This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/OPjYQ1kkCx3-JjUQLXZBrqUmONs.roa File: OPjYQ1kkCx3-JjUQLXZBrqUmONs.roa (raw, json) Hash identifier: UbZhr4LvgW7oKX4x3UjeUpOPU945zE23SVdqDQmi0Yo= Subject key identifier: 38:F8:D8:43:59:24:0B:1D:FE:26:35:10:2D:76:41:AE:A5:26:38:DB Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019B2DA559554643AA4D73867E45EFC3663D Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/OPjYQ1kkCx3-JjUQLXZBrqUmONs.roa Signing time: Wed 17 Dec 2025 18:49:29 +0000 ROA not before: Wed 17 Dec 2025 18:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 81.85.72.0/24 maxlen: 24 81.85.74.0/24 maxlen: 24 81.85.75.0/24 maxlen: 24 185.9.24.0/24 maxlen: 24 185.9.25.0/24 maxlen: 24 185.9.26.0/24 maxlen: 24 213.155.28.0/24 maxlen: 24 2a11:2cc0:2::/47 maxlen: 47 2a11:2cc0:4::/47 maxlen: 47 2a11:2cc0:6::/47 maxlen: 47 2a11:2cc0:8::/47 maxlen: 47 2a11:2cc0:10::/47 maxlen: 47 2a11:2cc0:20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:a5:59:55:46:43:aa:4d:73:86:7e:45:ef:c3:66:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Dec 17 18:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38f8d84359240b1dfe2635102d7641aea52638db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:ea:8b:57:21:f0:69:9f:52:8b:aa:25:23: 9f:17:b2:d6:32:2f:2b:3e:db:c1:8a:31:7f:ca:5d: 8d:3a:ed:f5:26:8f:5d:73:7c:5a:cf:67:c8:5e:4e: 87:68:29:2f:b5:dc:19:4f:57:10:4c:cd:c4:bf:cc: 4f:1d:68:32:84:78:2b:e6:6c:de:21:5a:ba:46:5f: 76:ce:0a:41:1d:4c:89:6b:86:ce:5b:cb:6f:fc:c5: 99:2a:62:d1:8e:96:2f:9c:96:6d:bf:0b:1f:a3:3b: 95:1b:5d:f3:32:d7:08:aa:e8:ae:99:ef:84:0f:18: f4:74:9a:f4:06:4b:8b:73:ca:49:49:e5:ba:a8:a3: 02:c1:bb:4d:0f:b3:d6:88:e2:f6:c8:41:e0:82:e3: a6:08:0e:20:6e:fa:03:9a:1e:43:35:39:5f:a9:b0: 40:48:75:47:f5:e2:bf:e6:b8:c8:3c:56:82:0d:32: 01:6d:be:a9:67:96:ba:48:61:93:12:55:a4:21:1e: 94:e4:d6:be:7b:19:0f:b3:f8:65:2e:ce:cf:3b:48: 55:f8:d6:7d:c1:4a:05:8a:67:99:0b:1d:df:81:66: b3:78:a2:9d:4b:22:21:b5:c5:c0:1b:3f:ec:d0:e6: 8f:c2:6c:c6:e9:66:44:23:28:f3:a5:25:d2:fc:86: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F8:D8:43:59:24:0B:1D:FE:26:35:10:2D:76:41:AE:A5:26:38:DB X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/OPjYQ1kkCx3-JjUQLXZBrqUmONs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.72.0/24 81.85.74.0/23 185.9.24.0-185.9.26.255 213.155.28.0/24 IPv6: 