This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4OpeKK4ATUIyGqsqHflFc3PZdzc.roa File: 4OpeKK4ATUIyGqsqHflFc3PZdzc.roa (raw, json) Hash identifier: ZdcoJXureivsNyGx2mL7FQ02OQsjJySiohLqoQT/NLw= Subject key identifier: E0:EA:5E:28:AE:00:4D:42:32:1A:AB:2A:1D:F9:45:73:73:D9:77:37 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37BF9125FDD961FCBB82BE988318A9 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4OpeKK4ATUIyGqsqHflFc3PZdzc.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 14.102.61.0/24 maxlen: 24 14.102.62.0/24 maxlen: 24 14.102.84.0/24 maxlen: 24 14.102.86.0/24 maxlen: 24 45.150.180.0/24 maxlen: 24 62.169.128.0/24 maxlen: 24 66.56.87.0/24 maxlen: 24 103.61.196.0/24 maxlen: 24 167.160.28.0/24 maxlen: 24 170.62.238.0/24 maxlen: 24 192.253.209.0/24 maxlen: 24 198.55.31.0/24 maxlen: 24 203.188.175.0/24 maxlen: 24 203.188.189.0/24 maxlen: 24 203.188.190.0/24 maxlen: 24 203.188.191.0/24 maxlen: 24 212.32.71.0/24 maxlen: 24 212.32.73.0/24 maxlen: 24 212.32.76.0/24 maxlen: 24 213.254.163.0/24 maxlen: 24 213.254.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bf:91:25:fd:d9:61:fc:bb:82:be:98:83:18:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0ea5e28ae004d42321aab2a1df9457373d97737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4e:de:85:1b:1a:f0:b9:88:79:22:60:41:c9: e5:7c:f4:eb:c6:34:f0:b8:01:ce:8f:67:00:90:5d: ce:e9:2f:be:0f:aa:e6:e1:68:2b:fd:6d:b1:46:0b: c4:e8:fa:dc:a8:7a:2f:82:05:0c:78:34:19:4f:bd: 4d:17:62:f4:34:fb:c3:b0:c2:79:a2:64:44:eb:d5: 40:05:5a:b1:ad:18:c2:5c:f5:be:44:4c:6f:2b:aa: c4:cb:27:00:81:36:90:55:3d:7f:9c:aa:b7:d6:cb: b3:f5:56:ae:88:0d:ee:75:ed:aa:b2:eb:c6:70:53: b5:0d:88:51:0c:4a:f7:07:6e:51:9e:d0:bf:10:e2: 7d:c9:95:61:c5:17:ca:ad:5b:a6:b5:1d:50:1b:5a: 71:4d:97:c5:80:fd:a3:b9:a9:5b:8b:07:56:b3:9a: 22:e7:90:b5:68:da:fb:d3:38:90:4e:7f:d3:26:95: 60:f6:0d:98:2f:07:32:75:d5:d7:ff:32:0d:88:58: d7:9d:a5:39:19:90:cc:3a:98:94:2f:27:d7:8e:14: 8f:1f:bd:f8:0f:1f:c0:55:f4:38:5a:60:f7:b8:d2: a3:c9:a1:24:7b:8b:84:5e:db:75:b2:d1:67:02:97: 20:f4:4a:d2:db:72:f3:6b:d8:7b:6c:97:e0:42:23: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:5E:28:AE:00:4D:42:32:1A:AB:2A:1D:F9:45:73:73:D9:77:37 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4OpeKK4ATUIyGqsqHflFc3PZdzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.61.0-14.102.62.255 14.102.84.0/24 14.102.86.0/24 45.150.180.0/24 62.169.128.0/24 66.56.87.0/24 103.61.196.0/24 167.160.28.0/24 170.62.238.0/24 192.253.209.0/24 198.55.31.0/24 203.188.175.0/24 203.188.189.0-203.188.191.255 212.32.71.0/24 212.32.73.0/24 212.32.76.0/24 213.254.163.0/24 213.254.175.