This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/ONMgyTzVR5emyEDDSBCua08dR-A.roa File: ONMgyTzVR5emyEDDSBCua08dR-A.roa (raw, json) Hash identifier: DRu6baPNaCMzMD4Wrd0HJWjVzs23fBWU2Hq2dCxlvQQ= Subject key identifier: 38:D3:20:C9:3C:D5:47:97:A6:C8:40:C3:48:10:AE:6B:4F:1D:47:E0 Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a Certificate serial: 019B7BA50058BA023E1227AF8565A6E8C6B2 Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/ONMgyTzVR5emyEDDSBCua08dR-A.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205105 IP address blocks: 185.230.168.0/22 maxlen: 22 185.230.168.0/24 maxlen: 24 185.230.169.0/24 maxlen: 24 185.230.170.0/24 maxlen: 24 185.230.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:00:58:ba:02:3e:12:27:af:85:65:a6:e8:c6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38d320c93cd54797a6c840c34810ae6b4f1d47e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:51:38:f6:28:39:89:ec:55:df:a7:97:84: 59:14:62:9b:81:3b:63:cc:08:32:9b:e9:26:ee:0f: ce:e3:42:80:17:fa:a3:69:ef:c8:a8:ac:c6:f4:9a: 2a:c0:71:ed:a3:14:0a:21:bd:d1:4e:70:fe:0c:40: 5d:47:31:06:4b:90:0b:f1:fc:9c:04:ad:45:e3:a0: a8:93:90:7e:aa:d6:e3:9c:a8:59:53:38:88:5b:c5: e4:30:ef:01:07:dc:24:dd:25:b7:7e:71:6b:12:76: df:e9:38:88:c4:8c:f4:81:31:01:ad:73:e6:7c:37: ff:13:e4:b2:5c:30:63:e0:f6:82:44:57:d7:c6:e6: 30:38:24:bd:45:1c:2c:13:bf:61:bb:3a:e3:17:9c: a2:ee:17:93:c3:24:5c:9b:56:75:30:61:53:b0:5e: e4:57:1e:02:41:d8:86:51:48:e2:57:aa:95:33:d5: 58:d4:70:cd:9f:a9:7e:02:7d:a1:7b:30:8f:9e:f6: 44:33:3f:87:3c:55:e2:3d:2f:f4:fa:da:f0:2d:99: d8:9a:39:2d:8d:fa:a1:79:5f:b0:56:10:60:5d:3a: f4:0c:5c:f8:10:9c:04:de:41:a9:d4:c1:28:2e:c5: df:87:99:58:cd:be:c4:f2:55:16:6e:01:fb:ab:d9: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:20:C9:3C:D5:47:97:A6:C8:40:C3:48:10:AE:6B:4F:1D:47:E0 X509v3 Authority Key Identifier: keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/ONMgyTzVR5emyEDDSBCua08dR-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.168.0/22 Signature Algorithm: sha256WithRSAEncryption 36:27:e0:b2:0e:44:9e:7e:99:b0:20:a8:3e:ef:e1:15:90:bd: ec:e2:c1:db:64:1f:57:74:32:f7:72:f4:96:a7:c4:78:27:c0: 88:13:68:34:f4:b0:3e:66:b3:3e:2e:59:c0:f8:b0:e4:10:3f: 50:45:3a:25:99:00:b5:e9:a5:b8:1b:26:df:dd:33:27:8f:1c: b1:64:bc:49:7b:82:b6:7c:5e:b0:4b:16:78:6f:e3:1e:91:cb: a9:9c:af:79:41:22:43:3a:e5:8c:13:58:34:e1:ef:09:d6:ee: 87:46:7c:bd:05:0a:46:3f:df:5c:45:33:d4:2b:54:bd:c0:d9: fa:4e:ad:6b:af:63:e5:38:a5:cc:c7:44:2b:04:99:83:4e:d7: b3:cb:13:eb:44:0c:95:4d:f5:16:07:e4:b5:22:8c:33:cb:b2: e1:ad:ab:92:c0:6e:4f:d2:f3:d2:46:d4:28:a6:6c:2a:04:45: ca:0f:e6:03:63:98:db:80:90:ff:af:d0:0a:93:11:85:6f:86: 44:d8:5d:01:09:07:64:79:bb:3f:52:a9:9d:80:9c:23:4f:e7: e3:98:43:c6:9a:83:bd:65:4e:0e:42:71:55:51:79:5e:48:0c: f9:6e:36:38:b9:d9:82:57:ab:0e:e0:65:39:16:82:ed:59:1e: d3:8d:c6:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQBYugI+EievhWWm6MayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzM2ZhZGQxMjdlNjVjZDkwZGUzZTk1NjhlNWNiY2ZiNDhj OWIyNGEwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGQzMjBjOTNjZDU0Nzk3YTZjODQwYzM0ODEwYWU2YjRmMWQ0N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv55ROPYoOYnsVd+nl4RZFGKbgTtj zAgym+km7g/O40KAF/qjae/IqKzG9JoqwHHtoxQKIb3RTnD+DEBdRzEGS5AL8fyc BK1F46Cok5B+qtbjnKhZUziIW8XkMO8BB9wk3SW3fnFrEnbf6TiIxIz0gTEBrXPm fDf/E+SyXDBj4PaCRFfXxuYwOCS9RRwsE79huzrjF5yi7heTwyRcm1Z1MGFTsF7k Vx4CQdiGUUjiV6qVM9VY1HDNn6l+An2hezCPnvZEMz+HPFXiPS/0+trwLZnYmjkt jfqheV+wVhBgXTr0DFz4EJwE3kGp1MEoLsXfh5lYzb7E8lUWbgH7q9kfxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjTIMk81UeXpshAw0gQrmtPHUfgMB8GA1UdIwQY MBaAFMM/rdEn5lzZDePpVo5cvPtIybJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iN2NkNDUtMWYwMy00MTU4LTgyOTct YTNmNjFlMzBiNTE0LzEvT05NZ3lUelZSNWVteUVERFNCQ3VhMDhkUi1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iN2NkNDUtMWYwMy00MTU4LTgyOTctYTNmNjFlMzBiNTE0 LzEvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueaoMA0G CSqGSIb3DQEBCwUAA4IBAQA2J+CyDkSefpmwIKg+7+EVkL3s4sHbZB9XdDL3cvSW p8R4J8CIE2g09LA+ZrM+LlnA+LDkED9QRTolmQC16aW4Gybf3TMnjxyxZLxJe4K2 fF6wSxZ4b+MekcupnK95QSJDOuWME1g04e8J1u6HRny9BQpGP99cRTPUK1S9wNn6 Tq1rr2PlOKXMx0QrBJmDTtezyxPrRAyVTfUWB+S1Iowzy7LhrauSwG5P0vPSRtQo pmwqBEXKD+YDY5jbgJD/r9AKkxGFb4ZE2F0BCQdkebs/UqmdgJwjT+fjmEPGmoO9 ZU4OQnFVUXleSAz5bjY4udmCV6sO4GU5FoLtWR7TjcZJ -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:15 2026 by rpki-client