This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa File: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (raw, json) Hash identifier: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM= Subject key identifier: A0:CB:C8:14:D7:31:4A:F9:0F:69:64:53:00:E9:70:89:48:D2:0B:7B Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B77595D719C02A151D8770A74F0CC2D93 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199883 IP address blocks: 89.36.220.0/22 maxlen: 24 89.38.144.0/22 maxlen: 24 89.40.120.0/22 maxlen: 24 94.177.248.0/22 maxlen: 24 94.177.252.0/22 maxlen: 24 185.43.208.0/22 maxlen: 24 185.58.224.0/22 maxlen: 24 217.61.16.0/21 maxlen: 24 217.61.112.0/21 maxlen: 24 2a01:6e60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:71:9c:02:a1:51:d8:77:0a:74:f0:cc:2d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0cbc814d7314af90f69645300e9708948d20b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:ef:20:30:c6:30:2a:a1:51:01:8b:40:82: c7:e2:63:dd:d8:67:ad:be:9d:70:73:6f:b6:c0:6c: 93:e3:97:b6:da:16:8c:e2:62:25:0c:9f:ce:2b:ed: 38:3f:95:83:34:38:e9:a0:0f:50:5c:e6:0d:3c:e8: 68:fb:a1:1d:17:10:0e:54:a0:44:a2:a2:48:4f:a1: 2f:fc:e3:f0:b1:6a:5e:54:90:86:c0:e8:76:ac:d7: 2e:32:37:8c:62:ed:7e:6e:99:e6:73:38:50:d3:0d: bf:9f:64:65:b5:a8:dd:c4:b1:8b:20:6b:d5:02:14: 8a:14:b3:2c:b3:c7:4d:c8:d4:c0:83:18:de:65:b4: e2:c9:4d:08:a6:d8:02:51:ad:e3:21:7a:bf:a7:81: 36:e9:44:01:7c:ca:ad:a2:4a:09:73:51:ae:40:b6: 30:4e:14:d1:d0:d8:53:dd:3b:68:16:ee:64:b6:be: dc:06:21:d0:98:ce:33:b0:43:82:e0:11:6a:8f:a5: 90:98:37:a6:09:d9:c9:f6:85:36:1b:1f:3c:8b:2f: b1:35:91:f7:65:e0:4c:a4:9e:cb:61:4d:a8:43:14: 31:c3:16:86:a7:ee:42:8b:00:1d:3e:1c:85:b6:93: 0f:9c:15:b3:73:b0:9b:61:b2:70:88:24:a8:e9:cf: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CB:C8:14:D7:31:4A:F9:0F:69:64:53:00:E9:70:89:48:D2:0B:7B X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.220.0/22 89.38.144.0/22 89.40.120.0/22 94.177.248.0/21 185.43.208.0/22 185.58.224.0/22 217.61.16.0/21 217.61.112.0/21 IPv6: 2a01:6e60::/32 Signature Algorithm: sha256WithRSAEncryption 10:0a:df:f9:e9:6c:5d:1d:43:aa:a8:fd:b2:6d:a3:48:54:11: bf:98:e1:45:53:92:cd:0f:4c:e0:23:82:1b:33:d6:56:ac:fa: 4f:5a:96:16:5f:b8:3c:b1:57:ba:da:32:c2:7d:e7:f1:98:a3: 79:49:f1:8b:f5:f3:7e:eb:ec:ef:24:5d:23:bc:cc:52:4d:d9: e7:4a:c6:ec:26:36:08:90:57:51:82:dc:e7:69:91:09:f7:5f: cc:84:59:1c:61:5d:fe:59:cd:96:de:74:dd:8e:fc:8e:76:a2: cb:2e:2b:86:4e:df:5c:58:9e:ad:be:7d:fc:5a:29:d7:0b:c7: 49:89:18:a6:c0:ed:1a:a7:ba:c1:21:71:b1:17:97:70:67:47: 4d:ec:22:bb:07:18:19:21:f7:a4:a5:a4:ce:19:50:e1:98:d1: 84:e3:f3:a9:21:b5:05:13:90:01:a2:ff:bd:10:cb:3d:6c:f4: d9:1b:65:5d:26:36:31:42:7d:98:d4:60:cf:7f:9b:70:36:f5: 95:31:ac:bf:06:ad:81:9c:66:38:ce:4d:61:4d:26:84:fe:17: e4:31:9e:ec:a7:95:fc:24:42:5d:11:7a:d6:b5:fa:7c:75:17: 10:d4:64:b8:4d:cc:39:06:75:27:aa:c3:5d:d2:42:d6:7d:d8: 6b:34:e2:92 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt3WV1xnAKhUdh3CnTwzC2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGNiYzgxNGQ3MzE0YWY5MGY2OTY0NTMwMGU5NzA4OTQ4ZDIwYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUrvIDDGMCqhUQGLQILH4mPd2Get vp1wc2+2wGyT45e22haM4mIlDJ/OK+04P5WDNDjpoA9QXOYNPOho+6EdFxAOVKBE oqJIT6Ev/OPwsWpeVJCGwOh2rNcuMjeMYu1+bpnmczhQ0w2/n2RltajdxLGLIGvV AhSKFLMss8dNyNTAgxjeZbTiyU0IptgCUa3jIXq/p4E26UQBfMqtokoJc1GuQLYw ThTR0NhT3TtoFu5ktr7cBiHQmM4zsEOC4BFqj6WQmDemCdnJ9oU2Gx88iy+xNZH3 ZeBMpJ7LYU2oQxQxwxaGp+5CiwAdPhyFtpMPnBWzc7CbYbJwiCSo6c80FwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFKDLyBTXMUr5D2lkUwDpcIlI0gt7MB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvb012SUZOY3hTdmtQYVdSVEFPbHdpVWpTQzNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCWSTcAwQC WSaQAwQCWSh4AwQDXrH4AwQCuSvQAwQCuTrgAwQD2T0QAwQD2T1wMA0EAgACMAcD BQAqAW5gMA0GCSqGSIb3DQEBCwUAA4IBAQAQCt/56WxdHUOqqP2ybaNIVBG/mOFF U5LND0zgI4IbM9ZWrPpPWpYWX7g8sVe62jLCfefxmKN5SfGL9fN+6+zvJF0jvMxS TdnnSsbsJjYIkFdRgtznaZEJ91/MhFkcYV3+Wc2W3nTdjvyOdqLLLiuGTt9cWJ6t vn38WinXC8dJiRimwO0ap7rBIXGxF5dwZ0dN7CK7BxgZIfekpaTOGVDhmNGE4/Op IbUFE5ABov+9EMs9bPTZG2VdJjYxQn2Y1GDPf5twNvWVMay/Bq2BnGY4zk1hTSaE /hfkMZ7sp5X8JEJdEXrWtfp8dRcQ1GS4Tcw5BnUnqsNd0kLWfdhrNOKS -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:56 2026 by rpki-client