This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/OPUmPq2MCSSLajil_N8xjasEED0.roa File: OPUmPq2MCSSLajil_N8xjasEED0.roa (raw, json) Hash identifier: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI= Subject key identifier: 38:F5:26:3E:AD:8C:09:24:8B:6A:38:A5:FC:DF:31:8D:AB:04:10:3D Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B7758ED11B8E3A87C7C2CA0E107FBF401 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/OPUmPq2MCSSLajil_N8xjasEED0.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207616 IP address blocks: 2a04:ff00:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ed:11:b8:e3:a8:7c:7c:2c:a0:e1:07:fb:f4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38f5263ead8c09248b6a38a5fcdf318dab04103d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:d7:ab:47:4c:fc:d0:cf:62:80:a7:c6:73: d6:e4:9d:e2:d6:ed:9b:d4:2a:d8:0a:3d:33:c3:75: c4:2c:2c:78:33:3a:ed:5a:4e:56:eb:32:7a:7e:8a: c5:c1:b3:db:6f:b9:32:d9:f6:ce:ed:16:1c:87:d5: 05:1f:75:4b:c9:f6:03:bd:fc:91:b3:eb:2c:d0:ce: 47:be:8e:59:c7:ea:1b:53:c6:96:cb:04:f8:b4:b6: 5d:07:a8:a3:f5:1a:da:81:5a:cc:75:1b:7c:33:1a: 24:15:47:27:0c:29:e4:ee:bb:b2:8b:2b:f1:1e:48: 03:34:fc:a8:db:2e:77:70:5a:a3:74:4f:e2:29:72: 1a:19:57:c7:44:48:67:02:e0:01:99:48:42:11:87: d8:db:c8:ad:50:e6:4c:9e:81:9a:aa:50:f7:b6:25: 1e:3f:ec:31:0c:53:2f:df:ac:11:17:2b:95:10:b7: 21:63:9d:37:48:e1:49:82:e0:03:ad:02:8f:27:8e: 99:a6:b5:27:58:ee:46:bf:f1:a5:f0:8a:df:c9:66: 2f:b0:46:cb:30:3f:84:dc:17:ca:68:79:5b:6b:de: d9:94:31:aa:09:d9:22:d4:f4:99:b6:bb:16:2a:49: fa:52:4d:9c:24:98:07:8b:9d:68:2c:6d:53:e6:f5: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F5:26:3E:AD:8C:09:24:8B:6A:38:A5:FC:DF:31:8D:AB:04:10:3D X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/OPUmPq2MCSSLajil_N8xjasEED0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ff00:101::/48 Signature Algorithm: sha256WithRSAEncryption 2b:2b:f8:ba:38:ce:09:60:2a:9e:41:dc:4e:d4:42:a7:0f:e8: 1d:f0:62:c6:aa:e5:f8:08:3f:57:fc:45:ec:97:ef:6d:f8:14: b6:07:99:8a:b7:38:93:b4:8c:7c:90:3d:95:77:f7:3c:59:dd: 2a:d5:6a:d4:1c:e2:92:76:7c:bd:53:02:2d:e9:44:ed:e1:37: c6:3a:20:b7:3f:43:d4:84:8b:81:d6:77:ad:56:5c:32:1c:1c: 6a:42:dc:8c:a0:66:06:55:89:ca:1f:89:98:d5:d6:f2:b7:fb: 49:4a:09:67:d8:31:6e:42:b9:3a:98:f5:6e:4c:47:ec:92:1b: 0c:58:5d:a6:15:2d:04:82:cc:5d:41:46:c7:09:f5:6f:21:d4: 84:66:f7:a3:29:c3:e3:59:23:c8:3e:a5:31:42:5a:62:7f:fd: 5e:26:2c:47:a9:88:de:f0:71:a9:42:89:43:68:07:1d:d7:26: 02:41:b2:68:6a:43:48:b3:b6:18:f3:e6:07:86:d0:59:94:cf: 25:db:05:92:8c:fe:92:bc:7e:9d:52:1f:65:8c:8e:df:8c:b6: d5:8d:9c:ca:b5:65:23:e8:88:6c:8e:71:75:07:03:ff:c8:6d: 83:aa:4c:78:15:f7:77:b1:00:6f:86:d5:4e:7c:25:5c:2e:dd: 68:36:81:f5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WO0RuOOofHwsoOEH+/QBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGY1MjYzZWFkOGMwOTI0OGI2YTM4YTVmY2RmMzE4ZGFiMDQxMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+XXq0dM/NDPYoCnxnPW5J3i1u2b 1CrYCj0zw3XELCx4MzrtWk5W6zJ6forFwbPbb7ky2fbO7RYch9UFH3VLyfYDvfyR s+ss0M5Hvo5Zx+obU8aWywT4tLZdB6ij9RragVrMdRt8MxokFUcnDCnk7ruyiyvx HkgDNPyo2y53cFqjdE/iKXIaGVfHREhnAuABmUhCEYfY28itUOZMnoGaqlD3tiUe P+wxDFMv36wRFyuVELchY503SOFJguADrQKPJ46ZprUnWO5Gv/Gl8IrfyWYvsEbL MD+E3BfKaHlba97ZlDGqCdki1PSZtrsWKkn6Uk2cJJgHi51oLG1T5vXaQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDj1Jj6tjAkki2o4pfzfMY2rBBA9MB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvT1BVbVBxMk1DU1NMYWppbF9OOHhqYXNFRUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgT/AAEB MA0GCSqGSIb3DQEBCwUAA4IBAQArK/i6OM4JYCqeQdxO1EKnD+gd8GLGquX4CD9X /EXsl+9t+BS2B5mKtziTtIx8kD2Vd/c8Wd0q1WrUHOKSdny9UwIt6UTt4TfGOiC3 P0PUhIuB1netVlwyHBxqQtyMoGYGVYnKH4mY1dbyt/tJSgln2DFuQrk6mPVuTEfs khsMWF2mFS0EgsxdQUbHCfVvIdSEZvejKcPjWSPIPqUxQlpif/1eJixHqYje8HGp QolDaAcd1yYCQbJoakNIs7YY8+YHhtBZlM8l2wWSjP6SvH6dUh9ljI7fjLbVjZzK tWUj6IhsjnF1BwP/yG2Dqkx4Ffd3sQBvhtVOfCVcLt1oNoH1 -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:30 2026 by rpki-client