This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2OyJG9GYKDYgye6t4Qk5uLx-j_c.roa File: 2OyJG9GYKDYgye6t4Qk5uLx-j_c.roa (raw, json) Hash identifier: F4cQMfC8+dWgnMKCdmQ+5Y8d1QDo3UC40lge7Bfu/+s= Subject key identifier: D8:EC:89:1B:D1:98:28:36:20:C9:EE:AD:E1:09:39:B8:BC:7E:8F:F7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D80943FFCF50BFCBC06443B75D9B1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2OyJG9GYKDYgye6t4Qk5uLx-j_c.roa Signing time: Fri 02 Jan 2026 06:20:38 +0000 ROA not before: Fri 02 Jan 2026 06:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215738 IP address blocks: 2a06:de00:700::/44 maxlen: 48 2a06:de00:7f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:80:94:3f:fc:f5:0b:fc:bc:06:44:3b:75:d9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8ec891bd198283620c9eeade10939b8bc7e8ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:aa:6d:f9:91:75:7a:d5:39:df:19:cb:a9: 87:04:fe:b9:80:c8:f8:ac:ec:ae:06:34:c0:6d:c9: 0c:36:27:61:f6:d9:1c:bf:eb:a8:ef:71:f0:8b:a7: 44:d8:cc:8f:51:31:4c:3c:76:04:a7:14:5a:df:be: d4:72:d8:16:0b:a8:8e:77:80:14:47:23:3d:a9:f5: 6e:3a:d0:40:48:d4:06:e2:43:66:d5:ff:ff:c9:23: c4:1e:37:f8:49:d4:1b:ab:ce:54:76:fc:e0:72:57: eb:77:f6:ed:43:13:3a:45:a8:80:54:3e:fc:26:14: 1f:fe:7e:97:49:e8:3f:ae:61:22:8f:57:cc:e0:47: e1:a0:b9:7f:0b:74:4f:69:30:2e:16:98:d8:a8:7c: 16:85:f5:e9:3b:22:1b:07:7a:f1:e3:75:c7:a9:21: 56:b9:ba:5e:aa:2c:3c:0d:8c:b4:b7:eb:e9:0c:3c: 88:fa:8b:11:f8:85:4c:37:3f:c0:e7:44:04:e2:86: 98:51:81:1c:ac:67:54:38:f1:f2:2b:5a:15:cd:c8: 3e:57:82:c4:d5:d0:23:08:ab:09:03:09:13:4c:fe: 5a:90:3e:b4:6d:a2:52:be:f4:b7:d0:38:4f:b1:d6: 7e:b9:db:3a:18:43:4c:13:ca:2e:9e:21:1f:af:1c: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EC:89:1B:D1:98:28:36:20:C9:EE:AD:E1:09:39:B8:BC:7E:8F:F7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2OyJG9GYKDYgye6t4Qk5uLx-j_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:700::/44 2a06:de00:7f1::/48 Signature Algorithm: sha256WithRSAEncryption ba:b6:d7:76:36:37:1b:9d:c8:19:66:ca:22:77:d9:b6:6c:0e: eb:0f:ea:61:21:58:43:bd:1a:41:b1:09:60:e8:3d:28:a1:6b: c0:7e:f3:38:13:ee:0f:e5:4a:e1:f1:1f:e1:d2:ab:85:4a:52: fd:f5:90:d0:ce:88:99:f7:e5:a9:0d:99:f1:2f:c8:77:91:f6: 29:71:7d:0c:71:9d:d1:70:b0:0c:b6:a4:28:0d:dd:76:7e:b1: 81:aa:5c:18:ad:84:71:f0:32:e9:70:fa:79:08:6a:0f:50:6d: 55:3d:4b:4f:37:dd:76:fb:fb:82:72:f5:18:aa:07:4b:82:70: 96:e9:65:9a:65:73:3c:20:d9:44:6e:d6:f5:1e:ef:89:68:46: d7:45:59:f1:20:1d:4b:7d:a8:13:68:99:d1:ae:dc:e2:2a:42: e1:a6:5c:d7:ee:6c:ee:da:01:f2:dc:23:3c:c4:a3:9a:7d:d4: 21:c3:d1:b6:eb:6a:8d:c2:5a:1e:da:cc:30:28:b2:b9:2c:a3: 4e:d7:1a:33:eb:88:3c:60:5f:88:15:3c:03:8e:c9:9f:10:12: 25:5e:a8:59:6c:df:a9:76:48:1a:e3:10:2c:92:7c:a2:ff:ea: 88:e5:fd:2b:88:f1:cd:73:78:73:5d:6c:a8:2e:36:5e:be:1a: 2e:44:1c:78 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XYCUP/z1C/y8BkQ7ddmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGVjODkxYmQxOTgyODM2MjBjOWVlYWRlMTA5MzliOGJjN2U4ZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBOqbfmRdXrVOd8Zy6mHBP65gMj4 rOyuBjTAbckMNidh9tkcv+uo73Hwi6dE2MyPUTFMPHYEpxRa377UctgWC6iOd4AU RyM9qfVuOtBASNQG4kNm1f//ySPEHjf4SdQbq85Udvzgclfrd/btQxM6RaiAVD78 JhQf/n6XSeg/rmEij1fM4EfhoLl/C3RPaTAuFpjYqHwWhfXpOyIbB3rx43XHqSFW ubpeqiw8DYy0t+vpDDyI+osR+IVMNz/A50QE4oaYUYEcrGdUOPHyK1oVzcg+V4LE 1dAjCKsJAwkTTP5akD60baJSvvS30DhPsdZ+uds6GENME8ouniEfrxzODwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNjsiRvRmCg2IMnureEJObi8fo/3MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMk95Skc5R1lLRFlneWU2dDRRazV1THgtal9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAAcA AwcAKgbeAAfxMA0GCSqGSIb3DQEBCwUAA4IBAQC6ttd2NjcbncgZZsoid9m2bA7r D+phIVhDvRpBsQlg6D0ooWvAfvM4E+4P5Urh8R/h0quFSlL99ZDQzoiZ9+WpDZnx L8h3kfYpcX0McZ3RcLAMtqQoDd12frGBqlwYrYRx8DLpcPp5CGoPUG1VPUtPN912 +/uCcvUYqgdLgnCW6WWaZXM8INlEbtb1Hu+JaEbXRVnxIB1LfagTaJnRrtziKkLh plzX7mzu2gHy3CM8xKOafdQhw9G262qNwloe2swwKLK5LKNO1xoz64g8YF+IFTwD jsmfEBIlXqhZbN+pdkga4xAsknyi/+qI5f0riPHNc3hzXWyoLjZevhouRBx4 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:23 2026 by rpki-client