This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/o-popO9auROaiIHZBs-GFli-ZBg.roa File: o-popO9auROaiIHZBs-GFli-ZBg.roa (raw, json) Hash identifier: 3gA1UOiSr0PnnoNboQJZUsn/LeXSette67Qdwhw+aTc= Subject key identifier: A3:EA:68:A4:EF:5A:B9:13:9A:88:81:D9:06:CF:86:16:58:BE:64:18 Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Certificate serial: 019B7D5BAA3CAF7A6411417D4768D0E7B407 Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/o-popO9auROaiIHZBs-GFli-ZBg.roa Signing time: Fri 02 Jan 2026 06:18:37 +0000 ROA not before: Fri 02 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48095 IP address blocks: 77.83.164.0/23 maxlen: 23 77.83.166.0/23 maxlen: 23 80.65.220.0/22 maxlen: 22 185.228.216.0/22 maxlen: 22 194.15.104.0/23 maxlen: 23 194.15.106.0/23 maxlen: 23 195.242.208.0/22 maxlen: 22 212.115.60.0/23 maxlen: 23 212.115.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:aa:3c:af:7a:64:11:41:7d:47:68:d0:e7:b4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Validity Not Before: Jan 2 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3ea68a4ef5ab9139a8881d906cf861658be6418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:30:2e:5d:17:35:6e:fe:81:be:a9:c6:b6: 2b:66:db:4b:e9:2a:f0:67:07:a0:8d:5e:61:32:8d: 6f:90:83:d3:a3:ec:4b:3b:66:94:66:01:84:bb:01: 6d:60:f6:8d:90:e3:03:a7:e0:bc:cf:b2:56:d9:65: 83:9f:50:8a:a1:d8:b7:da:8f:db:7d:c1:8e:ff:18: b4:49:df:51:72:95:21:2f:2a:7b:4b:7d:2d:f3:5a: 0e:31:2e:a5:46:a8:52:1d:74:42:d2:c6:32:7d:94: d1:f9:a4:30:32:59:33:08:a4:61:36:21:46:cc:79: 07:cc:bd:61:d9:c7:fe:ae:29:1e:03:69:2d:02:93: da:6f:ec:b8:4f:5d:bd:86:a0:bb:e4:9c:57:8f:51: 64:ee:f4:d4:d0:38:81:06:88:e0:50:2a:e3:35:16: e1:62:11:24:82:42:e1:04:44:9f:81:5d:2c:e5:1d: b9:62:58:e5:89:56:b1:94:59:38:15:66:d2:48:40: ce:31:dc:c1:08:55:0d:8a:46:df:24:bd:b2:a2:6c: 73:f4:92:f7:cf:a3:47:2d:99:48:9a:d5:95:2f:13: 87:a7:56:40:7f:6a:f1:bc:95:75:21:d0:a2:3b:c5: 5a:fd:a9:cf:e4:c1:d7:58:74:86:43:9c:d9:3c:8c: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EA:68:A4:EF:5A:B9:13:9A:88:81:D9:06:CF:86:16:58:BE:64:18 X509v3 Authority Key Identifier: keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/o-popO9auROaiIHZBs-GFli-ZBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.164.0/22 80.65.220.0/22 185.228.216.0/22 194.15.104.0/22 195.242.208.0/22 212.115.60.0/22 Signature Algorithm: sha256WithRSAEncryption 68:90:3e:5f:24:bf:cf:a9:3d:13:dc:2e:50:cd:fb:e3:18:a7: 32:e1:62:76:bb:a1:2f:23:27:b0:6d:54:f9:dc:99:9c:b5:96: 2b:55:61:9d:36:a1:8c:ba:e7:df:d6:2c:81:c1:a0:b9:15:4c: 7e:1e:3f:bc:c2:a6:06:f0:31:2a:f7:9c:0e:77:d2:2c:ef:f0: b2:ad:ec:cf:b7:4c:e5:7d:77:20:e9:cd:fc:f1:41:9c:4c:a3: 41:c4:ca:97:5b:e9:8a:5a:39:95:79:e7:f0:e3:5d:db:71:9a: 92:66:a3:9e:a4:cb:90:9d:dd:62:6b:c0:33:cf:48:f1:4e:44: ad:6e:b7:8c:eb:71:aa:b0:d2:18:99:5e:aa:ac:29:89:55:e9: 46:b6:39:9f:7e:bb:91:f8:38:e8:fd:fa:49:cc:d3:13:58:f8: f5:45:51:ee:b3:21:ba:c5:f6:0a:12:bd:3a:97:e0:e5:ac:90: 8f:26:05:c7:51:f2:c5:04:e2:c2:13:58:71:b8:06:6d:04:1d: 98:63:5b:1b:e5:80:ab:2c:1c:be:e0:da:96:7e:8a:31:7e:92: 4e:e7:66:af:a3:6a:2c:2e:6c:2d:07:b9:af:bd:c3:45:3f:25: 94:c3:a1:50:33:e1:85:a6:a0:e6:1d:28:2a:60:ff:df:02:ec: 44:52:b5:69 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9W6o8r3pkEUF9R2jQ57QHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy YmE5NzYwHhcNMjYwMTAyMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2VhNjhhNGVmNWFiOTEzOWE4ODgxZDkwNmNmODYxNjU4YmU2NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaIwLl0XNW7+gb6pxrYrZttL6Srw ZwegjV5hMo1vkIPTo+xLO2aUZgGEuwFtYPaNkOMDp+C8z7JW2WWDn1CKodi32o/b fcGO/xi0Sd9RcpUhLyp7S30t81oOMS6lRqhSHXRC0sYyfZTR+aQwMlkzCKRhNiFG zHkHzL1h2cf+rikeA2ktApPab+y4T129hqC75JxXj1Fk7vTU0DiBBojgUCrjNRbh YhEkgkLhBESfgV0s5R25YljliVaxlFk4FWbSSEDOMdzBCFUNikbfJL2yomxz9JL3 z6NHLZlImtWVLxOHp1ZAf2rxvJV1IdCiO8Va/anP5MHXWHSGQ5zZPIwzTQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKPqaKTvWrkTmoiB2QbPhhZYvmQYMB8GA1UdIwQY MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct YTdjNTlkZGNmNzZiLzEvby1wb3BPOWF1Uk9haUlIWkJzLUdGbGktWkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCTVOkAwQC UEHcAwQCueTYAwQCwg9oAwQCw/LQAwQC1HM8MA0GCSqGSIb3DQEBCwUAA4IBAQBo kD5fJL/PqT0T3C5QzfvjGKcy4WJ2u6EvIyewbVT53JmctZYrVWGdNqGMuuff1iyB waC5FUx+Hj+8wqYG8DEq95wOd9Is7/CyrezPt0zlfXcg6c388UGcTKNBxMqXW+mK WjmVeefw413bcZqSZqOepMuQnd1ia8Azz0jxTkStbreM63GqsNIYmV6qrCmJVelG tjmffruR+Djo/fpJzNMTWPj1RVHusyG6xfYKEr06l+DlrJCPJgXHUfLFBOLCE1hx uAZtBB2YY1sb5YCrLBy+4NqWfooxfpJO52avo2osLmwtB7mvvcNFPyWUw6FQM+GF pqDmHSgqYP/fAuxEUrVp -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:21 2026 by rpki-client