This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/om4x3Pg40PIAblBJX9d26B-4QX0.roa File: om4x3Pg40PIAblBJX9d26B-4QX0.roa (raw, json) Hash identifier: Qi9A2ngTlEg2O3jrpwPgdYZ9CKBc+2xKViwbbRTmvy8= Subject key identifier: A2:6E:31:DC:F8:38:D0:F2:00:6E:50:49:5F:D7:76:E8:1F:B8:41:7D Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E1F66E2448D471E95121F3DBCCD6 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/om4x3Pg40PIAblBJX9d26B-4QX0.roa Signing time: Fri 02 Jan 2026 12:20:24 +0000 ROA not before: Fri 02 Jan 2026 12:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202776 IP address blocks: 2a0c:9a40:8c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e1:f6:6e:24:48:d4:71:e9:51:21:f3:db:cc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a26e31dcf838d0f2006e50495fd776e81fb8417d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:b6:df:49:45:42:40:67:ff:15:54:ee:88: 47:4b:6b:44:05:d3:8b:06:e7:5f:6a:81:de:1f:bd: ce:58:c9:5e:0e:cf:cc:8b:03:61:c9:96:bd:ff:89: 64:04:f7:bf:65:66:6a:7e:fe:e1:ed:4a:07:68:22: e8:de:30:32:3c:09:84:65:a4:be:a7:9f:99:b8:56: 56:3a:c8:a3:3d:30:d9:4a:e0:7f:05:4f:ae:57:45: c9:a9:f6:16:b6:6b:d5:30:52:02:1f:8c:42:ed:6f: 2d:19:4e:03:4c:9a:3e:e4:2d:fa:a1:0f:99:15:b0: 6d:d8:e0:12:e9:a8:00:67:f3:93:e7:74:24:04:8f: 4c:96:51:69:ce:79:a7:02:05:65:07:e1:ce:a2:24: 49:a5:dd:aa:86:6b:d3:7e:4f:ab:4a:f5:5e:bc:ee: 77:c6:c2:a0:94:18:04:68:ba:a8:52:e5:7e:5a:4e: 18:3b:de:5f:23:66:2d:c0:4f:55:a0:4f:90:99:f4: 8b:2c:e7:ca:da:e1:21:01:95:4c:bb:ac:f7:79:cb: 98:cb:d7:a9:c4:f3:0c:19:3b:14:ae:e5:44:13:88: 45:bf:38:5f:3a:d0:d8:79:e0:c2:d0:bd:e7:b1:fa: 48:d4:bc:b8:d5:4a:0b:5e:20:f2:14:10:1b:c5:65: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:31:DC:F8:38:D0:F2:00:6E:50:49:5F:D7:76:E8:1F:B8:41:7D X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/om4x3Pg40PIAblBJX9d26B-4QX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8c30::/48 Signature Algorithm: sha256WithRSAEncryption 4a:14:96:62:d4:35:0d:0b:a0:c3:fc:7c:1a:98:52:7f:9a:b9: ff:31:17:72:44:a0:81:69:c9:6f:dc:80:53:3f:a3:a0:ac:02: 9a:db:55:4c:ce:c5:fc:db:05:8f:b8:b7:21:6f:b9:81:55:03: 51:64:18:07:19:de:42:bd:56:c0:e2:e4:51:15:df:eb:f0:7f: c4:cd:2c:b7:4c:7b:39:5c:09:3b:ae:a1:25:bf:73:84:23:f5: bf:33:7a:a6:2d:d4:fd:fc:67:a1:d3:42:ad:f2:11:da:4a:aa: 9f:43:96:c3:b1:91:07:74:7d:d5:da:58:22:6c:8c:ce:61:13: b7:4a:61:4e:70:05:52:d4:06:80:22:cc:ab:02:b7:7b:b9:0f: cb:e0:9d:8c:4b:e6:88:2f:ca:b7:f8:c8:3a:e9:8a:66:b3:1d: 90:f1:a9:f0:86:c7:45:0b:3a:0e:21:ec:8b:96:53:7b:82:ae: 4f:ea:cc:1c:37:36:5e:4e:3a:3f:c5:d5:6f:42:c9:26:66:48: e9:ca:6f:96:73:b7:be:97:e9:99:a2:73:b2:82:b4:ae:dd:3e: d2:2f:75:9e:06:24:79:06:50:1d:2d:d8:d1:e8:4a:8b:3f:8a: 21:c3:2b:72:c5:65:57:09:00:b6:c3:5a:d2:e5:21:a2:d6:da: a9:e3:09:7f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puH2biRI1HHpUSHz28zWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjZlMzFkY2Y4MzhkMGYyMDA2ZTUwNDk1ZmQ3NzZlODFmYjg0MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopq230lFQkBn/xVU7ohHS2tEBdOL BudfaoHeH73OWMleDs/MiwNhyZa9/4lkBPe/ZWZqfv7h7UoHaCLo3jAyPAmEZaS+ p5+ZuFZWOsijPTDZSuB/BU+uV0XJqfYWtmvVMFICH4xC7W8tGU4DTJo+5C36oQ+Z FbBt2OAS6agAZ/OT53QkBI9MllFpznmnAgVlB+HOoiRJpd2qhmvTfk+rSvVevO53 xsKglBgEaLqoUuV+Wk4YO95fI2YtwE9VoE+QmfSLLOfK2uEhAZVMu6z3ecuYy9ep xPMMGTsUruVEE4hFvzhfOtDYeeDC0L3nsfpI1Ly41UoLXiDyFBAbxWWjXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKJuMdz4ONDyAG5QSV/XdugfuEF9MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvb200eDNQZzQwUElBYmxCSlg5ZDI2Qi00UVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIww MA0GCSqGSIb3DQEBCwUAA4IBAQBKFJZi1DUNC6DD/HwamFJ/mrn/MRdyRKCBaclv 3IBTP6OgrAKa21VMzsX82wWPuLchb7mBVQNRZBgHGd5CvVbA4uRRFd/r8H/EzSy3 THs5XAk7rqElv3OEI/W/M3qmLdT9/Geh00Kt8hHaSqqfQ5bDsZEHdH3V2lgibIzO YRO3SmFOcAVS1AaAIsyrArd7uQ/L4J2MS+aIL8q3+Mg66Ypmsx2Q8anwhsdFCzoO IeyLllN7gq5P6swcNzZeTjo/xdVvQskmZkjpym+Wc7e+l+mZonOygrSu3T7SL3We BiR5BlAdLdjR6EqLP4ohwytyxWVXCQC2w1rS5SGi1tqp4wl/ -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:48 2026 by rpki-client