This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa File: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (raw, json) Hash identifier: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg= Subject key identifier: 38:C0:4D:4E:CC:C1:E7:05:CA:67:D2:0E:3A:2B:1F:73:93:5C:73:78 Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466 Certificate serial: 019B7FF247B44744A4386D9787D41B6A5C39 Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa Signing time: Fri 02 Jan 2026 18:22:22 +0000 ROA not before: Fri 02 Jan 2026 18:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50710 IP address blocks: 78.109.236.0/24 maxlen: 24 78.109.237.0/24 maxlen: 24 78.109.238.0/24 maxlen: 24 185.52.100.0/24 maxlen: 24 185.52.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:47:b4:47:44:a4:38:6d:97:87:d4:1b:6a:5c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466 Validity Not Before: Jan 2 18:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38c04d4eccc1e705ca67d20e3a2b1f73935c7378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0c:7e:10:e1:e7:fb:47:be:32:ac:ea:bb:a7: 62:c7:be:ec:de:08:1d:1d:d7:bf:6c:4e:5f:43:7d: 07:03:17:e3:34:12:b3:3d:c2:7d:f0:76:08:61:05: 54:09:9d:da:e4:0f:6c:0f:8a:e3:03:75:90:d3:45: ef:71:b5:0d:9d:55:03:35:13:a0:b0:43:51:ca:d8: bb:60:f7:17:8f:ed:26:d0:cc:1e:83:e2:6b:b1:50: 8c:d0:2c:12:fc:28:7d:bf:03:7d:16:fb:8f:8a:0f: 8b:f9:92:e2:84:ff:d6:d7:82:89:fb:8a:7a:00:c4: 13:d1:c3:25:26:0b:4b:a3:ab:0e:a1:a3:ce:76:c0: 00:39:e0:f2:81:af:06:fb:fa:9d:cb:42:06:91:d1: ff:29:ea:2a:6d:cf:43:22:d4:9d:cf:aa:a1:0d:78: 90:d5:0e:1c:41:32:cf:41:fd:4b:db:57:ab:81:b1: 6a:6c:32:4a:8f:ed:65:55:80:c9:da:7f:6e:54:20: 13:a3:80:7f:c6:04:86:df:4a:63:b2:88:ff:7e:61: 89:c7:c9:d8:6b:b2:a4:77:d3:af:58:86:60:c7:66: 80:64:8c:da:59:55:7b:47:8c:78:e9:94:bf:1d:30: b8:ff:e6:52:06:c3:b7:c8:16:34:45:d0:f9:0c:70: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:4D:4E:CC:C1:E7:05:CA:67:D2:0E:3A:2B:1F:73:93:5C:73:78 X509v3 Authority Key Identifier: keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.236.0-78.109.238.255 185.52.100.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:6a:b6:63:df:59:0b:79:48:fa:7d:34:8a:e5:b2:c4:95:d8: 37:42:3b:31:98:9b:0e:bb:e4:05:b0:5d:c1:97:a0:6c:3a:ff: 55:3f:ab:80:79:dc:f5:a5:99:f7:46:18:d5:53:2f:0a:a0:d1: bc:59:a4:9f:14:8c:74:f3:17:c0:ec:f9:89:9e:cc:ed:c8:72: 41:d4:7c:b9:4c:fa:3f:e6:14:9b:0c:d4:5f:53:9b:6b:25:c1: f5:44:23:22:b6:39:bb:4a:4a:4d:95:9a:60:26:83:06:6a:a9: cf:02:f3:66:21:05:b2:5e:70:79:53:26:9c:a5:74:e4:7e:41: 76:8c:e6:5b:31:38:37:71:9b:a9:20:bb:97:c5:3d:60:b0:40: a0:ac:06:13:48:9e:29:65:67:65:d8:63:69:92:36:e0:c3:8c: 82:a9:ec:0f:a4:10:7c:1e:0b:d8:54:1d:66:1b:c1:a2:f9:a8: fa:ac:06:c5:e0:b4:4d:d1:41:a2:d1:3d:6d:93:a0:77:59:8b: 54:ac:92:71:1d:2b:f2:4e:93:02:8d:00:82:c4:2d:cb:a2:df: 00:c6:c4:c6:ce:70:45:a2:09:0b:9d:3d:4d:93:35:d1:5e:a8: c1:b8:d8:42:68:d3:46:89:d4:7e:0e:79:e0:b0:01:36:85:d5: 30:fa:b1:bf -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/8ke0R0SkOG2Xh9Qbalw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi MmY0NjYwHhcNMjYwMTAyMTgyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGMwNGQ0ZWNjYzFlNzA1Y2E2N2QyMGUzYTJiMWY3MzkzNWM3Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ax+EOHn+0e+Mqzqu6dix77s3ggd Hde/bE5fQ30HAxfjNBKzPcJ98HYIYQVUCZ3a5A9sD4rjA3WQ00XvcbUNnVUDNROg sENRyti7YPcXj+0m0Mweg+JrsVCM0CwS/Ch9vwN9FvuPig+L+ZLihP/W14KJ+4p6 AMQT0cMlJgtLo6sOoaPOdsAAOeDyga8G+/qdy0IGkdH/Keoqbc9DItSdz6qhDXiQ 1Q4cQTLPQf1L21ergbFqbDJKj+1lVYDJ2n9uVCATo4B/xgSG30pjsoj/fmGJx8nY a7Kkd9OvWIZgx2aAZIzaWVV7R4x46ZS/HTC4/+ZSBsO3yBY0RdD5DHC91wIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFDjATU7MwecFymfSDjorH3OTXHN4MB8GA1UdIwQY MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1 LWZkMTY3YWQ5MmE5ZC8xL09NQk5Uc3pCNXdYS1o5SU9PaXNmYzVOY2MzZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1LWZkMTY3YWQ5MmE5 ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQwDAMEAk5t 7AMEAE5t7gMEAbk0ZDANBgkqhkiG9w0BAQsFAAOCAQEASmq2Y99ZC3lI+n00iuWy xJXYN0I7MZibDrvkBbBdwZegbDr/VT+rgHnc9aWZ90YY1VMvCqDRvFmknxSMdPMX wOz5iZ7M7chyQdR8uUz6P+YUmwzUX1ObayXB9UQjIrY5u0pKTZWaYCaDBmqpzwLz ZiEFsl5weVMmnKV05H5BdozmWzE4N3GbqSC7l8U9YLBAoKwGE0ieKWVnZdhjaZI2 4MOMgqnsD6QQfB4L2FQdZhvBovmo+qwGxeC0TdFBotE9bZOgd1mLVKyScR0r8k6T Ao0AgsQty6LfAMbExs5wRaIJC509TZM10V6owbjYQmjTRonUfg554LABNoXVMPqx vw== -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:11 2026 by rpki-client