This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/Op5GYXPNrxg_HfwVEuFZeHOadM4.roa File: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (raw, json) Hash identifier: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8= Subject key identifier: 3A:9E:46:61:73:CD:AF:18:3F:1D:FC:15:12:E1:59:78:73:9A:74:CE Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Certificate serial: 019B7EA64F111249C561303A30D43BD74954 Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/Op5GYXPNrxg_HfwVEuFZeHOadM4.roa Signing time: Fri 02 Jan 2026 12:19:46 +0000 ROA not before: Fri 02 Jan 2026 12:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.3.24.0/22 maxlen: 22 217.69.16.0/20 maxlen: 20 2a03:6c80::/32 maxlen: 48 2a03:6c81::/32 maxlen: 32 2a03:6c82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4f:11:12:49:c5:61:30:3a:30:d4:3b:d7:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Validity Not Before: Jan 2 12:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a9e466173cdaf183f1dfc1512e15978739a74ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:29:ed:6f:c4:9d:8b:5a:4c:2a:3e:36:4b: 14:11:35:56:67:19:21:71:dc:2a:09:45:da:f4:83: 6a:50:46:d4:db:1c:dd:52:f2:7c:a8:5d:9f:8c:72: eb:ae:01:53:63:6b:fe:2e:21:f8:f6:ee:9f:ad:47: af:a9:0d:85:d8:34:3b:8d:d1:db:25:52:fa:3b:8c: 07:93:ef:50:60:2a:1b:65:f0:95:eb:a8:da:76:7a: af:9a:e3:d4:c2:e7:87:ef:48:32:89:c1:d5:7d:2f: c4:4d:17:9b:43:d7:24:f1:08:f2:bb:ad:10:59:57: 95:76:25:26:c2:d3:c8:1b:14:87:d9:f7:00:76:58: 8b:81:7a:39:1e:cd:31:5c:cc:30:7e:10:ce:0d:fc: d4:a9:8e:65:3c:f0:ae:22:a6:0a:7c:cf:1a:b0:e6: 6d:ed:74:d8:1a:56:63:e4:32:e6:05:70:df:66:95: cf:32:10:6e:90:e7:5b:28:e0:e8:8b:3a:98:97:38: 5f:a0:25:8b:5b:cc:67:31:b3:54:21:c1:24:a9:6a: 59:89:67:9a:72:93:e8:a0:ee:47:81:d4:cb:ed:36: c0:3b:5a:ac:6d:ff:3a:de:53:5e:69:16:94:0e:94: b8:ef:ce:4d:7b:57:c6:c5:29:57:ef:02:63:58:8b: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9E:46:61:73:CD:AF:18:3F:1D:FC:15:12:E1:59:78:73:9A:74:CE X509v3 Authority Key Identifier: keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/Op5GYXPNrxg_HfwVEuFZeHOadM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.3.24.0/22 217.69.16.0/20 IPv6: 2a03:6c80::-2a03:6c82:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 68:e9:bf:be:65:42:5d:e9:8a:4f:74:27:94:b9:09:27:2f:74: b8:69:82:80:58:d7:fa:92:9f:47:3c:c6:e0:7a:a2:03:4e:df: 79:6d:e8:c6:b4:de:e5:75:26:00:7a:dc:de:00:12:f0:ef:f0: f8:89:c6:68:0a:ef:6d:11:ba:5b:75:be:8a:80:94:58:cc:69: c6:34:c3:5e:52:b5:2f:58:a4:88:89:93:1d:84:e5:82:51:2b: 97:c3:65:d3:15:4b:11:f4:f1:77:9f:c6:4b:b9:bc:61:58:0c: 7e:22:58:f6:22:33:2c:e1:b2:51:83:a3:ef:9b:e3:a3:cb:92: 8d:0a:e6:3f:6e:01:9c:60:fe:db:72:96:02:45:4d:7f:f2:24: 78:10:4f:92:c2:7e:0d:1b:36:4a:07:5d:47:09:6b:c6:8d:40: 96:fa:4a:eb:a9:85:b2:2a:95:fb:c3:f6:cd:20:9f:80:ac:e9: 1a:7c:7c:8a:66:9b:23:49:30:b1:d9:2b:07:22:fe:66:5d:09: 3d:78:a3:5c:7a:2b:fd:33:5d:3e:df:70:df:d9:57:96:05:93: 55:73:a8:43:a7:e6:95:2c:ec:6b:10:4e:44:58:f8:03:5c:8f: c6:d9:84:53:2d:43:3c:16:46:26:73:c7:63:2d:58:9b:6e:f2: 51:8b:9f:37 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+pk8REknFYTA6MNQ710lUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzUwYmE4MmYzZmViNWFlZTI4OTM4ZmJmMWIwOWMxZTJm ZDE5YjQwHhcNMjYwMTAyMTIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTllNDY2MTczY2RhZjE4M2YxZGZjMTUxMmUxNTk3ODczOWE3NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV0p7W/EnYtaTCo+NksUETVWZxkh cdwqCUXa9INqUEbU2xzdUvJ8qF2fjHLrrgFTY2v+LiH49u6frUevqQ2F2DQ7jdHb JVL6O4wHk+9QYCobZfCV66jadnqvmuPUwueH70gyicHVfS/ETRebQ9ck8Qjyu60Q WVeVdiUmwtPIGxSH2fcAdliLgXo5Hs0xXMwwfhDODfzUqY5lPPCuIqYKfM8asOZt 7XTYGlZj5DLmBXDfZpXPMhBukOdbKODoizqYlzhfoCWLW8xnMbNUIcEkqWpZiWea cpPooO5HgdTL7TbAO1qsbf863lNeaRaUDpS4785Ne1fGxSlX7wJjWIu8jwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDqeRmFzza8YPx38FRLhWXhzmnTOMB8GA1UdIwQY MBaAFDw1C6gvP+ta7iiTj78bCcHi/Rm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEt NjFiNzkwMmVlMjA0LzEvT3A1R1lYUE5yeGdfSGZ3VkV1RlplSE9hZE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEtNjFiNzkwMmVlMjA0 LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuQMYAwQE 2UUQMBYEAgACMBAwDgMFByoDbIADBQAqA2yCMA0GCSqGSIb3DQEBCwUAA4IBAQBo 6b++ZUJd6YpPdCeUuQknL3S4aYKAWNf6kp9HPMbgeqIDTt95bejGtN7ldSYAetze ABLw7/D4icZoCu9tEbpbdb6KgJRYzGnGNMNeUrUvWKSIiZMdhOWCUSuXw2XTFUsR 9PF3n8ZLubxhWAx+Ilj2IjMs4bJRg6Pvm+Ojy5KNCuY/bgGcYP7bcpYCRU1/8iR4 EE+Swn4NGzZKB11HCWvGjUCW+krrqYWyKpX7w/bNIJ+ArOkafHyKZpsjSTCx2SsH Iv5mXQk9eKNceiv9M10+33Df2VeWBZNVc6hDp+aVLOxrEE5EWPgDXI/G2YRTLUM8 FkYmc8djLVibbvJRi583 -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:27 2026 by rpki-client