This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/OYPW_l3yAydu5ep_JRGTwUuB3Vc.roa File: OYPW_l3yAydu5ep_JRGTwUuB3Vc.roa (raw, json) Hash identifier: fFBI748XuqQjDYkYpH3bQJg6Oe0pApO3G7mDoyKGRHc= Subject key identifier: 39:83:D6:FE:5D:F2:03:27:6E:E5:EA:7F:25:11:93:C1:4B:81:DD:57 Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd Certificate serial: 019B78A226FFEE9C64CD7AC2FE5DD3B045F9 Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/OYPW_l3yAydu5ep_JRGTwUuB3Vc.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208422 IP address blocks: 45.87.116.0/24 maxlen: 24 185.186.0.0/24 maxlen: 24 2a09:e201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:26:ff:ee:9c:64:cd:7a:c2:fe:5d:d3:b0:45:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3983d6fe5df203276ee5ea7f251193c14b81dd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:4c:82:b0:61:6f:6b:46:54:de:25:d2:f7: 61:51:3a:73:7c:2c:ca:cc:b7:ed:c4:bd:f7:15:1e: fd:e6:29:0b:6e:f8:68:fe:f4:12:0e:d2:72:59:0b: fd:70:92:b9:8d:14:b3:43:72:0e:15:91:72:1e:da: cf:e7:af:1a:b9:bd:9f:b6:83:19:99:ef:14:c9:b3: dc:e4:73:50:e0:2d:74:c8:93:01:0c:14:14:11:9d: bc:d1:be:38:e9:18:ed:e8:fd:c1:bc:25:99:a3:c4: b3:54:d6:a3:84:8b:c3:08:70:6e:8c:59:38:39:c9: f5:25:ef:46:61:f4:e2:b7:be:e9:be:f3:26:b1:76: 0d:e3:4a:f5:61:12:a5:78:53:21:6e:9d:00:0e:de: ce:55:0c:3e:16:cb:6a:5f:5b:25:b6:45:a1:c7:25: a5:26:20:29:6d:ce:70:56:6f:ad:c5:b6:3e:fb:38: e0:90:1d:57:91:81:75:ac:1b:70:03:42:7d:de:3d: 5e:13:a5:03:27:b4:de:8a:45:58:fb:9f:32:07:4d: 15:48:11:5a:89:ed:fd:e3:8d:99:97:3c:96:5f:4a: d3:49:46:47:08:19:3d:fa:52:71:0c:71:e1:87:60: fc:be:7d:9a:cd:41:27:2f:b2:f9:e5:f0:77:81:aa: 0e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:D6:FE:5D:F2:03:27:6E:E5:EA:7F:25:11:93:C1:4B:81:DD:57 X509v3 Authority Key Identifier: keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/OYPW_l3yAydu5ep_JRGTwUuB3Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.116.0/24 185.186.0.0/24 IPv6: 2a09:e201::/48 Signature Algorithm: sha256WithRSAEncryption 74:eb:a6:f5:93:98:0f:8c:6d:d9:38:71:60:47:b2:66:30:f8: 72:1f:a2:36:be:eb:48:ca:a2:37:14:52:66:9e:d5:5e:ba:e3: 2c:fb:62:ef:b4:9d:4d:bc:b1:26:a4:0b:fe:fa:70:1a:49:d2: e0:81:2e:c7:a2:e6:86:0c:fc:47:cf:8f:5b:3c:14:2a:dd:ab: ef:a4:e5:b8:d1:d1:18:ee:82:49:8d:63:f1:ca:dd:ef:3a:36: 5c:44:77:00:e9:44:63:72:76:4b:7c:39:54:3e:3f:1c:41:0d: 2f:24:02:55:2b:6f:af:79:97:c9:70:92:10:42:5e:c5:1d:87: 81:eb:bc:3d:0e:e2:d0:92:1d:83:10:c8:ff:f8:dc:8c:6e:5a: e9:b0:94:a4:51:ae:db:c0:de:f5:dc:01:80:88:e3:21:67:e4: 81:1b:94:8e:3b:e9:61:dc:1b:90:e9:b7:51:33:34:f4:e8:41: 1d:b7:f0:10:9a:df:ca:a5:ac:51:05:16:30:3e:af:0a:60:07: b4:44:76:f3:e1:23:30:e5:d0:f3:74:28:7f:9c:c1:a4:d3:c8: c2:12:a8:87:6c:b9:de:a9:61:5a:b6:c8:d2:bc:70:65:ca:ec: a2:f8:66:c7:39:4a:4c:02:95:38:6a:18:57:85:39:78:5b:99: a8:71:64:0c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4oib/7pxkzXrC/l3TsEX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5 ZmQwZGQwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTgzZDZmZTVkZjIwMzI3NmVlNWVhN2YyNTExOTNjMTRiODFkZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjZMgrBhb2tGVN4l0vdhUTpzfCzK zLftxL33FR795ikLbvho/vQSDtJyWQv9cJK5jRSzQ3IOFZFyHtrP568aub2ftoMZ me8UybPc5HNQ4C10yJMBDBQUEZ280b446Rjt6P3BvCWZo8SzVNajhIvDCHBujFk4 Ocn1Je9GYfTit77pvvMmsXYN40r1YRKleFMhbp0ADt7OVQw+FstqX1sltkWhxyWl JiApbc5wVm+txbY++zjgkB1XkYF1rBtwA0J93j1eE6UDJ7TeikVY+58yB00VSBFa ie39442ZlzyWX0rTSUZHCBk9+lJxDHHhh2D8vn2azUEnL7L55fB3gaoO2QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDmD1v5d8gMnbuXqfyURk8FLgd1XMB8GA1UdIwQY MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt MjA4ZWYzMmMwMjAyLzEvT1lQV19sM3lBeWR1NWVwX0pSR1R3VXVCM1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALVd0AwQA uboAMA8EAgACMAkDBwAqCeIBAAAwDQYJKoZIhvcNAQELBQADggEBAHTrpvWTmA+M bdk4cWBHsmYw+HIfoja+60jKojcUUmae1V664yz7Yu+0nU28sSakC/76cBpJ0uCB Lsei5oYM/EfPj1s8FCrdq++k5bjR0RjugkmNY/HK3e86NlxEdwDpRGNydkt8OVQ+ PxxBDS8kAlUrb695l8lwkhBCXsUdh4HrvD0O4tCSHYMQyP/43IxuWumwlKRRrtvA 3vXcAYCI4yFn5IEblI476WHcG5Dpt1EzNPToQR238BCa38qlrFEFFjA+rwpgB7RE dvPhIzDl0PN0KH+cwaTTyMISqIdsud6pYVq2yNK8cGXK7KL4Zsc5SkwClThqGFeF OXhbmahxZAw= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:34 2026 by rpki-client