This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/oPPgaBYxfthIjxyRNKKvuQhADcA.roa File: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (raw, json) Hash identifier: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k= Subject key identifier: A0:F3:E0:68:16:31:7E:D8:48:8F:1C:91:34:A2:AF:B9:08:40:0D:C0 Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019B7F1584C91A53E0C735747E8BE7393C0D Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/oPPgaBYxfthIjxyRNKKvuQhADcA.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59245 IP address blocks: 78.111.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:c9:1a:53:e0:c7:35:74:7e:8b:e7:39:3c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f3e06816317ed8488f1c9134a2afb908400dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2a:28:22:91:78:cb:93:5f:fe:01:60:86:84: 61:5e:23:23:ef:15:c4:47:fa:d8:60:98:8d:99:73: 39:80:51:7e:b2:4f:d4:b8:18:94:62:d5:59:c6:ae: 0f:4f:87:ac:86:69:84:e3:1b:a2:54:5f:7f:c5:53: 6b:7f:4a:a4:ce:3e:95:c2:2e:23:b8:ae:1d:e9:6b: a5:7c:47:8a:d4:55:69:f0:70:53:47:a9:3f:35:2a: dd:72:b6:1e:b4:0a:0d:90:35:c5:b3:a8:03:bc:63: ca:06:68:b0:b6:dc:be:8e:9b:83:32:99:a5:33:f6: 4e:7c:d1:ae:56:de:52:16:f9:0f:d5:90:f1:06:c6: 32:09:5f:2d:93:fa:c8:ba:fb:79:68:ad:9d:cd:8f: c7:cc:97:83:e0:d4:58:e6:2d:e0:cd:1f:02:66:73: 5f:ab:91:92:95:93:d2:fb:8a:6d:53:8a:81:74:72: 64:3b:8c:0b:76:12:b0:95:fb:b4:d9:ea:e0:72:c5: 2d:8b:7d:63:6a:0d:40:5b:ca:1d:56:ec:f6:3c:3a: 47:e2:ea:c7:3a:75:6a:08:6a:b9:a6:bf:64:cd:e9: 66:6a:a7:ed:80:a2:64:8e:a5:65:f2:13:d0:1a:6e: ec:7d:6c:f0:76:ad:48:b7:63:ad:2e:9e:33:0b:77: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F3:E0:68:16:31:7E:D8:48:8F:1C:91:34:A2:AF:B9:08:40:0D:C0 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/oPPgaBYxfthIjxyRNKKvuQhADcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.101.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:4a:98:21:98:e5:1c:00:c9:1a:1d:a6:d8:97:6e:cd:d8:78: 08:de:2f:8a:41:c3:7e:57:3d:25:15:65:91:b4:be:92:65:26: a6:52:6d:d9:c9:76:b8:fb:b1:ba:22:5e:9f:a5:7e:8b:78:bf: 11:7e:b9:e9:b8:ff:88:7b:f0:fb:a6:a9:50:77:ab:6c:2b:42: 2e:a9:19:3a:b1:f3:60:03:e1:d3:18:1c:59:a7:e7:1d:67:9b: b4:56:a1:4e:96:4f:37:7c:87:76:81:d4:2a:ea:77:22:9a:a2: 3d:39:3b:93:6d:cb:59:e0:8b:d8:6c:76:18:71:80:39:92:90: 04:48:16:36:cc:6b:a1:02:68:50:07:fd:5b:ab:fc:ed:f3:43: 00:36:fa:46:1c:28:1d:92:03:c3:17:b3:e5:2c:bd:90:2d:db: 3a:fb:bf:04:8b:da:0a:b7:7b:86:7f:26:f1:30:94:0d:26:9a: 6d:6c:73:eb:64:82:e1:7c:5b:c2:6a:df:89:b6:0a:51:ca:16: 8a:94:82:20:1e:5d:1a:ee:61:b8:4b:e0:19:0e:dd:8a:88:95: f0:9a:23:d7:a2:38:33:80:4b:70:da:21:3a:d6:ad:52:3a:78: 11:d7:7e:5d:6b:77:7a:d9:0d:f3:f2:d6:a0:56:ed:aa:5e:23: 7e:ab:30:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYTJGlPgxzV0fovnOTwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGYzZTA2ODE2MzE3ZWQ4NDg4ZjFjOTEzNGEyYWZiOTA4NDAwZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CooIpF4y5Nf/gFghoRhXiMj7xXE R/rYYJiNmXM5gFF+sk/UuBiUYtVZxq4PT4eshmmE4xuiVF9/xVNrf0qkzj6Vwi4j uK4d6WulfEeK1FVp8HBTR6k/NSrdcrYetAoNkDXFs6gDvGPKBmiwtty+jpuDMpml M/ZOfNGuVt5SFvkP1ZDxBsYyCV8tk/rIuvt5aK2dzY/HzJeD4NRY5i3gzR8CZnNf q5GSlZPS+4ptU4qBdHJkO4wLdhKwlfu02ergcsUti31jag1AW8odVuz2PDpH4urH OnVqCGq5pr9kzelmaqftgKJkjqVl8hPQGm7sfWzwdq1It2OtLp4zC3e14wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDz4GgWMX7YSI8ckTSir7kIQA3AMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvb1BQZ2FCWXhmdGhJanh5Uk5LS3Z1UWhBRGNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATm9lMA0G CSqGSIb3DQEBCwUAA4IBAQCbSpghmOUcAMkaHabYl27N2HgI3i+KQcN+Vz0lFWWR tL6SZSamUm3ZyXa4+7G6Il6fpX6LeL8RfrnpuP+Ie/D7pqlQd6tsK0IuqRk6sfNg A+HTGBxZp+cdZ5u0VqFOlk83fId2gdQq6ncimqI9OTuTbctZ4IvYbHYYcYA5kpAE SBY2zGuhAmhQB/1bq/zt80MANvpGHCgdkgPDF7PlLL2QLds6+78Ei9oKt3uGfybx MJQNJpptbHPrZILhfFvCat+JtgpRyhaKlIIgHl0a7mG4S+AZDt2KiJXwmiPXojgz gEtw2iE61q1SOngR135da3d62Q3z8tagVu2qXiN+qzBF -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:02 2026 by rpki-client