This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/OpAkBC82UuZ6_uPhsClAgR04OrA.roa File: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (raw, json) Hash identifier: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4= Subject key identifier: 3A:90:24:04:2F:36:52:E6:7A:FE:E3:E1:B0:29:40:81:1D:38:3A:B0 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B7C133433C442AE18500C7800C33D954F Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/OpAkBC82UuZ6_uPhsClAgR04OrA.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 146.19.227.0/24 maxlen: 24 185.149.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:34:33:c4:42:ae:18:50:0c:78:00:c3:3d:95:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a9024042f3652e67afee3e1b02940811d383ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:f1:53:b0:b0:4b:bf:a8:11:96:5a:cb:5f: d3:84:dc:c4:8c:ec:40:34:76:b2:3e:e9:1c:3e:50: 6e:3d:b6:cb:45:63:6b:e2:f0:ba:b3:fc:df:e0:9a: c6:85:2b:04:b4:ed:1e:9a:42:1c:09:61:b4:c0:58: e3:95:66:87:c3:3d:22:f6:2c:9a:94:e5:fa:43:ff: f0:05:33:9f:4b:72:0c:43:a9:08:7c:c7:c7:8c:c4: e1:b5:a9:4e:84:a9:c2:8a:bc:c9:39:ee:74:3d:61: 70:10:3c:b2:4f:9a:52:1b:79:84:e2:2f:89:e7:68: 10:68:7e:b0:52:e0:8a:9e:c4:13:e7:c8:dc:ac:59: a8:62:ab:f1:89:b5:bc:fc:32:98:5e:51:3b:a7:7f: 85:fa:87:45:ca:4b:cc:3a:9f:a4:34:38:2d:8f:29: 40:88:be:bb:6c:70:6b:c2:50:7b:39:37:5f:e1:fe: 4f:c4:e7:77:e2:57:5d:21:6b:6d:55:70:a2:5f:ea: 5e:d3:e3:79:eb:95:ec:29:86:66:2b:97:06:19:2e: 11:40:da:46:84:59:00:99:13:5f:8b:02:dc:9d:e0: 90:b3:28:af:2b:37:ed:03:fe:69:14:ce:58:a9:52: f4:ec:06:eb:bc:87:92:2a:d4:13:67:16:07:a4:15: 34:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:24:04:2F:36:52:E6:7A:FE:E3:E1:B0:29:40:81:1D:38:3A:B0 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/OpAkBC82UuZ6_uPhsClAgR04OrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.227.0/24 185.149.151.0/24 Signature Algorithm: sha256WithRSAEncryption 16:d8:57:ef:4e:c9:60:63:e7:d5:aa:f1:2f:26:8b:41:c0:ec: 56:98:ed:7f:05:ab:ce:ee:b4:e7:4a:73:58:47:d8:a3:eb:e6: fb:85:0d:52:3f:3e:48:85:46:84:b5:01:3a:40:ec:c0:49:66: 3a:15:e6:d6:f1:56:d4:f8:5a:75:c9:bb:af:13:d9:de:1c:90: aa:c7:ee:97:4b:a1:a4:9f:c2:54:b5:63:5e:0a:b2:45:e8:06: 60:db:9e:57:14:09:ec:3f:fe:d6:06:fd:3d:f7:80:87:4a:6d: 4f:99:8a:51:f9:e1:d4:6a:15:a9:65:27:dd:b1:b1:1b:90:95: 40:cb:e2:cc:80:98:6e:88:31:a7:eb:6b:e0:09:d0:bc:b9:c6: db:7f:a7:9c:83:74:02:76:00:f6:b2:f1:a0:34:2b:34:53:c4: a5:85:4f:f8:84:d9:1e:81:06:97:5b:ac:a3:ce:ca:bf:c8:6b: 60:09:a5:c8:96:8f:f9:2b:a1:8a:15:f2:ad:7e:5e:51:d3:36: bc:af:22:0f:da:3e:84:76:8c:f5:ad:43:ad:0f:68:bb:66:2a: b6:cc:ca:bf:9f:ed:49:79:0b:d1:40:db:7e:eb:48:4b:87:68: 2a:70:ec:7f:81:9e:4b:92:39:95:cc:37:43:b7:f6:ce:2a:66: 67:c3:ff:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EzQzxEKuGFAMeADDPZVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTkwMjQwNDJmMzY1MmU2N2FmZWUzZTFiMDI5NDA4MTFkMzgzYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRnxU7CwS7+oEZZay1/ThNzEjOxA NHayPukcPlBuPbbLRWNr4vC6s/zf4JrGhSsEtO0emkIcCWG0wFjjlWaHwz0i9iya lOX6Q//wBTOfS3IMQ6kIfMfHjMThtalOhKnCirzJOe50PWFwEDyyT5pSG3mE4i+J 52gQaH6wUuCKnsQT58jcrFmoYqvxibW8/DKYXlE7p3+F+odFykvMOp+kNDgtjylA iL67bHBrwlB7OTdf4f5PxOd34lddIWttVXCiX+pe0+N565XsKYZmK5cGGS4RQNpG hFkAmRNfiwLcneCQsyivKzftA/5pFM5YqVL07AbrvIeSKtQTZxYHpBU0GQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDqQJAQvNlLmev7j4bApQIEdODqwMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvT3BBa0JDODJVdVo2X3VQaHNDbEFnUjA0T3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhPjAwQA uZWXMA0GCSqGSIb3DQEBCwUAA4IBAQAW2FfvTslgY+fVqvEvJotBwOxWmO1/BavO 7rTnSnNYR9ij6+b7hQ1SPz5IhUaEtQE6QOzASWY6FebW8VbU+Fp1ybuvE9neHJCq x+6XS6Gkn8JUtWNeCrJF6AZg255XFAnsP/7WBv0994CHSm1PmYpR+eHUahWpZSfd sbEbkJVAy+LMgJhuiDGn62vgCdC8ucbbf6ecg3QCdgD2svGgNCs0U8SlhU/4hNke gQaXW6yjzsq/yGtgCaXIlo/5K6GKFfKtfl5R0za8ryIP2j6Edoz1rUOtD2i7Ziq2 zMq/n+1JeQvRQNt+60hLh2gqcOx/gZ5LkjmVzDdDt/bOKmZnw/9G -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:25 2026 by rpki-client