This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/omKHkE8YHZq1XP5PN9HMJprVOp8.roa File: omKHkE8YHZq1XP5PN9HMJprVOp8.roa (raw, json) Hash identifier: MmpJRNhqaLRfTIGoiK2U5hLmuW2sEbpdb2u4AXDgU9A= Subject key identifier: A2:62:87:90:4F:18:1D:9A:B5:5C:FE:4F:37:D1:CC:26:9A:D5:3A:9F Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Certificate serial: 019B76EAE5490A0BC2354E260F4AE17F2AA2 Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/omKHkE8YHZq1XP5PN9HMJprVOp8.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49043 IP address blocks: 86.117.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e5:49:0a:0b:c2:35:4e:26:0f:4a:e1:7f:2a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a26287904f181d9ab55cfe4f37d1cc269ad53a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:42:78:b7:e9:4c:cf:0f:98:97:a9:2a:f5: 18:8b:12:80:7e:df:0a:00:89:c8:4b:35:15:3b:6f: 4f:4f:3c:4d:f5:66:05:d3:dc:f6:a5:4b:e3:21:9a: 25:97:c7:27:ae:9e:93:1f:3c:7d:09:d2:e8:97:7e: d4:08:67:62:9e:b4:a3:8d:8f:d6:4d:08:e3:bb:a2: d3:49:cd:0f:87:a6:4b:8b:14:7a:6c:19:a6:f5:20: fe:d4:73:38:d9:1d:c6:d7:eb:bf:35:3b:2c:b1:e1: 4b:05:f1:f8:7f:66:26:22:42:55:96:73:8d:25:77: 4d:c3:f2:a7:02:c2:eb:4b:a1:df:fc:63:1b:fd:06: 1e:52:f1:99:07:d4:a6:51:73:69:7b:66:a7:7e:08: 2c:da:67:2b:87:f7:4d:fd:8e:be:71:2d:4f:d0:bf: bb:ab:b6:ad:1c:2e:51:91:17:2d:a3:28:fc:81:61: 0c:57:ed:f0:5a:b1:35:62:50:e6:00:68:eb:ba:63: 3a:5d:fc:d3:68:ed:2c:c9:18:20:79:25:d7:dc:6c: ce:6a:7b:f2:b9:78:90:f7:3e:46:47:aa:7f:6c:50: 57:9c:e9:8b:1e:02:ce:ec:cf:ec:60:fc:88:50:e8: cc:52:3f:b8:07:5d:5b:e8:61:da:58:1f:fe:45:50: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:62:87:90:4F:18:1D:9A:B5:5C:FE:4F:37:D1:CC:26:9A:D5:3A:9F X509v3 Authority Key Identifier: keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/omKHkE8YHZq1XP5PN9HMJprVOp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.117.18.0/23 Signature Algorithm: sha256WithRSAEncryption 06:9f:a7:ba:01:a8:28:61:f4:16:1c:8d:d4:0e:82:08:cd:c3: 37:a2:66:47:b1:3e:04:40:af:60:d7:0b:a9:09:7e:cd:bb:cb: 9d:af:59:85:3a:46:df:5c:a8:69:ea:ad:1f:97:76:d0:d6:ef: 42:ad:2a:b9:ae:73:60:4f:1f:0c:ed:bf:ca:52:05:dc:17:7a: 35:ce:d7:31:40:78:8a:11:ce:12:a7:e8:eb:5f:f2:8a:58:c0: 2a:e5:17:e4:f8:02:2f:4c:fb:55:a6:12:9e:ea:aa:9e:44:62: c6:ea:1a:db:d2:44:a0:c0:a1:39:99:b6:ce:3c:51:21:ec:5c: 0b:cc:1c:88:b5:ff:14:ad:27:29:9d:b8:40:dd:b4:32:ba:94: 14:3a:a4:ac:ef:36:78:7f:41:64:21:14:41:d6:e9:c5:22:2a: 14:74:68:00:5d:de:c8:27:9b:56:37:a8:ac:bf:70:42:08:c4: 90:d4:26:05:be:4d:9d:58:99:b5:b5:f7:bb:87:97:97:88:5a: 40:69:8f:5e:4f:bb:4a:3e:78:d5:28:8d:ab:23:10:e8:5a:0c: 1c:63:12:c5:a1:70:39:03:3b:b3:39:e3:de:2e:31:db:14:87: 13:f0:cb:f8:fd:4a:a6:c1:51:11:9e:2f:69:40:16:1e:18:02: ce:67:6d:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26uVJCgvCNU4mD0rhfyqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx YmMxNmEwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjYyODc5MDRmMTgxZDlhYjU1Y2ZlNGYzN2QxY2MyNjlhZDUzYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMRCeLfpTM8PmJepKvUYixKAft8K AInISzUVO29PTzxN9WYF09z2pUvjIZoll8cnrp6THzx9CdLol37UCGdinrSjjY/W TQjju6LTSc0Ph6ZLixR6bBmm9SD+1HM42R3G1+u/NTssseFLBfH4f2YmIkJVlnON JXdNw/KnAsLrS6Hf/GMb/QYeUvGZB9SmUXNpe2anfggs2mcrh/dN/Y6+cS1P0L+7 q7atHC5RkRctoyj8gWEMV+3wWrE1YlDmAGjrumM6XfzTaO0syRggeSXX3GzOanvy uXiQ9z5GR6p/bFBXnOmLHgLO7M/sYPyIUOjMUj+4B11b6GHaWB/+RVAVsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJih5BPGB2atVz+TzfRzCaa1TqfMB8GA1UdIwQY MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt NTM4NmIxZDk2M2JjLzEvb21LSGtFOFlIWnExWFA1UE45SE1KcHJWT3A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVnUSMA0G CSqGSIb3DQEBCwUAA4IBAQAGn6e6AagoYfQWHI3UDoIIzcM3omZHsT4EQK9g1wup CX7Nu8udr1mFOkbfXKhp6q0fl3bQ1u9CrSq5rnNgTx8M7b/KUgXcF3o1ztcxQHiK Ec4Sp+jrX/KKWMAq5Rfk+AIvTPtVphKe6qqeRGLG6hrb0kSgwKE5mbbOPFEh7FwL zByItf8UrScpnbhA3bQyupQUOqSs7zZ4f0FkIRRB1unFIioUdGgAXd7IJ5tWN6is v3BCCMSQ1CYFvk2dWJm1tfe7h5eXiFpAaY9eT7tKPnjVKI2rIxDoWgwcYxLFoXA5 AzuzOePeLjHbFIcT8Mv4/UqmwVERni9pQBYeGALOZ21C -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client