This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/FomC0OD_NwetWkEPOTha3fWVMKU.roa File: FomC0OD_NwetWkEPOTha3fWVMKU.roa (raw, json) Hash identifier: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk= Subject key identifier: 16:89:82:D0:E0:FF:37:07:AD:5A:41:0F:39:38:5A:DD:F5:95:30:A5 Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1 Certificate serial: 019B7B35D34B39557736BB599C643877D41B Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/FomC0OD_NwetWkEPOTha3fWVMKU.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13004 IP address blocks: 88.218.139.0/24 maxlen: 24 188.120.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d3:4b:39:55:77:36:bb:59:9c:64:38:77:d4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1 Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=168982d0e0ff3707ad5a410f39385addf59530a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:f4:d0:48:2c:17:3f:09:f8:6b:08:03:d7: 4b:24:4b:5b:ac:36:1a:96:36:f5:bc:2b:0f:4f:eb: bb:c7:2e:7f:e3:af:a8:b1:a2:be:3c:28:22:3d:68: c5:98:b0:b3:10:e3:19:b5:8d:c4:2d:92:cd:c0:9b: 4d:a0:e8:61:d8:10:c0:6e:6b:85:7b:1a:25:ac:9f: e3:c8:e6:36:da:76:f8:c8:8f:2a:35:85:f2:37:e2: d4:72:4e:fc:21:0f:ff:be:bc:e4:b3:9f:e5:ed:f3: b2:37:a2:61:8a:2e:56:d6:46:08:09:9c:9a:12:ae: 4c:60:76:60:79:36:44:ec:82:74:b1:15:d3:ee:cd: e4:f8:3e:25:79:6a:d8:11:65:12:50:54:88:ce:05: 37:f9:b6:b9:86:8f:08:10:2f:2d:ef:da:7a:91:4f: c1:37:8d:32:a6:15:e7:cb:dd:4f:1d:aa:03:59:cf: 04:65:90:7c:94:13:01:d7:e4:e9:b4:7a:be:1c:dc: 9d:2f:23:21:ed:7d:9f:52:52:7a:f2:3f:58:53:2c: ce:92:b8:c2:0e:e3:f8:a2:8f:d6:d6:70:38:ee:22: a8:4d:c6:cb:a1:e2:6f:d3:72:30:55:d4:d1:91:ea: df:09:96:e4:86:37:db:2e:8b:9a:a9:c5:0a:47:53: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:82:D0:E0:FF:37:07:AD:5A:41:0F:39:38:5A:DD:F5:95:30:A5 X509v3 Authority Key Identifier: keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/FomC0OD_NwetWkEPOTha3fWVMKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.139.0/24 188.120.127.0/24 Signature Algorithm: sha256WithRSAEncryption ae:8e:cd:b2:8e:39:10:dc:5e:d5:20:76:15:52:30:4c:0a:0b: fa:6c:a3:79:da:4a:4b:0e:d2:19:de:39:b0:9d:ca:2e:b5:72: 4d:78:e5:9a:7e:89:33:f1:ce:f3:c0:fe:08:48:92:18:be:85: c6:af:93:7c:73:27:12:08:e7:d1:8c:73:83:4f:b6:9d:90:38: cc:f6:5b:be:0b:91:40:7b:08:30:ce:48:db:5e:b9:f3:13:ad: 0d:40:2e:12:1f:cb:0e:8c:f7:e2:da:c9:e2:1b:fc:c7:49:e5: 5c:16:22:f0:63:72:86:9a:ce:f0:03:05:7d:dd:28:40:b0:5f: eb:ba:a0:dd:a5:3a:f3:06:b7:f4:ec:1f:89:c6:27:55:31:74: a3:dc:25:c1:52:a8:c7:92:70:2b:b3:f3:13:ee:b2:9c:51:b2: e2:b4:a7:68:94:6c:4f:3c:ea:90:1e:46:c8:4d:66:16:7a:d2: 19:1b:f0:4d:f9:92:33:a3:ac:85:2e:a4:55:28:39:38:82:3c: f9:2a:90:d3:2b:2e:8c:79:75:2d:3a:20:a2:b6:09:7d:c8:b4: 7c:b1:28:d3:0e:70:8a:7c:bc:5b:61:22:40:c9:01:b2:0d:95: 48:d7:f2:6d:0b:7d:6b:5f:97:7e:d7:1d:90:67:22:24:60:38: c5:58:85:52 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NdNLOVV3NrtZnGQ4d9QbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4 YWE5YzEwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjg5ODJkMGUwZmYzNzA3YWQ1YTQxMGYzOTM4NWFkZGY1OTUzMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+r00EgsFz8J+GsIA9dLJEtbrDYa ljb1vCsPT+u7xy5/46+osaK+PCgiPWjFmLCzEOMZtY3ELZLNwJtNoOhh2BDAbmuF exolrJ/jyOY22nb4yI8qNYXyN+LUck78IQ//vrzks5/l7fOyN6Jhii5W1kYICZya Eq5MYHZgeTZE7IJ0sRXT7s3k+D4leWrYEWUSUFSIzgU3+ba5ho8IEC8t79p6kU/B N40yphXny91PHaoDWc8EZZB8lBMB1+TptHq+HNydLyMh7X2fUlJ68j9YUyzOkrjC DuP4oo/W1nA47iKoTcbLoeJv03IwVdTRkerfCZbkhjfbLouaqcUKR1MeHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBaJgtDg/zcHrVpBDzk4Wt31lTClMB8GA1UdIwQY MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt YTllYTIwNTcwNDJiLzEvRm9tQzBPRF9Od2V0V2tFUE9UaGEzZldWTUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNqLAwQA vHh/MA0GCSqGSIb3DQEBCwUAA4IBAQCujs2yjjkQ3F7VIHYVUjBMCgv6bKN52kpL DtIZ3jmwncoutXJNeOWafokz8c7zwP4ISJIYvoXGr5N8cycSCOfRjHODT7adkDjM 9lu+C5FAewgwzkjbXrnzE60NQC4SH8sOjPfi2sniG/zHSeVcFiLwY3KGms7wAwV9 3ShAsF/ruqDdpTrzBrf07B+JxidVMXSj3CXBUqjHknArs/MT7rKcUbLitKdolGxP POqQHkbITWYWetIZG/BN+ZIzo6yFLqRVKDk4gjz5KpDTKy6MeXUtOiCitgl9yLR8 sSjTDnCKfLxbYSJAyQGyDZVI1/JtC31rX5d+1x2QZyIkYDjFWIVS -----END CERTIFICATE-----Generated at Mon Jan 12 13:29:08 2026 by rpki-client