This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IlOmAQxAMxi2KSeCGf0qI-oeUDo.roa File: IlOmAQxAMxi2KSeCGf0qI-oeUDo.roa (raw, json) Hash identifier: nVTrEtJKbVr73wl1iyGtkrCa9D+31FprwkaOEk4B9t8= Subject key identifier: 22:53:A6:01:0C:40:33:18:B6:29:27:82:19:FD:2A:23:EA:1E:50:3A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C13117732405DF99AF20449F8669443 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IlOmAQxAMxi2KSeCGf0qI-oeUDo.roa Signing time: Fri 02 Jan 2026 00:19:43 +0000 ROA not before: Fri 02 Jan 2026 00:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216416 IP address blocks: 94.249.174.0/24 maxlen: 24 95.215.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:11:77:32:40:5d:f9:9a:f2:04:49:f8:66:94:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2253a6010c403318b629278219fd2a23ea1e503a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:6b:f9:bd:ce:cf:2d:18:3a:90:92:6c:c9: f5:5a:85:ab:55:d4:b3:ff:e7:dc:41:b2:59:6c:72: c1:79:22:6f:7a:0b:eb:51:a3:42:9a:8a:f3:8b:4a: 0b:48:8b:c8:72:f0:c0:62:74:0a:18:ee:47:9d:d3: 3f:61:ed:f0:a1:75:07:f0:45:18:71:0d:3d:60:49: b6:0a:6a:ba:4d:ae:93:11:bf:b8:d0:44:55:63:16: f1:45:f3:51:8b:9d:c6:cf:38:e9:96:9b:6d:3d:d0: 11:ba:17:b0:ec:64:bc:e3:13:5a:86:f4:9c:4c:cd: fd:5c:e7:ae:7e:ef:70:77:36:ff:5d:c4:6c:6d:ef: 11:f0:98:a2:43:89:c8:9f:ea:f5:99:49:48:bc:bd: 2b:0b:30:cc:12:1c:56:03:b9:0c:40:98:2d:14:14: ba:ec:5c:3d:2b:70:a7:8b:89:b4:54:8d:8c:21:00: bd:c6:c4:66:b1:c2:47:bf:54:45:f6:54:99:6b:df: 5f:72:98:52:3b:4b:ac:30:33:ef:da:67:41:2e:28: 84:8a:a6:bb:67:04:c8:b6:08:c8:74:5e:ef:37:4d: 8b:2f:2e:89:59:f4:00:67:0f:46:b3:b9:2d:af:6e: 46:d9:b2:8c:b7:e8:e1:76:5c:bc:8d:5d:49:e3:79: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:53:A6:01:0C:40:33:18:B6:29:27:82:19:FD:2A:23:EA:1E:50:3A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IlOmAQxAMxi2KSeCGf0qI-oeUDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.174.0/24 95.215.34.0/24 Signature Algorithm: sha256WithRSAEncryption ba:ee:b7:bd:96:45:a2:7a:6f:4f:2a:0a:cf:f2:5f:e1:2e:79: c0:fc:75:ca:40:7f:70:eb:7b:37:03:bb:4c:7e:ab:01:e8:e1: 26:4d:b9:66:76:d0:ad:7d:53:3d:54:f3:d0:f1:e9:b7:80:3a: c1:16:fc:0f:6b:a9:bf:e6:71:ff:e8:88:4b:c4:87:10:25:f7: b3:88:c6:2b:58:fb:ff:19:e0:91:6b:51:ca:35:7e:b7:d3:02: 6b:8a:2b:68:0b:81:76:36:39:e6:8f:95:ea:d3:f6:4f:42:8f: ca:71:92:e5:ed:f3:85:1e:dd:15:6b:27:c1:b8:5a:27:91:79: 7f:d2:10:eb:92:6c:18:14:ee:16:98:fd:6d:64:ab:3c:ac:8a: 64:ac:b1:8e:fa:c3:08:70:de:80:3f:61:66:ed:3e:76:5b:16: d7:5c:d2:c9:5c:e8:e5:81:be:81:6a:59:e7:f4:52:85:eb:bd: 98:a9:8c:f7:5d:51:a5:3b:3f:d6:d5:67:aa:96:e3:1e:ee:b3: 5b:59:12:51:37:b9:f8:64:32:63:51:9c:17:b8:6b:e5:74:1b: b6:9b:7a:af:8f:53:8f:c4:c8:d9:e3:f5:4a:e8:84:7f:74:be: ff:12:6c:28:8d:70:6d:df:a5:13:d6:e8:92:89:74:81:ac:80: 64:7e:75:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ExF3MkBd+ZryBEn4ZpRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjUzYTYwMTBjNDAzMzE4YjYyOTI3ODIxOWZkMmEyM2VhMWU1MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwZr+b3Ozy0YOpCSbMn1WoWrVdSz /+fcQbJZbHLBeSJvegvrUaNCmorzi0oLSIvIcvDAYnQKGO5HndM/Ye3woXUH8EUY cQ09YEm2Cmq6Ta6TEb+40ERVYxbxRfNRi53GzzjplpttPdARuhew7GS84xNahvSc TM39XOeufu9wdzb/XcRsbe8R8JiiQ4nIn+r1mUlIvL0rCzDMEhxWA7kMQJgtFBS6 7Fw9K3Cni4m0VI2MIQC9xsRmscJHv1RF9lSZa99fcphSO0usMDPv2mdBLiiEiqa7 ZwTItgjIdF7vN02LLy6JWfQAZw9Gs7ktr25G2bKMt+jhdly8jV1J43miJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCJTpgEMQDMYtiknghn9KiPqHlA6MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvSWxPbUFReEFNeGkyS1NlQ0dmMHFJLW9lVURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXvmuAwQA X9ciMA0GCSqGSIb3DQEBCwUAA4IBAQC67re9lkWiem9PKgrP8l/hLnnA/HXKQH9w 63s3A7tMfqsB6OEmTblmdtCtfVM9VPPQ8em3gDrBFvwPa6m/5nH/6IhLxIcQJfez iMYrWPv/GeCRa1HKNX630wJriitoC4F2Njnmj5Xq0/ZPQo/KcZLl7fOFHt0VayfB uFonkXl/0hDrkmwYFO4WmP1tZKs8rIpkrLGO+sMIcN6AP2Fm7T52WxbXXNLJXOjl gb6Balnn9FKF672YqYz3XVGlOz/W1WeqluMe7rNbWRJRN7n4ZDJjUZwXuGvldBu2 m3qvj1OPxMjZ4/VK6IR/dL7/EmwojXBt36UT1uiSiXSBrIBkfnU6 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:24 2026 by rpki-client