This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/opuCCMcW2_WxPhJsfHpsveIPJOk.roa File: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (raw, json) Hash identifier: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q= Subject key identifier: A2:9B:82:08:C7:16:DB:F5:B1:3E:12:6C:7C:7A:6C:BD:E2:0F:24:E9 Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019B7F8347BF9E756F29751C70A98DA52561 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/opuCCMcW2_WxPhJsfHpsveIPJOk.roa Signing time: Fri 02 Jan 2026 16:21:08 +0000 ROA not before: Fri 02 Jan 2026 16:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33891 IP address blocks: 5.56.16.0/21 maxlen: 21 31.7.176.0/20 maxlen: 20 31.7.182.0/24 maxlen: 24 31.7.183.0/24 maxlen: 24 80.255.0.0/20 maxlen: 20 81.95.0.0/20 maxlen: 20 81.95.8.0/24 maxlen: 24 81.95.9.0/24 maxlen: 24 82.199.128.0/19 maxlen: 19 82.199.128.0/24 maxlen: 24 82.199.130.0/24 maxlen: 24 82.199.131.0/24 maxlen: 24 82.199.138.0/24 maxlen: 24 82.199.141.0/24 maxlen: 24 82.199.142.0/24 maxlen: 24 82.199.143.0/24 maxlen: 24 82.199.144.0/24 maxlen: 24 82.199.145.0/24 maxlen: 24 82.199.146.0/24 maxlen: 24 82.199.147.0/24 maxlen: 24 82.199.148.0/24 maxlen: 24 82.199.149.0/24 maxlen: 24 82.199.151.0/24 maxlen: 24 82.199.152.0/24 maxlen: 24 82.199.153.0/24 maxlen: 24 82.199.154.0/24 maxlen: 24 82.199.157.0/24 maxlen: 24 82.199.158.0/24 maxlen: 24 82.199.159.0/24 maxlen: 24 83.142.80.0/21 maxlen: 21 92.43.104.0/21 maxlen: 21 92.43.106.0/24 maxlen: 24 92.43.107.0/24 maxlen: 24 92.43.108.0/24 maxlen: 24 92.43.109.0/24 maxlen: 24 92.43.110.0/24 maxlen: 24 195.138.248.0/21 maxlen: 21 195.138.249.0/24 maxlen: 24 195.138.250.0/24 maxlen: 24 2a01:4a0::/29 maxlen: 29 2a01:4a0::/32 maxlen: 32 2a01:4a0:5::/48 maxlen: 48 2a01:4a0:b::/48 maxlen: 48 2a01:4a0:e::/48 maxlen: 48 2a01:4a0:17::/48 maxlen: 48 2a01:4a0:30::/48 maxlen: 48 2a01:4a0:38::/48 maxlen: 48 2a01:4a0:42::/48 maxlen: 48 2a01:4a0:43::/48 maxlen: 48 2a01:4a0:45::/48 maxlen: 48 2a01:4a0:46::/48 maxlen: 48 2a01:4a0:47::/48 maxlen: 48 2a01:4a0:48::/48 maxlen: 48 2a01:4a0:50::/48 maxlen: 48 2a01:4a0:56::/48 maxlen: 48 2a01:4a0:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:47:bf:9e:75:6f:29:75:1c:70:a9:8d:a5:25:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jan 2 16:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a29b8208c716dbf5b13e126c7c7a6cbde20f24e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:51:73:c3:cb:78:cd:12:dc:15:4f:b5:0c: ca:a6:03:0b:81:0d:35:46:29:94:b6:ee:52:05:59: 58:0a:ff:1b:56:7b:d8:ea:5c:b5:09:00:f5:8a:a6: c7:8d:00:59:ca:cb:dd:60:39:e4:a3:e2:2c:3e:59: 91:bd:87:fb:e9:bc:f9:52:ce:4c:6a:47:9e:fe:00: b2:37:ff:6f:93:78:4e:90:18:fa:59:39:08:fe:da: 03:ec:c6:87:af:14:f1:ef:6a:b7:c7:ca:27:ca:11: d9:20:04:f0:c3:0d:5d:07:e8:b5:74:c7:e5:80:99: cc:93:09:92:ba:f0:12:fa:8b:70:ec:bf:72:f9:d0: e7:cf:ca:b2:94:d4:ab:9b:b9:39:ae:68:1c:6e:1f: