This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa File: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (raw, json) Hash identifier: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo= Subject key identifier: 38:C0:79:26:4F:66:81:D9:A6:D5:53:5A:FE:8D:E9:F2:1E:CF:46:E5 Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Certificate serial: 019BC5981D2E8315D94FC3C8AD7D5F77E407 Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa Signing time: Fri 16 Jan 2026 06:57:18 +0000 ROA not before: Fri 16 Jan 2026 06:57:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56740 IP address blocks: 93.189.225.0/24 maxlen: 24 2a0a:7d80:2::/48 maxlen: 48 2a0a:7d80:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:98:1d:2e:83:15:d9:4f:c3:c8:ad:7d:5f:77:e4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Validity Not Before: Jan 16 06:57:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38c079264f6681d9a6d5535afe8de9f21ecf46e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:c4:e8:a7:56:ce:3c:df:82:67:28:0c:fb: 21:48:79:7c:80:30:df:d1:cf:f4:bc:1c:41:ae:cc: 4b:6a:c7:0a:1d:10:de:48:ae:be:fd:f2:26:5e:79: 0b:19:94:85:4b:a6:67:c3:45:8d:4b:0f:6e:c6:16: d3:c3:46:3d:e8:4b:02:e0:46:14:1e:bf:08:ec:28: 1d:a9:38:0a:cd:08:9a:78:a2:f9:5b:65:ec:90:86: 42:64:d8:d6:bd:61:8d:7d:1d:20:f5:16:92:c9:12: 64:e6:a3:eb:4b:ed:05:99:3a:57:ee:b5:4c:35:fd: a9:f4:58:48:5d:eb:a9:90:a7:71:bd:01:ff:ad:a9: 80:6d:f1:0f:fb:e2:18:b8:71:3a:1f:05:fd:e7:24: 58:9e:ce:bf:33:f5:f1:72:bc:39:c1:e6:29:f9:6f: 3a:ac:d1:8f:85:e1:31:59:48:2c:02:6f:7d:5d:78: 04:a4:da:4b:86:8e:31:c2:05:92:a4:5c:73:d0:c3: cd:ff:aa:2f:5f:67:1c:1d:66:c6:1a:e6:cb:4b:e7: 0c:2b:23:85:ed:c6:e7:26:7e:e4:7d:2d:7b:90:14: 5f:d2:a4:16:ea:42:bd:f2:e0:c2:3e:e7:95:6a:15: 78:30:4f:b4:33:f4:79:ea:ac:cc:dc:c6:13:e8:5e: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:79:26:4F:66:81:D9:A6:D5:53:5A:FE:8D:E9:F2:1E:CF:46:E5 X509v3 Authority Key Identifier: keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.189.225.0/24 IPv6: 2a0a:7d80:2::/48 2a0a:7d80:1000::/36 Signature Algorithm: sha256WithRSAEncryption 10:45:51:74:03:8c:8f:45:29:de:b8:df:4b:c9:54:c1:0b:14: f4:0a:bc:ca:34:5a:b9:9e:cb:c1:37:bc:22:ce:a9:a4:52:b2: dd:c9:e1:f7:cc:75:2e:80:8e:96:9a:96:f9:32:41:ab:c8:ae: bf:19:c9:5e:37:3b:30:2c:d4:c1:18:af:ee:d4:ab:43:ab:8a: ce:0a:4f:70:03:6d:e6:ca:d0:05:97:84:fb:35:85:d1:ec:27: 34:cc:d5:47:24:a8:10:62:33:d6:bd:59:38:8c:2d:1e:63:9d: 07:29:e8:6c:ad:94:63:86:1d:55:32:e3:9a:ae:e0:1b:b0:bf: 19:17:4c:8d:ac:47:c5:7a:d1:e2:63:28:69:29:4c:ee:15:0f: 63:62:22:ae:b0:10:14:de:f6:74:a5:f0:a9:0a:75:81:0a:48: 4c:3a:05:45:c9:24:0b:06:a0:89:37:76:60:0d:46:a4:e7:a9: f1:cb:d9:3a:a9:dc:7c:38:44:96:02:fe:3a:a2:21:ea:06:45: 6d:69:11:2d:f7:e3:29:cc:9d:1c:dc:e0:88:71:d5:52:3b:d8: d6:d3:77:59:75:d7:58:1f:7e:b9:f3:97:bf:c8:70:9a:6c:fa: 35:b1:7f:49:87:fc:21:91:7e:7d:aa:f3:7f:4c:28:1a:90:18: a1:de:cb:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvFmB0ugxXZT8PIrX1fd+QHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz NzhjNzMwHhcNMjYwMTE2MDY1NzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGMwNzkyNjRmNjY4MWQ5YTZkNTUzNWFmZThkZTlmMjFlY2Y0NmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPE6KdWzjzfgmcoDPshSHl8gDDf 0c/0vBxBrsxLascKHRDeSK6+/fImXnkLGZSFS6Znw0WNSw9uxhbTw0Y96EsC4EYU Hr8I7CgdqTgKzQiaeKL5W2XskIZCZNjWvWGNfR0g9RaSyRJk5qPrS+0FmTpX7rVM Nf2p9FhIXeupkKdxvQH/ramAbfEP++IYuHE6HwX95yRYns6/M/Xxcrw5weYp+W86 rNGPheExWUgsAm99XXgEpNpLho4xwgWSpFxz0MPN/6ovX2ccHWbGGubLS+cMKyOF 7cbnJn7kfS17kBRf0qQW6kK98uDCPueVahV4ME+0M/R56qzM3MYT6F6IUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjAeSZPZoHZptVTWv6N6fIez0blMB8GA1UdIwQY MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt Njc3NzEzNTlhMmIzLzEvT01CNUprOW1nZG1tMVZOYV9vM3A4aDdQUnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAXb3hMBcE AgACMBEDBwAqCn2AAAIDBgQqCn2AEDANBgkqhkiG9w0BAQsFAAOCAQEAEEVRdAOM j0Up3rjfS8lUwQsU9Aq8yjRauZ7LwTe8Is6ppFKy3cnh98x1LoCOlpqW+TJBq8iu vxnJXjc7MCzUwRiv7tSrQ6uKzgpPcANt5srQBZeE+zWF0ewnNMzVRySoEGIz1r1Z OIwtHmOdBynobK2UY4YdVTLjmq7gG7C/GRdMjaxHxXrR4mMoaSlM7hUPY2IirrAQ FN72dKXwqQp1gQpITDoFRckkCwagiTd2YA1GpOep8cvZOqncfDhElgL+OqIh6gZF bWkRLffjKcydHNzgiHHVUjvY1tN3WXXXWB9+ufOXv8hwmmz6NbF/SYf8IZF+farz f0woGpAYod7Lmg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:24 2026 by rpki-client