This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/DMOM5WICfpERQnLeugI7Z84T3ts.roa File: DMOM5WICfpERQnLeugI7Z84T3ts.roa (raw, json) Hash identifier: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos= Subject key identifier: 0C:C3:8C:E5:62:02:7E:91:11:42:72:DE:BA:02:3B:67:CE:13:DE:DB Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FC8D955EE5A81CA4E6EBEE6A84F3 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/DMOM5WICfpERQnLeugI7Z84T3ts.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 46.254.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fc:8d:95:5e:e5:a8:1c:a4:e6:eb:ee:6a:84:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cc38ce562027e91114272deba023b67ce13dedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:30:37:88:dc:f5:8c:8e:6b:d4:f0:0b:bd: d4:89:96:9b:b8:cf:17:75:13:11:ab:f2:a6:43:48: 09:fc:05:b3:9a:8e:ea:af:62:73:68:68:b4:de:76: 28:69:49:f8:1d:2e:19:de:9e:a3:74:84:87:59:d6: 30:ea:53:55:2c:d1:28:d1:b8:1c:f7:bb:6d:5e:13: 7e:12:00:17:68:db:f1:9d:86:69:32:58:95:b2:62: f9:6f:83:33:28:d4:6d:d7:c0:98:e2:62:20:eb:d0: 1b:15:69:79:85:73:0f:ab:05:6a:fb:8d:88:aa:4d: c4:2d:56:e2:40:8a:e4:ec:79:d9:0b:f7:63:9b:aa: ef:06:37:d7:2b:ac:f9:01:94:89:04:c0:20:31:8a: 68:f5:04:2f:f8:a2:5b:a0:f3:00:de:af:10:73:d7: 83:a0:df:2d:d4:15:1b:8b:ea:7f:c5:d4:dc:a5:88: f6:b6:2e:d9:5a:7b:83:16:82:06:5b:3f:a3:88:9d: 3e:e8:c4:6b:59:56:26:85:56:72:30:3d:65:5c:38: 25:bd:b9:4c:a1:84:75:8e:cf:da:77:d3:53:c7:3a: fa:8a:e8:dc:34:d5:33:0a:35:56:cf:b4:19:26:6f: 4d:81:b2:39:77:28:d1:7d:3b:a3:66:4e:f9:49:6e: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C3:8C:E5:62:02:7E:91:11:42:72:DE:BA:02:3B:67:CE:13:DE:DB X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/DMOM5WICfpERQnLeugI7Z84T3ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.106.0/24 Signature Algorithm: sha256WithRSAEncryption 75:e0:02:52:56:c9:f2:b9:f9:66:88:58:5e:66:d1:96:12:cc: 76:79:b6:9c:3f:aa:cc:7f:40:c3:6f:89:06:7d:b7:c9:95:fd: 62:58:3c:ed:33:19:eb:f9:16:fc:36:e4:f6:4d:a7:83:9c:c8: 99:4b:9e:1b:9a:f5:26:cc:e3:1c:79:cb:12:32:51:4c:8c:57: 90:5f:b4:1d:23:dc:06:f3:54:fd:bc:e2:4e:30:6c:d6:e5:56: 77:b6:f5:b4:eb:ab:c6:e2:34:2c:d7:8f:cf:dc:9c:15:92:b5: 4a:81:f2:17:e3:a1:f5:b3:b3:07:ea:7c:4e:36:fd:78:d4:2d: 57:5a:c7:ed:e0:37:34:7d:1d:90:69:43:21:04:c0:45:88:e6: 21:b7:8c:46:4a:7d:f4:7b:28:15:2b:be:47:c1:a0:33:a8:12: 4a:d2:c1:35:31:8f:97:ee:e4:6f:9f:3c:f7:c3:23:f2:31:44: 01:f7:4e:1d:c3:56:30:fc:52:b7:d1:47:91:59:ca:24:a8:87: c3:5f:53:22:2e:f5:44:52:1a:df:88:0d:20:87:bf:1a:84:ec: ef:16:98:60:75:67:26:87:f9:98:d7:e2:17:2e:ac:b7:47:05: 7a:17:32:fc:95:cb:52:a9:8d:94:a6:a8:36:22:55:e2:da:a6: 96:ff:2f:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvyNlV7lqByk5uvuaoTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2MzOGNlNTYyMDI3ZTkxMTE0MjcyZGViYTAyM2I2N2NlMTNkZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf4wN4jc9YyOa9TwC73UiZabuM8X dRMRq/KmQ0gJ/AWzmo7qr2JzaGi03nYoaUn4HS4Z3p6jdISHWdYw6lNVLNEo0bgc 97ttXhN+EgAXaNvxnYZpMliVsmL5b4MzKNRt18CY4mIg69AbFWl5hXMPqwVq+42I qk3ELVbiQIrk7HnZC/djm6rvBjfXK6z5AZSJBMAgMYpo9QQv+KJboPMA3q8Qc9eD oN8t1BUbi+p/xdTcpYj2ti7ZWnuDFoIGWz+jiJ0+6MRrWVYmhVZyMD1lXDglvblM oYR1js/ad9NTxzr6iujcNNUzCjVWz7QZJm9NgbI5dyjRfTujZk75SW4SRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzDjOViAn6REUJy3roCO2fOE97bMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvRE1PTTVXSUNmcEVSUW5MZXVnSTdaODRUM3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv5qMA0G CSqGSIb3DQEBCwUAA4IBAQB14AJSVsnyuflmiFheZtGWEsx2ebacP6rMf0DDb4kG fbfJlf1iWDztMxnr+Rb8NuT2TaeDnMiZS54bmvUmzOMcecsSMlFMjFeQX7QdI9wG 81T9vOJOMGzW5VZ3tvW066vG4jQs14/P3JwVkrVKgfIX46H1s7MH6nxONv141C1X Wsft4Dc0fR2QaUMhBMBFiOYht4xGSn30eygVK75HwaAzqBJK0sE1MY+X7uRvnzz3 wyPyMUQB904dw1Yw/FK30UeRWcokqIfDX1MiLvVEUhrfiA0gh78ahOzvFphgdWcm h/mY1+IXLqy3RwV6FzL8lctSqY2Upqg2IlXi2qaW/y87 -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:18 2026 by rpki-client