This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/OmDDKkcEib7k4pFWxXZ1HwkH5Zc.roa File: OmDDKkcEib7k4pFWxXZ1HwkH5Zc.roa (raw, json) Hash identifier: G2swW7hwtghzv2YhUx98Mnp+pnrjMhtKz6RSjWiReCk= Subject key identifier: 3A:60:C3:2A:47:04:89:BE:E4:E2:91:56:C5:76:75:1F:09:07:E5:97 Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a Certificate serial: 019B76EB0B4D0174CA68E1A1A5C34618790E Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/OmDDKkcEib7k4pFWxXZ1HwkH5Zc.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46873 IP address blocks: 45.84.193.0/24 maxlen: 24 45.84.194.0/24 maxlen: 24 45.84.195.0/24 maxlen: 24 45.153.108.0/24 maxlen: 24 45.153.109.0/24 maxlen: 24 45.153.110.0/24 maxlen: 24 45.153.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0b:4d:01:74:ca:68:e1:a1:a5:c3:46:18:79:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a60c32a470489bee4e29156c576751f0907e597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:dd:5c:90:19:6b:c6:20:c0:49:27:e0:4e: 7c:f8:a2:d6:16:5f:54:aa:1c:6e:22:79:cd:af:5b: 41:02:02:11:ec:18:97:0a:bf:2f:dd:21:6d:0a:75: 42:37:ab:b8:fe:ad:0d:e2:11:a8:b7:0d:d5:9e:5e: 36:e7:5d:bf:2f:c7:d8:87:db:e6:90:4a:ed:8d:33: 19:3c:39:ca:45:d3:97:8e:f6:6f:69:4e:6f:19:a8: 0e:c8:c6:c6:30:aa:09:62:e2:62:d8:89:f4:14:e5: 8a:bc:47:00:08:28:2d:e7:22:fc:83:ca:0e:d7:40: ba:f1:f3:dc:40:1b:d5:98:05:49:3d:82:c7:1c:08: 78:f2:fb:82:a2:4a:d5:e4:3a:64:b9:23:b9:54:16: 23:4f:14:98:a0:c4:5b:f1:b2:6d:65:c2:24:09:ed: bf:b4:c0:4d:03:81:bd:b4:8f:0c:54:04:96:76:80: da:51:17:16:93:3a:53:29:92:6e:92:67:a6:0d:95: be:cc:88:37:3f:95:68:b5:7e:f2:9e:62:e5:0c:fe: 35:48:6b:ab:ce:8f:53:8d:69:6c:b2:42:9a:af:b9: 58:b4:31:fb:b8:ab:7d:20:77:9d:95:55:69:30:71: 3d:02:89:2f:b7:cb:3e:cb:55:70:13:c5:aa:8f:42: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:60:C3:2A:47:04:89:BE:E4:E2:91:56:C5:76:75:1F:09:07:E5:97 X509v3 Authority Key Identifier: keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/OmDDKkcEib7k4pFWxXZ1HwkH5Zc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.193.0-45.84.195.255 45.153.108.0/22 Signature Algorithm: sha256WithRSAEncryption 85:ff:26:9c:16:f0:42:11:88:7b:5d:b1:f3:6f:26:dc:a7:a6: 8d:2f:c4:a4:da:29:29:c3:12:8a:40:a7:cc:f4:a3:57:65:86: 0a:b7:f5:98:ae:2f:40:5d:e3:5c:20:63:c9:cf:3b:9f:94:a7: 54:7c:d8:69:12:d0:e1:e5:61:a6:b3:33:7b:f4:1e:6e:0b:f1: 6d:f8:14:01:93:d7:51:f9:fe:08:e5:85:13:f1:4b:c5:99:2e: bb:c1:c3:b5:d6:54:d7:22:e3:9f:04:78:73:f2:e9:42:c3:2e: 0c:de:b0:b3:a9:1d:38:6a:a1:62:67:fb:0a:4f:0a:c4:da:8f: 9a:7e:92:1f:27:fe:7d:e1:b3:84:f8:09:06:b5:0f:9b:00:87: 4f:dd:48:12:96:ee:b7:80:b8:c4:ee:1a:63:98:6b:ac:2e:30: 07:cb:fd:77:4f:ed:3c:c9:a0:7f:7b:5f:2c:37:7d:0d:ea:32: e3:82:ba:06:29:5e:c8:c7:ed:d1:e1:3e:6e:71:52:22:1d:0d: 70:32:93:f6:54:02:f4:77:04:60:97:b0:a7:dd:9c:d0:81:43: b7:67:c0:f8:60:5d:ab:6e:eb:5c:ba:af:89:12:24:30:78:60: ae:f6:c8:07:31:34:e6:d7:00:62:c9:8e:ea:1f:e3:0e:02:42: 01:3e:b6:34 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt26wtNAXTKaOGhpcNGGHkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTY5MWNhOWM1OGQwODU5YjZiODcwMjMwYjBmNTgxYmU2 NmE1OGEwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTYwYzMyYTQ3MDQ4OWJlZTRlMjkxNTZjNTc2NzUxZjA5MDdlNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXbdXJAZa8YgwEkn4E58+KLWFl9U qhxuInnNr1tBAgIR7BiXCr8v3SFtCnVCN6u4/q0N4hGotw3Vnl42512/L8fYh9vm kErtjTMZPDnKRdOXjvZvaU5vGagOyMbGMKoJYuJi2In0FOWKvEcACCgt5yL8g8oO 10C68fPcQBvVmAVJPYLHHAh48vuCokrV5DpkuSO5VBYjTxSYoMRb8bJtZcIkCe2/ tMBNA4G9tI8MVASWdoDaURcWkzpTKZJukmemDZW+zIg3P5VotX7ynmLlDP41SGur zo9TjWlsskKar7lYtDH7uKt9IHedlVVpMHE9Aokvt8s+y1VwE8Wqj0JWYQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDpgwypHBIm+5OKRVsV2dR8JB+WXMB8GA1UdIwQY MBaAFGYWkcqcWNCFm2uHAjCw9YG+ZqWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQt MWE4MGRhZmZkNzk2LzEvT21EREtrY0VpYjdrNHBGV3hYWjFId2tINVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQtMWE4MGRhZmZkNzk2 LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtVMED BAItVMADBAItmWwwDQYJKoZIhvcNAQELBQADggEBAIX/JpwW8EIRiHtdsfNvJtyn po0vxKTaKSnDEopAp8z0o1dlhgq39ZiuL0Bd41wgY8nPO5+Up1R82GkS0OHlYaaz M3v0Hm4L8W34FAGT11H5/gjlhRPxS8WZLrvBw7XWVNci458EeHPy6ULDLgzesLOp HThqoWJn+wpPCsTaj5p+kh8n/n3hs4T4CQa1D5sAh0/dSBKW7reAuMTuGmOYa6wu MAfL/XdP7TzJoH97Xyw3fQ3qMuOCugYpXsjH7dHhPm5xUiIdDXAyk/ZUAvR3BGCX sKfdnNCBQ7dnwPhgXatu61y6r4kSJDB4YK72yAcxNObXAGLJjuof4w4CQgE+tjQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:53 2026 by rpki-client