This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa File: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (raw, json) Hash identifier: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I= Subject key identifier: 02:89:B7:2B:18:7F:65:F0:CA:46:43:F8:F1:6A:3C:9D:79:0B:36:8D Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B7EA65BC349E67B0019D27BAEB8C5F14F Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43151 IP address blocks: 185.122.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5b:c3:49:e6:7b:00:19:d2:7b:ae:b8:c5:f1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0289b72b187f65f0ca4643f8f16a3c9d790b368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:b1:1a:66:70:f7:8e:a7:b8:31:88:17:9f: d8:8e:94:69:45:0f:5a:4c:a2:a7:92:bb:77:67:4c: a3:8a:19:64:49:1a:f1:4f:20:ba:8d:35:7a:5d:fc: 53:6c:4f:35:c4:23:98:e9:79:b3:c3:66:4e:61:fa: ff:8d:67:7c:65:ae:82:bf:6a:00:de:01:0e:8d:f8: 04:50:c1:0d:3f:e4:d2:64:95:1a:d9:2c:f5:03:a6: 0f:7f:a7:25:0a:37:eb:85:2b:b6:11:93:20:40:61: 1f:9c:3f:3c:74:8f:2f:d2:9b:81:0a:6e:e7:a4:44: de:49:7e:0c:7b:6f:63:9b:50:a8:ca:34:29:bd:44: b3:98:f2:5c:d1:0e:fe:74:72:65:55:e7:f6:ea:f8: 53:26:9f:b6:c9:8e:45:a9:8f:29:e5:1c:6c:2d:e5: 01:4b:fb:ce:80:e0:8b:53:ca:df:12:7d:03:5e:98: 4c:26:ee:d0:4c:2b:18:58:48:c9:6e:1d:3e:bb:83: 30:ad:3d:94:e3:de:32:9b:61:9a:61:2d:f4:05:98: 3b:64:b4:dc:69:8d:84:2a:0a:74:1b:d3:d4:34:78: 49:79:60:f6:37:9a:83:fb:4a:bd:b1:fb:d3:3f:6e: 71:76:2d:ef:58:5a:69:54:89:93:1a:bc:99:ae:b1: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:89:B7:2B:18:7F:65:F0:CA:46:43:F8:F1:6A:3C:9D:79:0B:36:8D X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.140.0/24 Signature Algorithm: sha256WithRSAEncryption a4:8a:58:8b:07:58:c5:68:16:29:3e:dc:21:3a:24:12:a6:c5: 23:c9:38:d5:22:ca:1c:c4:ef:9f:44:1f:d5:e3:93:8e:20:ab: 74:fb:18:69:b8:4c:18:f5:4f:e0:3f:46:a9:fe:da:41:23:5a: 34:ab:25:a1:27:b6:f0:03:58:77:ea:ae:55:79:d6:ba:ff:a0: 47:a2:aa:b3:ae:94:f3:72:da:dd:1e:0f:21:60:cc:05:85:db: 22:53:66:61:ea:bb:9b:87:4f:a8:11:ec:c5:b6:94:04:cc:b9: 29:f5:68:71:c4:49:41:07:db:22:d0:0a:23:22:4b:12:ab:6b: 9e:9d:05:ce:01:06:b9:1a:e2:72:44:54:ca:ba:6d:a5:b9:b6: c2:86:2a:8f:9b:62:21:24:e7:87:d8:5e:30:e7:cf:52:16:47: 5c:b2:ca:cc:d9:96:75:b2:4c:74:2f:da:b6:08:2d:b9:8b:74: 8c:c4:c0:3f:0d:d0:3f:ea:0c:f2:1e:40:9d:a0:7e:08:f2:7b: 91:7d:9a:98:bf:5e:ea:ca:a2:c1:1d:35:be:d6:f3:8f:92:77: 7d:d9:a4:9c:51:a2:44:15:4c:26:97:b5:a9:f1:30:bc:dc:6f: e0:aa:6e:87:45:04:e9:7e:e7:5e:5a:31:ce:74:5a:6c:8f:e4: c8:d3:ef:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+plvDSeZ7ABnSe664xfFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjg5YjcyYjE4N2Y2NWYwY2E0NjQzZjhmMTZhM2M5ZDc5MGIzNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeixGmZw946nuDGIF5/YjpRpRQ9a TKKnkrt3Z0yjihlkSRrxTyC6jTV6XfxTbE81xCOY6Xmzw2ZOYfr/jWd8Za6Cv2oA 3gEOjfgEUMENP+TSZJUa2Sz1A6YPf6clCjfrhSu2EZMgQGEfnD88dI8v0puBCm7n pETeSX4Me29jm1CoyjQpvUSzmPJc0Q7+dHJlVef26vhTJp+2yY5FqY8p5RxsLeUB S/vOgOCLU8rfEn0DXphMJu7QTCsYWEjJbh0+u4MwrT2U494ym2GaYS30BZg7ZLTc aY2EKgp0G9PUNHhJeWD2N5qD+0q9sfvTP25xdi3vWFppVImTGryZrrGinQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKJtysYf2XwykZD+PFqPJ15CzaNMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvQW9tM0t4aF9aZkRLUmtQNDhXbzhuWGtMTm8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXqMMA0G CSqGSIb3DQEBCwUAA4IBAQCkiliLB1jFaBYpPtwhOiQSpsUjyTjVIsocxO+fRB/V 45OOIKt0+xhpuEwY9U/gP0ap/tpBI1o0qyWhJ7bwA1h36q5Veda6/6BHoqqzrpTz ctrdHg8hYMwFhdsiU2Zh6rubh0+oEezFtpQEzLkp9WhxxElBB9si0AojIksSq2ue nQXOAQa5GuJyRFTKum2lubbChiqPm2IhJOeH2F4w589SFkdcssrM2ZZ1skx0L9q2 CC25i3SMxMA/DdA/6gzyHkCdoH4I8nuRfZqYv17qyqLBHTW+1vOPknd92aScUaJE FUwml7Wp8TC83G/gqm6HRQTpfudeWjHOdFpsj+TI0+/w -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:11 2026 by rpki-client