This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/oPgMAi_-EmiOlppJM0s65xmeflo.roa File: oPgMAi_-EmiOlppJM0s65xmeflo.roa (raw, json) Hash identifier: AY2dJHoY3JrtcePk6obcHFCfyE5blcFF6JMAQBSwLWY= Subject key identifier: A0:F8:0C:02:2F:FE:12:68:8E:96:9A:49:33:4B:3A:E7:19:9E:7E:5A Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f Certificate serial: 019BFA447C818216C78132F2F79D41DE1FCD Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/oPgMAi_-EmiOlppJM0s65xmeflo.roa Signing time: Mon 26 Jan 2026 12:25:50 +0000 ROA not before: Mon 26 Jan 2026 12:25:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49033 IP address blocks: 95.143.97.0/24 maxlen: 24 103.66.56.0/22 maxlen: 24 216.152.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:44:7c:81:82:16:c7:81:32:f2:f7:9d:41:de:1f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f Validity Not Before: Jan 26 12:25:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f80c022ffe12688e969a49334b3ae7199e7e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:db:33:17:fd:d4:4a:48:c9:0a:9d:09:9b:c0: 66:d3:fc:a2:21:8b:82:38:c5:59:54:d1:46:c0:fd: 22:d5:0b:96:89:08:79:80:88:3d:cc:2f:36:f0:6b: ea:c4:bd:77:d0:bb:75:30:88:45:cc:66:20:ef:87: 03:46:13:9b:5c:4b:c5:40:16:b4:ce:ed:a0:6a:b7: d2:3c:b2:4f:f2:e2:f7:d5:6c:50:f0:53:10:bf:72: 0d:3f:cd:80:b7:ff:c4:05:2e:5e:0b:d3:f4:93:ff: 9b:71:bd:cb:5a:88:fd:53:47:93:6f:28:99:87:6a: 60:4c:a0:e9:b1:60:5b:62:16:ec:0c:22:b9:f3:a7: 56:0e:e7:5d:fd:c3:5a:ab:90:c3:9f:af:c7:d1:f5: 1d:ae:37:30:16:62:dc:5d:de:14:7e:84:f4:12:5f: 1a:83:fd:63:56:dc:fc:d1:f8:de:59:e7:f4:14:d1: 5e:b6:95:c6:b4:f6:f0:3c:22:dc:93:14:e1:60:7f: 0b:a1:c1:c1:97:b9:00:fc:af:27:8c:9d:3f:a2:03: cf:04:76:b0:30:4f:14:f1:bc:48:99:42:56:56:7b: 35:5e:59:4d:f2:18:20:d1:ee:5b:da:45:b1:73:33: 9c:04:13:6a:c4:1b:10:d7:a7:c0:ef:bd:29:ac:21: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:0C:02:2F:FE:12:68:8E:96:9A:49:33:4B:3A:E7:19:9E:7E:5A X509v3 Authority Key Identifier: keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/oPgMAi_-EmiOlppJM0s65xmeflo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.143.97.0/24 103.66.56.0/22 216.152.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:c9:c4:0b:c7:d3:29:7b:ba:b3:28:96:84:aa:bc:49:fd:ac: 2b:f8:91:20:7b:cf:cf:05:6f:8d:72:84:e4:df:f1:da:cb:8b: 32:fe:95:38:48:3c:36:f1:b0:35:8e:a6:4f:2e:09:aa:28:a1: 6f:31:4d:29:05:94:aa:48:c6:eb:0c:ff:90:de:bb:fd:9d:9c: 00:30:d4:9a:05:80:db:d7:49:43:a7:b9:d1:cb:3d:51:30:5b: 90:8e:d6:c9:b4:6d:9c:40:2c:ae:ce:cb:ba:20:c9:45:d1:bc: 72:5e:f7:b6:40:d9:7a:e8:5e:fd:40:76:73:e4:19:cc:36:8b: 49:dd:06:56:be:68:e2:0e:6a:4d:b3:29:34:b6:39:99:16:32: 1d:9e:68:64:1e:ef:e0:ca:52:0f:bb:f5:98:07:45:a7:47:02: 78:5a:85:27:25:11:b1:73:29:28:31:da:fd:fb:57:4a:0d:20: d9:ef:eb:24:7e:65:8c:26:6c:cd:b3:f2:5c:e0:fd:09:e2:ab: d0:6c:5a:b1:7c:d8:8b:8d:ea:86:ce:2a:d9:2d:39:46:78:e4: 96:36:52:17:31:63:38:a4:71:c3:61:2d:a7:75:9d:19:f6:a0: 2d:61:e6:d3:d2:cf:15:8c:a5:50:ca:91:f9:0d:1c:9c:0d:16: e3:2b:f8:93 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZv6RHyBghbHgTLy951B3h/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NWJkZmQ3YWUyMDY4NzFlMzgyNjdmNDU3Nzg2MjExMTg2 NGQ4MmYwHhcNMjYwMTI2MTIyNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGY4MGMwMjJmZmUxMjY4OGU5NjlhNDkzMzRiM2FlNzE5OWU3ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dszF/3USkjJCp0Jm8Bm0/yiIYuC OMVZVNFGwP0i1QuWiQh5gIg9zC828GvqxL130Lt1MIhFzGYg74cDRhObXEvFQBa0 zu2garfSPLJP8uL31WxQ8FMQv3INP82At//EBS5eC9P0k/+bcb3LWoj9U0eTbyiZ h2pgTKDpsWBbYhbsDCK586dWDudd/cNaq5DDn6/H0fUdrjcwFmLcXd4UfoT0El8a g/1jVtz80fjeWef0FNFetpXGtPbwPCLckxThYH8LocHBl7kA/K8njJ0/ogPPBHaw ME8U8bxImUJWVns1XllN8hgg0e5b2kWxczOcBBNqxBsQ16fA770prCHNpQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKD4DAIv/hJojpaaSTNLOucZnn5aMB8GA1UdIwQY MBaAFNlb39euIGhx44Jn9Fd4YhEYZNgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hN2VlOTktNjE2MS00OWRhLTg3ZWIt YThiZjgzNTcwNzlmLzEvb1BnTUFpXy1FbWlPbHBwSk0wczY1eG1lZmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hN2VlOTktNjE2MS00OWRhLTg3ZWItYThiZjgzNTcwNzlm LzEvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX49hAwQC Z0I4AwQC2JhAMA0GCSqGSIb3DQEBCwUAA4IBAQCKycQLx9Mpe7qzKJaEqrxJ/awr +JEge8/PBW+NcoTk3/Hay4sy/pU4SDw28bA1jqZPLgmqKKFvMU0pBZSqSMbrDP+Q 3rv9nZwAMNSaBYDb10lDp7nRyz1RMFuQjtbJtG2cQCyuzsu6IMlF0bxyXve2QNl6 6F79QHZz5BnMNotJ3QZWvmjiDmpNsyk0tjmZFjIdnmhkHu/gylIPu/WYB0WnRwJ4 WoUnJRGxcykoMdr9+1dKDSDZ7+skfmWMJmzNs/Jc4P0J4qvQbFqxfNiLjeqGzirZ LTlGeOSWNlIXMWM4pHHDYS2ndZ0Z9qAtYebT0s8VjKVQypH5DRycDRbjK/iT -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:23 2026 by rpki-client