This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/OMDj7S7H5Znb54o4B4mYw4OI1xA.roa File: OMDj7S7H5Znb54o4B4mYw4OI1xA.roa (raw, json) Hash identifier: QwhdgA5D4IFqcLTQvjEb7OBJC7e4ri/WagCnJPfPU5Q= Subject key identifier: 38:C0:E3:ED:2E:C7:E5:99:DB:E7:8A:38:07:89:98:C3:83:88:D7:10 Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f Certificate serial: 019B7B36062E8BB86C1EC371303E17FBE642 Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/OMDj7S7H5Znb54o4B4mYw4OI1xA.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47792 IP address blocks: 91.206.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:06:2e:8b:b8:6c:1e:c3:71:30:3e:17:fb:e6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38c0e3ed2ec7e599dbe78a38078998c38388d710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:be:7f:b3:5e:4b:da:0c:aa:ab:f8:b3:e3: 59:ce:e4:2e:1e:b4:c6:3a:a4:5a:e7:a0:50:46:c2: 0d:eb:de:60:83:b6:b8:27:7f:86:93:f7:73:71:df: 46:1f:bd:e9:a5:49:92:bc:4c:fe:39:75:7f:c0:2c: 4e:56:6c:2b:db:c3:78:2f:33:63:c1:f6:8c:fc:4c: b9:be:bd:42:ba:87:72:6e:34:57:88:60:61:9c:5d: 75:d7:23:41:b0:49:87:97:1c:5f:c7:74:2d:23:2d: 59:44:0a:70:35:b6:ef:6a:3e:f0:c0:89:a9:85:45: 77:01:5a:d9:88:7c:fd:30:07:10:b5:64:06:97:76: a4:94:b4:86:eb:49:77:63:35:36:86:6e:a9:54:3c: c5:57:de:1e:47:57:2a:f9:9f:59:53:2d:b1:de:13: 69:f8:76:9a:d3:e9:b4:25:6c:18:9a:81:49:06:23: a7:c0:b3:f0:db:28:66:bf:7e:23:ac:24:fc:d3:50: 8a:7c:bf:6e:0e:bc:c3:ba:7e:f2:91:67:89:c8:cf: b9:5e:05:f2:fd:76:94:24:e7:d7:40:90:cb:7d:8d: 16:01:7c:13:0f:b8:83:be:63:6d:cb:c8:a7:c2:48: b6:16:25:79:f3:16:4b:40:58:3e:4d:0a:9c:65:a6: 5c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:E3:ED:2E:C7:E5:99:DB:E7:8A:38:07:89:98:C3:83:88:D7:10 X509v3 Authority Key Identifier: keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/OMDj7S7H5Znb54o4B4mYw4OI1xA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.206.0/23 Signature Algorithm: sha256WithRSAEncryption 78:22:f8:ec:52:8c:37:49:cd:8a:16:5a:0e:2b:15:eb:93:26: c7:a6:b5:75:56:c6:a3:0e:3e:91:e9:2a:59:8c:76:5c:21:f5: 10:bf:e6:60:bb:76:91:d5:a4:ad:24:00:1d:af:f7:d5:19:7c: 32:bc:cc:31:86:4f:17:17:4b:19:67:98:9c:93:57:0c:77:cd: 72:96:97:8c:56:be:47:35:b1:37:97:e3:a6:75:2b:ee:0c:62: 57:5f:5e:6e:c2:4a:74:13:e8:89:c5:1d:c8:03:2a:d4:67:12: 98:12:5a:34:04:fa:58:8c:5e:b7:34:27:a0:23:67:55:8c:c9: 1b:5a:f4:93:d3:c4:cf:3a:b4:24:43:79:bf:2d:c7:ac:9b:a0: 20:f4:c5:38:a1:52:dd:78:fc:71:46:6b:27:4e:e7:e5:c3:c9: ff:c5:07:69:ec:e1:6a:7e:c7:d4:7a:34:5d:ae:d7:f7:19:b3: 92:79:9a:18:67:1f:42:22:ee:49:7c:56:15:b8:04:14:9a:f6: d9:dc:46:6b:25:b0:4e:54:6b:0c:fa:33:10:e4:c5:4b:2d:3d: b6:cd:e6:94:9a:59:4e:30:cb:5e:db:af:cd:8e:b3:b2:f6:dc: c9:72:0b:85:c9:db:0f:9f:18:e9:3a:0b:b6:4f:8c:0f:8d:1b: df:aa:45:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgYui7hsHsNxMD4X++ZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh MmE1MGYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGMwZTNlZDJlYzdlNTk5ZGJlNzhhMzgwNzg5OThjMzgzODhkNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubK+f7NeS9oMqqv4s+NZzuQuHrTG OqRa56BQRsIN695gg7a4J3+Gk/dzcd9GH73ppUmSvEz+OXV/wCxOVmwr28N4LzNj wfaM/Ey5vr1CuodybjRXiGBhnF111yNBsEmHlxxfx3QtIy1ZRApwNbbvaj7wwImp hUV3AVrZiHz9MAcQtWQGl3aklLSG60l3YzU2hm6pVDzFV94eR1cq+Z9ZUy2x3hNp +Haa0+m0JWwYmoFJBiOnwLPw2yhmv34jrCT801CKfL9uDrzDun7ykWeJyM+5XgXy /XaUJOfXQJDLfY0WAXwTD7iDvmNty8inwki2FiV58xZLQFg+TQqcZaZcdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjA4+0ux+WZ2+eKOAeJmMODiNcQMB8GA1UdIwQY MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt ODNhMjVhOTRjNzdmLzEvT01EajdTN0g1Wm5iNTRvNEI0bVl3NE9JMXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW87OMA0G CSqGSIb3DQEBCwUAA4IBAQB4IvjsUow3Sc2KFloOKxXrkybHprV1VsajDj6R6SpZ jHZcIfUQv+Zgu3aR1aStJAAdr/fVGXwyvMwxhk8XF0sZZ5ick1cMd81ylpeMVr5H NbE3l+OmdSvuDGJXX15uwkp0E+iJxR3IAyrUZxKYElo0BPpYjF63NCegI2dVjMkb WvST08TPOrQkQ3m/Lcesm6Ag9MU4oVLdePxxRmsnTuflw8n/xQdp7OFqfsfUejRd rtf3GbOSeZoYZx9CIu5JfFYVuAQUmvbZ3EZrJbBOVGsM+jMQ5MVLLT22zeaUmllO MMte26/NjrOy9tzJcguFydsPnxjpOgu2T4wPjRvfqkV5 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:23 2026 by rpki-client