This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/oKT0teDRuCKghhjJR_CyLi3LsKQ.roa File: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (raw, json) Hash identifier: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ= Subject key identifier: A0:A4:F4:B5:E0:D1:B8:22:A0:86:18:C9:47:F0:B2:2E:2D:CB:B0:A4 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EF0007B0A74ED8CB7D61C6C7A13A Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/oKT0teDRuCKghhjJR_CyLi3LsKQ.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212001 IP address blocks: 2a0d:f407:1023::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ef:00:07:b0:a7:4e:d8:cb:7d:61:c6:c7:a1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0a4f4b5e0d1b822a08618c947f0b22e2dcbb0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:07:5d:64:fa:8e:5f:c0:c9:34:95:53:b5: 1b:27:3b:16:4d:5e:e4:88:11:60:fe:fd:97:c0:ab: 42:5b:2b:ab:e0:cb:71:19:1e:6e:ef:34:be:ba:ad: 13:69:80:ea:35:90:2a:a0:83:54:fe:9f:6c:35:47: 36:81:03:22:66:26:bf:cc:86:b5:51:98:49:42:c9: 96:6c:2a:95:6a:f1:0a:18:d8:18:ea:bf:9c:4a:97: ed:1e:b8:d0:fc:fc:45:5a:69:59:fa:80:bf:53:bb: 6c:78:80:0c:25:f6:9f:74:b9:c3:da:d0:be:d9:9d: 14:9f:61:b9:2a:92:20:99:df:5e:a3:b4:46:bc:04: b8:56:61:b5:81:83:4c:9e:da:28:3e:63:b7:2c:35: d2:2c:4b:08:af:2e:ac:15:29:81:6c:5b:c1:11:87: 46:25:ee:ed:f7:b3:b0:2d:cf:38:13:75:b7:6f:ec: 57:f6:4c:9e:f9:25:d0:d0:9b:e7:39:64:cd:4b:08: 87:1e:5d:7a:00:ab:38:9b:a2:be:98:e0:8a:79:08: e5:1d:36:8f:e3:ee:11:fe:ff:6f:14:8e:dc:12:ce: 0b:c3:76:14:2d:8b:8d:fb:3e:b6:80:74:f3:22:d2: 81:9b:f7:ef:0f:e7:68:17:78:5e:10:12:bf:2a:b4: bb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:F4:B5:E0:D1:B8:22:A0:86:18:C9:47:F0:B2:2E:2D:CB:B0:A4 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/oKT0teDRuCKghhjJR_CyLi3LsKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:f407:1023::/48 Signature Algorithm: sha256WithRSAEncryption 21:a7:25:2f:34:91:dc:d2:36:b4:bc:65:b5:4f:44:bc:1e:35: 34:7d:b0:3c:b6:bf:f0:11:01:c5:0a:65:22:39:c6:65:34:b3: 98:c8:0e:5c:85:a8:30:da:54:7c:40:5b:cc:9b:5d:8f:b5:96: ee:c1:d8:49:82:22:ee:a9:e4:a3:f9:72:6d:7f:68:0d:64:8a: 52:cb:0a:53:44:3d:98:1f:5d:76:ef:58:e4:f5:0d:7a:36:fa: 8b:88:4a:27:b9:dd:d3:b1:fc:6f:bb:82:75:8d:9f:c0:87:55: f2:35:b1:25:60:10:07:a8:bd:b2:6f:8d:f1:be:cb:f2:bb:83: e8:09:f5:f2:99:63:b5:d9:99:b8:78:0e:a9:68:e0:8f:e5:98: 2d:e9:54:1c:7e:e4:2d:6e:a1:10:09:9e:97:56:3d:93:b2:5e: 02:2a:d0:db:63:3d:ab:6c:af:3b:47:07:fc:2a:2d:72:fd:a9: fb:8d:1a:df:67:dc:2c:64:55:b4:05:d9:1c:7c:d3:37:22:a3: 82:1f:9c:f9:31:45:79:16:37:28:74:5e:f6:c3:0e:67:57:c6: df:eb:f0:c0:90:c4:dd:79:03:8a:9d:8b:14:fe:68:a0:b4:30: a2:3f:1f:32:49:c8:42:8c:3e:53:d7:39:01:75:46:48:10:c7: 7d:94:ab:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EO8AB7CnTtjLfWHGx6E6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGE0ZjRiNWUwZDFiODIyYTA4NjE4Yzk0N2YwYjIyZTJkY2JiMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+cHXWT6jl/AyTSVU7UbJzsWTV7k iBFg/v2XwKtCWyur4MtxGR5u7zS+uq0TaYDqNZAqoINU/p9sNUc2gQMiZia/zIa1 UZhJQsmWbCqVavEKGNgY6r+cSpftHrjQ/PxFWmlZ+oC/U7tseIAMJfafdLnD2tC+ 2Z0Un2G5KpIgmd9eo7RGvAS4VmG1gYNMntooPmO3LDXSLEsIry6sFSmBbFvBEYdG Je7t97OwLc84E3W3b+xX9kye+SXQ0JvnOWTNSwiHHl16AKs4m6K+mOCKeQjlHTaP 4+4R/v9vFI7cEs4Lw3YULYuN+z62gHTzItKBm/fvD+doF3heEBK/KrS7bQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKCk9LXg0bgioIYYyUfwsi4ty7CkMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvb0tUMHRlRFJ1Q0tnaGhqSlJfQ3lMaTNMc0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg30BxAj MA0GCSqGSIb3DQEBCwUAA4IBAQAhpyUvNJHc0ja0vGW1T0S8HjU0fbA8tr/wEQHF CmUiOcZlNLOYyA5chagw2lR8QFvMm12PtZbuwdhJgiLuqeSj+XJtf2gNZIpSywpT RD2YH11271jk9Q16NvqLiEonud3Tsfxvu4J1jZ/Ah1XyNbElYBAHqL2yb43xvsvy u4PoCfXymWO12Zm4eA6paOCP5Zgt6VQcfuQtbqEQCZ6XVj2Tsl4CKtDbYz2rbK87 Rwf8Ki1y/an7jRrfZ9wsZFW0BdkcfNM3IqOCH5z5MUV5FjcodF72ww5nV8bf6/DA kMTdeQOKnYsU/migtDCiPx8ySchCjD5T1zkBdUZIEMd9lKv0 -----END CERTIFICATE-----Generated at Sun Jan 25 16:33:13 2026 by rpki-client