This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/OTrcuVgT2KGth-4ao2nFNpPxJV8.roa File: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (raw, json) Hash identifier: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c= Subject key identifier: 39:3A:DC:B9:58:13:D8:A1:AD:87:EE:1A:A3:69:C5:36:93:F1:25:5F Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED4FD955B101A6C0D2F72B6A51C129 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/OTrcuVgT2KGth-4ao2nFNpPxJV8.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212360 IP address blocks: 2a0f:607:1054::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:d9:55:b1:01:a6:c0:d2:f7:2b:6a:51:c1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=393adcb95813d8a1ad87ee1aa369c53693f1255f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:15:7b:91:b6:ea:d3:bd:f2:d7:0c:b9:61: f6:84:ac:75:d3:43:d5:a9:57:3c:6e:9a:62:c7:ee: db:3e:71:32:67:97:53:b3:c4:15:60:2b:21:cd:5d: 39:23:1e:83:28:14:c7:32:b4:e6:cd:16:20:d8:a6: fd:11:44:0f:84:de:05:53:1a:ad:9e:66:d3:f5:e1: c8:3e:d8:52:87:61:66:28:d2:ab:6c:13:67:d1:da: 83:01:a0:91:cb:14:1a:fa:33:85:f2:4d:14:ef:0c: e9:4d:c1:0d:33:aa:31:20:a1:8a:01:58:c1:7d:85: 93:1f:6e:ab:91:a6:27:aa:d4:62:41:82:ba:26:b3: 40:72:0d:fc:c4:85:2d:bb:bd:ed:30:66:1c:5f:1f: f3:0c:2a:1f:ae:61:5d:99:5b:33:77:08:fc:be:41: 07:4a:c6:66:c4:a0:54:42:be:54:1d:d1:2d:a2:f0: 06:97:4e:d3:7a:4c:28:92:77:73:83:7d:5d:50:b7: d6:c5:25:c0:8d:42:29:d3:c7:6b:c3:1b:19:7d:9d: a3:36:6d:80:d2:04:3d:00:b1:78:e1:a7:5c:de:5d: 85:26:29:ac:52:66:65:04:c0:ea:52:fc:66:c0:af: 17:11:f9:23:5c:ad:6b:6f:c1:f2:24:7c:9c:55:c0: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3A:DC:B9:58:13:D8:A1:AD:87:EE:1A:A3:69:C5:36:93:F1:25:5F X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/OTrcuVgT2KGth-4ao2nFNpPxJV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1054::/48 Signature Algorithm: sha256WithRSAEncryption 43:c8:2a:6f:35:bc:95:97:7a:7e:64:62:b2:a5:04:83:7f:e2: 46:47:f0:ed:fe:5f:71:9e:ae:33:4c:2b:e9:40:4b:91:8a:0e: 6e:48:44:bf:94:94:55:3b:24:0d:83:36:a0:81:95:1b:6c:69: ae:c2:80:b2:be:8a:11:cb:42:d0:e8:e4:0a:ef:14:78:53:a1: 7f:66:bc:23:f5:37:7a:22:f2:03:2b:b4:da:19:c7:56:a6:33: 7e:6c:2c:69:93:0a:e3:ed:ff:33:e3:56:fd:5b:7b:75:81:bd: 1f:76:03:6c:b0:0b:4f:84:4e:62:74:f7:05:47:0e:64:bc:59: 6a:70:f1:e0:a7:4f:fd:78:b0:ef:e8:d7:35:f2:13:89:ff:df: ad:44:ed:bc:1a:54:06:95:85:39:c7:32:a5:8a:19:22:cf:7d: 71:b0:d3:84:d3:9e:9e:dd:a5:f4:36:84:1e:fd:00:62:42:b6: 43:59:96:1b:c1:71:de:45:e5:ee:b0:fa:f8:96:fc:6d:6d:20: 58:e2:66:d9:2f:6d:ad:ae:53:b8:22:25:46:e5:84:de:84:55: b3:46:08:aa:4d:6e:28:52:0c:ca:45:a4:d2:ee:c2:e7:41:dc: 75:6e:3b:71:48:27:fc:1d:58:4f:3f:ff:38:13:b3:77:13:51: 77:9a:a4:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57U/ZVbEBpsDS9ytqUcEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTNhZGNiOTU4MTNkOGExYWQ4N2VlMWFhMzY5YzUzNjkzZjEyNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoEVe5G26tO98tcMuWH2hKx100PV qVc8bppix+7bPnEyZ5dTs8QVYCshzV05Ix6DKBTHMrTmzRYg2Kb9EUQPhN4FUxqt nmbT9eHIPthSh2FmKNKrbBNn0dqDAaCRyxQa+jOF8k0U7wzpTcENM6oxIKGKAVjB fYWTH26rkaYnqtRiQYK6JrNAcg38xIUtu73tMGYcXx/zDCofrmFdmVszdwj8vkEH SsZmxKBUQr5UHdEtovAGl07Tekwokndzg31dULfWxSXAjUIp08drwxsZfZ2jNm2A 0gQ9ALF44adc3l2FJimsUmZlBMDqUvxmwK8XEfkjXK1rb8HyJHycVcCIoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDk63LlYE9ihrYfuGqNpxTaT8SVfMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvT1RyY3VWZ1QyS0d0aC00YW8ybkZOcFB4SlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8GBxBU MA0GCSqGSIb3DQEBCwUAA4IBAQBDyCpvNbyVl3p+ZGKypQSDf+JGR/Dt/l9xnq4z TCvpQEuRig5uSES/lJRVOyQNgzaggZUbbGmuwoCyvooRy0LQ6OQK7xR4U6F/Zrwj 9Td6IvIDK7TaGcdWpjN+bCxpkwrj7f8z41b9W3t1gb0fdgNssAtPhE5idPcFRw5k vFlqcPHgp0/9eLDv6Nc18hOJ/9+tRO28GlQGlYU5xzKlihkiz31xsNOE056e3aX0 NoQe/QBiQrZDWZYbwXHeReXusPr4lvxtbSBY4mbZL22trlO4IiVG5YTehFWzRgiq TW4oUgzKRaTS7sLnQdx1bjtxSCf8HVhPP/84E7N3E1F3mqQZ -----END CERTIFICATE-----Generated at Thu Jan 8 00:39:24 2026 by rpki-client