This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/omCKLPBL-sX0T1F0arfYXvQOCR0.roa File: omCKLPBL-sX0T1F0arfYXvQOCR0.roa (raw, json) Hash identifier: Y7NRh10SXgE8EspE8su8BnYaod8821/L39MdUhs+QAI= Subject key identifier: A2:60:8A:2C:F0:4B:FA:C5:F4:4F:51:74:6A:B7:D8:5E:F4:0E:09:1D Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f Certificate serial: 019B7F81160CD16E379CE6F411D856141302 Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/omCKLPBL-sX0T1F0arfYXvQOCR0.roa Signing time: Fri 02 Jan 2026 16:18:44 +0000 ROA not before: Fri 02 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215494 IP address blocks: 2001:67c:df0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:16:0c:d1:6e:37:9c:e6:f4:11:d8:56:14:13:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f Validity Not Before: Jan 2 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2608a2cf04bfac5f44f51746ab7d85ef40e091d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:4a:39:9a:59:eb:7d:11:b7:e6:61:66:70: b7:bc:0d:e5:e2:0e:1b:ff:65:75:03:16:99:f1:45: c6:5f:a5:8a:2b:4b:a4:cf:ea:25:1c:ad:c1:53:36: 92:26:9d:24:83:e7:30:d7:41:f8:9a:e7:db:8e:c4: 4c:37:18:6b:f5:0b:30:1f:bb:0e:ff:f8:0c:ae:9c: 5a:ef:15:32:4b:7b:9f:78:bb:db:f6:4b:42:6e:d3: fb:f2:01:86:17:c8:b3:b0:26:7c:66:28:d9:9d:04: 7b:6f:38:e3:a2:6b:8a:df:a7:f8:1c:45:ec:ef:56: af:c6:40:ef:39:3c:ff:a3:fa:4b:e9:61:3b:9b:12: f2:0f:a2:72:d4:e3:84:21:c1:1b:1f:7c:89:ca:0d: 29:c2:c3:5e:d3:70:71:5f:da:f2:8b:62:8c:17:5b: 25:67:6e:44:7e:02:df:83:ec:60:88:3a:bc:5f:9a: 01:83:b5:f7:ca:1b:09:a8:c2:61:c5:e8:e6:7a:9d: 45:12:53:de:6f:c7:e1:a0:ba:9a:c9:3a:f8:a2:71: 09:64:1c:97:ec:64:97:ee:52:7a:22:4c:67:4d:f3: 9c:51:bb:17:58:41:19:d7:0f:ea:dc:72:c6:69:f9: 50:8f:5a:a7:8a:73:39:c6:97:ac:dc:5a:6f:f6:84: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:60:8A:2C:F0:4B:FA:C5:F4:4F:51:74:6A:B7:D8:5E:F4:0E:09:1D X509v3 Authority Key Identifier: keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/omCKLPBL-sX0T1F0arfYXvQOCR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:df0::/48 Signature Algorithm: sha256WithRSAEncryption 56:31:d3:65:2b:51:ec:37:a0:3a:2c:6c:7c:92:53:73:b1:0d: a4:0e:28:f1:38:19:d0:aa:e0:2a:00:93:60:22:ef:77:18:80: 55:b6:d2:4d:f7:c0:50:b3:02:69:3a:d3:97:73:e3:3f:54:09: 76:7e:09:c7:59:f4:63:a3:e7:dd:3a:fe:cc:1d:a4:46:a9:32: 73:94:d8:ab:98:42:ad:1b:9a:23:33:53:07:53:85:de:07:61: c9:07:1e:20:e5:70:a5:c8:3d:6a:d4:ac:3f:78:1a:8b:80:49: 2d:85:15:e6:2f:d0:c1:c0:ff:dc:f5:a9:42:47:8f:c6:f6:ab: b7:84:87:3e:bb:0b:5c:b4:7b:4c:0e:34:53:61:40:b0:30:82: dc:84:6e:b3:68:f8:2e:55:3d:b5:c6:d8:e5:b7:93:8b:44:33: 0f:f1:42:9b:e2:44:15:70:a1:cb:5f:22:ab:68:79:af:10:65: e8:eb:e1:49:4e:74:43:f6:ae:94:9e:58:89:6a:33:2a:cc:53: 36:28:d4:e2:d0:21:8b:ae:e3:e3:ad:ab:a7:11:77:1b:c0:8a: c9:a8:50:bd:1c:c3:8d:b7:71:ec:5d:c0:00:9d:b8:b7:5e:fb: 6a:c2:ab:7d:e6:a7:0e:d7:d8:09:be:08:70:df:65:29:9e:b9: 3a:21:15:a8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gRYM0W43nOb0EdhWFBMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjI3YWIwZDU1ZjhhZTBkZGE4NmZkZWYxYzM1NzI0ZTE4 ODVlNGYwHhcNMjYwMTAyMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjYwOGEyY2YwNGJmYWM1ZjQ0ZjUxNzQ2YWI3ZDg1ZWY0MGUwOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOlKOZpZ630Rt+ZhZnC3vA3l4g4b /2V1AxaZ8UXGX6WKK0ukz+olHK3BUzaSJp0kg+cw10H4mufbjsRMNxhr9QswH7sO //gMrpxa7xUyS3ufeLvb9ktCbtP78gGGF8izsCZ8ZijZnQR7bzjjomuK36f4HEXs 71avxkDvOTz/o/pL6WE7mxLyD6Jy1OOEIcEbH3yJyg0pwsNe03BxX9ryi2KMF1sl Z25EfgLfg+xgiDq8X5oBg7X3yhsJqMJhxejmep1FElPeb8fhoLqayTr4onEJZByX 7GSX7lJ6IkxnTfOcUbsXWEEZ1w/q3HLGaflQj1qninM5xpes3Fpv9oQIUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKJgiizwS/rF9E9RdGq32F70DgkdMB8GA1UdIwQY MBaAFCKyerDVX4rg3ahv3vHDVyThiF5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgt ZGU2NjQ0YzNkYWVkLzEvb21DS0xQQkwtc1gwVDFGMGFyZllYdlFPQ1IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgtZGU2NjQ0YzNkYWVk LzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA3w MA0GCSqGSIb3DQEBCwUAA4IBAQBWMdNlK1HsN6A6LGx8klNzsQ2kDijxOBnQquAq AJNgIu93GIBVttJN98BQswJpOtOXc+M/VAl2fgnHWfRjo+fdOv7MHaRGqTJzlNir mEKtG5ojM1MHU4XeB2HJBx4g5XClyD1q1Kw/eBqLgEkthRXmL9DBwP/c9alCR4/G 9qu3hIc+uwtctHtMDjRTYUCwMILchG6zaPguVT21xtjlt5OLRDMP8UKb4kQVcKHL XyKraHmvEGXo6+FJTnRD9q6UnliJajMqzFM2KNTi0CGLruPjraunEXcbwIrJqFC9 HMONt3HsXcAAnbi3Xvtqwqt95qcO19gJvghw32Upnrk6IRWo -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:08 2026 by rpki-client