This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/oMQuRCoxL-6bEDFKF42iZlXxZyM.roa File: oMQuRCoxL-6bEDFKF42iZlXxZyM.roa (raw, json) Hash identifier: d0Ky8A74nhXB4jJ/jzKdX0aqd/0D99oCVxcWYNjjXPs= Subject key identifier: A0:C4:2E:44:2A:31:2F:EE:9B:10:31:4A:17:8D:A2:66:55:F1:67:23 Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397 Certificate serial: 019B7E375EF751C60CFDAD1FCAE0A888D65B Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/oMQuRCoxL-6bEDFKF42iZlXxZyM.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47322 IP address blocks: 171.25.226.0/24 maxlen: 24 171.25.227.0/24 maxlen: 24 185.151.72.0/24 maxlen: 24 185.151.73.0/24 maxlen: 24 185.151.74.0/24 maxlen: 24 185.151.75.0/24 maxlen: 24 195.182.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5e:f7:51:c6:0c:fd:ad:1f:ca:e0:a8:88:d6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397 Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0c42e442a312fee9b10314a178da26655f16723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:a7:a7:ce:d9:d5:e9:8d:15:4d:fa:eb:37: 9d:47:27:95:21:dd:b5:6e:b9:29:49:7e:02:09:fc: 01:6e:3a:0a:4e:36:c7:39:c2:db:ed:3b:22:1c:49: 76:c0:3b:01:b4:47:21:b9:85:27:19:d8:06:37:e5: 65:80:bc:d3:92:55:b8:17:83:b2:9c:f5:56:27:6e: 49:d7:e2:17:ec:64:9b:c6:08:30:46:aa:6b:8b:42: fb:3b:af:ce:69:7f:08:6f:c7:ac:0d:4f:05:4a:b9: bf:d5:1a:47:1e:44:69:7c:c3:55:58:4f:c1:af:2a: 68:5f:4e:92:69:31:7d:03:c4:0d:17:c0:5a:06:09: 95:87:a0:54:5e:1e:a8:4d:80:82:da:f2:f2:5f:92: 1f:33:22:51:a8:3d:04:e6:a5:83:a5:87:27:d7:e7: 8c:d1:ec:26:95:2a:56:3b:b1:a1:0f:14:3a:50:c4: c0:34:9c:c5:e0:54:c9:c6:1b:a8:d8:9f:38:34:78: f5:8c:78:5d:bc:32:49:75:f0:f7:59:db:c6:34:22: 89:63:2d:83:00:f3:5d:30:9e:48:b2:17:56:b0:09: 60:75:70:27:95:a1:f2:d2:96:59:ff:0c:20:95:97: 74:f7:77:2c:ee:35:17:c0:74:36:07:04:7a:77:be: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:2E:44:2A:31:2F:EE:9B:10:31:4A:17:8D:A2:66:55:F1:67:23 X509v3 Authority Key Identifier: keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/oMQuRCoxL-6bEDFKF42iZlXxZyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.226.0/23 185.151.72.0/22 195.182.52.0/24 Signature Algorithm: sha256WithRSAEncryption 66:0f:1f:e4:3f:8a:d7:58:50:fc:93:80:0b:e4:c1:be:40:31: 0d:02:5f:75:31:ce:f7:96:3c:5f:47:22:e5:fe:15:c4:48:aa: c8:49:3c:23:5c:73:28:92:91:c7:d6:5f:8c:be:61:f7:cc:9d: f0:ac:48:0a:df:25:d6:fc:9f:3a:2a:1d:07:8f:d2:e6:f8:b1: 29:c4:33:d9:fd:64:d5:01:fc:f4:5c:99:23:2e:ed:20:07:17: b7:23:72:c8:b6:cf:dc:1d:30:71:94:02:f2:49:b4:5d:23:5c: 5f:6c:dc:58:0a:ab:dd:d7:00:b6:4a:e6:e2:9a:9f:6b:4c:c8: 28:a9:ee:a8:e3:3d:fa:a2:4d:32:a4:06:07:64:45:99:24:a6: da:81:34:d7:85:0b:96:df:e3:ce:ef:7f:fd:bd:7d:f8:8c:b3: 35:b1:66:d6:4e:0c:3b:fb:c9:32:22:b2:45:43:73:4e:42:b1: 8c:9f:1d:a0:e2:e3:08:33:de:be:e5:84:e8:cb:f4:24:e1:18: d9:10:95:b3:d9:97:dd:18:26:e3:c4:ff:7e:39:8e:6d:65:6d: e6:98:10:89:17:2f:54:f9:ab:d7:c6:7a:d7:a6:23:56:6a:a5: 8f:1f:d0:59:e7:ba:20:b1:0a:09:00:f4:09:f1:88:89:6d:2a: 3f:9e:67:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N173UcYM/a0fyuCoiNZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk ZjEzOTcwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGM0MmU0NDJhMzEyZmVlOWIxMDMxNGExNzhkYTI2NjU1ZjE2NzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvSnp87Z1emNFU366zedRyeVId21 brkpSX4CCfwBbjoKTjbHOcLb7TsiHEl2wDsBtEchuYUnGdgGN+VlgLzTklW4F4Oy nPVWJ25J1+IX7GSbxggwRqpri0L7O6/OaX8Ib8esDU8FSrm/1RpHHkRpfMNVWE/B rypoX06SaTF9A8QNF8BaBgmVh6BUXh6oTYCC2vLyX5IfMyJRqD0E5qWDpYcn1+eM 0ewmlSpWO7GhDxQ6UMTANJzF4FTJxhuo2J84NHj1jHhdvDJJdfD3WdvGNCKJYy2D APNdMJ5IshdWsAlgdXAnlaHy0pZZ/wwglZd093cs7jUXwHQ2BwR6d75YIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKDELkQqMS/umxAxSheNomZV8WcjMB8GA1UdIwQY MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt ZWNjNGMxYzM2YjBkLzEvb01RdVJDb3hMLTZiRURGS0Y0MmlabFh4WnlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBqxniAwQC uZdIAwQAw7Y0MA0GCSqGSIb3DQEBCwUAA4IBAQBmDx/kP4rXWFD8k4AL5MG+QDEN Al91Mc73ljxfRyLl/hXESKrISTwjXHMokpHH1l+MvmH3zJ3wrEgK3yXW/J86Kh0H j9Lm+LEpxDPZ/WTVAfz0XJkjLu0gBxe3I3LIts/cHTBxlALySbRdI1xfbNxYCqvd 1wC2Subimp9rTMgoqe6o4z36ok0ypAYHZEWZJKbagTTXhQuW3+PO73/9vX34jLM1 sWbWTgw7+8kyIrJFQ3NOQrGMnx2g4uMIM96+5YToy/Qk4RjZEJWz2ZfdGCbjxP9+ OY5tZW3mmBCJFy9U+avXxnrXpiNWaqWPH9BZ57ogsQoJAPQJ8YiJbSo/nmdm -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:05 2026 by rpki-client