This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/OpkXHZIicfHCPvft3PttWRGy66g.roa File: OpkXHZIicfHCPvft3PttWRGy66g.roa (raw, json) Hash identifier: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ= Subject key identifier: 3A:99:17:1D:92:22:71:F1:C2:3E:F7:ED:DC:FB:6D:59:11:B2:EB:A8 Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Certificate serial: 019B7DCAC331ABE082E896E2B8C530DEFF30 Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/OpkXHZIicfHCPvft3PttWRGy66g.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 77.74.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c3:31:ab:e0:82:e8:96:e2:b8:c5:30:de:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a99171d922271f1c23ef7eddcfb6d5911b2eba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:0d:3d:cd:65:b9:2f:03:b9:e7:73:5c:40: c3:7e:e8:4d:f7:a9:32:4b:33:02:09:6e:45:38:7e: e9:7a:fd:3b:6d:57:0f:96:50:7e:4a:7d:8b:c3:87: 6d:82:e8:e2:dc:68:2b:4f:d9:07:63:d6:cf:ff:df: ae:47:7f:7a:33:af:d7:97:05:c5:4f:0f:e5:3d:97: 0b:7b:3f:d1:8c:cf:35:ac:0d:61:9d:e9:a5:c0:2f: a6:a7:be:85:88:3d:08:47:d0:87:e5:0a:5d:ff:5b: 30:80:40:f5:a0:31:87:76:ba:97:53:b6:0e:d8:d0: 82:1b:b7:0a:c7:45:bc:d4:5f:6e:2e:17:7a:e0:40: fb:00:65:f2:a4:02:72:0a:64:e6:d3:f6:bf:61:ba: 51:cf:29:ae:32:e8:be:96:20:ba:25:e6:73:41:e6: 68:81:5a:d3:d8:b8:44:a9:ba:ce:45:28:e5:60:08: a0:58:44:64:d2:ce:14:09:1c:73:4a:b2:06:7f:25: 83:0b:11:a9:73:3f:e6:b9:7a:d3:88:2b:dc:68:b5: 8c:b5:4f:ca:c9:76:df:b5:69:94:8b:69:56:94:28: f3:b7:c6:3c:e1:e6:0a:8a:72:75:a4:53:a3:8f:e7: 97:40:bd:96:1a:71:f3:a3:86:52:43:0e:ff:00:d4: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:17:1D:92:22:71:F1:C2:3E:F7:ED:DC:FB:6D:59:11:B2:EB:A8 X509v3 Authority Key Identifier: keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/OpkXHZIicfHCPvft3PttWRGy66g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.158.0/23 Signature Algorithm: sha256WithRSAEncryption 65:1c:f5:46:55:7f:16:0e:10:19:7d:fb:54:e3:15:8c:41:89: 0a:42:2a:f0:b7:5a:37:26:96:06:6a:03:20:77:0e:6b:7f:03: 12:10:db:b3:43:7d:44:32:ab:2c:28:1a:d5:e8:b9:62:a8:47: c3:f3:f5:0d:fc:0d:22:49:de:88:79:e4:99:60:35:a6:b4:d8: b1:80:77:01:82:0e:54:0a:b0:2e:1b:27:10:a3:95:fe:af:0a: 17:88:a3:ef:00:37:cf:cf:82:5e:c0:19:e4:4b:45:56:a7:99: 5f:4a:b2:9e:cb:c1:b6:9f:69:6f:63:af:5e:8b:ce:c3:1e:1b: 31:7a:81:d9:e8:eb:5a:0d:41:d5:0a:d0:7e:8d:3b:38:7a:d9: 68:1a:df:34:7b:cb:b0:54:f3:6a:ed:57:f3:3c:ca:ae:67:3f: 54:fc:5e:52:b3:63:07:8a:f4:52:03:dc:73:95:f5:0b:92:e0: b2:c8:1c:1b:3a:7c:35:b7:24:6d:9d:bd:e9:7a:96:57:35:af: 3b:fb:94:3e:b6:0e:07:71:51:49:84:81:75:b8:28:01:11:d9: e8:09:23:fe:54:22:cd:b0:b1:04:ab:75:1f:dd:2e:5d:67:68: b8:72:79:5f:48:f4:30:99:b3:ee:b7:2d:47:da:42:16:e9:d9: 4e:18:cd:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysMxq+CC6JbiuMUw3v8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj NzkwYzkwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk5MTcxZDkyMjI3MWYxYzIzZWY3ZWRkY2ZiNmQ1OTExYjJlYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbkNPc1luS8DuedzXEDDfuhN96ky SzMCCW5FOH7pev07bVcPllB+Sn2Lw4dtguji3GgrT9kHY9bP/9+uR396M6/XlwXF Tw/lPZcLez/RjM81rA1hnemlwC+mp76FiD0IR9CH5Qpd/1swgED1oDGHdrqXU7YO 2NCCG7cKx0W81F9uLhd64ED7AGXypAJyCmTm0/a/YbpRzymuMui+liC6JeZzQeZo gVrT2LhEqbrORSjlYAigWERk0s4UCRxzSrIGfyWDCxGpcz/muXrTiCvcaLWMtU/K yXbftWmUi2lWlCjzt8Y84eYKinJ1pFOjj+eXQL2WGnHzo4ZSQw7/ANQK/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqZFx2SInHxwj737dz7bVkRsuuoMB8GA1UdIwQY MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt MDViM2U0MzFjMWVhLzEvT3BrWEhaSWljZkhDUHZmdDNQdHRXUkd5NjZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTUqeMA0G CSqGSIb3DQEBCwUAA4IBAQBlHPVGVX8WDhAZfftU4xWMQYkKQirwt1o3JpYGagMg dw5rfwMSENuzQ31EMqssKBrV6LliqEfD8/UN/A0iSd6IeeSZYDWmtNixgHcBgg5U CrAuGycQo5X+rwoXiKPvADfPz4JewBnkS0VWp5lfSrKey8G2n2lvY69ei87DHhsx eoHZ6OtaDUHVCtB+jTs4etloGt80e8uwVPNq7VfzPMquZz9U/F5Ss2MHivRSA9xz lfULkuCyyBwbOnw1tyRtnb3pepZXNa87+5Q+tg4HcVFJhIF1uCgBEdnoCSP+VCLN sLEEq3Uf3S5dZ2i4cnlfSPQwmbPuty1H2kIW6dlOGM0T -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:05 2026 by rpki-client