This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa File: OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa (raw, json) Hash identifier: aK0mESa/pTNFNbE9AYjmY5ObclP62vz5mDsyUcql268= Subject key identifier: 3A:69:44:BF:C4:B2:60:2F:A6:D5:36:86:C5:06:93:90:BF:52:EB:96 Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Certificate serial: 019B7F82D42AB9E2702543CB6AAA5354ADBE Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa Signing time: Fri 02 Jan 2026 16:20:38 +0000 ROA not before: Fri 02 Jan 2026 16:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 139.28.192.0/22 maxlen: 22 139.28.192.0/23 maxlen: 23 139.28.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d4:2a:b9:e2:70:25:43:cb:6a:aa:53:54:ad:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Validity Not Before: Jan 2 16:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a6944bfc4b2602fa6d53686c5069390bf52eb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:5e:36:cb:6d:5d:16:4b:45:87:c7:1a:f6: 08:be:2a:10:b0:32:65:84:34:8c:6b:09:08:1e:49: 4b:39:8f:08:f2:91:1a:7d:ae:e5:2d:24:4c:39:18: 6f:bb:de:fd:3c:c5:70:39:a5:c6:1c:79:a6:b5:a8: e3:0c:f9:d3:08:13:8b:3a:f5:93:d9:b2:4a:68:fb: 65:d4:b9:e8:5b:9a:44:3e:a1:69:4f:3f:89:8f:a7: f8:57:42:19:f0:be:fa:bd:bd:5f:da:17:9a:c7:f9: 4d:6e:ce:c2:64:34:f6:5c:aa:e6:42:e8:db:1d:d3: 8f:53:97:fd:3c:08:af:7e:22:83:9b:62:1f:e7:46: f6:5b:34:a3:fe:50:96:f6:37:49:a5:41:60:89:82: 7e:ef:e6:e7:9a:07:7b:6c:a4:42:23:db:fb:b9:fd: 3c:ec:1d:db:d1:86:8f:4a:ac:ae:d5:15:4f:18:54: f3:26:96:26:a1:17:eb:ad:76:dc:35:ae:b2:c8:e6: e4:90:4d:b2:30:5a:7d:e4:4a:2c:36:b3:ec:3d:c6: 20:5b:2e:b3:56:06:2b:a6:c2:ed:36:97:2d:5b:ab: c5:87:0b:6e:b6:a1:b4:89:79:14:93:74:15:33:cd: a8:cb:d5:00:e1:53:d2:ee:73:12:49:22:b0:ab:c3: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:69:44:BF:C4:B2:60:2F:A6:D5:36:86:C5:06:93:90:BF:52:EB:96 X509v3 Authority Key Identifier: keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:9a:62:35:2e:85:0f:d2:7a:b1:6b:c0:0c:0c:72:77:9e:be: 5b:6b:b6:21:7f:a8:7e:62:1f:a4:21:77:9c:8b:55:96:b7:4c: 13:47:03:79:1b:b7:30:26:a5:69:04:8d:aa:3d:8b:66:1f:a5: 73:61:ce:1b:14:87:fc:80:c1:1f:aa:d9:c4:90:0a:58:5f:14: d9:a8:b9:e1:5d:2f:69:fd:c4:4a:55:b8:37:43:a9:a6:8f:81: 89:d5:9a:60:c9:91:50:85:de:c1:da:72:6e:e1:92:f9:03:17: ba:f3:0e:d0:f0:48:1b:be:0d:79:05:45:02:70:d7:cc:ae:45: 2b:96:2f:7e:05:24:1d:dc:f6:8a:ae:8d:2c:93:8d:f4:1a:ce: 18:61:31:67:53:ee:d6:e0:71:8d:e4:e3:07:65:a8:a3:24:24: 94:7d:c3:a6:e2:86:7f:3a:a9:e9:f0:4c:32:f3:f8:38:f6:eb: 07:27:79:19:6f:c4:c6:aa:bf:92:6f:ff:c2:c7:fe:87:96:1c: ea:89:7f:9d:87:b9:a7:fe:a4:1f:0b:ca:c3:ab:58:c2:54:0f: 96:fc:ca:e3:6f:2b:02:a4:6f:2d:7d:bd:24:c5:b2:4d:b1:8d: 52:c8:d9:cb:b3:fd:1d:d5:29:e5:21:fb:60:2e:8d:91:38:6c: 11:d3:aa:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gtQqueJwJUPLaqpTVK2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5 NDlmYTgwHhcNMjYwMTAyMTYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTY5NDRiZmM0YjI2MDJmYTZkNTM2ODZjNTA2OTM5MGJmNTJlYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSleNsttXRZLRYfHGvYIvioQsDJl hDSMawkIHklLOY8I8pEafa7lLSRMORhvu979PMVwOaXGHHmmtajjDPnTCBOLOvWT 2bJKaPtl1LnoW5pEPqFpTz+Jj6f4V0IZ8L76vb1f2heax/lNbs7CZDT2XKrmQujb HdOPU5f9PAivfiKDm2If50b2WzSj/lCW9jdJpUFgiYJ+7+bnmgd7bKRCI9v7uf08 7B3b0YaPSqyu1RVPGFTzJpYmoRfrrXbcNa6yyObkkE2yMFp95EosNrPsPcYgWy6z VgYrpsLtNpctW6vFhwtutqG0iXkUk3QVM82oy9UA4VPS7nMSSSKwq8Py6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDppRL/EsmAvptU2hsUGk5C/UuuWMB8GA1UdIwQY MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct OGEzZDhkYzM1OGViLzEvT21sRXY4U3lZQy1tMVRhR3hRYVRrTDlTNjVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixzAMA0G CSqGSIb3DQEBCwUAA4IBAQCfmmI1LoUP0nqxa8AMDHJ3nr5ba7Yhf6h+Yh+kIXec i1WWt0wTRwN5G7cwJqVpBI2qPYtmH6VzYc4bFIf8gMEfqtnEkApYXxTZqLnhXS9p /cRKVbg3Q6mmj4GJ1ZpgyZFQhd7B2nJu4ZL5Axe68w7Q8Egbvg15BUUCcNfMrkUr li9+BSQd3PaKro0sk430Gs4YYTFnU+7W4HGN5OMHZaijJCSUfcOm4oZ/Oqnp8Ewy 8/g49usHJ3kZb8TGqr+Sb//Cx/6HlhzqiX+dh7mn/qQfC8rDq1jCVA+W/MrjbysC pG8tfb0kxbJNsY1SyNnLs/0d1SnlIftgLo2ROGwR06rP -----END CERTIFICATE-----Generated at Fri Jan 23 16:02:57 2026 by rpki-client