This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/aOp5hrahbo0DudvEr6ppbcclIIw.roa File: aOp5hrahbo0DudvEr6ppbcclIIw.roa (raw, json) Hash identifier: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs= Subject key identifier: 68:EA:79:86:B6:A1:6E:8D:03:B9:DB:C4:AF:AA:69:6D:C7:25:20:8C Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662 Certificate serial: 019B7C8091BCBAADDE337C8D22512BB88194 Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/aOp5hrahbo0DudvEr6ppbcclIIw.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47190 IP address blocks: 195.216.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:91:bc:ba:ad:de:33:7c:8d:22:51:2b:b8:81:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68ea7986b6a16e8d03b9dbc4afaa696dc725208c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:2d:4b:d7:30:04:21:1a:6b:01:04:77:eb: 33:02:6a:44:1b:6c:67:cc:26:de:62:8d:77:ac:4d: e0:8e:4f:95:4b:49:71:e6:c8:6d:a3:2d:65:2c:e1: fb:2a:4f:8e:b3:a9:c4:76:66:b9:f4:aa:80:aa:f6: f2:c6:3c:a0:c5:e8:3e:03:36:80:a6:13:a2:98:3c: f6:c5:c0:d6:95:0f:7f:0d:d0:19:cd:f7:5b:01:4b: 07:e4:fb:39:18:fc:96:2b:71:0c:76:77:ff:6a:6c: 8b:fb:26:81:7f:e6:6d:1f:1a:f5:be:39:8d:f6:9e: 02:87:73:3a:00:85:12:ad:81:84:10:1a:af:b5:6e: 2b:2c:d9:79:df:4e:87:11:f1:c7:1c:9e:db:38:3b: f9:75:92:18:f5:2d:59:e7:71:78:3f:f2:55:db:83: 1c:62:a9:ac:d2:29:fa:03:c3:31:bf:d7:c9:b5:8d: ce:d9:e5:da:57:93:70:60:c2:bd:f5:63:49:32:5f: 33:ac:ed:cd:d2:ce:b8:72:68:27:47:a7:12:22:af: 20:2d:f0:b6:f6:e4:34:d9:d6:24:5e:ed:37:b3:33: 47:5f:ec:d5:f2:bd:3f:5c:91:31:97:55:ea:6c:ca: af:5f:82:20:16:c9:25:b2:47:77:73:df:e2:ab:00: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EA:79:86:B6:A1:6E:8D:03:B9:DB:C4:AF:AA:69:6D:C7:25:20:8C X509v3 Authority Key Identifier: keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/aOp5hrahbo0DudvEr6ppbcclIIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.232.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:f5:93:67:1b:95:90:9d:25:ac:ef:ee:b8:fa:89:f1:5b:7e: 51:cb:28:0c:ee:92:c8:57:34:04:1c:cf:59:8b:18:11:24:88: 15:94:11:96:2a:bc:98:7e:7e:a8:b1:48:02:01:2b:a4:28:3a: 3b:35:4d:1c:98:b3:36:77:87:b4:ac:ee:49:b8:03:9c:65:3f: cf:b5:09:4d:74:67:8b:e8:d5:6c:60:0b:68:db:c9:f8:eb:b5: 0d:5b:6b:f9:3e:67:53:5f:73:b6:98:89:44:d5:33:d8:a9:28: 01:c1:34:45:20:da:e0:27:29:cf:6a:e6:c1:b5:c7:85:b0:ca: 5d:ba:0f:c6:4d:b3:08:41:77:11:55:c2:79:e9:e4:e4:a9:86: 2c:58:7a:e5:32:99:3b:8e:85:b2:ee:9d:8d:18:6b:10:9c:0d: 30:f5:a2:a4:fa:ae:df:f6:40:b4:c8:aa:72:d2:24:27:69:43: 38:2b:cb:48:8f:41:96:bb:90:01:d6:18:db:a2:5d:2b:63:7c: 2a:1d:2b:69:7f:f2:aa:b2:79:8d:8f:7c:c5:62:bd:a7:aa:ed: 53:28:19:80:b4:5d:e4:4f:13:71:3c:2c:e6:83:eb:96:25:72: af:5b:46:7c:e1:8e:6c:ba:00:9f:08:8c:31:3d:bc:53:c4:c8: ce:ae:97:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJG8uq3eM3yNIlEruIGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2 NDI2NjIwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGVhNzk4NmI2YTE2ZThkMDNiOWRiYzRhZmFhNjk2ZGM3MjUyMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaAtS9cwBCEaawEEd+szAmpEG2xn zCbeYo13rE3gjk+VS0lx5shtoy1lLOH7Kk+Os6nEdma59KqAqvbyxjygxeg+AzaA phOimDz2xcDWlQ9/DdAZzfdbAUsH5Ps5GPyWK3EMdnf/amyL+yaBf+ZtHxr1vjmN 9p4Ch3M6AIUSrYGEEBqvtW4rLNl5306HEfHHHJ7bODv5dZIY9S1Z53F4P/JV24Mc Yqms0in6A8Mxv9fJtY3O2eXaV5NwYMK99WNJMl8zrO3N0s64cmgnR6cSIq8gLfC2 9uQ02dYkXu03szNHX+zV8r0/XJExl1XqbMqvX4IgFsklskd3c9/iqwCSmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjqeYa2oW6NA7nbxK+qaW3HJSCMMB8GA1UdIwQY MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt YmUzZTdhOWNlMTViLzEvYU9wNWhyYWhibzBEdWR2RXI2cHBiY2NsSUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9joMA0G CSqGSIb3DQEBCwUAA4IBAQAK9ZNnG5WQnSWs7+64+onxW35RyygM7pLIVzQEHM9Z ixgRJIgVlBGWKryYfn6osUgCASukKDo7NU0cmLM2d4e0rO5JuAOcZT/PtQlNdGeL 6NVsYAto28n467UNW2v5PmdTX3O2mIlE1TPYqSgBwTRFINrgJynPaubBtceFsMpd ug/GTbMIQXcRVcJ56eTkqYYsWHrlMpk7joWy7p2NGGsQnA0w9aKk+q7f9kC0yKpy 0iQnaUM4K8tIj0GWu5AB1hjbol0rY3wqHStpf/KqsnmNj3zFYr2nqu1TKBmAtF3k TxNxPCzmg+uWJXKvW0Z84Y5sugCfCIwxPbxTxMjOrpfC -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:47 2026 by rpki-client