This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/OMpZKQwF0uTY3YYagJjCreqC0TM.roa File: OMpZKQwF0uTY3YYagJjCreqC0TM.roa (raw, json) Hash identifier: yCJLlgruXNmEOJVSk2vdxkm65BAje8v/B5aRQjafgr8= Subject key identifier: 38:CA:59:29:0C:05:D2:E4:D8:DD:86:1A:80:98:C2:AD:EA:82:D1:33 Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Certificate serial: 019B7D5CCCC6CE4C9095C1AE3E0716853E1C Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/OMpZKQwF0uTY3YYagJjCreqC0TM.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 216.57.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:c6:ce:4c:90:95:c1:ae:3e:07:16:85:3e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38ca59290c05d2e4d8dd861a8098c2adea82d133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:09:42:9d:27:51:12:3d:11:ed:18:e3:76:41: fd:f1:4d:4a:99:08:93:e4:dd:e3:5e:3b:84:f5:2b: b6:93:37:79:ba:25:ae:c2:c6:29:47:35:26:d8:14: 56:4e:2e:6e:4d:2b:ee:87:c5:2c:5c:5c:15:8e:70: 37:e3:72:02:4f:2a:76:14:e7:2c:92:fc:f9:44:cd: 05:d7:e2:87:e9:ee:56:29:eb:3a:58:da:0e:6d:45: e4:d2:61:d9:a8:70:3d:ee:2f:10:37:52:21:5c:ba: aa:4f:16:09:0f:8a:85:71:76:62:eb:91:88:c0:13: c6:c6:56:31:c9:ea:48:81:58:dc:ab:c4:2b:eb:ee: f6:c2:a8:83:c9:aa:4f:ac:96:03:fb:00:76:00:39: aa:13:ff:d6:4d:69:45:55:7d:25:f2:88:af:39:fb: b9:46:b9:1a:de:a8:10:87:e5:b5:59:a4:44:04:2b: 54:ef:c0:64:df:f1:23:47:bd:9b:52:71:81:11:54: 21:26:bc:34:8c:f0:91:de:40:d7:ec:70:54:ad:58: 3b:7f:76:7e:7e:88:03:d1:d9:6c:0b:db:c6:23:7a: 88:3f:5b:22:e0:d5:8f:9b:12:4f:a7:1f:89:23:16: ac:d0:2a:ce:04:25:17:a8:25:2f:3e:19:1f:75:3c: 8e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CA:59:29:0C:05:D2:E4:D8:DD:86:1A:80:98:C2:AD:EA:82:D1:33 X509v3 Authority Key Identifier: keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/OMpZKQwF0uTY3YYagJjCreqC0TM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.57.104.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:60:93:ff:ee:08:9f:20:f3:30:18:4d:71:ad:26:66:88:9f: 5e:e3:b9:a5:2c:00:80:27:8e:9f:2b:fd:b8:a5:94:ad:7e:d0: 1c:e9:23:aa:4d:b3:10:40:ba:0a:99:43:5b:a3:c0:8d:01:52: 74:e9:cd:34:1d:91:e5:17:cf:b8:c6:c5:1e:61:06:28:dd:c8: 1d:28:34:eb:2e:f8:20:b1:50:9c:ee:00:f2:02:0b:d8:04:7e: 14:d0:97:d6:17:a3:b7:f3:c5:cf:48:62:0a:dd:4f:6a:ce:8b: f4:a9:6c:a6:47:f7:b2:67:9a:dd:f1:f6:95:cd:36:77:95:a3: 47:f8:f5:02:28:8a:b3:43:d0:f5:5c:26:05:db:22:2a:38:9c: 52:a1:45:fe:74:27:d9:1b:e6:b7:c7:34:4f:02:76:7a:ae:da: b7:9e:07:e6:ce:8b:10:37:2d:2f:09:c1:fe:eb:b4:5e:1c:fe: 88:1a:00:af:fa:7e:ae:ff:f6:80:43:54:83:b8:78:5d:fa:b1: f0:e6:a6:c2:58:8f:e4:77:aa:03:30:f9:9c:63:a7:a9:c9:72: 00:7a:63:42:76:70:eb:4c:40:fd:c0:75:3c:e8:ba:63:a7:3a: 06:2b:8f:47:8d:68:81:dd:f7:54:90:06:7e:c3:5c:e2:3e:3e: ec:cf:4e:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMzGzkyQlcGuPgcWhT4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl ZGZlYjgwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGNhNTkyOTBjMDVkMmU0ZDhkZDg2MWE4MDk4YzJhZGVhODJkMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQlCnSdREj0R7RjjdkH98U1KmQiT 5N3jXjuE9Su2kzd5uiWuwsYpRzUm2BRWTi5uTSvuh8UsXFwVjnA343ICTyp2FOcs kvz5RM0F1+KH6e5WKes6WNoObUXk0mHZqHA97i8QN1IhXLqqTxYJD4qFcXZi65GI wBPGxlYxyepIgVjcq8Qr6+72wqiDyapPrJYD+wB2ADmqE//WTWlFVX0l8oivOfu5 Rrka3qgQh+W1WaREBCtU78Bk3/EjR72bUnGBEVQhJrw0jPCR3kDX7HBUrVg7f3Z+ fogD0dlsC9vGI3qIP1si4NWPmxJPpx+JIxas0CrOBCUXqCUvPhkfdTyOpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjKWSkMBdLk2N2GGoCYwq3qgtEzMB8GA1UdIwQY MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt YTcwZGI1ODI4MGZjLzEvT01wWktRd0YwdVRZM1lZYWdKakNyZXFDMFRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2DloMA0G CSqGSIb3DQEBCwUAA4IBAQBNYJP/7gifIPMwGE1xrSZmiJ9e47mlLACAJ46fK/24 pZStftAc6SOqTbMQQLoKmUNbo8CNAVJ06c00HZHlF8+4xsUeYQYo3cgdKDTrLvgg sVCc7gDyAgvYBH4U0JfWF6O388XPSGIK3U9qzov0qWymR/eyZ5rd8faVzTZ3laNH +PUCKIqzQ9D1XCYF2yIqOJxSoUX+dCfZG+a3xzRPAnZ6rtq3ngfmzosQNy0vCcH+ 67ReHP6IGgCv+n6u//aAQ1SDuHhd+rHw5qbCWI/kd6oDMPmcY6epyXIAemNCdnDr TED9wHU86LpjpzoGK49HjWiB3fdUkAZ+w1ziPj7sz07U -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:22 2026 by rpki-client