This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/2BMOpp_wwQldET06QZPy2wGLMZE.roa File: 2BMOpp_wwQldET06QZPy2wGLMZE.roa (raw, json) Hash identifier: o3jxLcUWsaBV2UnbMYTOzdFwg6geCgqlvEJuA1VSTfU= Subject key identifier: D8:13:0E:A6:9F:F0:C1:09:5D:11:3D:3A:41:93:F2:DB:01:8B:31:91 Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b Certificate serial: 019B7F858E5DA6698D21CB138B028420EF21 Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/2BMOpp_wwQldET06QZPy2wGLMZE.roa Signing time: Fri 02 Jan 2026 16:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:23:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34683 IP address blocks: 87.254.96.0/19 maxlen: 19 185.69.216.0/22 maxlen: 22 195.137.228.0/23 maxlen: 23 212.24.192.0/19 maxlen: 19 212.24.193.0/24 maxlen: 24 2001:1698::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8e:5d:a6:69:8d:21:cb:13:8b:02:84:20:ef:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37843f0752224459e6034569a217c8b611564b Validity Not Before: Jan 2 16:23:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8130ea69ff0c1095d113d3a4193f2db018b3191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:71:ff:ca:41:20:4c:8b:60:30:f8:31:af:aa: f9:19:00:7d:5f:8f:3d:ca:b8:71:fc:32:e3:2c:ff: 60:f0:ed:5a:82:35:cb:f7:0b:d0:ae:aa:eb:36:48: 52:d0:3f:95:39:19:f3:0b:e9:08:f3:52:60:6b:5e: 64:09:f8:e4:2a:2a:98:5a:7d:fb:f2:45:5d:47:fe: 47:53:e9:b6:2d:7f:77:45:12:40:39:36:33:ad:0e: c5:98:6c:33:43:eb:1a:25:47:09:72:36:61:a8:29: d4:7f:52:1f:af:7a:88:8b:3b:0d:2f:69:e9:5a:3f: f4:5a:67:9a:24:fb:a1:e4:db:d1:32:f1:71:78:7b: f8:70:85:b8:b9:35:37:37:80:30:ea:48:63:45:f0: eb:2a:5e:4b:99:fd:c8:be:fa:2b:23:4e:42:9d:96: 1e:c1:44:77:31:fe:39:65:4f:b4:42:34:6e:87:61: eb:b0:c3:c3:b9:42:b5:4c:9d:b7:b7:43:89:06:41: bc:66:5a:e9:f4:66:32:a8:27:1f:6c:f3:97:11:d6: 02:20:6e:9f:5a:52:d5:82:fc:72:e0:2b:82:cb:50: d7:08:0d:a4:c7:cf:ab:b9:5d:44:38:64:c9:49:12: dd:cd:61:bb:3f:6c:84:3b:75:20:95:f4:80:8b:93: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:13:0E:A6:9F:F0:C1:09:5D:11:3D:3A:41:93:F2:DB:01:8B:31:91 X509v3 Authority Key Identifier: keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/2BMOpp_wwQldET06QZPy2wGLMZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.96.0/19 185.69.216.0/22 195.137.228.0/23 212.24.192.0/19 IPv6: 2001:1698::/32 Signature Algorithm: sha256WithRSAEncryption 60:a7:30:a8:6b:89:97:0f:6d:43:03:f8:27:26:3b:95:95:5d: 52:bd:ec:a0:64:30:d3:37:1d:4d:ae:f1:68:7b:76:49:1d:f2: 3d:78:16:cb:d5:6a:20:7a:bc:a3:68:cc:e1:18:ea:86:7a:7a: b0:0c:2c:15:9e:ad:07:7b:a4:e8:58:d7:43:93:45:02:59:17: f9:8e:b0:14:24:82:38:5a:ef:13:58:19:f7:3b:35:70:f9:3f: 66:e6:c8:92:f1:6b:14:56:0f:09:c3:f6:77:fa:b6:34:fd:33: 59:ca:dd:16:be:e0:24:4a:24:3f:4c:3e:69:7c:9e:e5:b2:c0: 79:d5:b5:53:be:b7:b2:dd:49:92:3a:ca:f2:40:f7:79:30:a8: 7b:e4:7a:1e:92:da:b9:89:2e:96:e4:cd:be:53:fb:9f:96:29: eb:71:b9:d2:14:9e:10:4b:62:3d:de:25:20:1e:6b:70:3c:8a: d4:be:ea:82:8f:91:36:95:66:7f:15:6f:10:ea:9f:3f:96:0f: cd:99:9e:80:39:6a:48:fa:51:fb:7f:67:7f:a6:b5:58:c4:7d: 6d:a7:88:08:e8:b3:f6:43:d2:da:4e:85:4e:7e:9d:92:73:e1: f7:e7:96:21:78:bc:12:6f:5d:74:37:88:09:ca:0b:15:9a:33: 86:a3:c7:36 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/hY5dpmmNIcsTiwKEIO8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzc4NDNmMDc1MjIyNDQ1OWU2MDM0NTY5YTIxN2M4YjYx MTU2NGIwHhcNMjYwMTAyMTYyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODEzMGVhNjlmZjBjMTA5NWQxMTNkM2E0MTkzZjJkYjAxOGIzMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHH/ykEgTItgMPgxr6r5GQB9X489 yrhx/DLjLP9g8O1agjXL9wvQrqrrNkhS0D+VORnzC+kI81Jga15kCfjkKiqYWn37 8kVdR/5HU+m2LX93RRJAOTYzrQ7FmGwzQ+saJUcJcjZhqCnUf1Ifr3qIizsNL2np Wj/0WmeaJPuh5NvRMvFxeHv4cIW4uTU3N4Aw6khjRfDrKl5Lmf3IvvorI05CnZYe wUR3Mf45ZU+0QjRuh2HrsMPDuUK1TJ23t0OJBkG8Zlrp9GYyqCcfbPOXEdYCIG6f WlLVgvxy4CuCy1DXCA2kx8+ruV1EOGTJSRLdzWG7P2yEO3UglfSAi5O5ZQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNgTDqaf8MEJXRE9OkGT8tsBizGRMB8GA1UdIwQY MBaAFMo3hD8HUiJEWeYDRWmiF8i2EVZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUt OGZlNzg0ZTMxZTVkLzEvMkJNT3BwX3d3UWxkRVQwNlFaUHkyd0dMTVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUtOGZlNzg0ZTMxZTVk LzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFV/5gAwQC uUXYAwQBw4nkAwQF1BjAMA0EAgACMAcDBQAgARaYMA0GCSqGSIb3DQEBCwUAA4IB AQBgpzCoa4mXD21DA/gnJjuVlV1SveygZDDTNx1NrvFoe3ZJHfI9eBbL1Wogeryj aMzhGOqGenqwDCwVnq0He6ToWNdDk0UCWRf5jrAUJII4Wu8TWBn3OzVw+T9m5siS 8WsUVg8Jw/Z3+rY0/TNZyt0WvuAkSiQ/TD5pfJ7lssB51bVTvrey3UmSOsryQPd5 MKh75Hoektq5iS6W5M2+U/uflinrcbnSFJ4QS2I93iUgHmtwPIrUvuqCj5E2lWZ/ FW8Q6p8/lg/NmZ6AOWpI+lH7f2d/prVYxH1tp4gI6LP2Q9LaToVOfp2Sc+H355Yh eLwSb110N4gJygsVmjOGo8c2 -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:25 2026 by rpki-client