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:26:88:30:b8:5d:9f:30:2a:b7:58:15:f4:3b:c0:29:7f:5b: 82:3d:ce:8a:13:59:5d:f6:dd:12:57:d5:72:76:a7:9c:9e:79: 40:b4:7b:5d:f5:32:79:27:6a:d8:c3:82:a3:be:27:b5:02:91: ef:a9:1d:61:88:23:8e:e9:37:89:02:13:9c:07:ea:b9:e6:ed: bd:aa:ab:ec:99:5f:3b:30:63:a9:4f:cb:29:f5:2c:8b:e9:33: 4d:26:a6:59:7c:fb:8e:17:5c:72:fa:78:78:2d:b4:00:ab:30: cc:3a:e5:27:24:df:82:31:7f:30:80:b0:0a:bb:d0:20:45:8c: ab:d6:87:6a:66:19:ca:f3:0e:0d:a5:df:6f:01:5f:3f:7d:38: ff:36:84:e1:87:95:8f:68:ff:5d:04:d4:c1:25:a5:19:d2:b2: 79:bd:39:0d:8b:a8:0e:7d:c4:98:51:72:63:bf:f9:00:ef:48: 54:06:06:6d:32:4d:1f:52:c9:89:96:da:72:54:b1:82:3c:4a: 0b:17:80:61:bc:d0:ab:39:b9:b1:e8:50:77:08:64:f8:f4:f4: 05:80:fc:e8:41:b2:9f:cb:72:ae:75:9b:5b:ad:d6:d8:db:73: 9e:a6:38:ef:ce:0d:c6:bb:a8:a1:54:32:09:b7:6c:46:df:20: 61:1e:7d:77 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt+N7+RJf3ZYfy7gr6YgxipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVhNWUyOGFlMDA0ZDQyMzIxYWFiMmExZGY5NDU3MzczZDk3NzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E7ehRsa8LmIeSJgQcnlfPTrxjTw uAHOj2cAkF3O6S++D6rm4Wgr/W2xRgvE6PrcqHovggUMeDQZT71NF2L0NPvDsMJ5 omRE69VABVqxrRjCXPW+RExvK6rEyycAgTaQVT1/nKq31suz9VauiA3ude2qsuvG cFO1DYhRDEr3B25RntC/EOJ9yZVhxRfKrVumtR1QG1pxTZfFgP2jualbiwdWs5oi 55C1aNr70ziQTn/TJpVg9g2YLwcyddXX/zINiFjXnaU5GZDMOpiULyfXjhSPH734 Dx/AVfQ4WmD3uNKjyaEke4uEXtt1stFnApcg9ErS23Lza9h7bJfgQiN8/wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFODqXiiuAE1CMhqrKh35RXNz2Xc3MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvNE9wZUtLNEFUVUl5R3FzcUhmbEZjM1BaZHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfDAMAwQA DmY9AwQADmY+AwQADmZUAwQADmZWAwQALZa0AwQAPqmAAwQAQjhXAwQAZz3EAwQA p6AcAwQAqj7uAwQAwP3RAwQAxjcfAwQAy7yvMAwDBADLvL0DBAbLvIADBADUIEcD BADUIEkDBADUIEwDBADV/qMDBADV/q8wDQYJKoZIhvcNAQELBQADggEBAFomiDC4 XZ8wKrdYFfQ7wCl/W4I9zooTWV323RJX1XJ2p5yeeUC0e131MnknatjDgqO+J7UC ke+pHWGII47pN4kCE5wH6rnm7b2qq+yZXzswY6lPyyn1LIvpM00mpll8+44XXHL6 eHgttACrMMw65Sck34IxfzCAsAq70CBFjKvWh2pmGcrzDg2l328BXz99OP82hOGH lY9o/10E1MElpRnSsnm9OQ2LqA59xJhRcmO/+QDvSFQGBm0yTR9SyYmW2nJUsYI8 SgsXgGG80Ks5ubHoUHcIZPj09AWA/OhBsp/Lcq51m1ut1tjbc56mOO/ODca7qKFU Mgm3bEbfIGEefXc= -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:40 2026 by rpki-client