This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa File: oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa (raw, json) Hash identifier: 1OWtYAgWFUz9U3ZRyQBV7HsQLa1e5YTunuUhvpeW3zA= Subject key identifier: A0:C5:EE:4A:31:F2:4E:2D:88:49:5E:59:5E:47:81:FC:69:90:DA:A4 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A34E1F4A92390D2AE4AE08A2A13641 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 178.253.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4e:1f:4a:92:39:0d:2a:e4:ae:08:a2:a1:36:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0c5ee4a31f24e2d88495e595e4781fc6990daa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:43:73:2f:68:69:90:7d:29:f6:24:47:5f: aa:f0:cd:a0:7b:0e:1c:89:61:3f:fa:74:1d:32:c7: be:0e:d6:1a:9b:9b:68:f1:18:d3:ef:54:c0:18:e5: 2b:b5:27:49:db:49:d6:fb:06:c6:e5:bf:b9:5e:c9: 63:31:08:7c:68:e7:88:31:a3:ba:91:1e:39:86:73: 91:bd:7a:24:4f:53:96:a0:f8:88:52:3b:a5:83:59: 9a:20:f1:94:30:f8:f1:d5:82:99:4b:bc:e1:cd:e1: be:38:7e:ce:98:4b:cf:c1:2c:1b:a2:3c:61:da:e5: f0:e7:db:9e:41:ad:49:18:63:2a:c6:7a:03:08:51: 87:e0:e5:30:e3:c8:8a:81:0d:76:fc:42:da:96:4e: f9:9a:f5:4a:42:c1:31:a0:c2:ba:38:95:e2:18:0e: f9:b7:94:c2:b5:fa:8b:53:14:2e:49:46:6e:82:1e: ac:17:4d:b1:f3:ed:37:a9:67:3c:34:f3:8b:d8:ef: 72:5f:d8:2f:48:2b:45:1a:cd:c2:92:8b:5d:5f:0a: e3:95:02:d4:76:80:81:b3:24:b4:6c:63:2d:d0:d0: 3f:6c:39:8d:a9:f1:9d:42:3e:12:cb:0f:21:0c:07: cd:ad:4a:1d:34:76:10:89:15:1e:6f:77:99:96:6c: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:EE:4A:31:F2:4E:2D:88:49:5E:59:5E:47:81:FC:69:90:DA:A4 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.12.0/23 Signature Algorithm: sha256WithRSAEncryption 45:c7:dd:25:4c:55:c1:91:3d:fc:bd:ae:2a:a5:72:16:bf:85: 02:af:41:2c:76:4b:94:5b:c0:38:03:8c:b5:b1:22:39:b1:89: a9:54:c0:06:ae:3b:13:9b:60:7f:b3:d2:3d:e2:9b:21:89:f7: 1b:60:53:0c:b7:9b:db:b4:62:e8:9f:90:10:15:ff:a9:b1:6d: e2:43:cd:db:67:e0:8a:74:9f:12:d0:f7:a8:62:cf:74:d9:5f: fb:40:49:b0:49:42:77:6b:40:4b:86:d6:6c:6d:34:9d:55:60: bf:b1:6c:ad:6b:dd:b4:98:72:21:8d:0f:27:20:1e:0e:ea:c0: d8:64:33:a6:5f:25:c3:a1:41:90:17:7a:44:77:83:a2:d8:48: fd:ab:05:dc:e9:cd:63:5a:cf:5f:b2:a7:98:f8:0c:8c:3f:f9: aa:76:c3:c2:6c:a8:5d:bd:c5:c7:b1:5b:82:cc:d7:5f:4c:1b: af:8e:fd:cd:9d:b3:70:55:f8:64:04:ae:46:77:65:c7:68:5a: 7a:4b:68:fb:a7:2c:b4:d9:95:ea:be:10:4e:cb:d7:f3:a3:15: 2f:e0:bd:40:2d:57:7f:c8:f2:c4:34:e7:2f:e2:55:2c:79:6b: 65:1e:97:19:d3:cd:c1:55:b3:51:d4:f7:4d:3b:ce:29:3b:e1: 64:96:5a:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o04fSpI5DSrkrgiioTZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGM1ZWU0YTMxZjI0ZTJkODg0OTVlNTk1ZTQ3ODFmYzY5OTBkYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCxDcy9oaZB9KfYkR1+q8M2gew4c iWE/+nQdMse+DtYam5to8RjT71TAGOUrtSdJ20nW+wbG5b+5XsljMQh8aOeIMaO6 kR45hnORvXokT1OWoPiIUjulg1maIPGUMPjx1YKZS7zhzeG+OH7OmEvPwSwbojxh 2uXw59ueQa1JGGMqxnoDCFGH4OUw48iKgQ12/ELalk75mvVKQsExoMK6OJXiGA75 t5TCtfqLUxQuSUZugh6sF02x8+03qWc8NPOL2O9yX9gvSCtFGs3CkotdXwrjlQLU doCBsyS0bGMt0NA/bDmNqfGdQj4Syw8hDAfNrUodNHYQiRUeb3eZlmweLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDF7kox8k4tiEleWV5HgfxpkNqkMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvb01YdVNqSHlUaTJJU1Y1WlhrZUJfR21RMnFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsv0MMA0G CSqGSIb3DQEBCwUAA4IBAQBFx90lTFXBkT38va4qpXIWv4UCr0EsdkuUW8A4A4y1 sSI5sYmpVMAGrjsTm2B/s9I94pshifcbYFMMt5vbtGLon5AQFf+psW3iQ83bZ+CK dJ8S0PeoYs902V/7QEmwSUJ3a0BLhtZsbTSdVWC/sWyta920mHIhjQ8nIB4O6sDY ZDOmXyXDoUGQF3pEd4Oi2Ej9qwXc6c1jWs9fsqeY+AyMP/mqdsPCbKhdvcXHsVuC zNdfTBuvjv3NnbNwVfhkBK5Gd2XHaFp6S2j7pyy02ZXqvhBOy9fzoxUv4L1ALVd/ yPLENOcv4lUseWtlHpcZ083BVbNR1PdNO84pO+FkllqU -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:22 2026 by rpki-client