This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oaqgeDFFMq2uvUEdQT4qjmZSidA.roa File: oaqgeDFFMq2uvUEdQT4qjmZSidA.roa (raw, json) Hash identifier: CiitUvuWlBXbPX9iZ0JFmTA/g9ulsVkUAJXxadUJiKE= Subject key identifier: A1:AA:A0:78:31:45:32:AD:AE:BD:41:1D:41:3E:2A:8E:66:52:89:D0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D572D211C30F60421284DB83ADC3E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oaqgeDFFMq2uvUEdQT4qjmZSidA.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212904 IP address blocks: 2a10:2f00:141::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:57:2d:21:1c:30:f6:04:21:28:4d:b8:3a:dc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1aaa078314532adaebd411d413e2a8e665289d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:7c:84:02:64:94:6e:9c:69:73:97:6c:37: 09:e7:32:4a:68:98:79:d0:5e:82:0b:2a:d0:63:44: 72:e2:6a:d2:83:08:62:f9:d5:08:8f:e8:20:9a:68: 29:5d:3b:49:ef:52:f3:de:2b:99:27:a2:d3:e6:6c: da:ea:fb:a1:3f:f2:32:f8:9e:64:a9:9d:28:43:7b: a2:58:14:d0:fe:f9:8c:b7:40:28:e1:09:d6:55:5e: 37:b7:fb:c4:c3:bc:40:c1:c8:69:75:d7:67:de:3f: 6d:08:ab:bd:b7:5c:c8:d0:4f:05:87:cc:7b:00:55: 9c:ea:9a:0a:c5:27:2a:45:2a:e1:51:9f:f9:5d:34: e8:f2:97:94:8f:19:8f:12:84:d8:f0:e3:8b:20:0c: c8:32:ab:cc:f1:16:a2:3a:9e:22:8e:2a:bf:a9:b8: 0c:25:61:1d:c7:96:b6:fd:f8:51:6d:e9:85:12:80: 58:14:ec:00:a5:4c:57:b0:ab:30:34:39:90:6e:e7: 41:0f:36:f4:e1:78:02:4a:a8:44:8d:c6:3c:22:63: 7a:22:0a:85:34:09:31:82:a0:cb:38:ab:0b:c2:8f: 2a:91:90:0f:86:5e:2e:f0:f4:77:5f:81:f8:06:e2: 4a:e4:0c:f8:dc:f7:14:95:a1:a1:09:8b:52:e1:9d: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AA:A0:78:31:45:32:AD:AE:BD:41:1D:41:3E:2A:8E:66:52:89:D0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oaqgeDFFMq2uvUEdQT4qjmZSidA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:141::/48 Signature Algorithm: sha256WithRSAEncryption 54:b4:72:4c:d0:00:db:1b:d7:99:a8:62:7b:fa:b1:8d:c2:f7: 24:8b:60:6f:71:9f:9b:c7:c9:b7:94:c0:df:51:0a:06:84:a1: 73:d0:e1:19:ed:8b:35:43:69:c2:0c:10:6a:82:70:c8:d0:56: 37:ba:6c:d2:89:b7:da:b3:a6:91:52:c9:3a:3d:6f:41:5c:f6: 09:42:cb:8d:66:62:8c:04:b4:6b:f4:9e:32:82:c4:b6:4f:35: 35:9f:21:95:4a:e0:f2:95:42:a5:9a:32:e7:1c:21:11:27:b3: a7:92:45:3f:c7:fa:4f:8b:b2:94:35:e3:62:dc:10:03:78:85: f6:2a:a6:7a:95:9b:28:ed:0d:2f:58:19:d6:e0:29:6d:65:3c: fa:82:7d:45:a7:a1:14:15:bb:6f:d4:0c:92:36:ec:53:96:e0: 4d:1e:d5:1e:f3:4d:1a:40:e0:88:e3:79:2a:38:7d:bc:fd:38: cd:8c:8f:d8:61:0c:ac:5c:2f:65:8b:87:63:87:3a:86:dc:2e: f9:71:76:bc:dd:67:f4:ba:cf:cf:69:68:72:21:b2:b2:8f:13: eb:01:72:76:b7:3c:34:9e:5c:2e:cb:80:86:d0:c1:80:8d:e0: cb:d4:37:de:44:a2:01:ed:a7:1e:ee:a6:75:6a:d0:e0:93:6c: 0b:4a:a7:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVctIRww9gQhKE24Otw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWFhYTA3ODMxNDUzMmFkYWViZDQxMWQ0MTNlMmE4ZTY2NTI4OWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma98hAJklG6caXOXbDcJ5zJKaJh5 0F6CCyrQY0Ry4mrSgwhi+dUIj+ggmmgpXTtJ71Lz3iuZJ6LT5mza6vuhP/Iy+J5k qZ0oQ3uiWBTQ/vmMt0Ao4QnWVV43t/vEw7xAwchpdddn3j9tCKu9t1zI0E8Fh8x7 AFWc6poKxScqRSrhUZ/5XTTo8peUjxmPEoTY8OOLIAzIMqvM8RaiOp4ijiq/qbgM JWEdx5a2/fhRbemFEoBYFOwApUxXsKswNDmQbudBDzb04XgCSqhEjcY8ImN6IgqF NAkxgqDLOKsLwo8qkZAPhl4u8PR3X4H4BuJK5Az43PcUlaGhCYtS4Z2+uQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKGqoHgxRTKtrr1BHUE+Ko5mUonQMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvb2FxZ2VERkZNcTJ1dlVFZFFUNHFqbVpTaWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFB MA0GCSqGSIb3DQEBCwUAA4IBAQBUtHJM0ADbG9eZqGJ7+rGNwvcki2BvcZ+bx8m3 lMDfUQoGhKFz0OEZ7Ys1Q2nCDBBqgnDI0FY3umzSibfas6aRUsk6PW9BXPYJQsuN ZmKMBLRr9J4ygsS2TzU1nyGVSuDylUKlmjLnHCERJ7OnkkU/x/pPi7KUNeNi3BAD eIX2KqZ6lZso7Q0vWBnW4CltZTz6gn1Fp6EUFbtv1AySNuxTluBNHtUe800aQOCI 43kqOH28/TjNjI/YYQysXC9li4djhzqG3C75cXa83Wf0us/PaWhyIbKyjxPrAXJ2 tzw0nlwuy4CG0MGAjeDL1DfeRKIB7ace7qZ1atDgk2wLSqfL -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:25 2026 by rpki-client