This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/opVaKaCUN_xXCzgTvM_wFZzwduE.roa File: opVaKaCUN_xXCzgTvM_wFZzwduE.roa (raw, json) Hash identifier: bSZ38fbqUhIudVwjunvgxXpYJzvqyZl9nmOIMsXOc5U= Subject key identifier: A2:95:5A:29:A0:94:37:FC:57:0B:38:13:BC:CF:F0:15:9C:F0:76:E1 Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Certificate serial: 019BD53E7591331966EEC59CDD9F3C047EC5 Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/opVaKaCUN_xXCzgTvM_wFZzwduE.roa Signing time: Mon 19 Jan 2026 07:53:18 +0000 ROA not before: Mon 19 Jan 2026 07:53:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47630 IP address blocks: 185.174.5.0/24 maxlen: 24 2a0b:7900::/48 maxlen: 48 2a0b:7900:1::/48 maxlen: 48 2a0b:7900:2::/48 maxlen: 48 2a0b:7900:3::/48 maxlen: 48 2a0b:7900:4::/48 maxlen: 48 2a0b:7900:5::/48 maxlen: 48 2a0b:7900:6::/48 maxlen: 48 2a0b:7900:7::/48 maxlen: 48 2a0b:7900:8::/48 maxlen: 48 2a0b:7900:9::/48 maxlen: 48 2a0b:7900:10::/48 maxlen: 48 2a0b:7900:60::/48 maxlen: 48 2a0b:7900:4444::/48 maxlen: 48 2a0b:7900:5555::/48 maxlen: 48 2a0b:7900:6666::/48 maxlen: 48 2a0b:7900:7777::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:3e:75:91:33:19:66:ee:c5:9c:dd:9f:3c:04:7e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Validity Not Before: Jan 19 07:53:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2955a29a09437fc570b3813bccff0159cf076e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:94:45:71:27:c5:34:3f:94:ef:50:0b:0e: 95:bc:71:58:de:c0:c0:a8:6f:bb:4f:3b:5f:2b:53: 00:11:cb:cd:90:1a:c2:31:d3:55:ba:2b:e7:ac:56: 4a:f8:fa:d7:7c:3e:a9:6a:13:f2:eb:25:c1:72:4f: cd:7e:39:18:36:52:de:b7:43:f2:a5:6a:22:ea:b9: 23:d1:e4:7b:a8:78:db:dd:88:58:f9:96:df:9a:06: 68:87:62:cd:8d:75:1b:b1:4a:6b:f9:7b:28:30:e9: 44:02:e3:6b:05:52:70:d4:fb:3b:43:4a:0a:06:79: fd:2d:bb:96:8a:79:f1:eb:c0:d7:c2:5c:89:31:ad: 29:9a:42:ca:46:9f:66:cb:01:ea:c2:23:9b:7b:ea: 47:77:6d:c0:6f:26:1a:52:e4:cb:42:01:91:9a:b9: 1c:c7:70:45:43:0d:cf:73:b0:f3:7f:dc:d5:ff:d6: c4:46:1b:df:11:72:45:55:2d:37:09:5b:c8:a9:61: b7:66:69:f0:02:4d:91:b2:90:84:8f:db:ab:41:53: 9b:14:9d:51:81:7f:2b:f5:32:8b:bd:b6:27:99:71: 71:f5:38:94:8a:57:d5:ab:2a:2a:8b:80:03:38:55: e1:82:cc:3c:d1:24:03:25:e6:1d:ff:02:70:a7:aa: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:5A:29:A0:94:37:FC:57:0B:38:13:BC:CF:F0:15:9C:F0:76:E1 X509v3 Authority Key Identifier: keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/opVaKaCUN_xXCzgTvM_wFZzwduE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.5.0/24 IPv6: 2a0b:7900::-2a0b:7900:9:ffff:ffff:ffff:ffff:ffff 2a0b:7900:10::/48 