This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OlCDSS2ldCXF9b-Hq_3uDv6ec4U.roa File: OlCDSS2ldCXF9b-Hq_3uDv6ec4U.roa (raw, json) Hash identifier: 6ITExz1MXIF6Ei5ypTxAWtUvB+PsavbBrJcrCsP2t4o= Subject key identifier: 3A:50:83:49:2D:A5:74:25:C5:F5:BF:87:AB:FD:EE:0E:FE:9E:73:85 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF59907EC77241B25DEFBDC4C4389 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OlCDSS2ldCXF9b-Hq_3uDv6ec4U.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203655 IP address blocks: 2a0e:b107:1b60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f5:99:07:ec:77:24:1b:25:de:fb:dc:4c:43:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a5083492da57425c5f5bf87abfdee0efe9e7385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:5f:f6:3d:53:2a:cd:9f:f1:45:2b:e0:6d: 63:05:be:8d:25:5f:79:b6:59:bf:55:46:ac:fa:8b: c1:b5:15:8b:bb:4e:93:98:8a:07:10:ec:9b:ec:16: 0d:fe:5d:9f:d5:4a:68:c1:0e:ec:44:ef:77:29:e3: 2e:9a:ad:b3:4a:3f:3b:24:87:3b:be:70:7e:f3:f0: 2a:db:69:3c:01:6c:a8:b0:9e:40:78:2a:51:ac:d8: 5f:a9:cd:05:8f:55:f2:27:8d:43:66:1a:d9:9e:0c: 10:14:34:e0:12:0e:4e:9a:d5:59:c6:98:ec:c0:29: 3b:57:95:a1:8a:b8:a2:0d:5d:c8:bc:5c:b3:a4:65: ba:6a:52:b8:24:13:c1:d8:83:66:ed:ff:d0:04:9f: 99:29:75:43:2e:c5:13:88:e6:49:73:4f:d1:b6:ce: 14:0b:9f:e1:79:4c:6a:92:7d:6d:4f:9f:91:ac:d6: c3:d1:80:4f:9b:27:19:8e:24:3a:47:cc:8f:bf:f2: 3c:b5:6a:49:0b:77:9a:68:a0:f2:e7:5f:6b:31:96: 48:77:6b:f0:8e:f0:cc:40:fe:4c:bf:1c:90:8b:cd: 04:79:31:9b:e6:38:b6:d6:2c:e9:c6:3e:a8:5c:6c: f7:03:44:bc:e0:e4:19:1d:27:8d:f4:3d:1c:5d:f3: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:50:83:49:2D:A5:74:25:C5:F5:BF:87:AB:FD:EE:0E:FE:9E:73:85 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OlCDSS2ldCXF9b-Hq_3uDv6ec4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1b60::/44 Signature Algorithm: sha256WithRSAEncryption 59:04:35:f7:84:93:10:a5:e7:cc:c0:f3:5c:8b:40:2f:f9:2d: 04:dd:65:ad:c4:c1:3f:c6:14:36:fe:93:4e:f8:1a:fb:a9:be: 1a:37:38:5e:16:c3:77:d0:b6:ac:50:84:5f:3f:23:ff:3a:3b: 73:05:b0:82:59:6d:3c:df:44:8a:86:7e:cd:5e:73:60:60:2e: 27:04:5d:f0:4d:0a:a6:85:24:80:18:6a:b8:bd:c5:04:f6:6a: bf:15:6f:9b:8a:6f:82:a4:91:98:a8:31:d6:d2:4f:74:b5:28: 18:c0:ad:8d:a6:85:31:58:1e:f3:1f:70:fd:76:de:3b:d4:fc: 49:75:19:63:78:df:6f:3b:28:da:46:e5:75:46:a5:6d:bb:80: 08:c4:7e:68:f8:80:1a:07:b8:87:c4:7c:2a:a8:24:7d:d8:09: cd:fc:49:6d:e2:5a:64:5c:cb:ce:54:ec:13:c0:bf:fd:19:d0: eb:9a:d0:6a:ee:66:1f:d8:5a:30:1c:74:e1:d5:95:39:ec:63: 8c:a6:58:ab:97:76:17:be:68:88:ba:ee:62:3b:24:27:21:52: 4b:dd:f3:06:fa:f0:8b:22:67:d7:0d:7a:7c:6b:5f:30:93:7c: e0:a6:df:47:ea:d0:5f:0a:ca:67:4d:f4:88:46:c9:a6:a4:a1: 64:e9:c5:34 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPWZB+x3JBsl3vvcTEOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTUwODM0OTJkYTU3NDI1YzVmNWJmODdhYmZkZWUwZWZlOWU3Mzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstFf9j1TKs2f8UUr4G1jBb6NJV95 tlm/VUas+ovBtRWLu06TmIoHEOyb7BYN/l2f1UpowQ7sRO93KeMumq2zSj87JIc7 vnB+8/Aq22k8AWyosJ5AeCpRrNhfqc0Fj1XyJ41DZhrZngwQFDTgEg5OmtVZxpjs wCk7V5WhiriiDV3IvFyzpGW6alK4JBPB2INm7f/QBJ+ZKXVDLsUTiOZJc0/Rts4U C5/heUxqkn1tT5+RrNbD0YBPmycZjiQ6R8yPv/I8tWpJC3eaaKDy519rMZZId2vw jvDMQP5MvxyQi80EeTGb5ji21izpxj6oXGz3A0S84OQZHSeN9D0cXfN03QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDpQg0ktpXQlxfW/h6v97g7+nnOFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvT2xDRFNTMmxkQ1hGOWItSHFfM3VEdjZlYzRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxtg MA0GCSqGSIb3DQEBCwUAA4IBAQBZBDX3hJMQpefMwPNci0Av+S0E3WWtxME/xhQ2 /pNO+Br7qb4aNzheFsN30LasUIRfPyP/OjtzBbCCWW0830SKhn7NXnNgYC4nBF3w TQqmhSSAGGq4vcUE9mq/FW+bim+CpJGYqDHW0k90tSgYwK2NpoUxWB7zH3D9dt47 1PxJdRljeN9vOyjaRuV1RqVtu4AIxH5o+IAaB7iHxHwqqCR92AnN/Elt4lpkXMvO VOwTwL/9GdDrmtBq7mYf2FowHHTh1ZU57GOMplirl3YXvmiIuu5iOyQnIVJL3fMG +vCLImfXDXp8a18wk3zgpt9H6tBfCspnTfSIRsmmpKFk6cU0 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:49 2026 by rpki-client