This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OPK3-MFQbx2Q03bXOh3O3LWrSTA.roa File: OPK3-MFQbx2Q03bXOh3O3LWrSTA.roa (raw, json) Hash identifier: jIraSHnkwsopR2praNHwzhyC64YTl4gIaVEu/byiWHc= Subject key identifier: 38:F2:B7:F8:C1:50:6F:1D:90:D3:76:D7:3A:1D:CE:DC:B5:AB:49:30 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758A9A2B0A94F6EFB9DA02B894D17C7 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OPK3-MFQbx2Q03bXOh3O3LWrSTA.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 46.29.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a9:a2:b0:a9:4f:6e:fb:9d:a0:2b:89:4d:17:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38f2b7f8c1506f1d90d376d73a1dcedcb5ab4930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:77:3e:bf:cd:9a:ab:7d:27:d0:a9:86:38: 77:6a:d0:96:09:f6:49:fe:77:ef:45:5a:97:22:36: f7:1c:50:12:1a:0c:a9:c4:80:b0:73:1b:35:83:59: a9:fc:7e:0c:c6:e7:a0:ae:62:77:72:47:96:a8:2a: 40:58:be:a1:18:aa:f3:c6:44:55:73:2b:74:17:41: db:95:a1:6a:ce:06:ab:d6:8a:93:c3:33:d1:fc:f5: 96:28:e0:32:e8:5b:a1:37:10:a2:d1:5e:6a:89:7f: 1f:83:ff:40:a3:3f:8b:0a:7a:c1:65:61:29:fa:e1: 60:e1:8f:e9:7c:a7:0e:9c:5f:38:63:82:e6:83:5f: 1f:3b:aa:b9:7f:ac:a6:ee:f0:c8:6a:da:33:7b:67: e6:58:dc:5e:5b:d7:b6:81:e1:6a:ac:c4:db:5f:ea: b2:4f:8e:44:e3:5d:25:21:14:a6:d5:21:da:a0:e2: 8b:fa:d2:b7:f1:2d:29:85:9a:61:22:6a:85:9b:3a: 89:67:97:0e:ca:6f:a0:e7:7a:31:64:49:65:c9:65: 7b:0f:ba:87:f3:28:c7:ac:b7:05:ee:16:0b:8f:48: 8a:07:e0:6e:25:1d:64:5d:ce:6d:c4:c2:09:5e:23: fa:4a:8f:1b:75:04:3f:19:39:7b:63:2e:92:6b:ce: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F2:B7:F8:C1:50:6F:1D:90:D3:76:D7:3A:1D:CE:DC:B5:AB:49:30 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OPK3-MFQbx2Q03bXOh3O3LWrSTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.24.0/24 Signature Algorithm: sha256WithRSAEncryption a6:11:3f:41:92:7b:12:37:46:96:06:59:b4:de:87:c7:37:d0: c1:23:1e:9b:be:58:e2:0d:8f:a7:db:88:e4:0f:27:25:94:0b: 69:1f:04:1d:a4:d5:c4:be:02:cd:f6:ba:4e:71:f0:d6:97:f7: 8d:89:bf:ac:60:7a:12:90:10:01:9c:f9:c3:23:d2:6a:09:ee: c7:1b:e3:94:86:f3:0d:a4:0d:88:2d:08:8c:af:f0:e5:79:a9: 55:ec:dd:32:dc:a2:bf:3f:81:35:27:88:2a:66:6e:cb:44:3d: 3b:51:68:1c:87:af:76:ea:0e:40:1c:67:bc:3b:9b:e5:2a:a7: 8c:50:00:ee:b3:fb:03:08:2c:2a:3e:40:eb:b7:86:45:5b:e9: 97:8c:6b:9c:db:5f:4c:8b:29:ea:d7:c7:5f:92:b3:e6:b3:6b: 5b:c1:a9:6c:6e:9e:fe:d5:e7:ca:2e:c6:f9:63:8a:62:6b:c3: 24:b6:41:0d:8d:5b:29:ff:92:a8:e6:2c:34:a7:64:67:e2:ca: 1f:00:51:0c:de:fc:9a:00:60:b2:4b:6d:51:0e:34:24:d7:3d: 2c:f4:1d:84:46:a9:ed:d0:87:71:5e:e9:15:3f:83:26:da:91: 14:4e:6e:4d:db:f9:55:08:0c:65:73:30:87:56:5f:53:44:c2: 04:08:dd:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKmisKlPbvudoCuJTRfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGYyYjdmOGMxNTA2ZjFkOTBkMzc2ZDczYTFkY2VkY2I1YWI0OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+p3Pr/Nmqt9J9Cphjh3atCWCfZJ /nfvRVqXIjb3HFASGgypxICwcxs1g1mp/H4MxuegrmJ3ckeWqCpAWL6hGKrzxkRV cyt0F0HblaFqzgar1oqTwzPR/PWWKOAy6FuhNxCi0V5qiX8fg/9Aoz+LCnrBZWEp +uFg4Y/pfKcOnF84Y4Lmg18fO6q5f6ym7vDIatoze2fmWNxeW9e2geFqrMTbX+qy T45E410lIRSm1SHaoOKL+tK38S0phZphImqFmzqJZ5cOym+g53oxZEllyWV7D7qH 8yjHrLcF7hYLj0iKB+BuJR1kXc5txMIJXiP6So8bdQQ/GTl7Yy6Sa87jZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjyt/jBUG8dkNN21zodzty1q0kwMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvT1BLMy1NRlFieDJRMDNiWE9oM08zTFdyU1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0YMA0G CSqGSIb3DQEBCwUAA4IBAQCmET9BknsSN0aWBlm03ofHN9DBIx6bvljiDY+n24jk DycllAtpHwQdpNXEvgLN9rpOcfDWl/eNib+sYHoSkBABnPnDI9JqCe7HG+OUhvMN pA2ILQiMr/DlealV7N0y3KK/P4E1J4gqZm7LRD07UWgch6926g5AHGe8O5vlKqeM UADus/sDCCwqPkDrt4ZFW+mXjGuc219Miynq18dfkrPms2tbwalsbp7+1efKLsb5 Y4pia8MktkENjVsp/5Ko5iw0p2Rn4sofAFEM3vyaAGCyS21RDjQk1z0s9B2ERqnt 0IdxXukVP4Mm2pEUTm5N2/lVCAxlczCHVl9TRMIECN2a -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:45 2026 by rpki-client