This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/OmNYh4uARDq1ZHJac3Gy8m3tuys.roa File: OmNYh4uARDq1ZHJac3Gy8m3tuys.roa (raw, json) Hash identifier: FCrDfeFT2pJ/Q6YRp1wjXdR8Urjp7+4nxbesJ1y96Mg= Subject key identifier: 3A:63:58:87:8B:80:44:3A:B5:64:72:5A:73:71:B2:F2:6D:ED:BB:2B Certificate issuer: /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970 Certificate serial: 019B7AC8BF437AFB6B0C4E18116A879CC4A8 Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/OmNYh4uARDq1ZHJac3Gy8m3tuys.roa Signing time: Thu 01 Jan 2026 18:18:55 +0000 ROA not before: Thu 01 Jan 2026 18:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198373 IP address blocks: 2001:678:c20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bf:43:7a:fb:6b:0c:4e:18:11:6a:87:9c:c4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970 Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a6358878b80443ab564725a7371b2f26dedbb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:1f:5e:16:77:8f:1a:61:e4:c9:78:80:4f: 2b:f6:10:79:8c:67:9a:9c:6f:2c:f0:55:82:28:76: 64:cc:2b:7a:99:9d:59:9e:6a:54:89:9a:f8:fc:d8: c7:d5:ec:91:20:b7:5a:8a:44:2d:a2:a1:10:b6:fe: 06:ff:93:fd:03:2b:d0:66:ee:15:cd:f0:fe:46:44: 36:37:e3:d6:aa:50:fe:e1:61:4b:70:85:85:a1:c7: 40:b4:98:a0:8a:82:30:fb:bd:d0:c1:ea:84:73:42: ab:d4:26:e6:b2:75:eb:93:c8:ae:b3:20:8b:a6:4a: c7:46:f5:8d:55:44:72:03:81:fa:04:4e:ea:0a:50: 16:f9:e6:99:b3:02:46:9a:ab:17:7f:ef:ef:2b:8e: 75:99:6c:7b:b7:14:10:35:b8:a7:d7:61:e2:8a:98: dd:e5:40:7e:61:fc:72:8b:2c:18:09:ca:31:eb:46: 45:77:e1:d2:b9:a6:87:73:18:23:b9:ad:9c:d5:88: 19:28:82:88:35:b9:8b:7a:3a:49:b2:1c:50:64:e3: 89:a7:f2:04:de:fd:60:54:73:6a:d2:c6:73:08:bf: 96:0b:a3:ab:2b:cc:10:c5:7b:ca:05:e4:9a:14:30: 52:7e:7d:13:64:51:c9:66:86:ae:8c:a1:db:14:47: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:63:58:87:8B:80:44:3A:B5:64:72:5A:73:71:B2:F2:6D:ED:BB:2B X509v3 Authority Key Identifier: keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/OmNYh4uARDq1ZHJac3Gy8m3tuys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c20::/48 Signature Algorithm: sha256WithRSAEncryption 62:e9:95:1c:14:86:f7:74:b6:ad:40:c1:65:24:d7:d2:0e:24: f2:7b:4f:99:58:06:e0:3a:c1:9b:84:f4:d9:24:9a:e1:1f:d9: 12:5a:06:80:60:5d:9b:c2:93:ed:4e:03:69:4a:d9:9f:46:92: 0d:bb:39:cf:1f:1c:fe:67:49:bd:4f:59:df:fd:86:e3:4a:e1: a5:5b:b4:8c:54:8e:e6:00:0f:39:99:f2:0c:2b:b6:7e:81:9f: 6d:b8:19:51:e2:bc:df:8b:12:c2:2d:cf:e8:49:13:a9:d4:91: 6c:16:74:66:78:d4:e7:11:2a:7b:d3:f4:8e:ca:03:b4:48:d3: 2e:4f:63:3f:df:55:5b:e6:a0:8d:ec:2d:a1:0c:0b:ff:38:20: 92:4a:7b:11:b5:c1:7c:37:64:c6:20:8d:e2:4f:88:e4:e8:e3: 03:54:10:fa:26:9f:52:5a:b2:45:4d:6a:1c:09:18:d3:64:ba: 5c:ec:d2:a9:1a:06:d7:bb:3c:6e:fd:e4:aa:e1:7d:5c:b2:26: 0f:dc:c5:2c:08:f3:0c:9c:dc:df:0e:17:28:2d:03:e0:8f:f8: 61:80:9d:73:6e:ca:7f:65:ad:08:8e:c0:2f:e7:13:ab:fd:98: 14:c4:fa:84:cb:01:4a:0f:0f:52:7f:f5:ed:f8:ae:be:10:c9: 46:be:0c:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yL9DevtrDE4YEWqHnMSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjIyNGI1M2VjOWM4YjE3ZjMxODk1YjE2YThkNDU3MWYw ZTY5NzAwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTYzNTg4NzhiODA0NDNhYjU2NDcyNWE3MzcxYjJmMjZkZWRiYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0gfXhZ3jxph5Ml4gE8r9hB5jGea nG8s8FWCKHZkzCt6mZ1ZnmpUiZr4/NjH1eyRILdaikQtoqEQtv4G/5P9AyvQZu4V zfD+RkQ2N+PWqlD+4WFLcIWFocdAtJigioIw+73QweqEc0Kr1CbmsnXrk8iusyCL pkrHRvWNVURyA4H6BE7qClAW+eaZswJGmqsXf+/vK451mWx7txQQNbin12Hiipjd 5UB+YfxyiywYCcox60ZFd+HSuaaHcxgjua2c1YgZKIKINbmLejpJshxQZOOJp/IE 3v1gVHNq0sZzCL+WC6OrK8wQxXvKBeSaFDBSfn0TZFHJZoaujKHbFEfWKwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDpjWIeLgEQ6tWRyWnNxsvJt7bsrMB8GA1UdIwQY MBaAFEyyJLU+ycixfzGJWxao1FcfDmlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMt OWUzZDg5ZDllNjE3LzEvT21OWWg0dUFSRHExWkhKYWMzR3k4bTN0dXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMtOWUzZDg5ZDllNjE3 LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwg MA0GCSqGSIb3DQEBCwUAA4IBAQBi6ZUcFIb3dLatQMFlJNfSDiTye0+ZWAbgOsGb hPTZJJrhH9kSWgaAYF2bwpPtTgNpStmfRpINuznPHxz+Z0m9T1nf/YbjSuGlW7SM VI7mAA85mfIMK7Z+gZ9tuBlR4rzfixLCLc/oSROp1JFsFnRmeNTnESp70/SOygO0 SNMuT2M/31Vb5qCN7C2hDAv/OCCSSnsRtcF8N2TGII3iT4jk6OMDVBD6Jp9SWrJF TWocCRjTZLpc7NKpGgbXuzxu/eSq4X1csiYP3MUsCPMMnNzfDhcoLQPgj/hhgJ1z bsp/Za0IjsAv5xOr/ZgUxPqEywFKDw9Sf/Xt+K6+EMlGvgwt -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:05 2026 by rpki-client