This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/JOp-tx-YUBEPF_3-VsIHevvanSc.roa File: JOp-tx-YUBEPF_3-VsIHevvanSc.roa (raw, json) Hash identifier: 6cD/pjo1d/sDsw6tGOIEud52crieFifk4nobcONjU7o= Subject key identifier: 24:EA:7E:B7:1F:98:50:11:0F:17:FD:FE:56:C2:07:7A:FB:DA:9D:27 Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a Certificate serial: 019B797F38032D1E4BBDA3AF90AE471A1211 Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/JOp-tx-YUBEPF_3-VsIHevvanSc.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197075 IP address blocks: 45.131.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:38:03:2d:1e:4b:bd:a3:af:90:ae:47:1a:12:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24ea7eb71f9850110f17fdfe56c2077afbda9d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:d9:ff:3e:28:7f:7b:b4:bd:b8:02:b3:6b: 33:f8:57:72:25:24:db:45:33:27:cd:3d:12:02:ea: af:11:2f:a0:cd:9f:60:2d:5e:79:f9:e4:38:ea:7d: a9:74:ca:9a:00:4f:a5:60:ec:cd:15:4d:f4:dc:b1: 8b:e8:44:da:50:60:9f:32:35:3a:98:6f:9b:94:6b: c8:d4:ba:06:b0:b1:ac:0a:30:4d:b9:d5:0f:96:65: 57:b9:27:82:df:d1:cc:e2:46:05:d1:b8:7c:51:fc: a0:91:50:53:6b:26:54:ca:80:d5:45:9c:97:a4:fd: 56:9f:85:8a:c7:aa:8a:64:05:b0:9c:65:ae:a3:b2: a8:b7:9d:3b:0c:02:b9:6c:a4:02:34:eb:d2:9c:0f: c8:1a:af:0b:e3:43:1b:7d:4f:e8:98:dd:e2:03:28: a5:e0:38:72:ae:08:c2:7b:d8:24:28:78:9b:fb:9d: 05:3a:09:0c:94:bc:cd:43:4a:63:3f:0f:81:dc:b1: d1:54:94:2b:c2:42:6c:9d:50:f5:84:da:e4:37:18: c1:50:7d:19:2d:91:db:7c:e0:01:8d:5b:1a:28:2a: f1:88:94:c7:76:33:44:8c:14:40:43:1c:d7:1e:94: 75:11:b5:53:f1:10:78:00:ea:ab:0a:35:8c:31:06: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:7E:B7:1F:98:50:11:0F:17:FD:FE:56:C2:07:7A:FB:DA:9D:27 X509v3 Authority Key Identifier: keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/JOp-tx-YUBEPF_3-VsIHevvanSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.238.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:63:33:00:74:9e:37:6a:e8:d9:fe:9e:15:15:b6:74:17:ad: e2:9c:ec:53:3e:43:84:9a:c4:34:92:0d:6c:13:57:c7:69:d5: 48:93:aa:75:7a:73:56:22:2c:99:46:d5:97:f6:03:51:96:5f: 72:da:a5:4a:be:8d:06:a6:cf:31:78:be:7f:e6:89:01:7a:41: ca:c5:1d:ca:54:25:b2:d1:85:4b:53:ec:22:f2:ac:b8:10:e1: 40:fc:ab:60:89:4d:8a:05:af:66:d7:b3:24:07:a8:21:3a:70: ca:df:d5:be:70:c4:dd:89:8b:5b:dd:c5:46:52:4c:8d:7a:3e: 80:d2:ed:98:91:b4:3e:0d:be:5e:6e:15:52:a6:04:31:0a:f0: e0:c5:79:9c:d1:9b:a6:ad:45:f5:91:62:c7:b0:79:7e:fa:f0: c4:0e:79:de:4c:a9:72:e2:cd:05:8a:9a:36:d7:07:d6:7d:02: 25:0c:44:6e:e2:f6:db:88:28:78:d6:87:7d:5f:61:f1:e3:e1: 91:ee:ba:6a:62:96:e4:fe:99:c9:e9:da:69:04:1f:fa:65:4a: 48:db:5c:f6:1f:5a:00:0d:09:35:69:fb:66:f7:2a:cf:51:fc: e3:3e:46:67:4c:a0:27:b2:8f:3f:e3:e9:77:93:9f:b8:07:67: 90:8c:d8:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzgDLR5LvaOvkK5HGhIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTNiZGY0ZGM3NDM1ZmFmNTFiYTkzNGQ2NTU3MGY3MWMy MTczMWEwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGVhN2ViNzFmOTg1MDExMGYxN2ZkZmU1NmMyMDc3YWZiZGE5ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjHZ/z4of3u0vbgCs2sz+FdyJSTb RTMnzT0SAuqvES+gzZ9gLV55+eQ46n2pdMqaAE+lYOzNFU303LGL6ETaUGCfMjU6 mG+blGvI1LoGsLGsCjBNudUPlmVXuSeC39HM4kYF0bh8UfygkVBTayZUyoDVRZyX pP1Wn4WKx6qKZAWwnGWuo7Kot507DAK5bKQCNOvSnA/IGq8L40MbfU/omN3iAyil 4DhyrgjCe9gkKHib+50FOgkMlLzNQ0pjPw+B3LHRVJQrwkJsnVD1hNrkNxjBUH0Z LZHbfOABjVsaKCrxiJTHdjNEjBRAQxzXHpR1EbVT8RB4AOqrCjWMMQZuJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTqfrcfmFARDxf9/lbCB3r72p0nMB8GA1UdIwQY MBaAFEQTvfTcdDX69RupNNZVcPccIXMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTkt YmM5ZWNjMmFkYjQzLzEvSk9wLXR4LVlVQkVQRl8zLVZzSUhldnZhblNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTktYmM5ZWNjMmFkYjQz LzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYPuMA0G CSqGSIb3DQEBCwUAA4IBAQBsYzMAdJ43aujZ/p4VFbZ0F63inOxTPkOEmsQ0kg1s E1fHadVIk6p1enNWIiyZRtWX9gNRll9y2qVKvo0Gps8xeL5/5okBekHKxR3KVCWy 0YVLU+wi8qy4EOFA/KtgiU2KBa9m17MkB6ghOnDK39W+cMTdiYtb3cVGUkyNej6A 0u2YkbQ+Db5ebhVSpgQxCvDgxXmc0ZumrUX1kWLHsHl++vDEDnneTKly4s0Fipo2 1wfWfQIlDERu4vbbiCh41od9X2Hx4+GR7rpqYpbk/pnJ6dppBB/6ZUpI21z2H1oA DQk1aftm9yrPUfzjPkZnTKAnso8/4+l3k5+4B2eQjNhd -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:55 2026 by rpki-client