This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/OPTZ--metoE31gQg_Kb2TtGMPZs.roa File: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (raw, json) Hash identifier: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s= Subject key identifier: 38:F4:D9:FB:E9:9E:B6:81:37:D6:04:20:FC:A6:F6:4E:D1:8C:3D:9B Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019B7AC7DF02E97B6A2EC7C89AAFBB831C85 Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/OPTZ--metoE31gQg_Kb2TtGMPZs.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207567 IP address blocks: 213.165.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:df:02:e9:7b:6a:2e:c7:c8:9a:af:bb:83:1c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38f4d9fbe99eb68137d60420fca6f64ed18c3d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:9d:0f:87:4d:b2:b1:d2:f0:ac:20:70:b7: 3a:9b:79:9a:1d:dc:8c:c0:29:d5:95:40:7d:78:b4: 5b:55:95:a0:cb:7f:60:d1:a7:8f:91:0f:9c:c7:1f: 97:d8:31:75:29:54:a5:73:e4:38:7e:9c:a5:b3:76: 3b:1c:07:f2:bd:05:94:75:f6:65:61:53:a6:63:bf: ed:f1:88:65:00:6c:ca:bf:74:e3:89:6b:01:cd:25: 0d:5f:68:bd:b2:09:b3:9c:42:fb:3b:89:cb:96:59: cf:36:9d:61:9d:4f:f1:2b:63:69:9e:a8:11:79:a3: 49:3a:8d:10:9a:95:5b:17:d0:c0:eb:34:3b:5f:91: 8f:5f:9c:00:a8:dd:1f:29:3e:0e:35:25:f5:5c:d9: a3:f2:09:09:ee:8c:f8:53:a0:67:c0:35:85:d4:99: 8d:d6:e1:30:ee:03:b8:6a:76:79:2b:dc:be:c0:37: b3:c5:3e:d1:87:a3:bd:c3:6a:5a:76:f4:6c:9d:1a: f1:25:0e:8a:27:71:56:91:59:2e:d0:8e:07:54:75: 6f:e3:45:07:cc:8a:13:2b:16:29:5a:cd:0d:47:12: 27:8f:a0:54:fe:7a:41:ad:c3:06:c2:31:12:c1:2b: e4:19:66:9e:fb:18:e7:b7:85:65:dc:23:6c:5c:c5: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:D9:FB:E9:9E:B6:81:37:D6:04:20:FC:A6:F6:4E:D1:8C:3D:9B X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/OPTZ--metoE31gQg_Kb2TtGMPZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.53.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a5:56:28:04:bd:76:ce:cc:06:d0:45:20:c2:aa:08:2e:2c: 90:c3:67:aa:5e:07:5d:af:18:1c:03:85:89:4c:e3:67:69:3e: ad:53:3a:cc:a7:95:7c:7c:a6:81:89:d0:ad:93:dd:e4:80:fe: d7:a0:64:40:b8:04:72:97:3e:7b:b9:57:52:10:41:44:35:7d: 37:ca:29:ac:eb:d8:7f:56:92:1f:5f:23:99:9c:c5:4b:92:35: f5:35:6d:30:34:f2:d2:29:74:5b:26:aa:22:d5:80:c6:4f:64: c9:6b:a5:c7:f8:00:60:ab:79:53:2b:a9:de:1e:06:79:60:dd: b7:14:31:76:c0:39:56:92:4b:3d:f6:cf:9f:e0:87:b6:9b:1b: 85:1d:ad:b6:ab:9d:68:87:b4:ea:52:2d:b4:32:d8:51:c6:a7: 7e:b9:f0:ab:64:00:07:0b:7a:f4:aa:43:10:57:4a:cc:01:0b: 9f:db:ba:d2:cb:08:98:af:ee:16:fc:2f:7f:1d:d7:04:48:3f: 90:ae:1e:89:09:8c:08:d6:d0:29:a8:9a:22:8b:42:55:24:49: 37:42:24:5d:30:15:6c:67:b2:6d:a5:ca:0c:76:b3:99:6f:71: 23:72:15:e6:c4:81:91:41:32:f5:74:4b:ca:e5:f1:37:d7:32: 04:77:58:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x98C6XtqLsfImq+7gxyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGY0ZDlmYmU5OWViNjgxMzdkNjA0MjBmY2E2ZjY0ZWQxOGMzZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbqdD4dNsrHS8KwgcLc6m3maHdyM wCnVlUB9eLRbVZWgy39g0aePkQ+cxx+X2DF1KVSlc+Q4fpyls3Y7HAfyvQWUdfZl YVOmY7/t8YhlAGzKv3TjiWsBzSUNX2i9sgmznEL7O4nLllnPNp1hnU/xK2NpnqgR eaNJOo0QmpVbF9DA6zQ7X5GPX5wAqN0fKT4ONSX1XNmj8gkJ7oz4U6BnwDWF1JmN 1uEw7gO4anZ5K9y+wDezxT7Rh6O9w2padvRsnRrxJQ6KJ3FWkVku0I4HVHVv40UH zIoTKxYpWs0NRxInj6BU/npBrcMGwjESwSvkGWae+xjnt4Vl3CNsXMUpqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDj02fvpnraBN9YEIPym9k7RjD2bMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvT1BUWi0tbWV0b0UzMWdRZ19LYjJUdEdNUFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aU1MA0G CSqGSIb3DQEBCwUAA4IBAQBzpVYoBL12zswG0EUgwqoILiyQw2eqXgddrxgcA4WJ TONnaT6tUzrMp5V8fKaBidCtk93kgP7XoGRAuARylz57uVdSEEFENX03yims69h/ VpIfXyOZnMVLkjX1NW0wNPLSKXRbJqoi1YDGT2TJa6XH+ABgq3lTK6neHgZ5YN23 FDF2wDlWkks99s+f4Ie2mxuFHa22q51oh7TqUi20MthRxqd+ufCrZAAHC3r0qkMQ V0rMAQuf27rSywiYr+4W/C9/HdcESD+Qrh6JCYwI1tApqJoii0JVJEk3QiRdMBVs Z7JtpcoMdrOZb3EjchXmxIGRQTL1dEvK5fE31zIEd1hu -----END CERTIFICATE-----Generated at Wed Jan 21 08:18:39 2026 by rpki-client