This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OMCUrNFljyKqjduFJb7MdG3sNHs.roa File: OMCUrNFljyKqjduFJb7MdG3sNHs.roa (raw, json) Hash identifier: oyO5gMm4WFjXUcoNWbygxtKTPk3ZX8y3bugrVT/Pwyg= Subject key identifier: 38:C0:94:AC:D1:65:8F:22:AA:8D:DB:85:25:BE:CC:74:6D:EC:34:7B Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B214FB27087E26D3842F9840C9A4FD751 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OMCUrNFljyKqjduFJb7MdG3sNHs.roa Signing time: Mon 15 Dec 2025 09:20:29 +0000 ROA not before: Mon 15 Dec 2025 09:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64267 IP address blocks: 89.251.16.0/24 maxlen: 24 89.251.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:4f:b2:70:87:e2:6d:38:42:f9:84:0c:9a:4f:d7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Dec 15 09:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38c094acd1658f22aa8ddb8525becc746dec347b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:27:85:df:4a:18:a0:00:a3:32:3a:1c:1c: 3d:21:dc:c9:87:e0:32:04:31:00:7e:8a:de:5e:a1: 81:cf:9d:b1:4b:8e:91:60:74:88:69:23:4b:d8:70: b8:d6:ab:df:df:45:76:9e:86:1f:29:87:91:92:99: d4:d4:fc:00:2a:3e:e1:e8:ca:fe:32:3a:16:50:b3: 24:65:e3:0e:43:b8:b4:06:8b:43:de:63:8b:eb:f3: 43:18:37:dd:14:01:3d:27:06:79:88:84:4d:12:1a: 16:c9:0c:de:22:4b:18:90:4e:39:fd:27:88:71:89: 3f:a7:c4:31:04:89:52:8d:91:1f:36:59:91:d2:73: 2d:b7:e9:36:a6:15:9c:44:f8:b3:f3:a6:74:c8:d0: 66:63:22:38:14:73:c7:fe:ae:65:47:96:a7:33:47: ad:a0:e6:32:db:d4:d9:dc:cb:cf:4e:e5:e3:bc:ac: 1d:7c:d8:2d:9b:6d:58:c6:80:0e:32:74:7b:12:6e: 04:49:17:f4:c1:13:e7:23:74:ff:3b:6e:23:28:89: b0:b6:28:73:cf:93:4e:4f:4b:41:a5:4d:94:f4:e8: fc:45:42:ab:d1:c5:2d:c9:66:f8:97:ea:f8:91:fa: bb:46:06:7d:a6:73:6f:7c:23:8b:d2:1b:c6:f4:70: 12:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:94:AC:D1:65:8F:22:AA:8D:DB:85:25:BE:CC:74:6D:EC:34:7B X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OMCUrNFljyKqjduFJb7MdG3sNHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.16.0/24 89.251.19.0/24 Signature Algorithm: sha256WithRSAEncryption 70:35:c8:9f:c4:a1:1b:2e:06:10:67:3f:6b:7a:60:3b:a4:9e: 4a:47:2b:e7:71:18:98:41:d6:f6:40:8d:d9:96:22:80:a4:62: 7a:61:4d:c9:e4:67:4f:e0:fe:e9:6a:9e:41:82:8b:9e:4e:8a: fc:f8:99:28:c6:03:56:c3:a8:f4:f3:0a:57:bb:55:46:80:d6: 28:14:b6:48:68:2f:bd:30:6e:13:62:be:04:1e:de:8b:2a:ec: 34:b6:67:36:f8:dc:66:02:9d:d7:91:da:f2:0c:a6:53:d0:91: ab:01:67:4f:80:af:4b:66:c6:5b:36:7e:8e:e8:a0:b5:0d:d4: e6:c4:05:30:be:ec:90:a9:10:81:fe:ec:7b:ec:39:92:47:8c: b4:31:37:49:b7:40:bc:02:07:4d:f0:ac:59:a7:fa:2b:a3:be: e9:b9:a3:e3:6d:6d:e8:d7:5e:7e:81:30:ac:49:b9:b3:ee:01: d0:fc:16:1e:33:6b:ab:42:47:86:48:af:e1:f9:e1:8d:3d:fd: 07:81:43:a0:14:68:d6:79:90:ee:01:8c:4c:6d:f5:d3:de:ed: 8a:4e:26:4b:a4:f5:9d:63:77:ea:f7:2d:39:20:c1:da:16:c0: 5c:06:70:20:35:2d:1a:1e:8c:23:9d:e5:fb:1a:4a:7f:30:94: c7:58:d5:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZshT7Jwh+JtOEL5hAyaT9dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjUxMjE1MDkyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGMwOTRhY2QxNjU4ZjIyYWE4ZGRiODUyNWJlY2M3NDZkZWMzNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ognhd9KGKAAozI6HBw9IdzJh+Ay BDEAforeXqGBz52xS46RYHSIaSNL2HC41qvf30V2noYfKYeRkpnU1PwAKj7h6Mr+ MjoWULMkZeMOQ7i0BotD3mOL6/NDGDfdFAE9JwZ5iIRNEhoWyQzeIksYkE45/SeI cYk/p8QxBIlSjZEfNlmR0nMtt+k2phWcRPiz86Z0yNBmYyI4FHPH/q5lR5anM0et oOYy29TZ3MvPTuXjvKwdfNgtm21YxoAOMnR7Em4ESRf0wRPnI3T/O24jKImwtihz z5NOT0tBpU2U9Oj8RUKr0cUtyWb4l+r4kfq7RgZ9pnNvfCOL0hvG9HASiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDjAlKzRZY8iqo3bhSW+zHRt7DR7MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvT01DVXJORmxqeUtxamR1RkpiN01kRzNzTkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsQAwQA WfsTMA0GCSqGSIb3DQEBCwUAA4IBAQBwNcifxKEbLgYQZz9remA7pJ5KRyvncRiY Qdb2QI3ZliKApGJ6YU3J5GdP4P7pap5BgoueTor8+JkoxgNWw6j08wpXu1VGgNYo FLZIaC+9MG4TYr4EHt6LKuw0tmc2+NxmAp3XkdryDKZT0JGrAWdPgK9LZsZbNn6O 6KC1DdTmxAUwvuyQqRCB/ux77DmSR4y0MTdJt0C8AgdN8KxZp/oro77puaPjbW3o 115+gTCsSbmz7gHQ/BYeM2urQkeGSK/h+eGNPf0HgUOgFGjWeZDuAYxMbfXT3u2K TiZLpPWdY3fq9y05IMHaFsBcBnAgNS0aHowjneX7Gkp/MJTHWNXh -----END CERTIFICATE-----Generated at Wed Dec 17 18:06:59 2025 by rpki-client