This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ou98WwPXDlrEW3eM0KZKlXxPjU0.roa File: ou98WwPXDlrEW3eM0KZKlXxPjU0.roa (raw, json) Hash identifier: e6aNXSypQBdMmCLoYi3x6Uu9rY0X9chBD/3LiPy1/5c= Subject key identifier: A2:EF:7C:5B:03:D7:0E:5A:C4:5B:77:8C:D0:A6:4A:95:7C:4F:8D:4D Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55B81628752F21DC5E25961DC79A6 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ou98WwPXDlrEW3eM0KZKlXxPjU0.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207708 IP address blocks: 2a10:4646:160::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5b:81:62:87:52:f2:1d:c5:e2:59:61:dc:79:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2ef7c5b03d70e5ac45b778cd0a64a957c4f8d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bb:5e:2e:2e:3b:f3:56:4e:1c:00:17:b0:38: 5a:5b:09:85:87:82:bb:f9:5f:6c:41:49:3b:69:81: 58:6d:21:a4:0d:23:6c:0d:fa:2a:5a:f3:bc:7e:ce: b7:83:e6:c8:cb:38:ed:b6:f4:df:4f:0b:68:e2:df: 5b:c5:34:43:8a:c7:cb:b1:e9:db:86:44:da:5d:bc: 3c:07:1c:e5:a2:6b:09:82:c3:e1:cd:ea:f2:02:db: 4f:40:d3:81:6a:f4:a9:89:2e:98:6a:ba:46:a2:4f: 33:56:d2:81:4a:37:2d:e3:44:0f:1b:82:69:ca:09: c5:e2:7a:0e:ef:e2:9c:91:51:d4:b7:92:de:72:9f: 4a:79:3f:dc:d6:83:62:83:cf:42:09:cd:07:f4:80: 50:bf:2f:5d:15:66:18:e0:a5:0b:27:d1:30:04:4d: 6d:2e:ae:c1:d9:40:3f:9d:9d:af:2f:89:d4:68:23: f9:ae:8e:bc:f0:ee:67:7e:49:44:e6:41:70:4f:ef: 6d:dc:18:79:a4:c8:1b:53:c2:ff:b4:4c:96:1c:9f: c5:04:f5:05:17:1b:23:a7:81:90:0a:08:24:78:b3: 00:1f:50:49:7c:16:c7:66:b4:96:93:9c:86:37:06: 02:52:4e:ea:ed:d3:3c:d0:fe:1e:67:51:1e:64:8a: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EF:7C:5B:03:D7:0E:5A:C4:5B:77:8C:D0:A6:4A:95:7C:4F:8D:4D X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ou98WwPXDlrEW3eM0KZKlXxPjU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:160::/48 Signature Algorithm: sha256WithRSAEncryption 6b:3d:27:70:8b:e7:28:30:0d:de:73:be:31:ef:f2:52:00:eb: 7d:40:30:56:d7:8d:9f:e1:72:aa:e2:76:73:f0:44:2f:2e:44: 4a:c9:3d:b8:b4:c7:9d:ba:c3:1c:58:58:e7:93:f4:d9:3e:39: 77:32:7c:07:d4:f5:60:05:00:b1:e8:d4:f6:01:11:6b:b8:37: 6b:f4:e4:44:0f:f4:06:e6:a6:91:79:3c:70:f7:b3:e7:60:fa: 28:1b:cc:a4:46:a3:11:b2:b5:53:d5:48:cb:e9:f5:a9:99:85: 90:17:b7:2f:42:2a:1b:7c:38:d4:43:a1:93:59:c3:36:5a:62: 9a:00:3f:d9:fb:8a:c9:77:a7:8a:12:99:76:0a:dd:ac:17:91: 7f:63:9b:95:04:01:df:b9:c0:a1:58:08:a1:71:1a:03:5c:3c: 00:13:35:4a:09:83:01:d7:88:06:d4:13:17:9a:c1:07:49:d2: fc:71:62:26:45:a6:6a:b7:4d:5f:a2:a0:7d:f5:eb:21:29:5b: ea:0d:dd:4c:8a:02:70:07:75:57:fe:a3:a2:10:36:30:42:26: 1c:d2:8a:ae:62:6e:2d:8f:2b:bf:db:68:18:f5:77:92:50:68: fe:df:89:4d:b4:fe:e0:ba:5e:fe:21:8b:9b:c7:b1:8d:af:15: 1d:28:4d:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVuBYodS8h3F4llh3HmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmVmN2M1YjAzZDcwZTVhYzQ1Yjc3OGNkMGE2NGE5NTdjNGY4ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLteLi4781ZOHAAXsDhaWwmFh4K7 +V9sQUk7aYFYbSGkDSNsDfoqWvO8fs63g+bIyzjttvTfTwto4t9bxTRDisfLsenb hkTaXbw8BxzlomsJgsPhzeryAttPQNOBavSpiS6YarpGok8zVtKBSjct40QPG4Jp ygnF4noO7+KckVHUt5Lecp9KeT/c1oNig89CCc0H9IBQvy9dFWYY4KULJ9EwBE1t Lq7B2UA/nZ2vL4nUaCP5ro688O5nfklE5kFwT+9t3Bh5pMgbU8L/tEyWHJ/FBPUF Fxsjp4GQCggkeLMAH1BJfBbHZrSWk5yGNwYCUk7q7dM80P4eZ1EeZIqxNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKLvfFsD1w5axFt3jNCmSpV8T41NMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvb3U5OFd3UFhEbHJFVzNlTTBLWktsWHhQalUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgFg MA0GCSqGSIb3DQEBCwUAA4IBAQBrPSdwi+coMA3ec74x7/JSAOt9QDBW142f4XKq 4nZz8EQvLkRKyT24tMedusMcWFjnk/TZPjl3MnwH1PVgBQCx6NT2ARFruDdr9ORE D/QG5qaReTxw97PnYPooG8ykRqMRsrVT1UjL6fWpmYWQF7cvQiobfDjUQ6GTWcM2 WmKaAD/Z+4rJd6eKEpl2Ct2sF5F/Y5uVBAHfucChWAihcRoDXDwAEzVKCYMB14gG 1BMXmsEHSdL8cWImRaZqt01foqB99eshKVvqDd1MigJwB3VX/qOiEDYwQiYc0oqu Ym4tjyu/22gY9XeSUGj+34lNtP7gul7+IYubx7GNrxUdKE3a -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:27 2026 by rpki-client