2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff 2a11:2cc0:10::/47 2a11:2cc0:20::/47 Signature Algorithm: sha256WithRSAEncryption 8b:8a:f6:29:c9:61:39:cb:a3:59:b1:15:38:3b:bc:36:ad:e6: 14:ce:a7:51:ff:d4:e7:26:65:96:03:7a:11:c4:21:4f:66:4f: 69:44:27:78:cc:5c:f6:5e:ba:51:4e:7e:50:cb:df:29:c3:d2: f2:f7:1c:9c:1a:5e:74:c6:49:cc:1a:7f:8d:f8:fe:79:01:f0: e7:54:97:db:b2:47:7c:0b:44:87:a3:3e:71:4e:a0:86:b4:a2: e0:cb:20:ee:c6:f0:71:41:ef:a8:fe:bb:b1:65:18:40:47:34: 4c:6c:3b:38:13:52:8b:3c:9f:15:da:60:28:0c:b2:21:44:60: c9:4f:41:a1:ba:c1:54:aa:f9:26:01:60:ae:e4:00:a9:39:69: f3:81:2a:c1:47:fe:14:3a:28:ff:af:3d:d8:b1:50:81:aa:52: b9:9f:cf:48:cc:e4:39:fa:aa:e0:da:5b:e0:15:71:0b:46:cc: 4c:05:04:36:6a:7e:a8:f4:49:5c:39:bd:2f:78:83:70:b0:21: e5:61:b7:86:8a:27:29:6d:4b:5e:ca:0c:7b:a6:02:78:f2:71: 5f:51:80:01:00:63:a6:de:7e:a2:00:cd:ef:93:15:f3:3f:f5: 0b:38:a8:3f:5d:95:ce:6e:9a:d4:25:47:1f:bb:e4:e8:f2:2d: f2:2d:55:13 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZstpVlVRkOqTXOGfkXvw2Y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMjE3MTg0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGY4ZDg0MzU5MjQwYjFkZmUyNjM1MTAyZDc2NDFhZWE1MjYzOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFzqi1ch8GmfUouqJSOfF7LWMi8r PtvBijF/yl2NOu31Jo9dc3xaz2fIXk6HaCkvtdwZT1cQTM3Ev8xPHWgyhHgr5mze IVq6Rl92zgpBHUyJa4bOW8tv/MWZKmLRjpYvnJZtvwsfozuVG13zMtcIquiume+E Dxj0dJr0BkuLc8pJSeW6qKMCwbtND7PWiOL2yEHgguOmCA4gbvoDmh5DNTlfqbBA SHVH9eK/5rjIPFaCDTIBbb6pZ5a6SGGTElWkIR6U5Na+exkPs/hlLs7PO0hV+NZ9 wUoFimeZCx3fgWazeKKdSyIhtcXAGz/s0OaPwmzG6WZEIyjzpSXS/IaquwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFDj42ENZJAsd/iY1EC12Qa6lJjjbMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvT1BqWVExa2tDeDMtSmpVUUxYWkJycVVtT05zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjAmBAIAATAgAwQAUVVIAwQB UVVKMAwDBAO5CRgDBAC5CRoDBADVmxwwLAQCAAIwJjASAwcBKhEswAACAwcBKhEs wAAIAwcBKhEswAAQAwcBKhEswAAgMA0GCSqGSIb3DQEBCwUAA4IBAQCLivYpyWE5 y6NZsRU4O7w2reYUzqdR/9TnJmWWA3oRxCFPZk9pRCd4zFz2XrpRTn5Qy98pw9Ly 9xycGl50xknMGn+N+P55AfDnVJfbskd8C0SHoz5xTqCGtKLgyyDuxvBxQe+o/rux ZRhARzRMbDs4E1KLPJ8V2mAoDLIhRGDJT0GhusFUqvkmAWCu5ACpOWnzgSrBR/4U Oij/rz3YsVCBqlK5n89IzOQ5+qrg2lvgFXELRsxMBQQ2an6o9ElcOb0veINwsCHl YbeGiicpbUteygx7pgJ48nFfUYABAGOm3n6iAM3vkxXzP/ULOKg/XZXObprUJUcf u+To8i3yLVUT -----END CERTIFICATE-----Generated at Fri Dec 19 21:48:02 2025 by rpki-client