This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/oPFpE2eYg7379Yb_z8iPaPDUTho.roa File: oPFpE2eYg7379Yb_z8iPaPDUTho.roa (raw, json) Hash identifier: 0ECJa2zyh+fpYI5FZMz9J/l+RoqDVpUle+qzTOb1Aqs= Subject key identifier: A0:F1:69:13:67:98:83:BD:FB:F5:86:FF:CF:C8:8F:68:F0:D4:4E:1A Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad Certificate serial: 019B7C803B335ADD317220B492AA1F3D6DA5 Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/oPFpE2eYg7379Yb_z8iPaPDUTho.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202942 IP address blocks: 45.9.64.0/22 maxlen: 24 185.135.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3b:33:5a:dd:31:72:20:b4:92:aa:1f:3d:6d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f16913679883bdfbf586ffcfc88f68f0d44e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:75:9e:51:ae:7c:bb:de:7d:03:13:8a:44: 5d:ae:27:f6:c1:df:32:74:53:66:1a:ac:61:2c:e1: f0:eb:11:ab:96:1b:a4:ba:20:29:92:c6:bf:c2:c4: ab:7f:9c:c4:08:f6:4d:ce:9b:8f:34:3d:4c:4e:f7: 8d:09:f9:4c:ac:d8:39:a7:a2:77:34:7a:ec:a4:fa: 2f:36:06:dc:67:58:0b:b5:07:e4:44:e5:fa:ed:b7: e3:27:e8:31:ff:a2:28:77:5e:f5:e7:73:d7:42:f8: fd:25:15:0c:49:a1:5d:e7:6a:7b:76:c7:f9:f5:1b: 96:30:2b:76:62:17:42:c3:d0:77:e8:c5:2b:bc:32: 42:61:24:d1:2e:22:76:7e:24:c1:98:e6:65:64:9b: a7:ae:b6:d6:f9:d0:ac:03:14:11:3b:b4:e6:d9:34: dd:37:6d:09:d1:f9:b5:01:87:da:e2:99:cb:c6:6d: 82:e8:6a:0a:92:22:34:32:0d:a8:e1:c2:cd:2c:47: 3d:da:4c:ee:ff:56:db:11:15:02:8a:94:9b:b3:34: 13:9d:fa:d0:5a:3a:60:90:c2:0d:10:f7:86:d0:bb: 77:1c:fd:79:d7:14:f6:dc:85:ab:16:f8:fe:86:4c: b3:89:31:7f:74:10:17:b0:f7:be:83:51:e0:b0:87: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:69:13:67:98:83:BD:FB:F5:86:FF:CF:C8:8F:68:F0:D4:4E:1A X509v3 Authority Key Identifier: keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/oPFpE2eYg7379Yb_z8iPaPDUTho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.64.0/22 185.135.224.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:80:d9:77:f1:6c:b9:15:d8:18:6c:c2:de:9e:94:e3:dd:eb: 77:5a:b2:05:44:92:f6:2a:64:f1:71:79:b7:36:f5:e9:5b:2d: 8e:c4:1d:48:66:dd:d4:d3:bf:8c:42:a1:f5:3e:bc:b4:d9:4b: 68:aa:98:65:a2:5e:63:d9:f0:82:4f:4a:e9:ba:64:df:d7:a6: 8a:78:d1:23:03:3f:63:d9:68:b7:29:b6:a6:8b:b0:34:be:80: 91:00:41:2a:02:2a:23:af:45:b4:79:7b:67:24:9d:b8:f8:ba: f0:18:28:9a:b5:66:9d:73:3b:68:f5:64:64:fe:00:19:20:da: f4:95:5f:ef:51:b0:d2:30:28:8e:03:83:7b:60:77:34:1d:15: 34:65:33:3a:5f:a3:23:0d:26:66:ea:05:74:47:88:ff:85:fb: 56:f4:c5:6c:10:15:31:28:30:c4:24:b2:92:ac:d6:44:96:4d: 51:69:26:d4:d2:5c:01:00:88:80:5e:0a:17:40:95:65:79:5f: ab:a1:6b:57:98:c3:3a:70:8b:51:ef:2f:af:80:8b:e4:ce:5c: 72:5f:dc:af:65:09:fa:c1:f5:2f:57:c2:5c:b3:cd:ce:be:02: b0:50:80:2e:5b:f5:79:83:eb:71:7d:4a:39:99:33:ef:2c:6b: 47:c5:84:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gDszWt0xciC0kqofPW2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NmIwMTg1Y2FiYjY2ODQzZDY3Zjg4NjAxYmMwYTc5YTJl ZWJjYWQwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGYxNjkxMzY3OTg4M2JkZmJmNTg2ZmZjZmM4OGY2OGYwZDQ0ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncB1nlGufLvefQMTikRdrif2wd8y dFNmGqxhLOHw6xGrlhukuiApksa/wsSrf5zECPZNzpuPND1MTveNCflMrNg5p6J3 NHrspPovNgbcZ1gLtQfkROX67bfjJ+gx/6Iod17153PXQvj9JRUMSaFd52p7dsf5 9RuWMCt2YhdCw9B36MUrvDJCYSTRLiJ2fiTBmOZlZJunrrbW+dCsAxQRO7Tm2TTd N20J0fm1AYfa4pnLxm2C6GoKkiI0Mg2o4cLNLEc92kzu/1bbERUCipSbszQTnfrQ WjpgkMINEPeG0Lt3HP151xT23IWrFvj+hkyziTF/dBAXsPe+g1HgsIeDNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKDxaRNnmIO9+/WG/8/Ij2jw1E4aMB8GA1UdIwQY MBaAFAdrAYXKu2aEPWf4hgG8Cnmi7rytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYt N2I0NWJlMDQ2NWFhLzEvb1BGcEUyZVlnNzM3OVliX3o4aVBhUERVVGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYtN2I0NWJlMDQ2NWFh LzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQlAAwQC uYfgMA0GCSqGSIb3DQEBCwUAA4IBAQA7gNl38Wy5FdgYbMLenpTj3et3WrIFRJL2 KmTxcXm3NvXpWy2OxB1IZt3U07+MQqH1Pry02Utoqphlol5j2fCCT0rpumTf16aK eNEjAz9j2Wi3Kbami7A0voCRAEEqAiojr0W0eXtnJJ24+LrwGCiatWadczto9WRk /gAZINr0lV/vUbDSMCiOA4N7YHc0HRU0ZTM6X6MjDSZm6gV0R4j/hftW9MVsEBUx KDDEJLKSrNZElk1RaSbU0lwBAIiAXgoXQJVleV+roWtXmMM6cItR7y+vgIvkzlxy X9yvZQn6wfUvV8Jcs83OvgKwUIAuW/V5g+txfUo5mTPvLGtHxYS1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:18 2026 by rpki-client