This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/op_F057a4GgIgBhETNDsjlr7XoU.roa File: op_F057a4GgIgBhETNDsjlr7XoU.roa (raw, json) Hash identifier: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI= Subject key identifier: A2:9F:C5:D3:9E:DA:E0:68:08:80:18:44:4C:D0:EC:8E:5A:FB:5E:85 Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Certificate serial: 019B77C72FBB5442668C6F6B1EE6463B21A5 Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/op_F057a4GgIgBhETNDsjlr7XoU.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200813 IP address blocks: 185.94.160.0/22 maxlen: 22 185.94.160.0/24 maxlen: 24 185.94.161.0/24 maxlen: 24 185.94.162.0/24 maxlen: 24 185.94.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2f:bb:54:42:66:8c:6f:6b:1e:e6:46:3b:21:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a29fc5d39edae068088018444cd0ec8e5afb5e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:bc:ce:04:fd:d2:2a:be:a4:e1:24:4f:9f: ed:1b:90:88:c2:51:ad:6d:14:8c:e6:75:47:be:75: 12:4c:86:48:f0:e9:31:ae:df:9f:66:a8:5c:0f:b8: e2:8f:b4:9a:c4:26:0f:45:bd:19:e7:08:81:9e:65: 64:6f:5a:f9:20:1a:5a:df:93:2a:29:94:1f:01:03: f3:f8:17:31:72:76:de:30:8e:b0:0c:fa:6a:a2:55: ca:18:1a:35:9d:e8:47:d6:f5:d9:1b:5f:b4:e2:63: f3:63:aa:8d:8d:9a:30:cd:7f:43:2f:d2:e8:9a:6f: 0e:b4:94:da:68:e5:60:93:8e:aa:3a:57:76:5d:80: 0c:5e:a7:1b:35:db:5b:38:aa:21:e0:5c:9f:06:88: 22:df:31:b3:ff:00:86:d2:e9:90:8c:ac:f1:5f:b1: 14:ba:b6:1d:e6:ea:83:dd:23:b5:a5:c7:1a:59:d8: 59:1f:7b:20:93:57:26:37:17:f9:3a:79:7e:36:54: 74:9e:df:fc:4e:98:a0:ba:e9:e0:a1:3e:c6:cc:8f: 63:7d:d1:04:40:ff:ba:59:2a:73:16:ce:e3:51:6c: d1:65:40:d5:5b:88:b3:d1:59:10:34:7e:a8:af:8e: 12:60:47:4f:eb:cf:f6:8d:af:3e:6a:15:b5:0b:36: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9F:C5:D3:9E:DA:E0:68:08:80:18:44:4C:D0:EC:8E:5A:FB:5E:85 X509v3 Authority Key Identifier: keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/op_F057a4GgIgBhETNDsjlr7XoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.160.0/22 Signature Algorithm: sha256WithRSAEncryption 69:e3:3a:7c:c2:71:9d:df:66:80:bb:2d:21:d3:ce:8a:4c:5f: 3b:39:ea:b7:aa:bb:78:b9:7c:eb:ed:e6:c8:2c:22:e8:59:19: 9a:fd:ce:55:4e:03:2f:b3:7a:57:7c:1f:9c:04:c1:f6:12:44: 11:f9:61:28:d7:11:86:23:3a:47:12:18:30:a0:16:a2:c4:57: f7:46:1b:21:d0:7a:66:07:fc:e6:fa:1a:2d:22:35:b5:59:e0: e9:fb:ab:23:39:bd:24:00:a1:bd:d0:24:79:b5:a1:12:19:31: 1d:47:7d:fc:15:ac:f8:28:d2:59:f3:12:ea:8f:53:b1:3d:a7: 6f:2c:66:a6:91:af:63:8a:e0:5d:d0:8b:52:81:5b:cf:7d:c7: 06:ca:9a:77:80:62:a1:6a:fe:c0:32:ef:ca:32:15:21:cd:ba: 9a:5d:5e:1b:7f:c4:66:a2:79:a8:c6:71:93:9f:a7:7f:5c:f3: 4e:c0:ad:86:e9:e9:f7:34:d8:84:69:25:da:b3:cb:78:ac:e2: 02:29:b3:9b:5f:e0:07:df:34:f7:07:00:44:de:13:fc:cd:5b: 69:4c:82:5d:59:16:f9:a2:48:6f:d2:b5:f1:ac:9a:79:49:41: 60:01:b7:9c:00:61:00:80:b6:8d:fe:c1:40:4b:77:94:9e:ed: bc:2c:61:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xy+7VEJmjG9rHuZGOyGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzY3YjUxZTZiNDgyYjllN2E3NDgzNjYyYTVkYmVlMWI4 ZDg1YTAwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjlmYzVkMzllZGFlMDY4MDg4MDE4NDQ0Y2QwZWM4ZTVhZmI1ZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitm8zgT90iq+pOEkT5/tG5CIwlGt bRSM5nVHvnUSTIZI8Okxrt+fZqhcD7jij7SaxCYPRb0Z5wiBnmVkb1r5IBpa35Mq KZQfAQPz+BcxcnbeMI6wDPpqolXKGBo1nehH1vXZG1+04mPzY6qNjZowzX9DL9Lo mm8OtJTaaOVgk46qOld2XYAMXqcbNdtbOKoh4FyfBogi3zGz/wCG0umQjKzxX7EU urYd5uqD3SO1pccaWdhZH3sgk1cmNxf5Onl+NlR0nt/8TpiguungoT7GzI9jfdEE QP+6WSpzFs7jUWzRZUDVW4iz0VkQNH6or44SYEdP68/2ja8+ahW1CzaSFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKfxdOe2uBoCIAYREzQ7I5a+16FMB8GA1UdIwQY MBaAFOR2e1HmtIK556dINmKl2+4bjYWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgt YmRiZTE2ODA2NjE2LzEvb3BfRjA1N2E0R2dJZ0JoRVRORHNqbHI3WG9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgtYmRiZTE2ODA2NjE2 LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV6gMA0G CSqGSIb3DQEBCwUAA4IBAQBp4zp8wnGd32aAuy0h086KTF87Oeq3qrt4uXzr7ebI LCLoWRma/c5VTgMvs3pXfB+cBMH2EkQR+WEo1xGGIzpHEhgwoBaixFf3Rhsh0Hpm B/zm+hotIjW1WeDp+6sjOb0kAKG90CR5taESGTEdR338Faz4KNJZ8xLqj1OxPadv LGamka9jiuBd0ItSgVvPfccGypp3gGKhav7AMu/KMhUhzbqaXV4bf8RmonmoxnGT n6d/XPNOwK2G6en3NNiEaSXas8t4rOICKbObX+AH3zT3BwBE3hP8zVtpTIJdWRb5 okhv0rXxrJp5SUFgAbecAGEAgLaN/sFAS3eUnu28LGF7 -----END CERTIFICATE-----Generated at Thu Jan 1 14:06:42 2026 by rpki-client