This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/aOPciO2i4pfhYNx8M-BLAat6K88.roa File: aOPciO2i4pfhYNx8M-BLAat6K88.roa (raw, json) Hash identifier: 23mtM/XEA4F6fUISXd4S0ZErct8gDmnUbBNFqEeBNOc= Subject key identifier: 68:E3:DC:88:ED:A2:E2:97:E1:60:DC:7C:33:E0:4B:01:AB:7A:2B:CF Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B77C6EB951093345F39B70C527A489A3D Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/aOPciO2i4pfhYNx8M-BLAat6K88.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30823 IP address blocks: 87.237.52.0/22 maxlen: 24 87.237.52.0/24 maxlen: 24 87.237.53.0/24 maxlen: 24 87.237.54.0/24 maxlen: 24 87.237.55.0/24 maxlen: 24 195.62.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:eb:95:10:93:34:5f:39:b7:0c:52:7a:48:9a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68e3dc88eda2e297e160dc7c33e04b01ab7a2bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:a4:4c:22:53:20:5b:11:8d:16:51:e0:91: 8d:96:87:ca:4b:95:46:8c:2d:68:9c:6d:57:4f:0d: 17:4c:4e:66:91:67:c2:c5:74:f7:fa:a8:1b:bf:02: 76:05:ce:37:10:23:b1:47:7c:60:2b:26:63:a3:24: 9f:d0:ce:e0:98:0c:44:68:c7:be:fa:be:10:35:18: 90:54:e4:0a:88:de:42:b0:f7:90:8e:c3:47:f9:40: 8f:42:54:ac:72:5f:6f:13:21:b1:9d:2e:99:fb:3b: d0:ba:44:6b:85:dc:29:5d:71:a7:93:56:7d:a5:b9: 55:6a:82:52:bf:57:2d:32:e4:14:ea:21:2b:30:0c: 0b:43:2f:b1:e7:7e:4d:62:28:25:df:6b:5f:0e:2e: 41:7e:aa:80:ad:e9:c0:a2:70:8a:38:6b:27:90:26: 05:f3:50:04:cd:1b:a1:e2:13:a8:cf:d7:cd:2d:24: 58:e8:d1:2b:3b:c6:fe:4f:2e:5b:6e:f4:30:2a:9e: 7f:55:d0:ef:ab:43:19:2f:c9:27:1d:56:06:c8:5e: 92:f8:74:f9:56:83:ff:79:bf:ce:dd:bc:7a:dc:f4: a2:08:59:13:8a:ce:25:43:73:96:de:4f:78:37:53: cb:64:ea:13:b4:c1:5f:a4:93:fa:73:bd:1f:7f:67: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:DC:88:ED:A2:E2:97:E1:60:DC:7C:33:E0:4B:01:AB:7A:2B:CF X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/aOPciO2i4pfhYNx8M-BLAat6K88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.52.0/22 195.62.33.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:ec:3f:18:be:76:23:44:c0:86:fd:71:e2:71:be:b0:a4:e7: 9e:1e:e0:9b:20:cd:12:fc:54:2d:36:cf:99:46:7b:f6:cd:ae: 35:7b:d0:71:5c:a8:1f:af:08:7f:0a:20:63:45:10:51:86:21: 74:8a:0f:dc:9e:9f:1d:11:be:f6:40:32:52:1b:ed:47:8b:7f: 05:96:c1:19:58:19:2a:e7:3f:54:10:8f:98:96:97:a8:3b:f9: 22:f0:27:65:cd:fd:8e:e9:9f:99:01:31:ed:d8:67:c2:66:9a: e0:08:f6:8c:84:01:0d:75:12:fa:5b:3c:16:3d:f7:31:56:1b: 8e:be:4e:55:ac:1c:48:23:f6:86:39:51:d6:50:3c:17:f2:a6: c1:fd:d8:aa:ed:c3:e2:39:e9:74:d0:ea:08:6f:64:98:b8:a0: 97:0e:b5:eb:f2:ad:cc:44:83:34:05:2b:43:a0:a9:7f:27:9a: 9c:02:c9:ac:5f:a0:94:ae:d0:45:f7:b8:10:10:12:66:8a:31: e3:fe:1e:46:dd:f8:4b:12:d8:ed:1f:fb:82:76:cf:c9:ea:0d: 10:e3:3d:b8:68:23:35:6b:0d:e7:18:21:64:7e:31:d5:fa:6d: 21:5f:7e:8f:d2:0e:d1:f7:83:8a:1d:3a:44:21:d3:f5:f5:a2: 6c:61:df:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuuVEJM0Xzm3DFJ6SJo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGUzZGM4OGVkYTJlMjk3ZTE2MGRjN2MzM2UwNGIwMWFiN2EyYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgGkTCJTIFsRjRZR4JGNlofKS5VG jC1onG1XTw0XTE5mkWfCxXT3+qgbvwJ2Bc43ECOxR3xgKyZjoySf0M7gmAxEaMe+ +r4QNRiQVOQKiN5CsPeQjsNH+UCPQlSscl9vEyGxnS6Z+zvQukRrhdwpXXGnk1Z9 pblVaoJSv1ctMuQU6iErMAwLQy+x535NYigl32tfDi5BfqqArenAonCKOGsnkCYF 81AEzRuh4hOoz9fNLSRY6NErO8b+Ty5bbvQwKp5/VdDvq0MZL8knHVYGyF6S+HT5 VoP/eb/O3bx63PSiCFkTis4lQ3OW3k94N1PLZOoTtMFfpJP6c70ff2cS6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGjj3IjtouKX4WDcfDPgSwGreivPMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvYU9QY2lPMmk0cGZoWU54OE0tQkxBYXQ2Szg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV+00AwQA wz4hMA0GCSqGSIb3DQEBCwUAA4IBAQCM7D8YvnYjRMCG/XHicb6wpOeeHuCbIM0S /FQtNs+ZRnv2za41e9BxXKgfrwh/CiBjRRBRhiF0ig/cnp8dEb72QDJSG+1Hi38F lsEZWBkq5z9UEI+YlpeoO/ki8Cdlzf2O6Z+ZATHt2GfCZprgCPaMhAENdRL6WzwW PfcxVhuOvk5VrBxII/aGOVHWUDwX8qbB/diq7cPiOel00OoIb2SYuKCXDrXr8q3M RIM0BStDoKl/J5qcAsmsX6CUrtBF97gQEBJmijHj/h5G3fhLEtjtH/uCds/J6g0Q 4z24aCM1aw3nGCFkfjHV+m0hX36P0g7R94OKHTpEIdP19aJsYd/l -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:37 2026 by rpki-client