This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/opQiFkBqkVj4L844lKnzaIRQSzs.roa File: opQiFkBqkVj4L844lKnzaIRQSzs.roa (raw, json) Hash identifier: pr16BH5jtBeIewsVLh8sVivtAzs4fVPRiPHTfoJlwLc= Subject key identifier: A2:94:22:16:40:6A:91:58:F8:2F:CE:38:94:A9:F3:68:84:50:4B:3B Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca Certificate serial: 019B7C120910620C18F3B7C0DF2EECD0A261 Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/opQiFkBqkVj4L844lKnzaIRQSzs.roa Signing time: Fri 02 Jan 2026 00:18:35 +0000 ROA not before: Fri 02 Jan 2026 00:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.149.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:09:10:62:0c:18:f3:b7:c0:df:2e:ec:d0:a2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2942216406a9158f82fce3894a9f36884504b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:2d:ce:58:14:cd:9c:b5:d8:40:b6:ad:a0: 32:df:bf:98:dc:0c:ed:c3:40:87:0f:13:b7:dc:8a: 76:ee:a4:32:59:b2:15:06:bc:66:65:bf:0b:ea:f0: 35:74:8d:3c:2c:b8:06:02:24:f4:56:c6:5e:35:0c: 79:35:f5:0f:b8:6d:c2:09:f8:e8:c0:12:b2:37:17: 56:52:8b:92:b9:63:df:2b:a2:12:fe:e6:8f:b5:e0: ce:56:aa:4c:6d:5b:aa:a9:ec:fd:8a:19:5c:4e:fd: 8d:0b:02:3b:00:1e:d5:6a:5a:02:84:99:08:dd:7a: 78:9c:56:93:20:1c:69:79:6c:85:6d:da:c9:da:bf: a7:e9:0a:90:06:f3:c1:f6:bd:26:7c:03:fd:cc:a5: 4f:7e:e8:ee:6b:2e:45:be:60:be:0f:66:f4:df:c9: 4e:02:ea:0b:5b:7a:ff:1c:c5:de:30:01:4a:19:23: 19:51:15:c2:7b:ce:e5:c9:03:69:87:c1:6d:21:76: d8:ad:fe:2e:4f:f3:d2:16:8d:44:0b:de:bd:55:68: e1:c2:ee:07:5c:36:12:33:41:fe:5b:7f:c8:c1:18: 2e:ad:64:79:18:86:60:87:02:95:18:54:6c:bf:41: 17:3c:8f:de:21:3c:a5:d0:eb:4f:0b:64:9c:73:82: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:94:22:16:40:6A:91:58:F8:2F:CE:38:94:A9:F3:68:84:50:4B:3B X509v3 Authority Key Identifier: keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/opQiFkBqkVj4L844lKnzaIRQSzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.36.0/24 Signature Algorithm: sha256WithRSAEncryption 41:62:bf:01:6a:73:2a:2b:c0:98:aa:a9:8a:74:9e:b2:88:fd: 34:ca:34:74:9b:99:76:db:d1:11:6c:53:63:c8:58:93:e4:37: b4:e3:f0:f5:8b:77:58:7e:3f:cb:70:fd:de:06:f5:ff:b5:c4: 51:a0:6b:9b:b8:a9:c8:74:3c:dc:84:b4:f0:3f:b2:03:22:32: 29:9c:78:d9:3e:47:17:f7:59:70:3d:48:8e:6e:c2:52:2f:1b: 3e:f6:1b:37:fa:57:cc:1b:53:f2:c2:de:1d:b4:af:85:7d:f9: ac:18:8c:fb:4d:2a:dc:e1:a0:07:6c:9c:bb:f1:e0:31:3d:bb: 60:d4:b9:24:8a:76:80:26:05:19:ab:b4:f0:df:c7:78:42:02: af:85:06:5a:52:ac:f7:7c:9a:5b:a6:90:19:67:bf:ac:3c:64: c8:01:33:57:6a:af:e3:f3:90:b5:56:4b:02:cb:72:3f:18:d0: 93:02:46:7d:6e:9d:81:3b:5d:46:03:76:23:6f:46:b8:a0:c0: fb:89:8f:95:60:cb:f0:27:5e:e3:88:8b:70:7d:ba:1e:37:ca: 26:c1:76:fe:f0:ad:b1:b9:1f:be:dc:66:7b:2a:c1:61:0c:a5: 98:12:b8:40:1b:37:e3:99:57:2f:c5:a7:0d:df:80:32:fd:66: dd:51:59:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EgkQYgwY87fA3y7s0KJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4 NWNmY2EwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjk0MjIxNjQwNmE5MTU4ZjgyZmNlMzg5NGE5ZjM2ODg0NTA0YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4tzlgUzZy12EC2raAy37+Y3Azt w0CHDxO33Ip27qQyWbIVBrxmZb8L6vA1dI08LLgGAiT0VsZeNQx5NfUPuG3CCfjo wBKyNxdWUouSuWPfK6IS/uaPteDOVqpMbVuqqez9ihlcTv2NCwI7AB7ValoChJkI 3Xp4nFaTIBxpeWyFbdrJ2r+n6QqQBvPB9r0mfAP9zKVPfujuay5FvmC+D2b038lO AuoLW3r/HMXeMAFKGSMZURXCe87lyQNph8FtIXbYrf4uT/PSFo1EC969VWjhwu4H XDYSM0H+W3/IwRgurWR5GIZghwKVGFRsv0EXPI/eITyl0OtPC2Scc4IwdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKUIhZAapFY+C/OOJSp82iEUEs7MB8GA1UdIwQY MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt ZDNiOTBhOWI5YjQxLzEvb3BRaUZrQnFrVmo0TDg0NGxLbnphSVJRU3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUkMA0G CSqGSIb3DQEBCwUAA4IBAQBBYr8BanMqK8CYqqmKdJ6yiP00yjR0m5l229ERbFNj yFiT5De04/D1i3dYfj/LcP3eBvX/tcRRoGubuKnIdDzchLTwP7IDIjIpnHjZPkcX 91lwPUiObsJSLxs+9hs3+lfMG1Pywt4dtK+FffmsGIz7TSrc4aAHbJy78eAxPbtg 1LkkinaAJgUZq7Tw38d4QgKvhQZaUqz3fJpbppAZZ7+sPGTIATNXaq/j85C1VksC y3I/GNCTAkZ9bp2BO11GA3Yjb0a4oMD7iY+VYMvwJ17jiItwfboeN8omwXb+8K2x uR++3GZ7KsFhDKWYErhAGzfjmVcvxacN34Ay/WbdUVlP -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:55 2026 by rpki-client