This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OpSSn7VpxO11fryivwBvANnIEvU.roa File: OpSSn7VpxO11fryivwBvANnIEvU.roa (raw, json) Hash identifier: UbKXGtEdDAkgDWoFDIUwKw+X7uSsRhvGaUyhumxLj+A= Subject key identifier: 3A:94:92:9F:B5:69:C4:ED:75:7E:BC:A2:BF:00:6F:00:D9:C8:12:F5 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C6F232C4622F99E5CEF2508B5C2C Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OpSSn7VpxO11fryivwBvANnIEvU.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 81.22.129.0/24 maxlen: 24 81.22.131.0/24 maxlen: 24 81.22.138.0/24 maxlen: 24 89.185.0.0/24 maxlen: 24 109.72.121.0/24 maxlen: 24 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c6:f2:32:c4:62:2f:99:e5:ce:f2:50:8b:5c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a94929fb569c4ed757ebca2bf006f00d9c812f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:c1:8c:e9:12:3e:b9:9b:b0:e5:48:86:a3: ed:61:76:d2:81:73:3c:ae:a2:92:87:c5:75:de:11: 17:c1:65:dd:0c:e7:d7:1c:ac:bf:a8:1a:b0:fc:bc: 93:84:d5:07:3c:74:13:58:4d:70:3f:60:5e:bb:88: 96:1e:e8:58:72:56:de:80:aa:fa:0f:2f:93:69:7c: f0:f9:2d:55:71:06:91:c5:35:e1:fd:c2:7b:fe:91: 2c:73:f2:c4:2a:06:1d:da:be:a0:b5:f2:e6:e1:be: da:7a:b3:13:d3:e6:5e:c3:59:05:64:7e:a7:63:dd: 8e:47:be:de:dc:a7:98:e7:aa:43:96:77:2d:35:80: cf:8c:99:9b:7f:5a:44:21:44:67:8f:b8:a8:4f:9e: 6a:7d:67:82:f3:0f:4d:d5:3c:b7:50:10:0a:bd:7b: 5a:8f:84:88:f6:f4:f0:17:ee:65:1f:ce:2e:50:99: 70:57:b0:d6:d7:75:21:15:77:e0:44:4f:6a:9b:31: bf:7b:22:08:14:fc:cb:61:c1:c3:33:08:ca:a5:9e: cd:7c:f0:f7:9f:47:f7:9c:dd:0a:90:2c:2d:b2:54: 45:97:2a:95:eb:82:7c:b0:e0:13:a2:f3:c1:c0:92: 70:cf:ca:80:3f:87:88:71:46:df:cd:df:ac:42:f8: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:94:92:9F:B5:69:C4:ED:75:7E:BC:A2:BF:00:6F:00:D9:C8:12:F5 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OpSSn7VpxO11fryivwBvANnIEvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.129.0/24 81.22.131.0/24 81.22.138.0/24 89.185.0.0/24 109.72.121.0/24 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 33:c7:8f:17:a0:f4:89:f0:d5:b2:4e:ba:cf:d4:79:26:5a:7a: 74:f3:e6:95:c9:78:62:87:cd:99:23:4c:cf:58:6e:d6:b9:2a: bd:e5:c6:45:24:c4:ba:62:7c:17:aa:7a:03:34:c3:f5:d7:38: 25:49:3e:3c:0c:cb:2a:36:09:8b:64:ab:c4:55:4a:e0:30:53: bc:16:07:0a:05:a1:b5:df:9d:de:30:d1:52:40:b3:f1:6e:05: fd:c5:a1:58:43:91:1f:88:ad:c6:08:be:b8:c3:7a:12:c3:42: f2:5a:5d:49:d0:f5:fa:27:52:08:b0:85:11:be:5e:52:1a:4b: 99:17:99:00:62:ac:d4:97:23:51:17:2b:b3:17:9f:fa:cb:07: c7:32:13:d2:0d:98:ab:73:af:7f:a9:ae:0d:1d:59:c7:47:a9: 33:ec:a2:3a:65:bc:8f:ad:8d:cc:37:86:96:b0:cc:07:3d:ba: a0:f6:3c:99:bb:31:66:ea:96:c6:1b:ee:f0:a7:83:41:a3:ec: b2:d9:8f:14:87:02:e5:44:5b:7d:d1:15:7d:7c:34:ca:bb:1d: a2:9f:0e:25:a1:2c:e1:d2:02:dc:65:15:3c:a0:cf:0e:c6:a7: be:7c:2d:e3:de:f7:6b:95:20:98:a1:35:9a:08:93:41:a2:e0: a0:61:a1:4b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4osbyMsRiL5nlzvJQi1wsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk0OTI5ZmI1NjljNGVkNzU3ZWJjYTJiZjAwNmYwMGQ5YzgxMmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZrBjOkSPrmbsOVIhqPtYXbSgXM8 rqKSh8V13hEXwWXdDOfXHKy/qBqw/LyThNUHPHQTWE1wP2Beu4iWHuhYclbegKr6 Dy+TaXzw+S1VcQaRxTXh/cJ7/pEsc/LEKgYd2r6gtfLm4b7aerMT0+Zew1kFZH6n Y92OR77e3KeY56pDlnctNYDPjJmbf1pEIURnj7ioT55qfWeC8w9N1Ty3UBAKvXta j4SI9vTwF+5lH84uUJlwV7DW13UhFXfgRE9qmzG/eyIIFPzLYcHDMwjKpZ7NfPD3 n0f3nN0KkCwtslRFlyqV64J8sOATovPBwJJwz8qAP4eIcUbfzd+sQviFwwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDqUkp+1acTtdX68or8AbwDZyBL1MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvT3BTU243VnB4TzExZnJ5aXZ3QnZBTm5JRXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAURaBAwQA URaDAwQAURaKAwQAWbkAAwQAbUh5AwQAbUh7MA0GCSqGSIb3DQEBCwUAA4IBAQAz x48XoPSJ8NWyTrrP1HkmWnp08+aVyXhih82ZI0zPWG7WuSq95cZFJMS6YnwXqnoD NMP11zglST48DMsqNgmLZKvEVUrgMFO8FgcKBaG1353eMNFSQLPxbgX9xaFYQ5Ef iK3GCL64w3oSw0LyWl1J0PX6J1IIsIURvl5SGkuZF5kAYqzUlyNRFyuzF5/6ywfH MhPSDZirc69/qa4NHVnHR6kz7KI6ZbyPrY3MN4aWsMwHPbqg9jyZuzFm6pbGG+7w p4NBo+yy2Y8UhwLlRFt90RV9fDTKux2inw4loSzh0gLcZRU8oM8Oxqe+fC3j3vdr lSCYoTWaCJNBouCgYaFL -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:25 2026 by rpki-client