This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oHY3aLNNMbKZ2bX47DOmBc_3BFE.roa File: oHY3aLNNMbKZ2bX47DOmBc_3BFE.roa (raw, json) Hash identifier: f+tJwJZYzISeOsNhIx2akFQJGVUdFuucCYp1LiZwkLo= Subject key identifier: A0:76:37:68:B3:4D:31:B2:99:D9:B5:F8:EC:33:A6:05:CF:F7:04:51 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2AA4D84DF13BA0CC2C47A904FEDE Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oHY3aLNNMbKZ2bX47DOmBc_3BFE.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 2a0e:b107:2780::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2a:a4:d8:4d:f1:3b:a0:cc:2c:47:a9:04:fe:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0763768b34d31b299d9b5f8ec33a605cff70451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:1c:22:1e:62:39:9d:9e:13:dc:d0:b6:10: df:48:6d:13:17:a6:27:39:8f:dc:1b:f4:d2:7c:5e: 88:0f:b3:ea:fa:11:27:67:5b:ec:72:e1:4d:58:06: 65:95:61:0e:ec:9a:ff:64:c0:7e:da:33:b6:61:99: cf:97:20:d8:c2:38:0b:47:15:d0:ae:44:cb:bd:df: 7e:1d:75:c2:09:23:ff:88:c8:7d:97:7e:e3:8a:4f: 92:7e:f3:71:f7:4d:e1:9b:52:f4:65:38:b2:99:95: 7a:18:89:68:17:aa:7b:cd:ff:ae:03:d2:7a:12:b2: 37:ff:d7:6d:ab:42:c2:87:e6:66:d1:8d:81:cc:20: 44:59:fa:7b:0d:e7:b7:37:97:7b:61:d5:97:27:3c: aa:95:53:73:22:ca:1e:da:74:6a:38:0c:eb:44:51: 93:f3:c7:6c:78:4b:fd:32:76:0e:9b:ed:0b:ce:ab: 24:ce:9d:e7:0b:01:c0:fd:f0:ce:b8:14:72:b7:fd: 26:79:ba:6c:d2:7c:ab:dc:10:9e:67:11:78:37:53: 36:a4:d8:b8:b3:b6:2e:a7:e6:a9:29:ae:c5:d5:15: 76:12:33:b4:15:d4:65:07:00:34:92:1c:f3:cb:59: 25:92:c2:c5:56:fd:ca:87:02:f0:5e:7f:f9:0e:4d: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:37:68:B3:4D:31:B2:99:D9:B5:F8:EC:33:A6:05:CF:F7:04:51 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oHY3aLNNMbKZ2bX47DOmBc_3BFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2780::/46 Signature Algorithm: sha256WithRSAEncryption a2:96:71:b1:9d:1c:e0:79:39:11:bd:41:c6:7c:e7:af:c6:fb: ab:8a:8b:45:0e:cb:4c:10:11:3f:47:29:ac:43:ec:d3:1a:06: 32:7d:56:5a:bd:58:68:26:8e:45:1a:90:27:34:f8:eb:d6:0f: b5:4e:7e:34:bc:e6:11:d8:8d:94:bb:21:3a:dc:cd:72:23:a7: 86:a4:9c:73:ad:90:70:87:61:8e:bc:12:8c:9f:5f:d3:ff:b6: c1:08:81:26:19:e0:16:b7:b2:77:4e:68:53:4a:a2:25:76:64: 30:b6:3b:70:17:ec:15:51:1a:56:82:21:3b:84:5a:8d:ba:f4: 9b:6b:21:ab:3b:6d:0d:fa:80:8a:77:9d:f6:4e:0a:35:ce:d8: e1:b3:d9:d9:3d:18:ba:3f:02:f7:60:c7:4d:6a:dd:48:f0:05: 40:c0:0b:81:8f:a5:d6:07:73:3c:cd:64:b6:95:e1:a7:e3:ee: 99:cb:bd:38:ea:d9:ee:6f:05:ab:6b:45:6f:d7:1e:9b:be:be: b3:f6:13:64:41:27:5c:2d:fb:20:07:92:4b:02:d1:58:89:8f: ab:55:c4:93:fd:cb:6d:47:9b:85:10:5b:d8:ff:57:7c:73:a8: d9:c8:57:de:b9:86:71:5a:1b:08:4d:e9:7b:a0:cb:f1:4f:37: 97:59:84:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSqk2E3xO6DMLEepBP7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDc2Mzc2OGIzNGQzMWIyOTlkOWI1ZjhlYzMzYTYwNWNmZjcwNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIwcIh5iOZ2eE9zQthDfSG0TF6Yn OY/cG/TSfF6ID7Pq+hEnZ1vscuFNWAZllWEO7Jr/ZMB+2jO2YZnPlyDYwjgLRxXQ rkTLvd9+HXXCCSP/iMh9l37jik+SfvNx903hm1L0ZTiymZV6GIloF6p7zf+uA9J6 ErI3/9dtq0LCh+Zm0Y2BzCBEWfp7Dee3N5d7YdWXJzyqlVNzIsoe2nRqOAzrRFGT 88dseEv9MnYOm+0Lzqskzp3nCwHA/fDOuBRyt/0mebps0nyr3BCeZxF4N1M2pNi4 s7Yup+apKa7F1RV2EjO0FdRlBwA0khzzy1klksLFVv3KhwLwXn/5Dk3JlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKB2N2izTTGymdm1+OwzpgXP9wRRMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvb0hZM2FMTk5NYktaMmJYNDdET21CY18zQkZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg6xByeA MA0GCSqGSIb3DQEBCwUAA4IBAQCilnGxnRzgeTkRvUHGfOevxvuriotFDstMEBE/ RymsQ+zTGgYyfVZavVhoJo5FGpAnNPjr1g+1Tn40vOYR2I2UuyE63M1yI6eGpJxz rZBwh2GOvBKMn1/T/7bBCIEmGeAWt7J3TmhTSqIldmQwtjtwF+wVURpWgiE7hFqN uvSbayGrO20N+oCKd532Tgo1ztjhs9nZPRi6PwL3YMdNat1I8AVAwAuBj6XWB3M8 zWS2leGn4+6Zy7046tnubwWra0Vv1x6bvr6z9hNkQSdcLfsgB5JLAtFYiY+rVcST /cttR5uFEFvY/1d8c6jZyFfeuYZxWhsITel7oMvxTzeXWYRN -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:54 2026 by rpki-client