This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/OpL-pa8NL900kH8xzWl5YjvThJY.roa File: OpL-pa8NL900kH8xzWl5YjvThJY.roa (raw, json) Hash identifier: vlDt2SoHGnTYLb5raTfW4h1Lk0nI8+h/wkbguuhzWkQ= Subject key identifier: 3A:92:FE:A5:AF:0D:2F:DD:34:90:7F:31:CD:69:79:62:3B:D3:84:96 Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd Certificate serial: 019B7D5CD69F48CF737E8E8B126407A04536 Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/OpL-pa8NL900kH8xzWl5YjvThJY.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199306 IP address blocks: 185.160.76.0/24 maxlen: 24 185.160.77.0/24 maxlen: 24 2a01:fa80::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d6:9f:48:cf:73:7e:8e:8b:12:64:07:a0:45:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a92fea5af0d2fdd34907f31cd6979623bd38496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:1f:e0:f3:a3:17:0d:65:f7:c6:a4:28:90: 89:b8:1b:0d:8a:2d:ab:b1:cd:e2:4e:9f:a2:86:8a: ef:e9:0c:6a:03:80:9a:11:5e:f5:54:33:c5:f8:13: ce:1c:92:c9:6f:65:33:51:20:54:4b:d4:5f:42:04: f6:fd:1f:53:a1:aa:e5:41:56:4e:be:67:a3:12:76: ad:89:02:57:4e:3a:37:9b:54:01:1a:c4:d4:19:39: 63:aa:9e:c1:a9:c9:1d:90:04:db:94:88:76:fa:f4: 17:43:2d:18:97:ba:4f:32:f6:48:48:1a:dd:f3:b9: 78:46:83:3d:95:58:f3:4a:c7:e3:f7:3e:cf:6a:e3: 15:ab:4c:73:d6:71:5e:8f:9c:f5:b6:34:04:ba:14: 10:bb:ba:e6:14:2d:da:f4:3b:37:86:1e:a7:a4:b7: 32:d6:68:f2:e0:ed:09:00:34:df:51:6e:01:b9:56: 69:94:9c:86:d5:f6:d8:1c:57:1d:ac:45:5e:c6:31: 0e:3a:b4:3e:06:a9:e5:2f:73:40:d2:6c:b8:69:3b: c2:cf:2f:dd:98:a2:2a:f7:63:1e:b4:a8:a5:36:49: 0f:a7:96:bc:14:7e:86:37:a5:47:9a:ed:0e:8b:d9: 52:5a:f3:18:ee:1b:c7:57:78:48:9d:67:18:10:cd: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:92:FE:A5:AF:0D:2F:DD:34:90:7F:31:CD:69:79:62:3B:D3:84:96 X509v3 Authority Key Identifier: keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/OpL-pa8NL900kH8xzWl5YjvThJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.76.0/23 IPv6: 2a01:fa80::/30 Signature Algorithm: sha256WithRSAEncryption 22:bf:7f:fb:99:17:ff:d1:e4:3f:4c:a0:7b:52:1f:1a:ac:4d: f5:cd:52:ee:b7:7b:e0:5d:68:2d:db:32:73:86:d6:e5:18:15: c7:83:a1:42:04:51:54:b6:f1:d8:3a:cf:cf:04:88:95:60:f3: ef:f4:e0:86:ea:9b:8a:62:6d:31:4c:92:8a:17:3a:48:35:30: 4e:92:dd:ef:f7:ed:15:56:83:65:55:4d:dd:d4:f0:f0:f1:ec: 5c:89:b9:a8:c3:72:6d:47:b4:67:aa:2b:5b:ab:12:83:8f:1b: a2:76:4e:d9:88:73:c7:0e:8b:a5:7b:ab:35:bf:1d:4e:d9:4a: 3b:0c:e0:28:48:1b:f9:da:22:ce:ed:de:ad:b5:52:3a:c4:5c: a4:ca:87:15:91:b4:9b:af:ed:07:2a:e0:0b:91:33:30:f7:5b: b7:1e:44:ba:fe:8e:4f:d1:a9:eb:32:22:4c:81:df:09:74:cd: 42:4d:e1:89:94:7e:13:69:21:fc:ba:19:88:dc:a9:3a:5d:55: 7e:44:ab:2b:fd:9a:57:ee:81:ff:78:d0:9f:fd:48:e1:f7:0a: 93:3d:36:07:f7:a0:3c:5f:8a:22:25:31:17:0c:94:05:11:97: 76:ab:eb:c4:76:f6:c3:83:e4:71:13:1b:cb:71:2f:ce:03:e9: 0e:95:dc:73 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XNafSM9zfo6LEmQHoEU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmUwMTAxMTgxYWNhNDI1MWU5ZjI0YThmNjM3MzVlMmY1 ZWJkY2QwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTkyZmVhNWFmMGQyZmRkMzQ5MDdmMzFjZDY5Nzk2MjNiZDM4NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Mf4POjFw1l98akKJCJuBsNii2r sc3iTp+ihorv6QxqA4CaEV71VDPF+BPOHJLJb2UzUSBUS9RfQgT2/R9ToarlQVZO vmejEnatiQJXTjo3m1QBGsTUGTljqp7BqckdkATblIh2+vQXQy0Yl7pPMvZISBrd 87l4RoM9lVjzSsfj9z7PauMVq0xz1nFej5z1tjQEuhQQu7rmFC3a9Ds3hh6npLcy 1mjy4O0JADTfUW4BuVZplJyG1fbYHFcdrEVexjEOOrQ+BqnlL3NA0my4aTvCzy/d mKIq92MetKilNkkPp5a8FH6GN6VHmu0Oi9lSWvMY7hvHV3hInWcYEM0edwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDqS/qWvDS/dNJB/Mc1peWI704SWMB8GA1UdIwQY MBaAFDVuAQEYGspCUenySo9jc14vXr3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMt OWQ1ZTM0YjAyZTViLzEvT3BMLXBhOE5MOTAwa0g4eHpXbDVZanZUaEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMtOWQ1ZTM0YjAyZTVi LzEvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuaBMMA0E AgACMAcDBQIqAfqAMA0GCSqGSIb3DQEBCwUAA4IBAQAiv3/7mRf/0eQ/TKB7Uh8a rE31zVLut3vgXWgt2zJzhtblGBXHg6FCBFFUtvHYOs/PBIiVYPPv9OCG6puKYm0x TJKKFzpINTBOkt3v9+0VVoNlVU3d1PDw8excibmow3JtR7RnqitbqxKDjxuidk7Z iHPHDoule6s1vx1O2Uo7DOAoSBv52iLO7d6ttVI6xFykyocVkbSbr+0HKuALkTMw 91u3HkS6/o5P0anrMiJMgd8JdM1CTeGJlH4TaSH8uhmI3Kk6XVV+RKsr/ZpX7oH/ eNCf/Ujh9wqTPTYH96A8X4oiJTEXDJQFEZd2q+vEdvbDg+RxExvLcS/OA+kOldxz -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:07 2026 by rpki-client