This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Opa484uAlsVB9CtOuyZoIiqmIy8.roa File: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (raw, json) Hash identifier: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M= Subject key identifier: 3A:96:B8:F3:8B:80:96:C5:41:F4:2B:4E:BB:26:68:22:2A:A6:23:2F Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC060953697F17F6ADAED8150D7727 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Opa484uAlsVB9CtOuyZoIiqmIy8.roa Signing time: Thu 01 Jan 2026 14:17:49 +0000 ROA not before: Thu 01 Jan 2026 14:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44908 IP address blocks: 2a05:4140:3f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:06:09:53:69:7f:17:f6:ad:ae:d8:15:0d:77:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a96b8f38b8096c541f42b4ebb2668222aa6232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:4f:70:e5:03:ed:de:d9:38:e7:66:84:ef: 32:40:29:46:f7:53:c8:15:86:82:d4:d7:7d:3e:1c: 3a:cb:14:e3:ed:ce:a0:28:49:c9:af:15:91:8c:47: 5f:af:57:2f:ed:5a:9e:9a:4e:86:2b:e5:7f:b1:c1: a9:19:b3:10:a5:59:e4:3b:55:e7:af:d5:55:97:59: b2:8d:07:23:c9:6c:b8:e7:81:ff:45:d6:5c:a9:6f: 8c:71:e5:77:a3:a4:06:6b:a1:c4:b8:44:85:de:3b: 67:ae:fd:0c:2e:24:dd:63:ab:d3:9f:90:d4:08:f9: fc:e3:10:91:eb:c0:13:df:a2:5a:7b:bc:5f:89:1e: 6d:0b:f9:eb:16:fb:31:79:cf:68:0a:83:3b:69:e0: 20:19:94:ec:08:69:cc:1a:34:e0:94:77:bb:9c:3f: 05:6c:2d:47:d4:39:0c:ff:b8:24:f4:a7:9d:38:81: 90:57:bc:d0:be:7e:3d:a1:9e:6c:55:d9:14:c7:55: bb:f5:a1:58:78:25:a6:93:ea:33:97:76:12:76:14: 96:18:d4:7e:1d:17:fa:8d:62:56:46:5f:42:45:4b: 7f:60:41:11:7c:5e:cc:01:3c:a2:ae:04:3d:8c:41: b5:5a:13:e1:40:da:f6:7f:a0:72:39:d9:9a:c8:9d: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:B8:F3:8B:80:96:C5:41:F4:2B:4E:BB:26:68:22:2A:A6:23:2F X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Opa484uAlsVB9CtOuyZoIiqmIy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:3f0::/44 Signature Algorithm: sha256WithRSAEncryption 85:dd:ff:f8:08:f9:4b:dd:77:c4:c5:f2:0d:32:1c:12:3f:4c: 64:48:37:f1:16:5d:ea:59:3f:47:03:66:93:69:66:13:d8:d5: 37:4c:a7:67:e2:a5:8c:37:85:49:1d:a6:0c:d9:0e:a3:02:a7: b2:97:35:70:cd:40:f2:52:fe:63:9e:55:d0:db:1f:1f:ee:79: be:61:32:b1:99:20:95:3e:3b:57:26:6f:e3:64:34:3a:3a:22: b0:bb:0e:d5:82:5c:43:1a:eb:5c:43:ab:0d:63:db:1b:5a:ed: 6f:5a:b4:d3:47:b7:70:5e:d3:c2:73:30:9e:8a:f4:42:c7:e5: 50:64:85:02:d6:31:b7:b4:20:09:71:56:f1:b8:96:a8:e2:42: b3:6e:8e:8a:c6:73:0d:06:90:9d:07:30:e8:72:5f:df:03:0d: 00:68:b8:c1:15:f0:00:e2:2f:fa:3b:ca:14:1b:5b:95:b6:93: 0a:57:7b:70:44:df:94:7d:60:e0:dd:3d:f9:b4:03:92:30:4a: e8:83:b1:57:c2:3d:91:9d:be:1d:ad:f0:63:64:47:7d:da:4b: 6f:a3:21:1d:b2:c5:94:65:62:9e:61:2c:93:11:0f:33:d7:9a: 95:81:a5:ac:8b:be:7d:64:94:f2:e8:d4:55:a3:10:38:1f:3d: 7a:bf:16:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57AYJU2l/F/atrtgVDXcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk2YjhmMzhiODA5NmM1NDFmNDJiNGViYjI2NjgyMjJhYTYyMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fZPcOUD7d7ZOOdmhO8yQClG91PI FYaC1Nd9Phw6yxTj7c6gKEnJrxWRjEdfr1cv7Vqemk6GK+V/scGpGbMQpVnkO1Xn r9VVl1myjQcjyWy454H/RdZcqW+MceV3o6QGa6HEuESF3jtnrv0MLiTdY6vTn5DU CPn84xCR68AT36Jae7xfiR5tC/nrFvsxec9oCoM7aeAgGZTsCGnMGjTglHe7nD8F bC1H1DkM/7gk9KedOIGQV7zQvn49oZ5sVdkUx1W79aFYeCWmk+ozl3YSdhSWGNR+ HRf6jWJWRl9CRUt/YEERfF7MATyirgQ9jEG1WhPhQNr2f6ByOdmayJ3KlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDqWuPOLgJbFQfQrTrsmaCIqpiMvMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvT3BhNDg0dUFsc1ZCOUN0T3V5Wm9JaXFtSXk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgVBQAPw MA0GCSqGSIb3DQEBCwUAA4IBAQCF3f/4CPlL3XfExfINMhwSP0xkSDfxFl3qWT9H A2aTaWYT2NU3TKdn4qWMN4VJHaYM2Q6jAqeylzVwzUDyUv5jnlXQ2x8f7nm+YTKx mSCVPjtXJm/jZDQ6OiKwuw7VglxDGutcQ6sNY9sbWu1vWrTTR7dwXtPCczCeivRC x+VQZIUC1jG3tCAJcVbxuJao4kKzbo6KxnMNBpCdBzDocl/fAw0AaLjBFfAA4i/6 O8oUG1uVtpMKV3twRN+UfWDg3T35tAOSMErog7FXwj2Rnb4drfBjZEd92ktvoyEd ssWUZWKeYSyTEQ8z15qVgaWsi759ZJTy6NRVoxA4Hz16vxaC -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:40 2026 by rpki-client