This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oPnBy2wQZrz1wTuOzIsFRSY1Z98.roa File: oPnBy2wQZrz1wTuOzIsFRSY1Z98.roa (raw, json) Hash identifier: iyX1YvKzU3kf+ODUuZikV0ARyzUtRWIM8+Prg1VoUdQ= Subject key identifier: A0:F9:C1:CB:6C:10:66:BC:F5:C1:3B:8E:CC:8B:05:45:26:35:67:DF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB72D028BF9691117A6C871BA7E88 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oPnBy2wQZrz1wTuOzIsFRSY1Z98.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50922 IP address blocks: 2a10:2f00:18e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b7:2d:02:8b:f9:69:11:17:a6:c8:71:ba:7e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f9c1cb6c1066bcf5c13b8ecc8b0545263567df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:36:78:2b:1a:75:b2:2d:7a:17:38:9d:c2: b3:d5:3e:d8:70:69:0c:00:fe:fb:20:81:e8:b1:69: 4f:c6:14:39:f9:f7:a4:fa:c5:ac:23:42:48:7e:58: a3:c8:4f:06:d2:ee:1e:f1:47:80:d3:7a:8d:ec:c6: 0f:f0:a1:82:b6:33:e7:34:30:22:7d:a8:81:03:ca: 5b:fd:7f:07:af:f5:d0:e0:9d:b8:5e:b6:79:ad:cd: 4b:4b:f2:ef:f4:61:26:4c:79:2e:ef:6c:86:07:dc: 23:1b:ec:b8:70:6e:fb:f5:c3:18:6f:07:f6:66:81: 57:dc:1c:63:f1:e4:1a:b9:5a:71:ab:81:e2:6b:14: ed:1d:f9:24:c9:05:02:16:e5:f8:8e:d7:3c:50:de: d3:d4:5f:6f:88:d8:a1:64:ba:df:1f:42:c5:e9:56: 3b:f1:3f:e5:81:1a:f0:46:8a:a5:b8:9c:3e:3c:fb: 5a:64:72:7f:56:0b:2e:52:95:d4:bf:12:0d:b9:42: 3b:65:cb:60:d2:d3:a5:dd:dd:21:c0:a6:a7:9c:c8: 98:f6:d9:11:54:b2:6a:f1:b3:f8:2c:bd:4c:81:17: 0a:82:b8:8b:69:12:26:f4:dc:3f:97:7a:d4:40:e0: c9:09:9d:18:e0:d4:77:b3:49:4c:d0:8c:e0:bb:7a: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:C1:CB:6C:10:66:BC:F5:C1:3B:8E:CC:8B:05:45:26:35:67:DF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oPnBy2wQZrz1wTuOzIsFRSY1Z98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:18e::/48 Signature Algorithm: sha256WithRSAEncryption 47:e0:ca:e6:32:aa:fb:64:05:6a:4c:f4:a7:f2:e1:ab:5f:c3: eb:4c:c1:8c:6b:8a:6e:37:0d:44:1e:f4:1b:fb:18:67:62:39: bc:42:36:9c:54:a4:03:eb:9d:df:a3:6f:32:96:d4:05:99:d1: a6:e7:6d:d0:81:49:44:77:f5:e4:4a:96:b0:fc:bf:d1:0d:6d: ba:74:ab:7d:ed:e7:39:ef:00:9d:f2:58:28:c1:ce:88:e7:97: 2b:5e:38:e5:7c:77:85:5c:47:13:e9:7e:b6:77:2a:6d:51:eb: 16:b6:32:79:89:ea:61:a4:80:e2:c0:0b:9c:c1:77:d4:f5:58: 78:dd:e7:19:10:cf:97:6e:94:11:ea:54:e8:af:fe:76:97:d8: 0c:f0:29:50:8e:2d:96:12:37:a4:0d:5c:1b:ce:7d:be:5f:17: c2:e1:ee:5e:c6:d5:07:95:7e:45:78:1f:20:6e:ae:d4:93:75: 89:86:ae:e3:ea:74:5d:ee:c2:ac:c2:c1:eb:6e:de:53:e8:5c: cd:ff:54:db:a2:e6:72:f4:db:54:73:22:b2:43:e5:33:9c:f4: 78:e4:a5:4b:16:eb:fa:d4:72:af:1c:26:ab:f5:57:7e:58:27: 51:be:43:34:69:e9:d9:81:32:18:27:75:97:50:52:e2:b4:16: 7c:8e:b0:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLctAov5aREXpshxun6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGY5YzFjYjZjMTA2NmJjZjVjMTNiOGVjYzhiMDU0NTI2MzU2N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVQ2eCsadbItehc4ncKz1T7YcGkM AP77IIHosWlPxhQ5+fek+sWsI0JIflijyE8G0u4e8UeA03qN7MYP8KGCtjPnNDAi faiBA8pb/X8Hr/XQ4J24XrZ5rc1LS/Lv9GEmTHku72yGB9wjG+y4cG779cMYbwf2 ZoFX3Bxj8eQauVpxq4HiaxTtHfkkyQUCFuX4jtc8UN7T1F9viNihZLrfH0LF6VY7 8T/lgRrwRoqluJw+PPtaZHJ/VgsuUpXUvxINuUI7Zctg0tOl3d0hwKannMiY9tkR VLJq8bP4LL1MgRcKgriLaRIm9Nw/l3rUQODJCZ0Y4NR3s0lM0Izgu3od5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKD5wctsEGa89cE7jsyLBUUmNWffMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvb1BuQnkyd1Facnoxd1R1T3pJc0ZSU1kxWjk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGO MA0GCSqGSIb3DQEBCwUAA4IBAQBH4MrmMqr7ZAVqTPSn8uGrX8PrTMGMa4puNw1E HvQb+xhnYjm8QjacVKQD653fo28yltQFmdGm523QgUlEd/XkSpaw/L/RDW26dKt9 7ec57wCd8lgowc6I55crXjjlfHeFXEcT6X62dyptUesWtjJ5iephpIDiwAucwXfU 9Vh43ecZEM+XbpQR6lTor/52l9gM8ClQji2WEjekDVwbzn2+XxfC4e5extUHlX5F eB8gbq7Uk3WJhq7j6nRd7sKswsHrbt5T6FzN/1TbouZy9NtUcyKyQ+UznPR45KVL Fuv61HKvHCar9Vd+WCdRvkM0aenZgTIYJ3WXUFLitBZ8jrDT -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:26 2026 by rpki-client