This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/Om8hYJFWIm8pdYISoMz7ReVcWUI.roa File: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (raw, json) Hash identifier: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw= Subject key identifier: 3A:6F:21:60:91:56:22:6F:29:75:82:12:A0:CC:FB:45:E5:5C:59:42 Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Certificate serial: 019B79ED5069CF8A89C874FE178D03F1FE2A Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/Om8hYJFWIm8pdYISoMz7ReVcWUI.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57122 IP address blocks: 91.230.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:69:cf:8a:89:c8:74:fe:17:8d:03:f1:fe:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a6f21609156226f29758212a0ccfb45e55c5942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:3e:c8:11:65:d1:8d:d9:38:f5:06:78:be: 2e:01:d1:ab:f0:99:af:54:67:fc:17:ee:13:00:49: ab:51:9b:9b:b2:86:21:94:1f:9b:8e:52:3f:47:cd: 8f:ac:98:30:64:ef:41:d6:5b:b8:b9:ed:ba:ef:f7: 70:38:43:90:d9:3d:e4:b8:1a:d0:7d:b3:51:75:9a: 68:92:a4:6c:b7:7a:94:6f:ad:ad:be:b9:5b:0b:44: f5:8f:57:40:6c:b7:16:43:ca:d4:38:76:a5:95:3a: 77:a4:01:21:c7:1f:62:d1:4d:88:dc:c9:91:28:c3: 14:5e:5e:39:a8:f7:02:9e:ce:23:21:af:32:aa:15: 70:73:83:2e:b5:cf:f4:f6:e0:a0:fe:9c:7a:2d:6c: 2d:21:02:68:ae:8b:ff:3c:35:88:a1:f3:5a:1a:bb: 16:fe:4f:c9:dc:c8:c2:bd:e9:1b:ab:02:9b:e7:1c: ff:1e:fd:e4:58:54:24:1a:25:96:68:d5:ef:fc:08: 9e:dc:b5:ef:41:46:2f:fe:2b:2b:e1:28:7f:f0:d2: a7:52:77:4c:0c:2e:86:d2:e0:db:b7:37:59:3b:e7: 74:5a:07:75:96:33:3d:c1:a8:59:e9:f9:4c:16:0c: 76:5c:a2:4c:4a:61:65:a9:db:62:6e:be:ac:ea:36: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:21:60:91:56:22:6F:29:75:82:12:A0:CC:FB:45:E5:5C:59:42 X509v3 Authority Key Identifier: keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/Om8hYJFWIm8pdYISoMz7ReVcWUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.231.0/24 Signature Algorithm: sha256WithRSAEncryption 90:3c:08:7b:b2:74:b2:8e:c4:74:ef:90:47:ab:f6:6d:9e:a4: d3:78:2d:aa:d9:6f:dc:ab:90:17:c3:ed:64:30:0d:20:45:f5: a1:d1:37:78:38:a4:75:47:20:76:f6:75:e3:47:6a:97:a9:44: 49:13:40:8a:51:00:3b:95:a8:e6:11:4b:97:7b:52:19:42:0e: f5:99:7c:35:81:64:2f:06:ee:7b:49:8f:4e:f4:ef:f7:b4:e4: f1:17:2c:b4:52:e7:ca:19:b6:c2:3d:06:0e:b4:97:06:13:8c: 1c:f4:b4:a7:f4:47:f0:2f:85:de:17:f5:a8:b9:72:39:4b:e8: 64:37:0f:21:d6:03:ea:a8:df:ae:b4:54:94:0b:ce:93:0a:ec: a2:28:29:f4:ee:d0:e5:5e:82:ba:91:ef:fc:e5:79:4a:64:81: 2a:49:50:00:3d:d0:4c:63:db:9f:b2:55:98:eb:d5:98:4e:d7: 15:27:ce:ad:75:5a:93:02:b3:2d:eb:9c:ef:e9:08:8e:9b:d9: a6:ef:ae:0e:06:b2:83:39:7f:2e:0e:ab:fa:39:81:27:ef:31: d7:3c:16:99:46:4d:42:af:43:56:99:2f:8b:a6:c9:2f:29:e5: c4:07:58:36:51:9e:1e:59:f2:3b:8d:cf:c9:8f:02:0e:49:72: 11:69:a3:55 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57VBpz4qJyHT+F40D8f4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3 YTk0NmYwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTZmMjE2MDkxNTYyMjZmMjk3NTgyMTJhMGNjZmI0NWU1NWM1OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArts+yBFl0Y3ZOPUGeL4uAdGr8Jmv VGf8F+4TAEmrUZubsoYhlB+bjlI/R82PrJgwZO9B1lu4ue267/dwOEOQ2T3kuBrQ fbNRdZpokqRst3qUb62tvrlbC0T1j1dAbLcWQ8rUOHallTp3pAEhxx9i0U2I3MmR KMMUXl45qPcCns4jIa8yqhVwc4Mutc/09uCg/px6LWwtIQJorov/PDWIofNaGrsW /k/J3MjCvekbqwKb5xz/Hv3kWFQkGiWWaNXv/Aie3LXvQUYv/isr4Sh/8NKnUndM DC6G0uDbtzdZO+d0Wgd1ljM9wahZ6flMFgx2XKJMSmFlqdtibr6s6jZfbQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDpvIWCRViJvKXWCEqDM+0XlXFlCMB8GA1UdIwQY MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz LTI2OTBiNTVmNTBmZC8xL09tOGhZSkZXSW04cGRZSVNvTXo3UmVWY1dVSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEzLTI2OTBiNTVmNTBm ZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb5ucw DQYJKoZIhvcNAQELBQADggEBAJA8CHuydLKOxHTvkEer9m2epNN4LarZb9yrkBfD 7WQwDSBF9aHRN3g4pHVHIHb2deNHapepREkTQIpRADuVqOYRS5d7UhlCDvWZfDWB ZC8G7ntJj0707/e05PEXLLRS58oZtsI9Bg60lwYTjBz0tKf0R/Avhd4X9ai5cjlL 6GQ3DyHWA+qo3660VJQLzpMK7KIoKfTu0OVegrqR7/zleUpkgSpJUAA90Exj25+y VZjr1ZhO1xUnzq11WpMCsy3rnO/pCI6b2abvrg4GsoM5fy4Oq/o5gSfvMdc8FplG TUKvQ1aZL4umyS8p5cQHWDZRnh5Z8juNz8mPAg5JchFpo1U= -----END CERTIFICATE-----Generated at Mon Jan 12 03:11:34 2026 by rpki-client