This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa File: OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa (raw, json) Hash identifier: YresaaNN//tsTeKLfmj6Notknbb5CDEFkmcoLMPi/SQ= Subject key identifier: 38:F6:4A:0F:75:6D:D2:C4:C1:99:80:A4:ED:C0:8A:51:66:EB:18:A2 Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43 Certificate serial: 019B7F15F695F45C4E38778E086E94A9D044 Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44045 IP address blocks: 185.79.60.0/22 maxlen: 22 185.79.60.0/24 maxlen: 24 185.79.61.0/24 maxlen: 24 185.79.62.0/24 maxlen: 24 185.79.63.0/24 maxlen: 24 2a05:7200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f6:95:f4:5c:4e:38:77:8e:08:6e:94:a9:d0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38f64a0f756dd2c4c19980a4edc08a5166eb18a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:03:3d:fb:bd:cf:72:be:dc:e8:86:72:bd: 9d:71:97:a6:5d:2f:ac:c5:b9:2f:65:f7:4c:17:6e: df:f9:dd:5e:19:b1:cb:dd:c4:3e:d4:32:cf:cd:f8: 96:77:e3:c4:f7:4f:37:57:16:04:a4:54:53:aa:41: 1a:b4:b3:2a:43:de:d1:53:11:30:2e:87:78:13:58: f5:03:24:99:f0:cb:8b:bc:74:6e:d9:24:f6:21:cf: d7:67:99:f0:7a:97:e4:8a:1c:9c:ab:18:43:8c:8f: 7d:11:4b:3d:dc:f3:49:2e:99:19:e6:2f:e3:5e:fe: 98:ea:6c:c6:0e:23:c5:b2:af:3b:45:c1:a5:50:cd: 04:0b:df:83:8e:75:94:6a:ad:81:ad:45:fb:88:d0: e0:85:ca:17:58:a9:5a:a9:5c:64:f4:dc:eb:0d:65: 4b:fe:b5:58:2d:ab:d5:61:ce:cb:08:e8:5a:1f:04: 70:03:3b:5e:b5:84:14:7d:e0:50:76:5d:bf:db:5f: ff:59:e6:17:05:69:39:54:8f:01:c7:c3:f8:dd:2b: 23:05:ec:12:d9:47:a2:ea:0a:8c:fd:78:ef:fd:de: 24:ca:da:e8:3c:39:22:ea:05:fc:80:51:f3:11:2d: 3c:bf:f9:e6:d1:37:a0:b3:c3:cc:70:08:dd:97:ec: c2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F6:4A:0F:75:6D:D2:C4:C1:99:80:A4:ED:C0:8A:51:66:EB:18:A2 X509v3 Authority Key Identifier: keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.60.0/22 IPv6: 2a05:7200::/29 Signature Algorithm: sha256WithRSAEncryption 4b:e3:c1:7c:37:d7:a8:5e:fa:cc:1e:ac:ff:27:39:38:18:85: a3:47:f3:c8:94:b9:7f:b0:1e:32:04:2a:23:97:1a:b3:4f:24: 69:54:1d:09:d4:9c:9a:84:74:f6:62:a9:71:a4:00:64:5e:1b: fb:56:61:42:bd:65:34:ea:82:91:5c:ed:93:ab:d7:35:96:7c: e3:b5:cd:cf:3c:e5:22:6d:d8:e0:3a:64:c1:eb:83:49:25:5b: cb:fa:ca:49:05:1b:48:1b:b0:54:90:aa:8f:3d:60:17:8b:d3: b5:1f:2e:03:a7:60:f8:de:4f:0a:93:d4:6b:0b:4d:71:92:ff: 96:a2:16:ac:f7:be:ad:de:4f:ab:bc:7e:5c:94:68:88:59:56: 09:06:63:61:d6:bc:86:be:b0:ce:74:a4:f8:95:d5:f8:f6:0b: a6:03:64:01:eb:fb:4c:3e:68:3c:72:f8:e9:df:7e:ed:0f:12: fa:e9:27:96:b5:0d:ca:1b:ae:95:bf:f4:7e:c0:67:a7:3f:01: 88:ac:e3:7f:55:af:a4:20:80:ff:22:ea:f1:19:73:4a:75:f9: b7:82:f0:8b:d5:5b:27:13:ec:81:42:eb:41:e5:61:f3:24:d9: 24:a0:68:38:fc:51:b8:32:ef:89:0a:6a:f0:f4:bb:a0:29:a9: 3a:63:5a:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FfaV9FxOOHeOCG6UqdBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjVlNjU3NDljYWE1ZmJiNDkxZTkwNjk3N2RiMThkMzU1 OWJmNDMwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGY2NGEwZjc1NmRkMmM0YzE5OTgwYTRlZGMwOGE1MTY2ZWIxOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNMDPfu9z3K+3OiGcr2dcZemXS+s xbkvZfdMF27f+d1eGbHL3cQ+1DLPzfiWd+PE9083VxYEpFRTqkEatLMqQ97RUxEw Lod4E1j1AySZ8MuLvHRu2ST2Ic/XZ5nwepfkihycqxhDjI99EUs93PNJLpkZ5i/j Xv6Y6mzGDiPFsq87RcGlUM0EC9+DjnWUaq2BrUX7iNDghcoXWKlaqVxk9NzrDWVL /rVYLavVYc7LCOhaHwRwAztetYQUfeBQdl2/21//WeYXBWk5VI8Bx8P43SsjBewS 2Uei6gqM/Xjv/d4kytroPDki6gX8gFHzES08v/nm0Tegs8PMcAjdl+zCOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDj2Sg91bdLEwZmApO3AilFm6xiiMB8GA1UdIwQY MBaAFKBl5ldJyqX7tJHpBpd9sY01Wb9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMt MGVlODQ3ZDNmYjc5LzEvT1BaS0QzVnQwc1RCbVlDazdjQ0tVV2JyR0tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMtMGVlODQ3ZDNmYjc5 LzEvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuU88MA0E AgACMAcDBQMqBXIAMA0GCSqGSIb3DQEBCwUAA4IBAQBL48F8N9eoXvrMHqz/Jzk4 GIWjR/PIlLl/sB4yBCojlxqzTyRpVB0J1JyahHT2YqlxpABkXhv7VmFCvWU06oKR XO2Tq9c1lnzjtc3PPOUibdjgOmTB64NJJVvL+spJBRtIG7BUkKqPPWAXi9O1Hy4D p2D43k8Kk9RrC01xkv+Wohas976t3k+rvH5clGiIWVYJBmNh1ryGvrDOdKT4ldX4 9gumA2QB6/tMPmg8cvjp337tDxL66SeWtQ3KG66Vv/R+wGenPwGIrON/Va+kIID/ IurxGXNKdfm3gvCL1VsnE+yBQutB5WHzJNkkoGg4/FG4Mu+JCmrw9LugKak6Y1pr -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:25 2026 by rpki-client