This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OmB30X2N5wiNQDlAcTQxQ3cHcrU.roa File: OmB30X2N5wiNQDlAcTQxQ3cHcrU.roa (raw, json) Hash identifier: NjMJJ5+JhWrKsMNDWhw30jmh4gJF8syji3K+g6mx+mg= Subject key identifier: 3A:60:77:D1:7D:8D:E7:08:8D:40:39:40:71:34:31:43:77:07:72:B5 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12FF7271C3C426685E5FDEBFD17851 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OmB30X2N5wiNQDlAcTQxQ3cHcrU.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203042 IP address blocks: 194.209.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ff:72:71:c3:c4:26:68:5e:5f:de:bf:d1:78:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a6077d17d8de7088d40394071343143770772b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:b6:d8:2f:08:85:5d:52:8b:91:9f:f0:51: 78:a2:39:4c:53:ca:7f:37:d3:22:88:76:e7:d2:80: 76:65:15:2d:9e:c3:7c:74:e8:d9:8c:12:f0:b6:ce: 99:5a:29:73:f4:5d:e1:2d:27:fd:ba:1a:d3:97:e1: 96:9e:b0:18:ac:a0:aa:46:e4:54:a4:99:89:34:55: bf:55:c9:9b:dd:28:6f:cc:b6:eb:15:93:ab:d0:fd: 26:ec:99:b2:f2:bb:3d:c3:db:e8:a9:3b:ef:01:dd: cc:da:a3:bb:e3:e4:c8:6e:8d:3d:e1:e7:c1:39:5e: 4c:34:8c:03:fa:7f:2c:41:f0:a3:86:12:46:ab:ae: c6:c6:47:14:30:f2:63:5c:18:86:9c:92:19:ed:b4: c5:04:92:c2:a2:7a:c4:dc:2f:15:ed:96:f0:a5:12: c9:0c:b6:74:6a:01:9e:da:0d:7e:8b:18:59:39:40: 84:34:5b:47:32:9b:06:2f:39:9a:8c:a8:b2:e6:03: f0:3e:2e:27:2d:a8:c4:00:79:81:44:5f:87:24:52: d2:b6:1a:b4:10:07:0e:69:01:3a:3d:cb:29:59:1f: 2d:be:ed:7f:47:89:a9:e5:13:6f:18:38:98:cb:68: ae:8b:1b:24:99:b7:c4:1b:3e:cc:87:23:5f:4e:7b: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:60:77:D1:7D:8D:E7:08:8D:40:39:40:71:34:31:43:77:07:72:B5 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OmB30X2N5wiNQDlAcTQxQ3cHcrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.64.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d4:59:19:40:78:30:d6:e5:9e:82:65:67:49:c2:7c:7f:37: 6c:66:be:60:9a:ad:37:d8:7d:bf:fd:7a:fb:cc:4b:8e:7f:6b: 89:da:f0:a4:e0:8c:17:07:a9:a4:c6:5e:f8:9e:9d:46:0c:68: b3:06:9c:22:fd:9c:e7:89:39:00:cf:69:64:51:ff:ff:9a:72: ea:39:63:b8:a6:64:8f:a1:cd:49:1c:d8:2d:80:2c:88:a8:37: 72:0a:ef:bf:08:40:28:b6:6d:5c:85:5b:83:64:41:d0:75:d6: 81:7e:fe:42:7c:38:0a:84:9d:aa:ef:b9:b2:0a:d1:52:5c:1d: 06:4a:18:aa:e0:95:97:0e:99:37:ce:f8:ce:b0:b7:8d:e8:cf: 51:ed:db:f6:6e:30:cc:d3:6b:e5:4c:9d:15:d2:96:66:9a:a5: 74:37:8e:d2:38:4c:f2:6c:ea:49:20:4b:b5:d8:2a:82:d4:b3: 5f:e3:26:3d:9b:b8:d3:f3:09:da:ad:4b:bf:60:e9:4e:6a:30: cc:e3:ed:5d:64:74:35:5a:52:ad:5d:2f:7d:c5:ad:cd:8b:20: 8b:0d:ab:24:84:5e:89:0a:fd:e0:bb:24:57:58:f3:c7:01:dc: 8e:d7:e7:a7:76:cf:c1:85:22:e9:54:6a:ad:a7:e8:b6:d9:2d: 84:2d:f0:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ev9yccPEJmheX96/0XhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTYwNzdkMTdkOGRlNzA4OGQ0MDM5NDA3MTM0MzE0Mzc3MDc3MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04K22C8IhV1Si5Gf8FF4ojlMU8p/ N9MiiHbn0oB2ZRUtnsN8dOjZjBLwts6ZWilz9F3hLSf9uhrTl+GWnrAYrKCqRuRU pJmJNFW/Vcmb3ShvzLbrFZOr0P0m7Jmy8rs9w9voqTvvAd3M2qO74+TIbo094efB OV5MNIwD+n8sQfCjhhJGq67GxkcUMPJjXBiGnJIZ7bTFBJLConrE3C8V7ZbwpRLJ DLZ0agGe2g1+ixhZOUCENFtHMpsGLzmajKiy5gPwPi4nLajEAHmBRF+HJFLSthq0 EAcOaQE6PcspWR8tvu1/R4mp5RNvGDiYy2iuixskmbfEGz7MhyNfTnsQUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDpgd9F9jecIjUA5QHE0MUN3B3K1MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvT21CMzBYMk41d2lOUURsQWNUUXhRM2NIY3JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFAMA0G CSqGSIb3DQEBCwUAA4IBAQCE1FkZQHgw1uWegmVnScJ8fzdsZr5gmq032H2//Xr7 zEuOf2uJ2vCk4IwXB6mkxl74np1GDGizBpwi/ZzniTkAz2lkUf//mnLqOWO4pmSP oc1JHNgtgCyIqDdyCu+/CEAotm1chVuDZEHQddaBfv5CfDgKhJ2q77myCtFSXB0G Shiq4JWXDpk3zvjOsLeN6M9R7dv2bjDM02vlTJ0V0pZmmqV0N47SOEzybOpJIEu1 2CqC1LNf4yY9m7jT8wnarUu/YOlOajDM4+1dZHQ1WlKtXS99xa3NiyCLDaskhF6J Cv3guyRXWPPHAdyO1+ends/BhSLpVGqtp+i22S2ELfAm -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:42 2026 by rpki-client