This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/om6r_PRgvC88afm-eAAviDRNd7Q.roa File: om6r_PRgvC88afm-eAAviDRNd7Q.roa (raw, json) Hash identifier: HWVKgNFmAfTNLTXhSjEhN+rrOHDfuvE+e2FtGSVK3xU= Subject key identifier: A2:6E:AB:FC:F4:60:BC:2F:3C:69:F9:BE:78:00:2F:88:34:4D:77:B4 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EDA613FFB5D1C0A954E0715DF04A9 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/om6r_PRgvC88afm-eAAviDRNd7Q.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 178.253.226.0/24 maxlen: 24 188.255.196.0/24 maxlen: 24 212.69.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:da:61:3f:fb:5d:1c:0a:95:4e:07:15:df:04:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a26eabfcf460bc2f3c69f9be78002f88344d77b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:ad:ad:65:b6:e6:bc:05:fe:11:47:ed:6a: ae:58:eb:e1:32:9d:1a:90:0a:8b:c9:98:14:c9:b2: b4:aa:c9:70:74:f7:eb:0e:c2:ba:48:e0:83:c1:b3: da:d9:96:4e:c9:90:27:a0:00:6b:09:ac:41:2b:f6: 30:02:6d:bc:e8:a9:57:12:82:5a:81:00:ac:e3:d5: 9c:ad:bd:c0:f1:9c:c2:29:03:ba:d7:24:6b:5f:1b: 74:ea:a4:0c:f9:50:49:46:8b:35:b4:db:39:3f:80: 02:20:0b:f1:8e:c3:4e:f5:8e:30:e7:20:ac:40:c8: a4:a5:d0:17:83:cd:7b:a0:33:9f:fe:98:57:af:77: 65:f7:27:0a:ca:98:80:3a:63:21:44:43:47:3c:93: 34:49:43:7a:dd:a2:36:b7:1c:4f:94:1e:2e:a1:8b: 50:b3:a3:8b:26:ff:28:5f:12:85:b2:b0:1a:ac:50: f7:1f:49:e3:62:53:64:3f:71:19:ba:c2:6f:7a:ba: 6c:e0:a2:fe:12:8a:5e:12:a0:55:32:0f:7d:f7:a3: 5f:18:f7:25:ff:52:90:17:d3:c3:76:21:ef:ef:c2: 1f:33:e6:00:76:51:4f:3d:c1:f3:ed:a2:f5:5a:f8: 59:7f:ab:84:94:b4:68:c3:07:f4:fd:e2:25:b8:d6: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:AB:FC:F4:60:BC:2F:3C:69:F9:BE:78:00:2F:88:34:4D:77:B4 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/om6r_PRgvC88afm-eAAviDRNd7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.226.0/24 188.255.196.0/24 212.69.9.0/24 Signature Algorithm: sha256WithRSAEncryption 50:cf:0a:13:b0:84:32:86:b4:e6:05:b7:14:2e:4b:f9:8a:7b: 0c:46:63:7b:31:fe:f5:0d:e4:42:61:86:1b:8c:c3:8d:99:3c: 9c:0d:ce:3b:8c:53:03:85:e3:20:85:48:26:00:33:2a:34:bb: df:40:76:96:8b:b2:02:14:cf:6f:88:e2:5b:cb:a0:a3:3a:4d: fe:e0:38:dc:c9:a3:27:73:1e:27:72:26:e6:49:3d:a9:eb:a6: cd:d6:cb:f2:66:ce:86:21:aa:d2:8f:ce:6c:71:24:f1:36:ab: 38:ac:cc:74:8c:03:57:8d:c9:02:91:2f:05:8f:bd:c1:6f:fd: d0:35:a9:12:b8:d4:d1:7c:c7:c7:2c:37:b2:74:bd:f5:02:5f: 81:0a:9a:d9:f3:df:8d:0c:95:04:39:1a:df:e4:65:94:58:95: ac:4f:d7:ac:d5:37:ec:04:1f:94:08:6b:d8:d5:91:9c:67:b8: 42:d9:3d:7b:c6:f0:5e:7f:bc:5d:7d:1d:c9:93:5d:22:f2:71: cb:1b:50:aa:d4:da:d1:c8:55:c3:7a:f9:57:2e:03:8e:2c:0a: 39:cf:ed:4a:1b:ac:83:03:f4:96:5c:ad:9a:13:ce:4b:d4:0d: e2:97:f0:2a:5d:ed:80:0a:94:54:3a:8f:d7:46:26:45:0f:b8: af:62:66:7b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ftphP/tdHAqVTgcV3wSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjZlYWJmY2Y0NjBiYzJmM2M2OWY5YmU3ODAwMmY4ODM0NGQ3N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBitrWW25rwF/hFH7WquWOvhMp0a kAqLyZgUybK0qslwdPfrDsK6SOCDwbPa2ZZOyZAnoABrCaxBK/YwAm286KlXEoJa gQCs49Wcrb3A8ZzCKQO61yRrXxt06qQM+VBJRos1tNs5P4ACIAvxjsNO9Y4w5yCs QMikpdAXg817oDOf/phXr3dl9ycKypiAOmMhRENHPJM0SUN63aI2txxPlB4uoYtQ s6OLJv8oXxKFsrAarFD3H0njYlNkP3EZusJverps4KL+EopeEqBVMg9996NfGPcl /1KQF9PDdiHv78IfM+YAdlFPPcHz7aL1WvhZf6uElLRowwf0/eIluNbWwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKJuq/z0YLwvPGn5vngAL4g0TXe0MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvb202cl9QUmd2Qzg4YWZtLWVBQXZpRFJOZDdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsv3iAwQA vP/EAwQA1EUJMA0GCSqGSIb3DQEBCwUAA4IBAQBQzwoTsIQyhrTmBbcULkv5insM RmN7Mf71DeRCYYYbjMONmTycDc47jFMDheMghUgmADMqNLvfQHaWi7ICFM9viOJb y6CjOk3+4DjcyaMncx4ncibmST2p66bN1svyZs6GIarSj85scSTxNqs4rMx0jANX jckCkS8Fj73Bb/3QNakSuNTRfMfHLDeydL31Al+BCprZ89+NDJUEORrf5GWUWJWs T9es1TfsBB+UCGvY1ZGcZ7hC2T17xvBef7xdfR3Jk10i8nHLG1Cq1NrRyFXDevlX LgOOLAo5z+1KG6yDA/SWXK2aE85L1A3il/AqXe2ACpRUOo/XRiZFD7ivYmZ7 -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:01 2026 by rpki-client