This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/OpTtVKAksYNEjp3sCGLjB77TEtQ.roa File: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (raw, json) Hash identifier: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc= Subject key identifier: 3A:94:ED:54:A0:24:B1:83:44:8E:9D:EC:08:62:E3:07:BE:D3:12:D4 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019B7B3697C68C18F4CD400A4C3E0E0E73BC Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/OpTtVKAksYNEjp3sCGLjB77TEtQ.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.12.200.0/22 maxlen: 24 2a0e:bf00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:97:c6:8c:18:f4:cd:40:0a:4c:3e:0e:0e:73:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a94ed54a024b183448e9dec0862e307bed312d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:3e:c0:e8:f2:c3:19:2f:fb:47:e3:21:71: c9:7d:c2:da:80:03:01:a4:0e:3b:6d:3b:a0:09:ce: cd:82:a7:32:9d:b7:a2:fb:6c:6d:30:27:77:e3:d5: 12:6b:eb:6b:7f:d2:e2:a6:2f:06:dc:7c:96:df:75: 0b:49:9d:5d:67:b9:5a:a3:f2:fd:2b:48:c2:98:9f: c0:25:74:71:a1:4f:fe:19:b3:53:16:1c:34:ec:ff: 60:2c:30:05:95:17:bd:a6:6c:e2:ad:c0:4a:c1:5b: 1e:1f:81:3c:a5:28:83:b2:cd:af:70:60:48:08:ad: 6f:f0:9b:b8:67:65:f0:46:08:7e:0e:3d:8f:5e:b5: dd:c6:51:5d:28:bb:fb:05:40:03:59:7f:de:87:c5: b4:da:19:6d:50:82:b1:49:b2:ab:f8:80:3b:a5:e7: 70:91:4f:c7:56:ec:c2:7c:3d:71:db:d6:da:90:6f: 30:54:a6:5d:73:03:de:0c:63:e9:21:c2:2d:96:ef: bb:48:ec:a0:ca:cc:75:be:16:2c:bf:f4:fd:64:2c: 86:e5:d4:72:a0:60:dc:b8:45:30:10:b5:f6:e3:8e: 60:ef:3f:36:1a:c2:49:ec:bd:08:c5:a8:18:70:90: ea:ea:7a:17:8f:bd:a4:0c:4a:56:6e:5c:d3:eb:3d: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:94:ED:54:A0:24:B1:83:44:8E:9D:EC:08:62:E3:07:BE:D3:12:D4 X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/OpTtVKAksYNEjp3sCGLjB77TEtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.200.0/22 IPv6: 2a0e:bf00::/29 Signature Algorithm: sha256WithRSAEncryption 4a:ad:2d:9e:58:74:25:13:a3:62:e9:20:eb:ab:04:4b:77:9b: c3:40:96:be:e7:af:03:3e:ae:b7:02:06:c6:b6:1a:ca:d2:a5: 79:73:fa:07:1d:62:b6:e0:68:3a:7c:39:bc:6c:a1:c4:d6:6e: bd:7e:e2:f6:d7:f1:1a:01:d4:21:34:9a:8b:b4:1c:d6:68:d1: f5:f7:7c:e6:e9:bf:2a:5c:20:d8:9b:50:d4:02:74:07:d5:71: d5:7c:58:06:b7:94:b2:52:ea:c1:da:66:6a:62:b9:79:75:30: e4:fe:ca:99:72:dd:5c:37:cb:c7:1d:bb:e5:d4:c2:02:86:d1: 96:87:95:4e:2e:69:55:c7:7a:e7:17:0e:1e:25:8c:0b:98:72: 57:1b:35:2a:08:b5:30:d3:7b:0a:b0:0e:df:4e:97:79:75:df: ab:cf:cf:3e:ce:22:e6:83:a5:8f:4a:95:e7:bc:4c:b0:0f:31: 12:6d:47:e3:a3:af:f0:e1:a2:a8:79:a5:13:8b:9a:08:95:24: 58:19:11:1c:f8:07:ef:24:07:8c:40:53:e8:0e:06:fe:e0:32: e7:1c:3a:c4:9f:8d:de:e4:4c:99:ba:06:62:5b:fc:f2:f3:8f: 77:37:99:03:ea:15:21:89:17:c3:dd:a6:de:47:2a:db:b8:ca: e0:5e:94:30 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NpfGjBj0zUAKTD4ODnO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk0ZWQ1NGEwMjRiMTgzNDQ4ZTlkZWMwODYyZTMwN2JlZDMxMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1U+wOjywxkv+0fjIXHJfcLagAMB pA47bTugCc7Ngqcynbei+2xtMCd349USa+trf9Lipi8G3HyW33ULSZ1dZ7lao/L9 K0jCmJ/AJXRxoU/+GbNTFhw07P9gLDAFlRe9pmzircBKwVseH4E8pSiDss2vcGBI CK1v8Ju4Z2XwRgh+Dj2PXrXdxlFdKLv7BUADWX/eh8W02hltUIKxSbKr+IA7pedw kU/HVuzCfD1x29bakG8wVKZdcwPeDGPpIcItlu+7SOygysx1vhYsv/T9ZCyG5dRy oGDcuEUwELX2445g7z82GsJJ7L0IxagYcJDq6noXj72kDEpWblzT6z0OewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDqU7VSgJLGDRI6d7Ahi4we+0xLUMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvT3BUdFZLQWtzWU5FanAzc0NHTGpCNzdURXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQzIMA0E AgACMAcDBQMqDr8AMA0GCSqGSIb3DQEBCwUAA4IBAQBKrS2eWHQlE6Ni6SDrqwRL d5vDQJa+568DPq63AgbGthrK0qV5c/oHHWK24Gg6fDm8bKHE1m69fuL21/EaAdQh NJqLtBzWaNH193zm6b8qXCDYm1DUAnQH1XHVfFgGt5SyUurB2mZqYrl5dTDk/sqZ ct1cN8vHHbvl1MIChtGWh5VOLmlVx3rnFw4eJYwLmHJXGzUqCLUw03sKsA7fTpd5 dd+rz88+ziLmg6WPSpXnvEywDzESbUfjo6/w4aKoeaUTi5oIlSRYGREc+AfvJAeM QFPoDgb+4DLnHDrEn43e5EyZugZiW/zy8493N5kD6hUhiRfD3abeRyrbuMrgXpQw -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:58 2026 by rpki-client