This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/op3K6GZduC2KDDDM4nqJMijnyzg.roa File: op3K6GZduC2KDDDM4nqJMijnyzg.roa (raw, json) Hash identifier: 717khJV08/Xsj2zI2MejdnVhjMHlNmTLPlB1H3B4G+E= Subject key identifier: A2:9D:CA:E8:66:5D:B8:2D:8A:0C:30:CC:E2:7A:89:32:28:E7:CB:38 Certificate issuer: /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1 Certificate serial: 019C1F367E704FA554795E332DCFACC77A78 Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/op3K6GZduC2KDDDM4nqJMijnyzg.roa Signing time: Mon 02 Feb 2026 16:36:30 +0000 ROA not before: Mon 02 Feb 2026 16:36:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56950 IP address blocks: 185.136.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:36:7e:70:4f:a5:54:79:5e:33:2d:cf:ac:c7:7a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1 Validity Not Before: Feb 2 16:36:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a29dcae8665db82d8a0c30cce27a893228e7cb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:2d:a0:f9:2d:64:ef:a2:ca:69:c6:b5:92: 5a:7f:4f:ed:8e:74:60:4b:a6:29:7d:5a:08:8b:f1: 01:a2:e1:cf:05:02:87:96:6a:39:af:32:3f:54:f3: f9:c4:f5:18:e6:5d:5a:78:3f:20:55:35:35:8a:bc: e3:c0:2b:df:00:7e:cf:99:57:d8:db:14:d0:5a:db: cf:a0:02:10:ff:6d:a7:8a:6d:24:22:d8:5a:45:d2: 42:59:24:66:e5:b9:88:46:43:90:f2:fe:e1:44:b4: c4:da:19:e0:9f:b7:50:01:9e:a7:7b:29:2e:c2:ee: eb:d2:af:74:51:61:87:94:a1:00:b6:b7:fd:4c:9a: f4:fc:c3:ff:2d:2d:84:9a:3a:1f:b3:25:55:f8:81: 62:99:0f:55:5e:4f:dc:c8:8c:6d:40:0f:d7:46:6e: a6:54:2d:4a:9d:fb:a6:0f:95:c5:0d:6e:ac:b6:a9: b2:3b:ae:0d:ce:c3:7e:05:e0:21:82:6c:b3:cc:77: 03:8c:a0:0e:98:77:8e:b6:f3:ed:df:03:b0:1f:eb: e3:8a:a0:37:42:b2:1c:2d:cc:93:c5:b6:2f:6f:62: 4a:a3:f3:b6:86:39:88:e1:ca:11:20:50:d0:c4:0f: ab:98:a6:b1:ca:b3:bc:16:b5:9f:b0:4d:16:41:b8: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:CA:E8:66:5D:B8:2D:8A:0C:30:CC:E2:7A:89:32:28:E7:CB:38 X509v3 Authority Key Identifier: keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/op3K6GZduC2KDDDM4nqJMijnyzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.242.0/24 Signature Algorithm: sha256WithRSAEncryption bc:93:59:41:10:f8:dc:a7:8d:29:11:14:6e:bf:b6:0b:78:cc: 2e:60:59:94:71:61:16:a7:9d:f7:05:83:49:57:b6:8e:a7:53: 5f:bb:5b:c5:0a:b5:1f:de:97:2c:a4:12:df:09:61:63:3d:88: 43:ef:5b:4f:a4:a3:c3:12:ad:39:6b:bf:20:98:05:91:b8:e2: cf:4f:cc:ae:ad:3e:06:ba:2e:da:f0:d6:81:67:37:81:cd:15: fd:4a:e4:28:f4:96:43:f9:1e:5c:3e:0d:96:38:58:de:38:40: f6:72:b1:28:69:ac:df:11:51:33:52:f0:e4:63:70:43:de:ee: 91:cf:d1:12:a3:c6:c7:76:5d:08:5b:ca:66:08:9d:44:f2:0e: d7:b4:1e:8c:3c:2e:0f:30:d1:4c:ff:e4:70:c8:4f:6c:7e:71: 8c:c0:4b:ae:e2:d1:e6:ac:c7:29:79:8e:e5:28:44:1d:cf:37: e8:d4:03:77:b1:b0:37:b3:96:c0:d5:a9:ab:ea:95:7f:09:e1: 2e:3c:ff:08:ed:1f:15:a5:4c:c8:15:ed:c8:c3:8b:27:85:b0: dc:fb:bc:36:d1:0f:39:32:4f:f2:43:bc:26:3b:20:11:21:40: a2:68:22:09:c0:d4:cd:d9:3f:43:0d:db:71:12:e4:fa:2e:f6: dc:c6:f1:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwfNn5wT6VUeV4zLc+sx3p4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzQ4ZDgzYWE2M2MwZjgxY2U3MTk1Zjg2NjllM2I3ODZj NjAyYTEwHhcNMjYwMjAyMTYzNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjlkY2FlODY2NWRiODJkOGEwYzMwY2NlMjdhODkzMjI4ZTdjYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzktoPktZO+iymnGtZJaf0/tjnRg S6YpfVoIi/EBouHPBQKHlmo5rzI/VPP5xPUY5l1aeD8gVTU1irzjwCvfAH7PmVfY 2xTQWtvPoAIQ/22nim0kIthaRdJCWSRm5bmIRkOQ8v7hRLTE2hngn7dQAZ6neyku wu7r0q90UWGHlKEAtrf9TJr0/MP/LS2EmjofsyVV+IFimQ9VXk/cyIxtQA/XRm6m VC1KnfumD5XFDW6stqmyO64NzsN+BeAhgmyzzHcDjKAOmHeOtvPt3wOwH+vjiqA3 QrIcLcyTxbYvb2JKo/O2hjmI4coRIFDQxA+rmKaxyrO8FrWfsE0WQbhrRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKdyuhmXbgtigwwzOJ6iTIo58s4MB8GA1UdIwQY MBaAFJo0jYOqY8D4HOcZX4Zp47eGxgKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpTTmc2cGp3UGdjNXhsZmhtbmp0NGJHQXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mY2E2YzQtZTJkYi00YjliLWFjMzEt NzNkOGRiNGVkN2RiLzEvb3AzSzZHWmR1QzJLRERETTRucUpNaWpueXpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9mY2E2YzQtZTJkYi00YjliLWFjMzEtNzNkOGRiNGVkN2Ri LzEvbWpTTmc2cGp3UGdjNXhsZmhtbmp0NGJHQXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYjyMA0G CSqGSIb3DQEBCwUAA4IBAQC8k1lBEPjcp40pERRuv7YLeMwuYFmUcWEWp533BYNJ V7aOp1Nfu1vFCrUf3pcspBLfCWFjPYhD71tPpKPDEq05a78gmAWRuOLPT8yurT4G ui7a8NaBZzeBzRX9SuQo9JZD+R5cPg2WOFjeOED2crEoaazfEVEzUvDkY3BD3u6R z9ESo8bHdl0IW8pmCJ1E8g7XtB6MPC4PMNFM/+RwyE9sfnGMwEuu4tHmrMcpeY7l KEQdzzfo1AN3sbA3s5bA1amr6pV/CeEuPP8I7R8VpUzIFe3Iw4snhbDc+7w20Q85 Mk/yQ7wmOyARIUCiaCIJwNTN2T9DDdtxEuT6LvbcxvG7 -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:06 2026 by rpki-client