This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/OapL7HyFK0X9wx4mL1edhbz25m0.roa File: OapL7HyFK0X9wx4mL1edhbz25m0.roa (raw, json) Hash identifier: f3Ysa7cBGNsoNSQJdM2JIeAtt87DP7/+oUJ9JxWPJ4k= Subject key identifier: 39:AA:4B:EC:7C:85:2B:45:FD:C3:1E:26:2F:57:9D:85:BC:F6:E6:6D Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7 Certificate serial: 019B7F82F8A31AF3156D84E33124FEFC83F2 Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/OapL7HyFK0X9wx4mL1edhbz25m0.roa Signing time: Fri 02 Jan 2026 16:20:48 +0000 ROA not before: Fri 02 Jan 2026 16:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48288 IP address blocks: 87.104.128.0/18 maxlen: 18 87.104.240.0/20 maxlen: 20 185.161.77.0/24 maxlen: 24 2a00:8200::/32 maxlen: 32 2a12:3d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f8:a3:1a:f3:15:6d:84:e3:31:24:fe:fc:83:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7 Validity Not Before: Jan 2 16:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39aa4bec7c852b45fdc31e262f579d85bcf6e66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:c1:f5:37:93:85:83:80:69:8b:28:6f:94: 96:94:68:81:c3:71:b2:ff:32:11:68:e0:25:e2:8e: 4f:82:0c:69:0a:07:d7:5e:26:8c:b6:42:45:e7:11: 7b:69:57:c6:da:3c:f0:95:91:98:db:6a:ad:79:1c: 53:82:7f:38:27:00:a4:b2:97:b1:3e:38:a9:b5:16: 19:64:5e:26:e4:01:17:47:fe:c7:bf:e0:c9:6b:8e: 07:37:07:71:fa:b9:d2:05:8a:bd:ca:65:e7:96:a1: 9b:86:20:73:45:2e:70:e9:06:1a:c2:24:e9:3d:f7: 64:dc:88:88:12:45:c2:cc:5e:1c:15:66:9c:00:1c: ed:16:71:0d:49:d9:81:41:de:b6:1f:d2:71:03:42: f8:9c:37:60:77:a2:93:05:95:0b:f6:cd:5c:28:1d: ba:4f:c9:80:28:c1:1d:1e:27:8d:f0:40:ef:40:ee: bd:ad:95:b1:1f:6a:ee:0d:e4:0d:20:60:01:67:50: 60:1c:c7:8b:3e:17:e8:3d:ea:67:11:1b:8d:3a:51: 45:de:68:bd:39:28:69:d8:be:fa:05:20:9a:95:13: fc:10:b5:bf:90:68:0c:b9:91:02:d8:f0:95:c7:6b: 84:6e:58:6b:8b:7f:70:3b:f6:49:90:62:a7:a5:fe: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AA:4B:EC:7C:85:2B:45:FD:C3:1E:26:2F:57:9D:85:BC:F6:E6:6D X509v3 Authority Key Identifier: keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/OapL7HyFK0X9wx4mL1edhbz25m0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.104.128.0/18 87.104.240.0/20 185.161.77.0/24 IPv6: 2a00:8200::/32 2a12:3d80::/29 Signature Algorithm: sha256WithRSAEncryption 95:c3:9a:24:ef:83:ac:6d:8f:1d:3c:2d:04:e7:16:63:3c:c5: 37:b8:a2:16:19:2e:51:6f:5f:92:04:64:a8:50:12:1d:39:84: 4d:92:c9:82:a6:b9:76:d2:91:89:6a:30:50:79:1e:ed:08:13: 79:ed:84:e4:20:ea:46:8e:f6:12:0b:b8:8f:83:f6:e1:30:22: b1:3d:fd:26:00:fa:37:24:e3:98:e8:cc:0d:99:e8:33:53:c4: 3b:c6:f8:33:dc:6f:6a:13:55:89:cc:c6:4a:37:67:14:07:d6: 8f:04:41:ae:bd:b1:8c:5a:d4:51:9c:50:7a:4d:55:b2:35:13: 71:8b:9c:23:4b:3f:3d:d8:ca:ee:5e:c4:bc:db:e2:3d:02:40: cc:23:d4:e8:e6:5e:f2:1d:fb:e9:ad:9a:6f:e3:94:d5:83:a8: 2a:ed:73:d4:83:e1:df:5b:ac:d3:d9:f9:e0:4b:1b:0a:11:26: 73:47:c2:5c:ba:cc:04:96:91:f7:96:58:ae:73:2c:b7:ee:3a: b4:7b:d5:c4:5e:66:39:fa:68:bd:c4:51:db:11:d7:10:30:70: 95:98:26:85:eb:7d:54:41:6a:2c:66:4b:88:45:ce:1f:36:c7: a5:d1:17:00:e9:86:cd:19:3d:94:f2:6b:a8:33:45:95:37:a2: c6:3a:75:30 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/gvijGvMVbYTjMST+/IPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz NjY3ZjcwHhcNMjYwMTAyMTYyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWFhNGJlYzdjODUyYjQ1ZmRjMzFlMjYyZjU3OWQ4NWJjZjZlNjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiPB9TeThYOAaYsob5SWlGiBw3Gy /zIRaOAl4o5PggxpCgfXXiaMtkJF5xF7aVfG2jzwlZGY22qteRxTgn84JwCkspex PjiptRYZZF4m5AEXR/7Hv+DJa44HNwdx+rnSBYq9ymXnlqGbhiBzRS5w6QYawiTp Pfdk3IiIEkXCzF4cFWacABztFnENSdmBQd62H9JxA0L4nDdgd6KTBZUL9s1cKB26 T8mAKMEdHieN8EDvQO69rZWxH2ruDeQNIGABZ1BgHMeLPhfoPepnERuNOlFF3mi9 OShp2L76BSCalRP8ELW/kGgMuZEC2PCVx2uEblhri39wO/ZJkGKnpf65PQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFDmqS+x8hStF/cMeJi9XnYW89uZtMB8GA1UdIwQY MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt Y2YxOTk3YzAyNTBkLzEvT2FwTDdIeUZLMFg5d3g0bUwxZWRoYnoyNW0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQGV2iAAwQE V2jwAwQAuaFNMBQEAgACMA4DBQAqAIIAAwUDKhI9gDANBgkqhkiG9w0BAQsFAAOC AQEAlcOaJO+DrG2PHTwtBOcWYzzFN7iiFhkuUW9fkgRkqFASHTmETZLJgqa5dtKR iWowUHke7QgTee2E5CDqRo72Egu4j4P24TAisT39JgD6NyTjmOjMDZnoM1PEO8b4 M9xvahNViczGSjdnFAfWjwRBrr2xjFrUUZxQek1VsjUTcYucI0s/PdjK7l7EvNvi PQJAzCPU6OZe8h376a2ab+OU1YOoKu1z1IPh31us09n54EsbChEmc0fCXLrMBJaR 95ZYrnMst+46tHvVxF5mOfpovcRR2xHXEDBwlZgmhet9VEFqLGZLiEXOHzbHpdEX AOmGzRk9lPJrqDNFlTeixjp1MA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:33 2026 by rpki-client