This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa File: Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa (raw, json) Hash identifier: 5vVU8CpinnMNDApjLeGdIl2Z5WpD2a99HQpSOKcpVyA= Subject key identifier: 3A:DE:12:9D:BE:D9:8B:80:B7:7A:63:F2:CD:D6:EA:8A:BE:CF:F3:08 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019B7CEE50A2A6E0A04C299A5C233EF62FEC Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41151 IP address blocks: 2a01:4700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:50:a2:a6:e0:a0:4c:29:9a:5c:23:3e:f6:2f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ade129dbed98b80b77a63f2cdd6ea8abecff308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:db:e5:1f:cd:26:9f:92:27:fa:bd:7d:73: 38:1d:54:64:d3:12:bc:af:d6:28:09:8c:0c:a6:4e: 49:65:ac:40:25:67:07:4a:98:4f:b1:6b:f6:e1:9b: f3:22:41:2b:90:c4:05:8c:c7:65:5d:f4:f4:a6:6a: 35:6f:9b:2d:8b:83:2e:c8:16:a4:95:87:2a:ea:14: 9e:fc:b5:01:b3:21:36:6f:28:de:30:5b:98:85:96: 68:cd:0b:13:18:03:ba:ce:5c:ca:65:7f:ed:2a:f9: 53:e2:32:7c:14:8c:f7:8b:76:84:c5:23:80:67:43: 04:77:43:3d:69:ff:15:f8:6a:f0:d6:d0:eb:da:a1: c9:b5:bf:af:86:1e:68:8b:8c:0e:56:fa:39:a3:a2: f8:10:13:5b:ea:95:97:e8:9f:fb:40:d9:c2:f8:a3: 9e:6e:d0:50:5e:bb:a6:8d:70:57:3d:67:91:04:cf: b7:a2:28:45:9a:92:03:c8:22:bd:36:c3:e8:90:40: d7:17:57:4a:ed:d7:81:7a:da:74:2f:50:6f:89:a4: b2:57:5d:4f:3c:16:d8:a6:79:b5:be:7e:4f:ee:4f: ac:d2:39:36:52:c6:a6:00:f5:19:ff:69:c8:99:52: 11:8f:b6:fd:8a:46:36:7b:57:1f:03:d1:3c:5d:98: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:12:9D:BE:D9:8B:80:B7:7A:63:F2:CD:D6:EA:8A:BE:CF:F3:08 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:4700::/48 Signature Algorithm: sha256WithRSAEncryption 50:7d:9b:a2:9e:9b:32:9d:60:a2:67:ed:2f:fc:0e:b1:55:ca: c4:e9:2f:e6:79:6e:cd:c1:20:3d:2c:c7:1c:b9:ef:fc:92:07: 53:f1:1d:65:38:d7:38:bd:b8:5b:b3:05:61:d3:af:96:3a:49: 0c:30:a4:1c:7d:73:2e:51:9f:53:17:21:d5:d7:19:88:32:9d: ff:77:bb:e0:c6:ee:c1:de:f7:57:bb:c9:71:3f:e9:2e:a9:01: 88:d5:7a:0a:82:5f:48:d9:86:c1:2e:9f:13:00:8b:39:90:0b: ba:99:86:54:b4:17:f6:d1:07:d4:9e:04:8c:67:6d:e6:08:59: 5a:26:1a:d2:57:31:ba:42:f9:97:66:07:a8:78:7f:d6:11:f8: 9b:be:a8:e2:1a:bc:79:ed:b5:f5:4f:fa:f4:5f:1c:0a:24:92: b3:1a:cb:a2:96:42:5c:a4:9c:da:ee:ed:c6:0d:2e:ca:a8:4a: 3b:0a:f9:44:bb:0b:eb:cb:5d:68:ad:38:df:d5:62:a2:0c:a8: 77:be:16:25:af:a1:6c:0f:fc:ab:47:62:27:fb:06:5a:77:88: ea:02:a9:8d:68:38:a5:de:0f:40:23:e5:8e:0a:0c:d2:25:df: de:28:44:90:b6:77:7a:b6:2a:7f:67:47:e7:f7:cf:f0:fa:5b: 33:fc:67:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87lCipuCgTCmaXCM+9i/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWRlMTI5ZGJlZDk4YjgwYjc3YTYzZjJjZGQ2ZWE4YWJlY2ZmMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJjb5R/NJp+SJ/q9fXM4HVRk0xK8 r9YoCYwMpk5JZaxAJWcHSphPsWv24ZvzIkErkMQFjMdlXfT0pmo1b5sti4MuyBak lYcq6hSe/LUBsyE2byjeMFuYhZZozQsTGAO6zlzKZX/tKvlT4jJ8FIz3i3aExSOA Z0MEd0M9af8V+Grw1tDr2qHJtb+vhh5oi4wOVvo5o6L4EBNb6pWX6J/7QNnC+KOe btBQXrumjXBXPWeRBM+3oihFmpIDyCK9NsPokEDXF1dK7deBetp0L1BviaSyV11P PBbYpnm1vn5P7k+s0jk2UsamAPUZ/2nImVIRj7b9ikY2e1cfA9E8XZiFkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDreEp2+2YuAt3pj8s3W6oq+z/MIMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvT3Q0U25iN1ppNEMzZW1QeXpkYnFpcjdQOHdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFHAAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBQfZuinpsynWCiZ+0v/A6xVcrE6S/meW7NwSA9 LMccue/8kgdT8R1lONc4vbhbswVh06+WOkkMMKQcfXMuUZ9TFyHV1xmIMp3/d7vg xu7B3vdXu8lxP+kuqQGI1XoKgl9I2YbBLp8TAIs5kAu6mYZUtBf20QfUngSMZ23m CFlaJhrSVzG6QvmXZgeoeH/WEfibvqjiGrx57bX1T/r0XxwKJJKzGsuilkJcpJza 7u3GDS7KqEo7CvlEuwvry11orTjf1WKiDKh3vhYlr6FsD/yrR2In+wZad4jqAqmN aDil3g9AI+WOCgzSJd/eKESQtnd6tip/Z0fn98/w+lsz/Gcp -----END CERTIFICATE-----Generated at Wed Jan 21 13:46:23 2026 by rpki-client