This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa File: oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa (raw, json) Hash identifier: CR2p7P7nO1sdjW2WzjuqaopSJj2SPQzuG2+UV273Kok= Subject key identifier: A0:FA:BE:F4:42:F8:2D:2A:CC:6B:91:94:37:A2:DF:75:6F:94:6F:AC Certificate issuer: /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8 Certificate serial: 019B7B36840DD7C1EBDF9E35C5FDBBED36DC Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 217.169.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:84:0d:d7:c1:eb:df:9e:35:c5:fd:bb:ed:36:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0fabef442f82d2acc6b919437a2df756f946fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fb:a1:e3:88:ba:0f:72:4f:9c:44:43:df:8d: 2c:d4:a9:95:6c:af:72:6d:b9:80:97:5a:c6:20:12: da:6c:e9:df:db:bc:96:1f:18:03:88:cf:53:1e:73: 57:38:e3:58:d4:75:d2:c7:bc:58:a8:dc:bc:43:55: 9c:01:8b:b6:c9:18:91:d2:01:9b:1c:14:c2:60:d8: d2:2b:9d:d5:07:86:17:66:0f:4e:b3:17:ac:98:19: 81:53:1e:12:c3:fd:df:3f:c6:8f:9d:b5:f7:4e:2d: 63:6f:e4:d2:aa:a1:15:69:a9:e1:ce:0f:be:6a:4b: ae:8f:2f:6f:53:4a:44:de:3c:2b:e4:70:59:33:74: c1:09:e5:82:50:e9:91:d2:a3:49:d6:a8:a5:b8:b5: 0a:d9:65:b6:97:9f:4e:62:a2:d2:df:34:2a:e1:c4: d2:07:78:4f:b7:63:f0:fb:6d:28:91:a9:6a:19:a8: ea:df:c7:ce:31:3f:aa:df:e5:cb:de:00:a4:54:2d: db:d4:26:23:21:80:2f:3f:95:e7:35:cd:28:4e:53: 7e:46:42:59:5f:51:0f:a0:06:6f:af:64:b9:0d:59: dc:40:d6:64:47:bc:23:1e:e6:d6:7c:e0:2b:ee:a7: 0a:15:22:6a:cd:14:07:4b:f9:c2:0e:d0:f6:f3:c8: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FA:BE:F4:42:F8:2D:2A:CC:6B:91:94:37:A2:DF:75:6F:94:6F:AC X509v3 Authority Key Identifier: keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.169.72.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:16:16:e3:de:15:4a:28:f3:ef:1f:9d:6c:2b:e7:d1:f7:90: 73:02:73:11:5e:87:d2:3b:0c:58:32:ad:1d:7d:f5:7c:41:c8: 06:fb:68:71:c9:25:31:95:7c:4a:7f:de:46:8d:34:e8:35:13: f8:a0:ea:32:ed:38:c9:9c:f7:2b:13:b4:da:9a:00:98:35:bb: 69:21:ba:5c:08:a8:13:67:3c:34:e0:61:18:76:7b:36:a7:88: 67:7c:55:a9:1a:51:e6:a7:55:c8:96:5b:d9:38:55:b5:5f:72: 52:d8:65:4a:6c:81:bf:cb:92:c7:91:32:22:ab:8e:c3:f2:9f: ca:cd:f8:d7:5f:a7:08:17:ce:37:c3:9d:a9:5a:05:93:af:65: de:4b:85:b2:18:ec:82:f1:da:75:a2:dc:5b:1f:fe:37:ec:1f: a4:a5:68:c0:af:b4:80:7e:2a:10:a8:4f:f5:a8:15:d5:8c:e0: 98:56:a0:a9:50:4f:03:6c:4c:8b:88:2c:92:70:19:a5:1c:d3: 2d:08:bd:b2:07:84:57:df:c9:52:94:33:63:5a:02:9a:e1:80: 9e:26:c2:06:d2:0a:22:9e:d6:ea:a2:ed:fb:cc:c4:23:b8:24: 7e:56:1c:0f:56:20:5c:79:e9:5e:15:5e:c7:af:58:5b:42:a5: 80:2c:ff:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NoQN18Hr3541xf277TbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZmJkYmIyMGMyZDk3MDczYzBkZThiN2NhYTc1ZWMxZWVi MTkxYjgwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGZhYmVmNDQyZjgyZDJhY2M2YjkxOTQzN2EyZGY3NTZmOTQ2ZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Puh44i6D3JPnERD340s1KmVbK9y bbmAl1rGIBLabOnf27yWHxgDiM9THnNXOONY1HXSx7xYqNy8Q1WcAYu2yRiR0gGb HBTCYNjSK53VB4YXZg9OsxesmBmBUx4Sw/3fP8aPnbX3Ti1jb+TSqqEVaanhzg++ akuujy9vU0pE3jwr5HBZM3TBCeWCUOmR0qNJ1qiluLUK2WW2l59OYqLS3zQq4cTS B3hPt2Pw+20okalqGajq38fOMT+q3+XL3gCkVC3b1CYjIYAvP5XnNc0oTlN+RkJZ X1EPoAZvr2S5DVncQNZkR7wjHubWfOAr7qcKFSJqzRQHS/nCDtD288haewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKD6vvRC+C0qzGuRlDei33VvlG+sMB8GA1UdIwQY MBaAFDP727IMLZcHPA3ot8qnXsHusZG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV92YnNnd3Rsd2M4RGVpM3lxZGV3ZTZ4a2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zYTM2MmQtNDE5OC00YjA4LWJiMGEt ZGJlNDFmYzgzOTllLzEvb1BxLTlFTDRMU3JNYTVHVU42TGZkVy1VYjZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8zYTM2MmQtNDE5OC00YjA4LWJiMGEtZGJlNDFmYzgzOTll LzEvTV92YnNnd3Rsd2M4RGVpM3lxZGV3ZTZ4a2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2alIMA0G CSqGSIb3DQEBCwUAA4IBAQCMFhbj3hVKKPPvH51sK+fR95BzAnMRXofSOwxYMq0d ffV8QcgG+2hxySUxlXxKf95GjTToNRP4oOoy7TjJnPcrE7TamgCYNbtpIbpcCKgT Zzw04GEYdns2p4hnfFWpGlHmp1XIllvZOFW1X3JS2GVKbIG/y5LHkTIiq47D8p/K zfjXX6cIF843w52pWgWTr2XeS4WyGOyC8dp1otxbH/437B+kpWjAr7SAfioQqE/1 qBXVjOCYVqCpUE8DbEyLiCyScBmlHNMtCL2yB4RX38lSlDNjWgKa4YCeJsIG0goi ntbqou37zMQjuCR+VhwPViBceeleFV7Hr1hbQqWALP+X -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:56 2026 by rpki-client