This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa File: Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa (raw, json) Hash identifier: pR+eHKxdsqOeJhrr2qYTxhhUH69JVErIDEpF2ZKp/Bc= Subject key identifier: 3B:2A:79:46:25:08:6F:B6:6A:40:B4:7B:EE:D9:1E:66:11:32:E5:8E Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 019B7BA4B06776F0640BE3E5625205FBF6FA Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa Signing time: Thu 01 Jan 2026 22:19:09 +0000 ROA not before: Thu 01 Jan 2026 22:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398781 IP address blocks: 80.173.192.0/21 maxlen: 32 80.173.232.0/21 maxlen: 32 80.173.240.0/21 maxlen: 32 80.173.248.0/21 maxlen: 32 82.158.0.0/18 maxlen: 32 82.158.92.0/22 maxlen: 32 82.158.96.0/22 maxlen: 32 82.158.100.0/22 maxlen: 32 82.158.104.0/22 maxlen: 32 82.158.108.0/22 maxlen: 32 140.225.32.0/21 maxlen: 32 140.225.40.0/21 maxlen: 32 140.225.48.0/21 maxlen: 32 140.225.56.0/21 maxlen: 32 140.225.224.0/19 maxlen: 32 167.150.82.0/23 maxlen: 32 167.150.96.0/23 maxlen: 32 167.150.108.0/23 maxlen: 32 167.150.114.0/23 maxlen: 32 167.150.150.0/23 maxlen: 32 167.150.164.0/23 maxlen: 32 167.150.168.0/23 maxlen: 32 167.150.174.0/23 maxlen: 32 167.150.178.0/23 maxlen: 32 167.150.184.0/23 maxlen: 32 167.150.202.0/23 maxlen: 32 167.150.212.0/23 maxlen: 32 167.150.242.0/23 maxlen: 32 173.224.144.0/20 maxlen: 32 188.240.83.0/24 maxlen: 24 209.92.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b0:67:76:f0:64:0b:e3:e5:62:52:05:fb:f6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Jan 1 22:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b2a794625086fb66a40b47beed91e661132e58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:1f:2a:5e:16:97:a6:8a:be:46:24:77:87: c1:78:14:b9:a2:66:0d:e8:7d:e9:0c:a3:fc:85:d3: d5:bc:a9:cb:a5:4c:8b:ef:4f:75:28:4f:12:66:7e: 76:96:fd:b0:13:dc:ef:90:ab:bc:8b:ce:f8:b2:a4: 44:0a:59:b6:d7:f9:d8:71:c6:5b:e5:e3:00:34:2b: da:cf:6f:28:d1:1d:c9:ab:92:0d:9e:99:d8:e3:6c: bb:00:82:ce:d7:f3:0b:c2:dd:af:70:26:c8:9c:b5: d1:c3:74:bc:f5:cc:b5:fc:78:81:b3:19:bb:9e:c3: 0b:1f:fb:56:3a:30:ff:2b:cf:c2:92:b4:e7:21:d5: a3:4f:04:10:12:af:5a:94:53:f1:8e:08:1b:aa:24: 9f:24:46:cf:df:8a:bd:56:90:c7:a4:6f:a3:a2:40: e1:14:a9:6d:95:a7:f1:81:0d:cc:1c:0c:1a:97:f2: 5b:93:fa:7b:73:96:1c:ab:35:87:de:2a:6e:f9:5f: 56:9f:42:22:9c:33:6e:97:e3:f1:aa:62:64:e1:89: e8:62:1e:75:9f:59:c0:54:45:00:13:8f:b5:ce:15: 2f:eb:30:13:e8:ad:04:7c:13:6f:fb:ba:5f:29:d1: 21:c1:e7:d3:21:96:f8:38:c5:6a:55:ed:fd:90:29: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2A:79:46:25:08:6F:B6:6A:40:B4:7B:EE:D9:1E:66:11:32:E5:8E X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.173.192.0/21 80.173.232.0-80.173.255.255 