This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/OoPG2MT4AbshroGKma-go4-mAqg.roa File: OoPG2MT4AbshroGKma-go4-mAqg.roa (raw, json) Hash identifier: MmH8u7qEGNsEDukTF/vmrjDahE/w+pZkLOqm+xYo1ZE= Subject key identifier: 3A:83:C6:D8:C4:F8:01:BB:21:AE:81:8A:99:AF:A0:A3:8F:A6:02:A8 Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Certificate serial: 019B7F159486AE0CDC7D1852A23AEB69DABC Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/OoPG2MT4AbshroGKma-go4-mAqg.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208472 IP address blocks: 37.186.31.0/24 maxlen: 24 194.11.247.0/24 maxlen: 24 2a12:7dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:94:86:ae:0c:dc:7d:18:52:a2:3a:eb:69:da:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a83c6d8c4f801bb21ae818a99afa0a38fa602a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:61:71:a5:f8:0b:58:9e:c5:8e:d5:ce:1d: aa:ba:1b:7c:d8:5c:f5:82:30:79:e6:59:2c:6f:96: 57:0f:61:ca:b5:6c:b5:f9:80:6e:8c:2c:1a:7d:72: 56:e5:32:b5:bf:57:12:a5:4e:97:3f:54:16:50:1f: 6c:24:8b:df:90:24:14:d9:20:44:9d:76:ce:90:a4: 04:3c:12:47:47:d2:50:32:4d:36:9c:35:c3:e0:48: e3:18:f6:e3:3c:5a:65:c1:49:c8:36:e0:57:9a:d9: 7f:3a:34:03:e1:b0:36:5c:57:41:25:24:91:14:0c: ca:3e:95:d4:2e:82:98:22:b4:a2:0a:17:99:fb:8e: 8b:70:5a:64:2c:bf:f4:f4:e0:03:98:94:f4:cf:4d: fe:3a:b8:c0:6f:57:d9:b4:16:99:32:bb:22:8b:2b: a4:a2:c6:a0:35:1b:12:a1:e9:6f:4a:92:3e:33:e5: 4a:08:3c:0c:a2:58:aa:eb:c0:e7:d7:6a:2c:ae:79: ce:28:b7:40:f5:3f:db:cf:b3:33:98:ef:b4:d9:3e: f8:de:d9:d3:f1:74:ae:44:7e:04:6c:6c:18:07:17: 31:59:d5:d1:74:6a:cc:1b:ec:24:08:c3:70:36:7a: 03:ba:8e:52:0f:3c:53:e7:e5:5a:75:44:62:68:19: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:83:C6:D8:C4:F8:01:BB:21:AE:81:8A:99:AF:A0:A3:8F:A6:02:A8 X509v3 Authority Key Identifier: keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/OoPG2MT4AbshroGKma-go4-mAqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.31.0/24 194.11.247.0/24 IPv6: 2a12:7dc0::/29 Signature Algorithm: sha256WithRSAEncryption 16:a7:96:89:a5:4e:63:81:d9:0b:df:d5:52:ed:a1:47:d7:a2: 4e:85:47:56:33:62:e7:46:dd:dc:43:f2:3c:a3:e6:41:57:e2: 18:fc:77:eb:14:6a:47:e0:26:3d:b1:72:f8:97:80:22:97:47: 68:f0:16:e0:02:1d:45:6d:00:6d:2a:da:33:87:0b:1f:bc:a1: de:66:da:9e:e4:cc:d7:c8:85:4b:bc:40:dd:86:c5:ec:a7:82: d8:84:e1:6c:be:0e:9d:1d:68:7c:66:de:91:34:6e:6e:da:25: 67:0f:d9:93:01:35:83:d3:97:8e:9a:a7:6d:9e:7b:fe:c8:04: 3e:3c:a6:1c:6c:12:ae:44:e6:48:c9:93:99:81:f4:11:2c:97: 0d:d9:fb:85:57:60:87:2c:57:6e:dc:be:8b:7e:57:ae:01:b4: 56:09:cb:46:c3:4f:db:93:61:b7:b0:0f:d3:66:2d:00:23:63: 80:a5:04:7f:40:aa:60:45:48:f7:f4:01:f0:36:bc:02:42:df: c5:b6:20:1d:2a:4b:12:a1:08:f1:57:95:40:8c:2d:e5:f9:01: 93:7f:9f:86:3f:be:16:58:e7:ea:14:78:e0:6f:80:4d:f5:30: 50:f4:8f:95:cd:af:85:ed:d9:9a:19:fa:bb:d2:7a:b1:4c:3d: f0:0f:9a:30 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FZSGrgzcfRhSojrradq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2 ZDRjMGIwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTgzYzZkOGM0ZjgwMWJiMjFhZTgxOGE5OWFmYTBhMzhmYTYwMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vJhcaX4C1iexY7Vzh2quht82Fz1 gjB55lksb5ZXD2HKtWy1+YBujCwafXJW5TK1v1cSpU6XP1QWUB9sJIvfkCQU2SBE nXbOkKQEPBJHR9JQMk02nDXD4EjjGPbjPFplwUnINuBXmtl/OjQD4bA2XFdBJSSR FAzKPpXULoKYIrSiCheZ+46LcFpkLL/09OADmJT0z03+OrjAb1fZtBaZMrsiiyuk osagNRsSoelvSpI+M+VKCDwMoliq68Dn12osrnnOKLdA9T/bz7MzmO+02T743tnT 8XSuRH4EbGwYBxcxWdXRdGrMG+wkCMNwNnoDuo5SDzxT5+VadURiaBmcAQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDqDxtjE+AG7Ia6BipmvoKOPpgKoMB8GA1UdIwQY MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt Y2RhMzYyNTYyOTZjLzEvT29QRzJNVDRBYnNocm9HS21hLWdvNC1tQXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJbofAwQA wgv3MA0EAgACMAcDBQMqEn3AMA0GCSqGSIb3DQEBCwUAA4IBAQAWp5aJpU5jgdkL 39VS7aFH16JOhUdWM2LnRt3cQ/I8o+ZBV+IY/HfrFGpH4CY9sXL4l4Ail0do8Bbg Ah1FbQBtKtozhwsfvKHeZtqe5MzXyIVLvEDdhsXsp4LYhOFsvg6dHWh8Zt6RNG5u 2iVnD9mTATWD05eOmqdtnnv+yAQ+PKYcbBKuROZIyZOZgfQRLJcN2fuFV2CHLFdu 3L6LfleuAbRWCctGw0/bk2G3sA/TZi0AI2OApQR/QKpgRUj39AHwNrwCQt/FtiAd KksSoQjxV5VAjC3l+QGTf5+GP74WWOfqFHjgb4BN9TBQ9I+Vza+F7dmaGfq70nqx TD3wD5ow -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:29 2026 by rpki-client