This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa File: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (raw, json) Hash identifier: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g= Subject key identifier: 39:03:0E:9B:22:6B:4E:CF:FA:21:1A:6C:18:B8:3D:1D:3C:A8:57:B9 Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02 Certificate serial: 019B7E373775FDEB67F846C5C05C905F4113 Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa Signing time: Fri 02 Jan 2026 10:18:26 +0000 ROA not before: Fri 02 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211055 IP address blocks: 185.233.130.0/24 maxlen: 24 2a11:3400::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:37:75:fd:eb:67:f8:46:c5:c0:5c:90:5f:41:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02 Validity Not Before: Jan 2 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39030e9b226b4ecffa211a6c18b83d1d3ca857b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:fb:7e:4e:dc:0a:d0:51:a2:43:fc:2f:36: 24:ea:99:71:13:11:cd:f6:f6:2e:9a:99:57:e2:7b: 1b:a3:8e:ae:7d:58:96:46:08:19:a0:3a:43:e2:30: 97:9b:aa:98:29:d8:cd:9d:0b:57:92:0d:0d:b8:79: 64:23:f2:70:40:ac:ae:1c:8b:bc:7f:40:3d:50:81: 7c:69:ec:a1:87:3f:a0:48:ec:c5:5d:c4:ce:d8:6d: 79:46:28:80:62:21:17:68:32:26:6f:33:a5:d3:2e: 8c:e8:2e:9c:94:25:55:ad:ca:58:6d:17:8e:19:1a: 0b:65:00:fc:f2:d0:9e:2b:88:2e:61:13:76:9a:c0: c2:3e:69:fd:1a:31:76:24:d7:d9:6e:7b:c9:00:fa: 80:52:72:a2:9f:f3:1a:7f:b2:51:16:42:cc:a5:09: 64:19:ac:98:24:7d:8f:93:72:32:c7:78:f3:1f:27: b8:05:e0:1d:5b:13:aa:a9:1c:34:99:34:1c:d8:b9: 4c:08:c5:93:65:0c:78:a7:63:2e:36:b6:ea:2c:86: fb:7e:d6:2b:a1:32:52:16:9a:c9:cd:57:1e:59:8f: 23:52:84:2f:6b:fe:b3:94:4c:d5:f7:35:30:0e:91: f6:51:50:3b:88:e9:1d:83:e0:a7:21:cb:3d:33:57: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:03:0E:9B:22:6B:4E:CF:FA:21:1A:6C:18:B8:3D:1D:3C:A8:57:B9 X509v3 Authority Key Identifier: keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.130.0/24 IPv6: 2a11:3400::/29 Signature Algorithm: sha256WithRSAEncryption 2e:89:6a:75:04:e1:75:a7:b5:fa:94:9b:68:49:e4:19:77:6b: fb:da:50:db:a7:33:87:82:1a:56:91:de:0d:18:e3:d3:d6:dd: 4f:89:4d:7f:4e:bd:d0:27:8c:3e:6e:f6:56:1b:a8:9d:cc:1d: fc:3c:f2:82:8e:af:1b:2c:84:93:00:fd:23:99:c1:35:96:c6: 58:eb:07:e5:a0:3d:1e:da:22:9c:7e:a2:8b:fc:74:42:38:db: 9a:20:05:6c:eb:51:12:37:be:5d:d7:bc:19:11:2e:e4:a3:c5: 4d:f8:56:8c:b6:18:74:c9:90:5a:85:4f:59:2c:12:3e:71:b6: 3f:18:94:97:eb:06:5a:dc:f0:17:6c:49:0a:20:13:ce:90:6c: bb:ed:3e:93:e0:81:0f:5a:61:b2:c5:5c:2f:5e:39:ca:d5:d3: d0:8d:f5:ba:51:5a:2f:b9:dc:dd:d9:5d:0c:63:26:b6:2f:e7: d0:ca:58:c3:e4:8d:05:2d:a3:ea:60:c5:5e:4d:46:4b:c1:ab: 91:3e:20:1c:35:88:46:c7:6c:31:36:94:b0:74:c8:5b:6f:13: 3f:af:bf:68:c9:74:78:8c:83:09:8a:cc:16:70:cd:5b:97:53: 5b:a4:ee:9d:c8:89:7e:17:52:01:9c:21:de:a4:c1:bb:02:1f: 1f:44:5f:aa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+Nzd1/etn+EbFwFyQX0ETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzI5Y2VkOGVmYjQxZjNiNGEyMDc4ZDk0YmJiMGEzYWFi NGZiMDIwHhcNMjYwMTAyMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTAzMGU5YjIyNmI0ZWNmZmEyMTFhNmMxOGI4M2QxZDNjYTg1N2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNT7fk7cCtBRokP8LzYk6plxExHN 9vYumplX4nsbo46ufViWRggZoDpD4jCXm6qYKdjNnQtXkg0NuHlkI/JwQKyuHIu8 f0A9UIF8aeyhhz+gSOzFXcTO2G15RiiAYiEXaDImbzOl0y6M6C6clCVVrcpYbReO GRoLZQD88tCeK4guYRN2msDCPmn9GjF2JNfZbnvJAPqAUnKin/Maf7JRFkLMpQlk GayYJH2Pk3Iyx3jzHye4BeAdWxOqqRw0mTQc2LlMCMWTZQx4p2MuNrbqLIb7ftYr oTJSFprJzVceWY8jUoQva/6zlEzV9zUwDpH2UVA7iOkdg+CnIcs9M1dedQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDkDDpsia07P+iEabBi4PR08qFe5MB8GA1UdIwQY MBaAFMoynO2O+0HztKIHjZS7sKOqtPsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEt OWRiYzM1NjcyMzI5LzEvT1FNT215SnJUc182SVJwc0dMZzlIVHlvVjdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEtOWRiYzM1NjcyMzI5 LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuemCMA0E AgACMAcDBQMqETQAMA0GCSqGSIb3DQEBCwUAA4IBAQAuiWp1BOF1p7X6lJtoSeQZ d2v72lDbpzOHghpWkd4NGOPT1t1PiU1/Tr3QJ4w+bvZWG6idzB38PPKCjq8bLIST AP0jmcE1lsZY6wfloD0e2iKcfqKL/HRCONuaIAVs61ESN75d17wZES7ko8VN+FaM thh0yZBahU9ZLBI+cbY/GJSX6wZa3PAXbEkKIBPOkGy77T6T4IEPWmGyxVwvXjnK 1dPQjfW6UVovudzd2V0MYya2L+fQyljD5I0FLaPqYMVeTUZLwauRPiAcNYhGx2wx NpSwdMhbbxM/r79oyXR4jIMJiswWcM1bl1NbpO6dyIl+F1IBnCHepMG7Ah8fRF+q -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:47 2026 by rpki-client