This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/oMXKRKWkDw3BU5VHnmmfZczo3WU.roa File: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (raw, json) Hash identifier: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8= Subject key identifier: A0:C5:CA:44:A5:A4:0F:0D:C1:53:95:47:9E:69:9F:65:CC:E8:DD:65 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3894BC24423FA851E656F9BA099F3D Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/oMXKRKWkDw3BU5VHnmmfZczo3WU.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35831 IP address blocks: 84.207.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:94:bc:24:42:3f:a8:51:e6:56:f9:ba:09:9f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0c5ca44a5a40f0dc15395479e699f65cce8dd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:48:15:f1:9b:70:99:a1:dc:5c:bd:76:9c: d9:a3:5f:80:80:99:d0:98:1f:88:fc:45:24:a1:20: 79:08:ce:20:fa:62:75:b7:24:0c:d6:25:b8:d6:63: 22:ad:9d:97:89:49:10:bc:c1:68:59:3f:ba:3b:54: 71:66:27:83:64:b7:6e:94:8a:a8:c0:1e:0c:03:63: 39:87:5c:25:55:b9:36:16:05:0d:49:f4:80:fa:dd: e6:3f:5c:27:15:46:3d:46:e6:05:34:c8:d0:8c:1e: 71:ac:4f:bb:fc:69:bb:fd:e3:cd:81:c8:5a:0c:26: 60:6b:ae:7b:7d:41:0d:60:01:9e:29:84:5a:17:14: dc:66:f8:5b:ca:23:b6:c6:1a:db:91:04:99:1a:a6: d4:ce:54:79:c1:9c:08:f5:55:d1:fd:b6:27:1a:f5: 6d:c4:f9:3a:34:72:fe:f9:59:79:40:6f:22:12:75: 01:8f:22:8b:64:a2:dd:79:34:92:43:26:0c:f9:47: 12:80:3f:df:f5:5e:7c:4a:ad:8c:cd:9d:45:9b:76: c9:31:13:24:28:b3:d1:84:9d:b5:4f:af:28:67:4b: 92:15:12:bd:f4:35:03:96:a0:8d:1b:71:88:b7:dd: 76:f3:57:df:ce:2f:38:84:f7:e6:78:d3:70:56:f8: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:CA:44:A5:A4:0F:0D:C1:53:95:47:9E:69:9F:65:CC:E8:DD:65 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/oMXKRKWkDw3BU5VHnmmfZczo3WU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.207.248.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:7e:15:80:e3:32:bf:12:e3:70:76:20:bb:f3:d2:ad:68:74: 1a:a5:a6:41:d2:0c:df:f2:18:85:dd:ce:ea:34:b6:ee:90:25: 59:9f:9e:d5:94:74:c6:e4:75:5a:5b:b4:f2:ee:84:0f:e7:95: 05:c4:6b:12:32:31:64:91:c6:c4:c5:13:2c:7c:85:ea:ab:07: 26:f5:9f:e0:de:6b:44:eb:3c:e0:ed:94:17:c4:56:10:a5:95: 2d:25:84:10:ba:b6:30:ee:85:ad:e8:71:97:c9:0d:79:68:cc: 7e:48:a1:91:52:18:8d:42:e8:f5:eb:96:76:b1:c2:a8:f7:96: 09:93:47:b2:8c:bb:54:d2:43:eb:03:6c:dd:88:85:15:e6:1d: cf:1d:e8:98:1b:6b:78:77:ed:e2:cf:1d:af:5c:19:96:fa:8d: 22:e9:a6:7f:ef:ed:4d:f6:fd:9a:e2:78:4c:c5:64:9e:4e:86: 93:01:72:74:7c:45:19:36:ec:fa:52:18:55:ff:ce:99:f8:fb: 06:41:bb:a2:f9:e1:78:a5:04:f8:e3:6b:fc:c1:3f:6c:c2:24: f5:ad:87:10:20:5e:e9:39:ca:74:e1:7b:cf:ed:21:a1:f3:7e: 32:61:0f:10:0c:3e:19:c4:c3:e4:71:82:ba:5c:2e:d7:12:fe: 8b:1d:d1:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJS8JEI/qFHmVvm6CZ89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGM1Y2E0NGE1YTQwZjBkYzE1Mzk1NDc5ZTY5OWY2NWNjZThkZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPBIFfGbcJmh3Fy9dpzZo1+AgJnQ mB+I/EUkoSB5CM4g+mJ1tyQM1iW41mMirZ2XiUkQvMFoWT+6O1RxZieDZLdulIqo wB4MA2M5h1wlVbk2FgUNSfSA+t3mP1wnFUY9RuYFNMjQjB5xrE+7/Gm7/ePNgcha DCZga657fUENYAGeKYRaFxTcZvhbyiO2xhrbkQSZGqbUzlR5wZwI9VXR/bYnGvVt xPk6NHL++Vl5QG8iEnUBjyKLZKLdeTSSQyYM+UcSgD/f9V58Sq2MzZ1Fm3bJMRMk KLPRhJ21T68oZ0uSFRK99DUDlqCNG3GIt91281ffzi84hPfmeNNwVvjwhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDFykSlpA8NwVOVR55pn2XM6N1lMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvb01YS1JLV2tEdzNCVTVWSG5tbWZaY3pvM1dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVM/4MA0G CSqGSIb3DQEBCwUAA4IBAQAefhWA4zK/EuNwdiC789KtaHQapaZB0gzf8hiF3c7q NLbukCVZn57VlHTG5HVaW7Ty7oQP55UFxGsSMjFkkcbExRMsfIXqqwcm9Z/g3mtE 6zzg7ZQXxFYQpZUtJYQQurYw7oWt6HGXyQ15aMx+SKGRUhiNQuj165Z2scKo95YJ k0eyjLtU0kPrA2zdiIUV5h3PHeiYG2t4d+3izx2vXBmW+o0i6aZ/7+1N9v2a4nhM xWSeToaTAXJ0fEUZNuz6UhhV/86Z+PsGQbui+eF4pQT442v8wT9swiT1rYcQIF7p Ocp04XvP7SGh834yYQ8QDD4ZxMPkcYK6XC7XEv6LHdHP -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:58 2026 by rpki-client