b:4a:9f:97:fc:df:79:66:ba:08:ea: 6d:66:ae:60:c8:53:ab:84:ba:c1:24:c6:ec:c5:e5: 66:d5:07:79:6f:d8:e4:71:46:f3:5d:ae:7f:4a:13: 48:00:2c:70:8f:06:39:f7:d7:c4:e7:7f:ed:c2:26: ff:d0:8c:ae:0e:23:b7:4b:ad:56:1a:7a:05:df:7a: 1e:70:97:00:75:92:04:5f:24:9c:20:31:b9:7b:f8: 59:c2:81:f0:07:d9:21:52:4a:b4:b3:24:52:c3:10: 0d:d8:85:ff:06:9a:45:0b:34:f0:ad:fb:8b:37:4b: 9f:68:0c:f4:a3:c6:89:bf:1b:0b:d7:e1:9d:c0:d0: 89:00:84:b5:a9:6d:42:3e:54:87:03:61:2b:72:21: 1e:dc:5e:1c:83:5e:d0:f1:5f:86:d5:83:34:c4:f3: 65:26:4c:08:16:30:f2:cf:5f:19:39:e2:32:71:2b: 4d:c4:30:d2:9c:56:e5:ee:9e:bc:1b:cc:98:7f:61: dd:74:fe:ae:d5:6c:bf:ee:0c:b7:69:24:de:5c:11: e4:cf:3d:8e:23:fb:89:cd:20:32:66:d4:61:3e:0d: 30:6d:86:37:06:d0:13:25:17:14:43:96:5b:55:a4: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:63:6B:C3:74:A3:11:90:89:2D:96:CB:94:AC:C2:CF:CB:C0:91 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:bde0::/43 Signature Algorithm: sha256WithRSAEncryption a3:c7:f8:51:7a:fb:ee:b6:84:fd:d8:48:86:22:23:3d:13:95: 07:fd:31:f5:f6:e2:6d:dd:5d:d7:ba:b6:cb:a6:a9:57:bc:dd: a2:fd:cc:e9:37:72:9d:19:85:6a:ec:d3:5b:1b:a1:40:f8:ad: e6:e8:cb:37:28:38:6b:4b:67:a2:f0:a7:9f:19:4f:60:71:60: bb:d7:e6:e2:11:ea:9c:37:37:b7:1c:66:a1:0a:32:48:67:e2: 08:ba:6e:da:ad:15:a0:63:56:10:f1:64:2c:f4:5e:fb:a6:06: c0:dc:60:5a:fa:63:2a:05:2e:6a:d2:5f:fc:e6:15:06:34:7d: 16:c7:17:4a:28:b7:fd:b7:f6:fd:f4:04:d8:8f:fb:44:cd:18: a1:2b:a3:fb:81:a7:2d:27:c9:c7:ca:da:e0:b1:db:e1:d9:4f: dc:66:b2:c2:e4:63:3e:85:72:95:9e:da:2e:66:ab:99:c1:1b: 2c:d4:26:d1:62:cd:e2:2f:6a:9c:19:39:78:1d:3a:ea:fa:46: 27:0c:4e:2b:e0:e3:0b:f2:3c:b6:30:f1:18:64:4f:38:cf:90: 37:b7:1a:09:41:07:61:51:a6:45:60:72:20:4b:33:3d:4d:9f: fa:d8:0d:b7:f7:99:3c:68:f2:d6:60:57:a7:8d:03:d1:1b:02: 1e:dc:75:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxoKLJ/qy2WAyfqxawTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTNkNjM2YmMzNzRhMzExOTA4OTJkOTZjYjk0YWNjMmNmY2JjMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oTYhSjMejTps0SjoA9ngXH3i0qf l/zfeWa6COptZq5gyFOrhLrBJMbsxeVm1Qd5b9jkcUbzXa5/ShNIACxwjwY599fE 53/twib/0IyuDiO3S61WGnoF33oecJcAdZIEXyScIDG5e/hZwoHwB9khUkq0syRS wxAN2IX/BppFCzTwrfuLN0ufaAz0o8aJvxsL1+GdwNCJAIS1qW1CPlSHA2ErciEe 3F4cg17Q8V+G1YM0xPNlJkwIFjDyz18ZOeIycStNxDDSnFbl7p68G8yYf2HddP6u 1Wy/7gy3aSTeXBHkzz2OI/uJzSAyZtRhPg0wbYY3BtATJRcUQ5ZbVaQ+5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDo9Y2vDdKMRkIktlsuUrMLPy8CRMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvT2oxamE4TjBveEdRaVMyV3k1U3N3c19Md0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKg0hRr3g MA0GCSqGSIb3DQEBCwUAA4IBAQCjx/hRevvutoT92EiGIiM9E5UH/TH19uJt3V3X urbLpqlXvN2i/czpN3KdGYVq7NNbG6FA+K3m6Ms3KDhrS2ei8KefGU9gcWC71+bi EeqcNze3HGahCjJIZ+IIum7arRWgY1YQ8WQs9F77pgbA3GBa+mMqBS5q0l/85hUG NH0WxxdKKLf9t/b99ATYj/tEzRihK6P7gactJ8nHytrgsdvh2U/cZrLC5GM+hXKV ntouZquZwRss1CbRYs3iL2qcGTl4HTrq+kYnDE4r4OML8jy2MPEYZE84z5A3txoJ QQdhUaZFYHIgSzM9TZ/62A2395k8aPLWYFenjQPRGwIe3HUh -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:12 2026 by rpki-client