2a0b:7900:60::/48 2a0b:7900:4444::/48 2a0b:7900:5555::/48 2a0b:7900:6666::/48 2a0b:7900:7777::/48 Signature Algorithm: sha256WithRSAEncryption 68:23:d3:e8:60:aa:d0:bf:48:ed:39:7a:e5:e3:95:31:d9:48: 89:4d:ca:ef:74:6b:ce:58:ec:79:44:a0:05:39:5c:e4:8d:04: e3:3a:41:97:78:d6:a8:80:be:11:3d:74:e3:54:d0:a9:9d:78: 61:2a:ef:65:74:83:93:9d:ad:79:b6:28:c7:55:88:48:dd:ce: 02:76:81:ec:2b:80:43:ba:ce:46:1b:8a:85:9e:47:d1:bf:f0: a2:2d:1a:47:e3:a6:e6:f0:c7:dd:1c:35:58:b6:87:e4:e1:a6: 60:60:7e:c7:60:3a:ad:a5:78:d6:30:e0:49:9c:30:21:83:6b: 91:0e:38:91:d1:bf:f5:ef:54:0a:8d:a2:e8:ca:4f:61:81:5d: 98:24:4c:72:f9:a3:19:1c:6f:47:50:cc:8c:04:ec:cd:ec:23: eb:1f:db:60:8a:5d:c2:e8:60:38:5a:ab:c1:b7:ca:62:dc:05: b8:e2:44:64:a1:72:dd:b2:a8:5c:bb:ec:7e:a9:46:ea:cf:e2: 10:6c:ae:e3:94:4f:01:e2:c3:2d:cb:23:c4:48:d0:d7:26:cf: 80:34:6f:23:30:43:bd:ff:ba:4d:55:7e:83:e0:50:ac:c1:18: 8e:a0:e8:d5:a0:61:34:ad:fd:64:22:7a:59:d2:34:df:a5:96: ad:d0:a2:7e -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZvVPnWRMxlm7sWc3Z88BH7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZmFjNzVmMzkwZTg4MDUyODMzN2RkMGJkY2RjNzc5MzRi OGRmM2MwHhcNMjYwMTE5MDc1MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjk1NWEyOWEwOTQzN2ZjNTcwYjM4MTNiY2NmZjAxNTljZjA3NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKyURXEnxTQ/lO9QCw6VvHFY3sDA qG+7TztfK1MAEcvNkBrCMdNVuivnrFZK+PrXfD6pahPy6yXBck/NfjkYNlLet0Py pWoi6rkj0eR7qHjb3YhY+ZbfmgZoh2LNjXUbsUpr+XsoMOlEAuNrBVJw1Ps7Q0oK Bnn9LbuWinnx68DXwlyJMa0pmkLKRp9mywHqwiObe+pHd23AbyYaUuTLQgGRmrkc x3BFQw3Pc7Dzf9zV/9bERhvfEXJFVS03CVvIqWG3ZmnwAk2RspCEj9urQVObFJ1R gX8r9TKLvbYnmXFx9TiUilfVqyoqi4ADOFXhgsw80SQDJeYd/wJwp6qhNQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFKKVWimglDf8Vws4E7zP8BWc8HbhMB8GA1UdIwQY MBaAFKL6x185DogFKDN90L3Nx3k0uN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYt NzYyMjU5YWI5NTAwLzEvb3BWYUthQ1VOX3hYQ3pnVHZNX3dGWnp3ZHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYtNzYyMjU5YWI5NTAw LzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTAMBAIAATAGAwQAua4FME0E AgACMEcwDwMEACoLeQMHASoLeQAACAMHACoLeQAAEAMHACoLeQAAYAMHACoLeQBE RAMHACoLeQBVVQMHACoLeQBmZgMHACoLeQB3dzANBgkqhkiG9w0BAQsFAAOCAQEA aCPT6GCq0L9I7Tl65eOVMdlIiU3K73RrzljseUSgBTlc5I0E4zpBl3jWqIC+ET10 41TQqZ14YSrvZXSDk52tebYox1WISN3OAnaB7CuAQ7rORhuKhZ5H0b/woi0aR+Om 5vDH3Rw1WLaH5OGmYGB+x2A6raV41jDgSZwwIYNrkQ44kdG/9e9UCo2i6MpPYYFd mCRMcvmjGRxvR1DMjATszewj6x/bYIpdwuhgOFqrwbfKYtwFuOJEZKFy3bKoXLvs fqlG6s/iEGyu45RPAeLDLcsjxEjQ1ybPgDRvIzBDvf+6TVV+g+BQrMEYjqDo1aBh NK39ZCJ6WdI036WWrdCifg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:37 2026 by rpki-client