This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/oMEOSgDbceEyhWfFRbikVx4AYfo.roa File: oMEOSgDbceEyhWfFRbikVx4AYfo.roa (raw, json) Hash identifier: pmNBs7855rtrPbhA49sQF8g8yRzPMLTG0Bga7lNZ5Bk= Subject key identifier: A0:C1:0E:4A:00:DB:71:E1:32:85:67:C5:45:B8:A4:57:1E:00:61:FA Certificate issuer: /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b Certificate serial: 019B791146CCD6315DBF075C446CC0773921 Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/oMEOSgDbceEyhWfFRbikVx4AYfo.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61401 IP address blocks: 85.155.252.0/24 maxlen: 24 85.155.253.0/24 maxlen: 24 85.155.254.0/24 maxlen: 24 85.155.255.0/24 maxlen: 24 194.54.147.0/24 maxlen: 24 2a12:c840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:cc:d6:31:5d:bf:07:5c:44:6c:c0:77:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0c10e4a00db71e1328567c545b8a4571e0061fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:ad:cf:9f:9f:f3:c3:f1:a5:ba:2c:95:ab: a6:26:39:99:a4:26:ef:3c:8b:a6:e0:d5:59:82:cb: 8d:32:8d:7f:aa:00:9b:6a:64:c4:0a:9d:09:e5:04: 08:f3:bc:ad:38:c3:40:a7:a4:f6:90:b5:27:3b:5c: 79:84:39:f5:89:ef:6e:77:4f:f3:1a:18:b8:17:bf: ec:04:91:fc:7f:d6:0f:7b:23:ee:25:d6:55:c1:4b: 99:c2:6b:79:0c:3a:4c:b5:2b:5f:e2:0a:ff:f5:70: 83:c0:85:cd:8a:62:b0:8b:c6:fb:9f:db:b8:67:51: 22:29:96:64:14:5a:2f:28:04:66:71:94:ec:c8:e6: bf:63:79:4c:4e:ed:e3:fe:40:68:f3:f1:eb:cc:8b: 66:6c:96:cb:9a:9e:2d:b2:0a:a5:66:fa:98:f9:d9: 00:8d:1d:d5:bd:81:a6:98:4d:13:76:0c:14:38:3b: 2c:f6:24:7b:48:41:27:3f:05:97:b1:54:36:e3:04: 94:3a:ab:91:46:ce:8a:ed:cd:10:10:42:e2:12:79: 08:d7:ee:e4:17:4f:c2:f8:b8:8e:3b:5d:22:ee:8a: 58:71:02:82:5e:b4:79:f2:07:06:65:52:51:35:2a: 5e:0d:1e:bd:ee:84:a8:00:2a:e2:ea:57:4b:56:c4: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C1:0E:4A:00:DB:71:E1:32:85:67:C5:45:B8:A4:57:1E:00:61:FA X509v3 Authority Key Identifier: keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/oMEOSgDbceEyhWfFRbikVx4AYfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.252.0/22 194.54.147.0/24 IPv6: 2a12:c840::/29 Signature Algorithm: sha256WithRSAEncryption 4b:c8:eb:ed:d1:1d:b3:57:30:c1:5e:f9:f6:af:8c:b9:3f:fb: 3d:82:ae:7d:05:17:5d:06:81:a5:66:f2:26:b0:5f:b2:6b:7f: cc:fc:4e:3b:53:b8:73:ec:87:31:b1:e4:a2:c6:cc:ed:53:5c: 21:48:e4:21:d6:3b:5f:46:56:6a:e2:92:45:4f:92:e4:8f:91: 72:10:71:f3:6a:4e:e7:64:42:1d:e3:a9:38:19:77:a2:d9:06: 57:38:1b:ac:4e:79:88:55:d6:90:01:9e:6c:b3:e9:1f:95:cd: 91:f5:40:86:d4:68:93:09:bb:06:d8:a1:70:ca:08:f7:09:7d: 5d:6b:06:90:7c:b7:f6:18:a1:b6:a9:cc:31:cb:d0:89:f0:69: cf:c0:08:e8:bc:85:33:55:e0:7a:50:5d:86:29:c5:ac:25:21: 95:18:fe:0d:9a:40:79:11:f1:1f:5d:bc:c9:dc:d5:21:09:a4: cd:bd:0c:f1:ef:c8:21:0d:f1:18:20:c4:bc:1d:75:5f:9f:1a: 17:ff:c9:f3:28:dd:a3:bf:ed:96:d0:6a:42:3f:85:8d:cc:a8: 95:e4:4e:7e:c2:e5:01:40:6e:cf:5c:b3:d3:58:bf:e7:6f:4a: 21:25:d4:0e:a3:82:06:6b:a5:51:4d:c1:30:cc:91:50:35:83: b3:2f:43:28 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EUbM1jFdvwdcRGzAdzkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjcxY2Y3OWZjZjY2ZDI5ZmVjMGQ3N2E2NmE3ZDBlYTFi Yjc1OWIwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGMxMGU0YTAwZGI3MWUxMzI4NTY3YzU0NWI4YTQ1NzFlMDA2MWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vitz5+f88PxpboslaumJjmZpCbv PIum4NVZgsuNMo1/qgCbamTECp0J5QQI87ytOMNAp6T2kLUnO1x5hDn1ie9ud0/z Ghi4F7/sBJH8f9YPeyPuJdZVwUuZwmt5DDpMtStf4gr/9XCDwIXNimKwi8b7n9u4 Z1EiKZZkFFovKARmcZTsyOa/Y3lMTu3j/kBo8/HrzItmbJbLmp4tsgqlZvqY+dkA jR3VvYGmmE0TdgwUODss9iR7SEEnPwWXsVQ24wSUOquRRs6K7c0QEELiEnkI1+7k F0/C+LiOO10i7opYcQKCXrR58gcGZVJRNSpeDR697oSoACri6ldLVsQ3qQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKDBDkoA23HhMoVnxUW4pFceAGH6MB8GA1UdIwQY MBaAFB1nHPefz2bSn+wNd6ZqfQ6hu3WbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYt OTZmZTIyNjA1MzIzLzEvb01FT1NnRGJjZUV5aFdmRlJiaWtWeDRBWWZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYtOTZmZTIyNjA1MzIz LzEvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCVZv8AwQA wjaTMA0EAgACMAcDBQMqEshAMA0GCSqGSIb3DQEBCwUAA4IBAQBLyOvt0R2zVzDB Xvn2r4y5P/s9gq59BRddBoGlZvImsF+ya3/M/E47U7hz7IcxseSixsztU1whSOQh 1jtfRlZq4pJFT5Lkj5FyEHHzak7nZEId46k4GXei2QZXOBusTnmIVdaQAZ5ss+kf lc2R9UCG1GiTCbsG2KFwygj3CX1dawaQfLf2GKG2qcwxy9CJ8GnPwAjovIUzVeB6 UF2GKcWsJSGVGP4NmkB5EfEfXbzJ3NUhCaTNvQzx78ghDfEYIMS8HXVfnxoX/8nz KN2jv+2W0GpCP4WNzKiV5E5+wuUBQG7PXLPTWL/nb0ohJdQOo4IGa6VRTcEwzJFQ NYOzL0Mo -----END CERTIFICATE-----Generated at Tue Jan 27 04:05:17 2026 by rpki-client