This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/oBbHZskBgePxfPA6yXAa9qsZaJ4.roa File: oBbHZskBgePxfPA6yXAa9qsZaJ4.roa (raw, json) Hash identifier: HMrh2dCkL1N2+YwCmiHFoho2RWsT9N7Z2PNHtiVeXho= Subject key identifier: A0:16:C7:66:C9:01:81:E3:F1:7C:F0:3A:C9:70:1A:F6:AB:19:68:9E Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA563CDB967C8095F4A61DDDA4E3A4E Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/oBbHZskBgePxfPA6yXAa9qsZaJ4.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215144 IP address blocks: 2a10:4646:450::/44 maxlen: 44 2a10:4646:455::/48 maxlen: 48 2a10:4646:45a::/48 maxlen: 48 2a10:4646:45b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:63:cd:b9:67:c8:09:5f:4a:61:dd:da:4e:3a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a016c766c90181e3f17cf03ac9701af6ab19689e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:f8:02:19:1b:74:c0:3e:0c:f4:76:b9:a9: 27:80:d4:08:cd:4d:62:cb:58:73:06:ba:cc:56:4f: 40:27:06:60:7a:71:78:b1:55:cc:ec:32:20:ce:23: f4:e0:1f:af:3a:f6:fa:f9:4d:56:b1:cb:75:ae:e6: 79:a2:8e:67:f4:bf:59:d7:4b:8e:24:6f:7f:f6:af: 2b:12:66:c1:c4:e0:84:1d:1a:02:eb:20:87:1e:fb: 5f:b0:7b:c8:a8:02:2c:3b:cd:d5:2f:77:cb:42:c3: 27:ec:bf:b5:51:c9:b7:3f:3c:5e:d9:f7:cc:b4:25: 27:7b:06:39:50:be:44:2f:dd:e5:41:ba:4e:bb:7b: 10:95:5b:45:21:1b:cb:42:c6:48:34:e3:29:3e:ed: 05:65:82:e8:f4:fe:8f:60:42:12:c4:ce:2f:c9:88: ae:75:3f:5d:80:f7:b0:33:5e:33:99:3c:de:6a:62: 6f:81:b8:45:bd:0b:37:0b:03:e6:28:9b:ee:f2:a4: d9:e3:e6:d4:a3:e6:bf:3f:d6:28:0d:74:07:39:a1: 9f:82:36:38:0e:d2:9d:83:68:58:f7:6c:84:34:31: 90:88:47:f9:fc:21:92:ff:80:56:7a:c7:e6:e0:71: ac:a6:8b:fc:78:fb:19:80:44:8c:c5:32:0f:a1:29: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:16:C7:66:C9:01:81:E3:F1:7C:F0:3A:C9:70:1A:F6:AB:19:68:9E X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/oBbHZskBgePxfPA6yXAa9qsZaJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:450::/44 Signature Algorithm: sha256WithRSAEncryption 84:91:84:98:e8:97:68:67:28:35:10:23:5b:08:96:ea:16:a4: 61:e2:e2:9f:4a:f5:aa:40:6a:d3:c0:1c:c8:32:d4:61:2b:0f: 43:46:71:fd:5f:b3:1f:61:a7:f6:6c:7d:4e:46:5a:1b:52:1f: d7:64:61:a0:18:cf:cf:28:c4:01:ca:e0:3c:0c:46:9c:8d:cf: f9:e6:b4:fb:f2:5c:1b:b4:24:c6:cd:fc:16:56:55:10:22:fe: 29:40:22:79:bf:96:17:68:78:ae:7a:c1:94:15:8d:36:9c:48: 4c:87:33:23:f5:07:71:0f:23:63:6e:55:34:4a:55:1e:5a:2e: b4:83:d4:f4:64:3e:73:3f:a4:ff:00:1b:b2:77:c2:73:ce:1b: 62:be:89:86:1f:b7:c0:ed:fd:9e:3f:82:d2:2b:aa:34:7b:a3: 11:b3:fa:01:64:d0:b6:a7:93:82:5d:af:c9:88:1a:2b:2d:da: 14:35:3a:ae:41:8b:d3:9d:39:61:5a:41:c4:da:4d:45:17:03: 02:1a:06:7a:49:a4:ec:1a:3c:e8:0c:a7:0a:e1:29:71:66:a7: f7:82:78:40:33:d2:5f:c7:6c:ea:8a:58:7c:17:b2:8f:b0:77: 07:50:11:78:36:5c:b7:1b:c3:f3:97:f2:81:f0:47:d7:0a:84: c2:0a:25:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWPNuWfICV9KYd3aTjpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDE2Yzc2NmM5MDE4MWUzZjE3Y2YwM2FjOTcwMWFmNmFiMTk2ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOT4AhkbdMA+DPR2uakngNQIzU1i y1hzBrrMVk9AJwZgenF4sVXM7DIgziP04B+vOvb6+U1Wsct1ruZ5oo5n9L9Z10uO JG9/9q8rEmbBxOCEHRoC6yCHHvtfsHvIqAIsO83VL3fLQsMn7L+1Ucm3Pzxe2ffM tCUnewY5UL5EL93lQbpOu3sQlVtFIRvLQsZINOMpPu0FZYLo9P6PYEISxM4vyYiu dT9dgPewM14zmTzeamJvgbhFvQs3CwPmKJvu8qTZ4+bUo+a/P9YoDXQHOaGfgjY4 DtKdg2hY92yENDGQiEf5/CGS/4BWesfm4HGspov8ePsZgESMxTIPoSlPsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKAWx2bJAYHj8XzwOslwGvarGWieMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvb0JiSFpza0JnZVB4ZlBBNnlYQWE5cXNaYUo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgRQ MA0GCSqGSIb3DQEBCwUAA4IBAQCEkYSY6JdoZyg1ECNbCJbqFqRh4uKfSvWqQGrT wBzIMtRhKw9DRnH9X7MfYaf2bH1ORlobUh/XZGGgGM/PKMQByuA8DEacjc/55rT7 8lwbtCTGzfwWVlUQIv4pQCJ5v5YXaHiuesGUFY02nEhMhzMj9QdxDyNjblU0SlUe Wi60g9T0ZD5zP6T/ABuyd8JzzhtivomGH7fA7f2eP4LSK6o0e6MRs/oBZNC2p5OC Xa/JiBorLdoUNTquQYvTnTlhWkHE2k1FFwMCGgZ6SaTsGjzoDKcK4SlxZqf3gnhA M9Jfx2zqilh8F7KPsHcHUBF4Nly3G8Pzl/KB8EfXCoTCCiUp -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:18 2026 by rpki-client