d1:88:a7:80:74:17:6c:63:9c:98:24:7b:49:ef:1c: 0f:92:18:46:45:9e:7a:86:44:27:c6:9d:07:c9:3f: e1:3f:70:5e:e5:a5:93:9f:e1:fe:60:10:1a:11:09: 66:79:5a:b4:a9:76:00:b8:4e:ee:da:3c:bb:0b:4b: 0c:0a:67:01:2c:7d:bc:3d:b9:1f:04:52:02:ee:4b: fa:b3:c1:02:7f:91:b1:95:16:3c:26:88:9d:a1:c3: 8f:f8:6a:b8:b1:2e:50:29:f1:14:e6:f4:0e:18:41: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9B:82:08:C7:16:DB:F5:B1:3E:12:6C:7C:7A:6C:BD:E2:0F:24:E9 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/opuCCMcW2_WxPhJsfHpsveIPJOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.16.0/21 31.7.176.0/20 80.255.0.0/20 81.95.0.0/20 82.199.128.0/19 83.142.80.0/21 92.43.104.0/21 195.138.248.0/21 IPv6: 2a01:4a0::/29 Signature Algorithm: sha256WithRSAEncryption 41:15:40:c5:d3:05:9a:fa:c9:08:44:9b:66:54:33:ca:8c:ae: 7f:4f:9a:d6:79:ec:77:47:50:60:7e:06:c5:44:9b:1f:a0:1f: 0d:ab:c7:4b:f0:bd:8f:38:12:02:89:00:88:44:f4:d8:bf:35: 47:ce:84:af:cc:44:df:ad:04:ce:f4:49:08:c1:43:46:03:9d: 73:dc:76:31:c5:dc:18:e5:c3:24:be:a9:18:90:30:5e:23:3a: db:8c:ed:77:6a:aa:ce:61:77:cc:1e:a9:12:97:c3:fb:ca:16: 85:75:a2:39:24:e8:39:0c:ed:b5:68:ec:0b:f6:6e:ad:10:f4: dd:3f:18:43:53:69:a8:5d:7c:b3:23:fc:06:5f:15:c8:45:39: 30:ba:c5:58:6f:91:6d:59:19:6e:9e:b6:ba:a7:e6:5c:45:fc: a3:b8:a6:46:85:d5:a5:4d:6f:2a:14:2c:f2:16:02:f5:35:80: e8:12:23:f0:f9:12:0b:e1:46:93:8c:27:5d:5a:48:1f:65:55: 2a:3a:7a:3f:ca:1d:42:2e:62:81:1c:b7:3f:81:49:a9:09:8b: ed:10:44:96:e0:07:e9:56:3e:80:60:bd:16:75:6e:fc:d8:93: 4d:26:d6:0b:bd:8f:db:44:bc:43:47:1e:6a:37:7e:2b:74:dc: 4b:dd:04:92 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt/g0e/nnVvKXUccKmNpSVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwMTAyMTYyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjliODIwOGM3MTZkYmY1YjEzZTEyNmM3YzdhNmNiZGUyMGYyNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwERRc8PLeM0S3BVPtQzKpgMLgQ01 RimUtu5SBVlYCv8bVnvY6ly1CQD1iqbHjQBZysvdYDnko+IsPlmRvYf76bz5Us5M akee/gCyN/9vk3hOkBj6WTkI/toD7MaHrxTx72q3x8onyhHZIATwww1dB+i1dMfl gJnMkwmSuvAS+otw7L9y+dDnz8qylNSrm7k5rmgcbh/RiKeAdBdsY5yYJHtJ7xwP khhGRZ56hkQnxp0HyT/hP3Be5aWTn+H+YBAaEQlmeVq0qXYAuE7u2jy7C0sMCmcB LH28PbkfBFIC7kv6s8ECf5GxlRY8JoidocOP+Gq4sS5QKfEU5vQOGEERWwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFKKbggjHFtv1sT4SbHx6bL3iDyTpMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvb3B1Q0NNY1cyX1d4UGhKc2ZIcHN2ZUlQSk9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDBTgQAwQE HwewAwQEUP8AAwQEUV8AAwQFUseAAwQDU45QAwQDXCtoAwQDw4r4MA0EAgACMAcD BQMqAQSgMA0GCSqGSIb3DQEBCwUAA4IBAQBBFUDF0wWa+skIRJtmVDPKjK5/T5rW eex3R1BgfgbFRJsfoB8Nq8dL8L2POBICiQCIRPTYvzVHzoSvzETfrQTO9EkIwUNG A51z3HYxxdwY5cMkvqkYkDBeIzrbjO13aqrOYXfMHqkSl8P7yhaFdaI5JOg5DO21 aOwL9m6tEPTdPxhDU2moXXyzI/wGXxXIRTkwusVYb5FtWRlunra6p+ZcRfyjuKZG hdWlTW8qFCzyFgL1NYDoEiPw+RIL4UaTjCddWkgfZVUqOno/yh1CLmKBHLc/gUmp CYvtEESW4AfpVj6AYL0WdW782JNNJtYLvY/bRLxDRx5qN34rdNxL3QSS -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:20 2026 by rpki-client