This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Om8hStjIXMnBk-zdgdPtGJavq2U.roa File: Om8hStjIXMnBk-zdgdPtGJavq2U.roa (raw, json) Hash identifier: 4BV0k0GFPD+54yrdbR59nDBJLRt5wbL0ip8ii7IBc+Q= Subject key identifier: 3A:6F:21:4A:D8:C8:5C:C9:C1:93:EC:DD:81:D3:ED:18:96:AF:AB:65 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AD3CBEFC29FD5D6F5BE47FD4870393BB5 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Om8hStjIXMnBk-zdgdPtGJavq2U.roa Signing time: Sun 30 Nov 2025 08:05:49 +0000 ROA not before: Sun 30 Nov 2025 08:05:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 194.231.196.0/24 maxlen: 24 194.231.204.0/24 maxlen: 24 195.86.149.0/24 maxlen: 24 195.86.150.0/24 maxlen: 24 195.86.151.0/24 maxlen: 24 195.86.152.0/24 maxlen: 24 195.86.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d3:cb:ef:c2:9f:d5:d6:f5:be:47:fd:48:70:39:3b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 30 08:05:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a6f214ad8c85cc9c193ecdd81d3ed1896afab65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:da:92:e3:86:5b:af:41:81:bd:6a:1f:8a: db:cc:26:ff:24:d9:63:b5:8e:69:80:4a:37:65:6c: e6:c0:f6:2c:b6:49:69:13:84:a0:fd:c2:cc:ae:9d: c1:5e:32:f7:ee:53:40:27:ac:6e:be:06:28:a1:0e: a7:c5:4f:f9:05:44:ce:63:97:f0:79:71:6c:0c:c2: ff:4a:f9:14:b2:69:5e:53:0a:d8:5b:2f:a8:9a:76: 47:63:f9:09:ff:d3:4f:32:92:df:65:b9:15:29:71: 2b:8c:7f:d0:ce:c2:03:80:70:14:d1:b3:7f:5c:72: a2:b5:55:ee:76:42:70:c4:0a:60:7e:5c:c5:a2:20: 64:81:3d:36:fc:75:aa:6e:53:93:65:c7:d5:87:da: da:32:9e:19:7e:22:92:e8:e0:5d:b2:bb:96:27:3b: 7c:db:85:80:b4:66:be:f5:bf:fe:b4:1c:1f:08:ff: c1:9f:6f:79:fe:ff:e8:09:44:f3:5d:97:18:fe:ec: 0a:10:92:c8:f5:57:88:cd:c4:eb:b8:4a:d8:70:ac: fd:34:d5:e3:61:df:5a:aa:6a:4f:f0:c3:b3:f9:76: 29:f5:9d:50:53:ce:b3:18:dc:ea:91:c9:83:f4:80: 30:02:af:3f:0a:2b:e1:80:af:73:2d:2a:c4:9b:27: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:21:4A:D8:C8:5C:C9:C1:93:EC:DD:81:D3:ED:18:96:AF:AB:65 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Om8hStjIXMnBk-zdgdPtGJavq2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.196.0/24 194.231.204.0/24 195.86.149.0-195.86.153.255 Signature Algorithm: sha256WithRSAEncryption a5:53:46:78:de:0a:01:fe:ed:c5:37:97:60:f8:f1:52:6c:df: 4b:8b:8b:06:3d:af:d4:1b:67:8d:df:37:f8:1d:ec:62:1f:35: be:86:07:d4:c3:48:61:7e:8d:65:e8:f3:68:03:70:a4:17:12: 2d:cf:18:70:8b:b1:c6:36:7e:ff:8f:c4:d7:d4:0f:ad:19:3a: e1:a6:c0:5b:ff:21:03:4d:35:d1:d2:35:75:92:6c:31:bf:fe: 29:ed:03:c6:11:d8:35:b3:72:e5:38:41:07:2e:97:41:5e:ff: e1:85:f3:e4:29:c0:0e:7b:bc:68:c8:62:11:d8:01:3b:ec:46: 62:15:69:5f:1b:42:b0:91:aa:54:cc:e5:87:d8:85:4e:32:44: a1:8d:c3:6c:b4:87:32:c2:92:dd:78:3b:e7:d1:5c:84:39:a7: 72:93:75:5b:0b:9c:bb:88:cd:5f:10:de:e1:91:92:a3:9c:66: 96:3a:9a:f1:b2:77:08:6f:25:c0:93:c3:5e:40:ea:f6:72:f1: 67:75:00:a7:bf:9c:2a:cc:86:cd:5d:67:10:df:a6:a1:96:01: df:b1:cd:12:6b:83:33:52:bb:32:1f:9c:5c:57:5c:47:7c:31: 13:b0:c0:93:26:2f:4b:42:45:02:aa:95:bd:ce:71:39:2a:44: 0f:1b:68:84 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrTy+/Cn9XW9b5H/UhwOTu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTMwMDgwNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTZmMjE0YWQ4Yzg1Y2M5YzE5M2VjZGQ4MWQzZWQxODk2YWZhYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbzakuOGW69Bgb1qH4rbzCb/JNlj tY5pgEo3ZWzmwPYstklpE4Sg/cLMrp3BXjL37lNAJ6xuvgYooQ6nxU/5BUTOY5fw eXFsDML/SvkUsmleUwrYWy+omnZHY/kJ/9NPMpLfZbkVKXErjH/QzsIDgHAU0bN/ XHKitVXudkJwxApgflzFoiBkgT02/HWqblOTZcfVh9raMp4ZfiKS6OBdsruWJzt8 24WAtGa+9b/+tBwfCP/Bn295/v/oCUTzXZcY/uwKEJLI9VeIzcTruErYcKz9NNXj Yd9aqmpP8MOz+XYp9Z1QU86zGNzqkcmD9IAwAq8/CivhgK9zLSrEmyeg7QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDpvIUrYyFzJwZPs3YHT7RiWr6tlMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvT204aFN0aklYTW5Cay16ZGdkUHRHSmF2cTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwufEAwQA wufMMAwDBADDVpUDBAHDVpgwDQYJKoZIhvcNAQELBQADggEBAKVTRnjeCgH+7cU3 l2D48VJs30uLiwY9r9QbZ43fN/gd7GIfNb6GB9TDSGF+jWXo82gDcKQXEi3PGHCL scY2fv+PxNfUD60ZOuGmwFv/IQNNNdHSNXWSbDG//intA8YR2DWzcuU4QQcul0Fe /+GF8+QpwA57vGjIYhHYATvsRmIVaV8bQrCRqlTM5YfYhU4yRKGNw2y0hzLCkt14 O+fRXIQ5p3KTdVsLnLuIzV8Q3uGRkqOcZpY6mvGydwhvJcCTw15A6vZy8Wd1AKe/ nCrMhs1dZxDfpqGWAd+xzRJrgzNSuzIfnFxXXEd8MROwwJMmL0tCRQKqlb3OcTkq RA8baIQ= -----END CERTIFICATE-----Generated at Sat Dec 6 10:49:37 2025 by rpki-client