This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ofc1FXY-b9k7a9LSNEAjlWBRaaU.roa File: ofc1FXY-b9k7a9LSNEAjlWBRaaU.roa (raw, json) Hash identifier: cY2F2h7etHcAX+QxQoQVIeeOL6rwmKFT1ahhgxqozSs= Subject key identifier: A1:F7:35:15:76:3E:6F:D9:3B:6B:D2:D2:34:40:23:95:60:51:69:A5 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75CD7C23E671EE20E1FCCAD071CD1 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ofc1FXY-b9k7a9LSNEAjlWBRaaU.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208751 IP address blocks: 2a06:e881:6700::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5c:d7:c2:3e:67:1e:e2:0e:1f:cc:ad:07:1c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1f73515763e6fd93b6bd2d234402395605169a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:aa:a7:00:2a:ab:1c:bb:1f:b2:21:88:94: 03:8c:ad:d9:83:c3:96:f1:b6:4e:97:15:ec:5e:93: 9e:59:12:ef:90:78:ac:80:53:b1:df:6b:01:8f:47: 6f:3b:6f:4b:7f:17:02:ac:50:17:2a:6d:49:16:26: 26:27:83:15:a8:a8:af:38:68:0b:5b:21:6d:c1:79: a4:e0:02:4f:1b:25:a0:33:30:72:1d:b3:f2:dc:2f: 0c:24:ae:2c:b0:85:42:7f:5b:43:87:37:df:94:6d: 82:22:5e:31:f6:d0:c5:80:81:a3:f3:08:9f:b4:42: fc:b0:54:b0:71:e4:ed:3c:97:72:e3:75:f3:61:3f: c3:7a:8f:ba:26:5c:bd:91:1b:82:60:88:3f:83:ba: 8f:44:88:98:04:0e:d8:c7:46:05:3d:74:bc:93:9a: 5e:a7:d3:c5:64:c3:07:04:84:60:de:6d:f2:fd:4a: 80:24:67:22:56:db:18:d8:a4:63:3e:1c:66:7b:ac: 33:90:88:e4:4b:25:73:f8:98:bb:6e:75:f0:b3:da: 05:b2:0c:9c:fc:99:ea:ea:d3:e7:c5:2c:06:60:57: 69:2e:f0:07:24:02:fc:c3:82:07:72:b8:76:cb:e6: d2:22:f5:1a:e5:e8:63:ce:a2:56:12:55:36:1d:93: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F7:35:15:76:3E:6F:D9:3B:6B:D2:D2:34:40:23:95:60:51:69:A5 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ofc1FXY-b9k7a9LSNEAjlWBRaaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:6700::/44 Signature Algorithm: sha256WithRSAEncryption 4d:87:89:1b:f7:9a:81:b8:1e:4c:56:ca:2b:3d:fb:82:24:46: 0f:e4:60:ee:d9:92:05:9d:2c:02:6d:73:2c:18:1c:1d:8c:bc: ea:b9:6d:17:76:7a:83:7a:ee:01:ca:68:8f:43:26:b0:02:18: fe:bb:a3:e9:1d:66:19:46:76:c6:be:eb:91:98:6c:07:c9:fa: b1:2e:1c:7a:98:00:51:7f:a9:1e:11:fa:a2:47:14:f3:9c:3e: 23:d1:25:91:2e:07:59:e0:b1:a1:74:2b:96:fe:14:be:15:a6: 1b:17:63:b9:82:a7:88:d9:a3:36:77:c5:f1:69:5d:ac:f2:45: bc:d4:29:78:46:c9:9c:1e:aa:41:11:be:3c:27:3c:10:4f:ae: 43:11:00:b8:af:5c:7b:45:6c:87:28:5f:9b:f7:22:e8:a3:97: f4:87:0b:30:40:dc:55:54:d4:7d:b9:5e:dc:a1:d2:6a:98:7f: 9d:e1:e8:4f:d6:91:27:cf:9d:b0:58:d1:82:38:c5:48:ed:a4: 78:14:5d:0b:d3:30:9b:f9:f5:fe:93:06:4f:cc:42:66:91:55: 80:0e:6c:30:f2:ea:e9:b2:f0:24:5c:ed:64:84:bd:66:8b:af: 9a:66:7c:24:f5:96:0b:4c:b9:73:d1:25:50:05:10:b4:18:83: 2a:86:0f:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1zXwj5nHuIOH8ytBxzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWY3MzUxNTc2M2U2ZmQ5M2I2YmQyZDIzNDQwMjM5NTYwNTE2OWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI2qpwAqqxy7H7IhiJQDjK3Zg8OW 8bZOlxXsXpOeWRLvkHisgFOx32sBj0dvO29LfxcCrFAXKm1JFiYmJ4MVqKivOGgL WyFtwXmk4AJPGyWgMzByHbPy3C8MJK4ssIVCf1tDhzfflG2CIl4x9tDFgIGj8wif tEL8sFSwceTtPJdy43XzYT/Deo+6Jly9kRuCYIg/g7qPRIiYBA7Yx0YFPXS8k5pe p9PFZMMHBIRg3m3y/UqAJGciVtsY2KRjPhxme6wzkIjkSyVz+Ji7bnXws9oFsgyc /Jnq6tPnxSwGYFdpLvAHJAL8w4IHcrh2y+bSIvUa5ehjzqJWElU2HZOoiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKH3NRV2Pm/ZO2vS0jRAI5VgUWmlMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvb2ZjMUZYWS1iOWs3YTlMU05FQWpsV0JSYWFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogWcA MA0GCSqGSIb3DQEBCwUAA4IBAQBNh4kb95qBuB5MVsorPfuCJEYP5GDu2ZIFnSwC bXMsGBwdjLzquW0XdnqDeu4BymiPQyawAhj+u6PpHWYZRnbGvuuRmGwHyfqxLhx6 mABRf6keEfqiRxTznD4j0SWRLgdZ4LGhdCuW/hS+FaYbF2O5gqeI2aM2d8XxaV2s 8kW81Cl4RsmcHqpBEb48JzwQT65DEQC4r1x7RWyHKF+b9yLoo5f0hwswQNxVVNR9 uV7codJqmH+d4ehP1pEnz52wWNGCOMVI7aR4FF0L0zCb+fX+kwZPzEJmkVWADmww 8urpsvAkXO1khL1mi6+aZnwk9ZYLTLlz0SVQBRC0GIMqhg+c -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:38 2026 by rpki-client