This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/o98NfeDK9CRHez9q6wLGlITiQ6w.roa File: o98NfeDK9CRHez9q6wLGlITiQ6w.roa (raw, json) Hash identifier: knhKVoHKZ9gBPHJ7HZTVX8GdKMHhMGkjA+da43LunF0= Subject key identifier: A3:DF:0D:7D:E0:CA:F4:24:47:7B:3F:6A:EB:02:C6:94:84:E2:43:AC Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019B7CEE724BB2CFDED4F3A14820D7ADF7F1 Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/o98NfeDK9CRHez9q6wLGlITiQ6w.roa Signing time: Fri 02 Jan 2026 04:19:20 +0000 ROA not before: Fri 02 Jan 2026 04:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215286 IP address blocks: 2a14:ae00:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:72:4b:b2:cf:de:d4:f3:a1:48:20:d7:ad:f7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 2 04:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3df0d7de0caf424477b3f6aeb02c69484e243ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:76:ff:aa:87:21:7a:d7:db:f6:4a:00:34: be:c3:d3:dc:56:f1:d9:1a:da:86:ea:bd:65:02:0d: bd:5d:4b:ae:f8:05:03:b2:d9:86:81:9a:d2:9d:a4: 44:51:bb:7b:83:ca:8d:fd:02:6f:1f:54:8a:9b:f0: 1e:8c:84:80:17:97:c9:c7:eb:41:38:f7:b8:4d:81: be:95:30:3e:39:b3:21:74:e1:fd:97:c5:62:1c:ba: b3:96:c7:8d:44:ea:49:8e:a0:59:99:9b:74:d3:88: 99:4f:6a:4d:e1:e1:0d:18:ac:ab:3d:e7:5a:0c:4e: 3b:d2:b4:1f:04:62:a3:8d:6a:2e:b4:d9:17:d8:aa: 40:8a:16:c4:c9:cb:07:73:fb:50:fe:b7:37:b7:6a: 83:56:11:2b:37:65:73:8d:de:14:83:81:8f:1d:ec: fc:55:9a:a1:91:c6:75:9b:65:3e:65:a4:a6:27:3a: 1b:bd:51:ac:16:48:f4:82:bf:2d:93:5a:63:f3:f7: 79:c0:b3:4f:3e:0d:85:e0:0d:12:18:28:0b:f9:0f: 8a:2e:3d:cc:16:03:c6:81:95:79:ad:3f:a6:ce:af: bd:65:aa:db:6b:af:16:c9:d8:6b:9c:1a:f0:74:0b: d6:e4:f2:59:c9:7f:d6:78:ce:eb:70:75:ad:df:ae: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DF:0D:7D:E0:CA:F4:24:47:7B:3F:6A:EB:02:C6:94:84:E2:43:AC X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/o98NfeDK9CRHez9q6wLGlITiQ6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:6::/48 Signature Algorithm: sha256WithRSAEncryption 1d:7a:60:b5:46:10:10:0e:72:b6:48:72:3e:ce:de:78:4d:e0: 11:67:1c:1f:38:2c:aa:f7:fe:c5:46:21:19:6b:07:81:fb:e6: 04:84:db:4b:d2:54:96:fc:b0:24:c9:d7:e2:36:94:54:7d:76: fe:88:2a:f0:c8:05:14:13:2e:23:39:ce:8f:84:ea:14:b3:b9: e2:75:b7:94:b4:c6:36:7d:a9:b6:ee:83:44:63:4b:e9:37:cd: 47:1f:b3:03:18:00:ed:10:5c:34:de:c0:87:fd:28:97:30:40: c1:31:d9:9f:5a:f2:1c:17:2a:e0:26:26:60:85:04:eb:9c:4a: a3:22:ac:dc:20:26:fd:b1:2b:eb:cf:89:94:0a:22:40:20:12: 82:97:1f:e1:1f:af:c4:ec:55:6a:bb:f5:bd:49:89:9b:92:32: 21:f1:e5:f4:34:6d:c3:1d:94:84:aa:61:49:12:70:3d:d1:39: 04:bb:26:61:a1:2b:6f:ef:91:b8:d0:c8:c1:24:82:26:84:f3: f6:6e:4b:17:93:b8:9e:1b:b4:b5:d6:cd:cb:bb:81:0b:9b:50: 43:3b:ce:63:1f:dc:9e:af:36:bc:0f:0b:ff:aa:d8:5e:0f:e9: 09:e2:4a:e1:f4:c6:63:9d:b8:76:5e:3e:46:2d:46:f4:25:b0: 66:4a:7d:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87nJLss/e1POhSCDXrffxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTAyMDQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2RmMGQ3ZGUwY2FmNDI0NDc3YjNmNmFlYjAyYzY5NDg0ZTI0M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIh2/6qHIXrX2/ZKADS+w9PcVvHZ GtqG6r1lAg29XUuu+AUDstmGgZrSnaREUbt7g8qN/QJvH1SKm/AejISAF5fJx+tB OPe4TYG+lTA+ObMhdOH9l8ViHLqzlseNROpJjqBZmZt004iZT2pN4eENGKyrPeda DE470rQfBGKjjWoutNkX2KpAihbEycsHc/tQ/rc3t2qDVhErN2Vzjd4Ug4GPHez8 VZqhkcZ1m2U+ZaSmJzobvVGsFkj0gr8tk1pj8/d5wLNPPg2F4A0SGCgL+Q+KLj3M FgPGgZV5rT+mzq+9Zarba68WydhrnBrwdAvW5PJZyX/WeM7rcHWt364HjwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKPfDX3gyvQkR3s/ausCxpSE4kOsMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvbzk4TmZlREs5Q1JIZXo5cTZ3TEdsSVRpUTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAG MA0GCSqGSIb3DQEBCwUAA4IBAQAdemC1RhAQDnK2SHI+zt54TeARZxwfOCyq9/7F RiEZaweB++YEhNtL0lSW/LAkydfiNpRUfXb+iCrwyAUUEy4jOc6PhOoUs7nidbeU tMY2fam27oNEY0vpN81HH7MDGADtEFw03sCH/SiXMEDBMdmfWvIcFyrgJiZghQTr nEqjIqzcICb9sSvrz4mUCiJAIBKClx/hH6/E7FVqu/W9SYmbkjIh8eX0NG3DHZSE qmFJEnA90TkEuyZhoStv75G40MjBJIImhPP2bksXk7ieG7S11s3Lu4ELm1BDO85j H9yerza8Dwv/qtheD+kJ4krh9MZjnbh2Xj5GLUb0JbBmSn13 -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:27 2026 by rpki-client