This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0opqNClOQYOWutb3JZUYe5CLqDE.roa File: 0opqNClOQYOWutb3JZUYe5CLqDE.roa (raw, json) Hash identifier: 5oaStSd+0EUCsInD4yBstCU2I3ywM+SwKOB8WELIPDc= Subject key identifier: D2:8A:6A:34:29:4E:41:83:96:BA:D6:F7:25:95:18:7B:90:8B:A8:31 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEC4E1BE2C25B6733BE2119BCE0CAF42E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0opqNClOQYOWutb3JZUYe5CLqDE.roa Signing time: Fri 23 Jan 2026 19:21:40 +0000 ROA not before: Fri 23 Jan 2026 19:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 37.202.220.0/24 maxlen: 24 151.242.114.0/24 maxlen: 24 151.244.6.0/24 maxlen: 24 151.244.59.0/24 maxlen: 24 151.244.61.0/24 maxlen: 24 151.244.62.0/24 maxlen: 24 151.244.90.0/24 maxlen: 24 151.244.97.0/24 maxlen: 24 151.244.105.0/24 maxlen: 24 151.244.110.0/24 maxlen: 24 151.244.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:4e:1b:e2:c2:5b:67:33:be:21:19:bc:e0:ca:f4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 23 19:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d28a6a34294e418396bad6f72595187b908ba831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:38:25:c5:73:f9:a8:ef:ef:a5:a4:66:63: 83:a2:60:ff:e4:00:c9:53:20:23:8d:e3:d6:35:96: b2:1c:00:12:2d:51:d0:20:57:5a:7c:8f:be:e8:c9: 63:31:f2:65:d0:2d:f1:40:c3:c3:41:c4:0e:ef:c1: 55:ea:f1:52:c6:71:40:7c:31:cb:af:9f:70:08:d1: 23:94:a6:2b:e4:20:bb:f8:58:a5:ca:dd:95:b5:29: e0:ee:85:4d:23:e5:14:cc:25:23:26:a3:19:06:43: a9:7e:4c:38:c4:4c:3b:42:3b:43:96:bf:fd:52:55: 77:75:a6:97:4e:45:de:86:36:59:e4:a5:03:7c:f3: 1e:b3:e2:23:8c:55:12:02:fc:58:fc:8e:6d:f4:15: d9:39:e8:94:f6:31:cf:5b:a1:69:7a:4b:76:82:75: 67:21:37:00:06:dd:61:c0:c3:ec:83:58:bd:13:ca: cb:2b:12:1d:05:3b:e8:36:53:88:92:8b:f5:31:77: 26:02:22:ff:d4:12:84:d1:40:8a:23:f5:9f:6b:d1: 71:d5:13:99:44:b4:75:96:38:7f:f0:13:65:4d:e7: 45:bf:a2:ba:85:b9:50:d7:9c:bf:63:e0:e9:fe:52: ec:3b:c1:a0:31:66:16:b5:79:ce:29:82:44:b2:d4: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8A:6A:34:29:4E:41:83:96:BA:D6:F7:25:95:18:7B:90:8B:A8:31 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0opqNClOQYOWutb3JZUYe5CLqDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.220.0/24 151.242.114.0/24 151.244.6.0/24 151.244.59.0/24 151.244.61.0-151.244.62.255 151.244.90.0/24 151.244.97.0/24 151.244.105.0/24 151.244.110.0/24 151.244.132.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:14:78:31:dc:b6:03:68:70:77:2d:71:4f:93:52:ce:c6:64: 96:dd:a4:fc:1e:ef:eb:60:b1:47:be:6c:ab:b3:7b:c6:fe:0a: b8:bc:7b:3b:24:99:24:33:84:4d:86:a1:92:df:89:69:70:e7: 63:53:f0:c3:50:ab:2f:fb:15:e3:e1:83:a5:10:45:51:b4:5d: 3a:8f:31:25:2f:10:4d:37:e4:06:d1:7c:e5:a2:d9:9b:eb:74: 20:25:79:1a:35:95:be:e1:6e:2a:18:33:57:78:69:e3:40:dd: d0:a8:4b:e7:a8:ed:7b:e1:aa:54:09:2f:a7:30:69:44:83:a2: 6e:4e:8a:26:e1:1a:03:ed:39:f7:f8:24:43:de:71:5d:c0:53: 02:a6:08:19:5e:1b:ed:d8:0a:34:13:30:cb:80:df:f5:12:26: e7:0c:6c:89:ec:c6:7c:31:be:33:ec:9b:34:ff:10:03:98:e0: 55:9a:0f:0d:12:e5:c7:d8:3c:81:53:62:90:db:e1:36:80:a8: d2:5a:21:5f:93:87:7a:0a:e2:5c:89:fa:7b:d6:25:68:3d:09: 18:ae:40:0a:f8:86:71:49:be:2e:8f:00:fe:b4:e0:89:b7:a0: 4b:2e:d5:d8:28:74:ed:ca:9b:97:bf:b7:3a:ee:26:ae:7a:02: 21:65:85:aa -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZvsThviwltnM74hGbzgyvQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIzMTkyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjhhNmEzNDI5NGU0MTgzOTZiYWQ2ZjcyNTk1MTg3YjkwOGJhODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki04JcVz+ajv76WkZmODomD/5ADJ UyAjjePWNZayHAASLVHQIFdafI++6MljMfJl0C3xQMPDQcQO78FV6vFSxnFAfDHL r59wCNEjlKYr5CC7+Filyt2VtSng7oVNI+UUzCUjJqMZBkOpfkw4xEw7QjtDlr/9 UlV3daaXTkXehjZZ5KUDfPMes+IjjFUSAvxY/I5t9BXZOeiU9jHPW6Fpekt2gnVn ITcABt1hwMPsg1i9E8rLKxIdBTvoNlOIkov1MXcmAiL/1BKE0UCKI/Wfa9Fx1ROZ RLR1ljh/8BNlTedFv6K6hblQ15y/Y+Dp/lLsO8GgMWYWtXnOKYJEstShNwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFNKKajQpTkGDlrrW9yWVGHuQi6gxMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMG9wcU5DbE9RWU9XdXRiM0paVVllNUNMcURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAJcrcAwQA l/JyAwQAl/QGAwQAl/Q7MAwDBACX9D0DBACX9D4DBACX9FoDBACX9GEDBACX9GkD BACX9G4DBACX9IQwDQYJKoZIhvcNAQELBQADggEBAE4UeDHctgNocHctcU+TUs7G ZJbdpPwe7+tgsUe+bKuze8b+Cri8ezskmSQzhE2GoZLfiWlw52NT8MNQqy/7FePh g6UQRVG0XTqPMSUvEE035AbRfOWi2ZvrdCAleRo1lb7hbioYM1d4aeNA3dCoS+eo 7XvhqlQJL6cwaUSDom5OiibhGgPtOff4JEPecV3AUwKmCBleG+3YCjQTMMuA3/US JucMbInsxnwxvjPsmzT/EAOY4FWaDw0S5cfYPIFTYpDb4TaAqNJaIV+Th3oK4lyJ +nvWJWg9CRiuQAr4hnFJvi6PAP604Im3oEsu1dgodO3Km5e/tzruJq56AiFlhao= -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:29 2026 by rpki-client