82.158.0.0/18 82.158.92.0-82.158.111.255 140.225.32.0/19 140.225.224.0/19 167.150.82.0/23 167.150.96.0/23 167.150.108.0/23 167.150.114.0/23 167.150.150.0/23 167.150.164.0/23 167.150.168.0/23 167.150.174.0/23 167.150.178.0/23 167.150.184.0/23 167.150.202.0/23 167.150.212.0/23 167.150.242.0/23 173.224.144.0/20 188.240.83.0/24 209.92.16.0/20 Signature Algorithm: sha256WithRSAEncryption aa:09:87:b3:0f:24:44:0c:5e:9f:3f:21:56:22:c6:23:02:29: ca:ce:ce:95:a4:2e:ba:97:f1:ff:6e:be:ad:75:19:8f:05:ec: 0e:58:cc:d3:c1:9d:cb:d2:d5:6d:62:ec:57:d9:84:b9:1a:ce: 46:99:27:e2:d2:90:d3:b5:30:cd:3f:7c:06:6e:cd:da:bb:da: ed:75:2b:e6:65:76:60:b8:67:24:fa:59:dc:ed:f2:a8:e7:1f: f5:b7:bd:bb:c4:e4:72:4b:1e:6a:b6:21:90:44:61:6a:17:51: 41:a2:ac:dc:27:27:68:61:47:03:0d:38:68:9a:59:1d:d0:44: 87:ad:ad:05:26:6b:04:61:16:78:4e:c6:6e:db:42:e9:9d:12: 53:9b:0c:b1:57:6d:6b:b0:2c:2b:6d:83:28:08:c2:21:68:3b: 0b:f2:cc:39:92:4e:f0:8a:fe:0f:69:de:94:f7:1f:59:ff:7c: ed:ea:22:c0:61:66:3c:63:42:85:26:67:8f:20:6e:ac:35:63: 2b:5d:0b:ef:4b:56:23:13:d6:3e:65:d0:9f:d6:e4:b4:ef:d9: 3e:90:1c:52:b2:cf:18:f3:82:1e:81:cd:cf:05:5f:8c:d9:d3: a3:3d:f6:2a:4a:2f:dc:87:58:59:fc:e9:df:84:d7:d8:b3:9b: 08:88:f0:d9 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt7pLBndvBkC+PlYlIF+/b6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjYwMTAxMjIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjJhNzk0NjI1MDg2ZmI2NmE0MGI0N2JlZWQ5MWU2NjExMzJlNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHYfKl4Wl6aKvkYkd4fBeBS5omYN 6H3pDKP8hdPVvKnLpUyL7091KE8SZn52lv2wE9zvkKu8i874sqREClm21/nYccZb 5eMANCvaz28o0R3Jq5INnpnY42y7AILO1/MLwt2vcCbInLXRw3S89cy1/HiBsxm7 nsMLH/tWOjD/K8/CkrTnIdWjTwQQEq9alFPxjggbqiSfJEbP34q9VpDHpG+jokDh FKltlafxgQ3MHAwal/Jbk/p7c5YcqzWH3ipu+V9Wn0IinDNul+PxqmJk4YnoYh51 n1nAVEUAE4+1zhUv6zAT6K0EfBNv+7pfKdEhwefTIZb4OMVqVe39kCkY2QIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFDsqeUYlCG+2akC0e+7ZHmYRMuWOMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvT3lwNVJpVUliN1pxUUxSNzd0a2VaaEV5NVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAEwgZMDBANQ rcAwCwMEA1Ct6AMDAVCsAwQGUp4AMAwDBAJSnlwDBARSnmADBAWM4SADBAWM4eAD BAGnllIDBAGnlmADBAGnlmwDBAGnlnIDBAGnlpYDBAGnlqQDBAGnlqgDBAGnlq4D BAGnlrIDBAGnlrgDBAGnlsoDBAGnltQDBAGnlvIDBASt4JADBAC88FMDBATRXBAw DQYJKoZIhvcNAQELBQADggEBAKoJh7MPJEQMXp8/IVYixiMCKcrOzpWkLrqX8f9u vq11GY8F7A5YzNPBncvS1W1i7FfZhLkazkaZJ+LSkNO1MM0/fAZuzdq72u11K+Zl dmC4ZyT6Wdzt8qjnH/W3vbvE5HJLHmq2IZBEYWoXUUGirNwnJ2hhRwMNOGiaWR3Q RIetrQUmawRhFnhOxm7bQumdElObDLFXbWuwLCttgygIwiFoOwvyzDmSTvCK/g9p 3pT3H1n/fO3qIsBhZjxjQoUmZ48gbqw1YytdC+9LViMT1j5l0J/W5LTv2T6QHFKy zxjzgh6Bzc8FX4zZ06M99ipKL9yHWFn86d+E19izmwiI8Nk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:51 2026 by rpki-client