This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/OmKYv-eBNTYluusfNr4dZe7zC_c.roa File: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (raw, json) Hash identifier: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg= Subject key identifier: 3A:62:98:BF:E7:81:35:36:25:BA:EB:1F:36:BE:1D:65:EE:F3:0B:F7 Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Certificate serial: 019B7A5B15BCC962E82744CC76320F2DF5E1 Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/OmKYv-eBNTYluusfNr4dZe7zC_c.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205225 IP address blocks: 185.188.93.0/24 maxlen: 24 185.188.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:15:bc:c9:62:e8:27:44:cc:76:32:0f:2d:f5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a6298bfe781353625baeb1f36be1d65eef30bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2d:bf:25:cb:c4:c8:12:60:a2:b5:91:9a:50: 8d:89:16:27:1c:c6:cf:85:1b:1f:7c:4c:d2:95:32: 4a:3a:5d:55:f8:df:18:56:bd:69:f1:c6:6d:e6:1d: a1:c4:65:8c:25:85:6c:de:be:73:2b:00:fb:63:3d: e8:fc:f4:fa:0d:14:f0:03:d9:96:ac:99:78:08:f5: 1e:dd:fb:99:e8:10:a1:7b:3d:de:c2:a8:c0:db:f3: 2c:52:7a:fa:80:64:ea:5c:25:53:4f:73:1c:fa:75: fc:c9:c3:c4:fd:d5:96:85:1e:0b:ef:95:d7:b6:0f: f0:3d:15:fe:09:5a:55:a9:37:ee:4b:50:37:e6:d7: de:1f:67:bb:0f:e7:6f:47:cc:90:8f:3d:55:15:e8: 24:63:f6:af:cb:a7:b7:7d:d5:a6:82:d5:fc:be:ae: 25:df:f8:ec:7e:35:ae:83:5c:08:ec:5a:aa:ad:00: 30:cd:b9:0a:5e:db:c3:85:58:96:51:b8:49:f0:a2: e6:8e:2d:53:ed:50:21:d2:b0:df:57:b9:f0:90:24: 3a:c8:25:d4:bf:31:6e:26:24:05:6f:ca:1f:ab:cd: 87:96:71:92:c7:7b:d0:f7:0c:6c:e6:96:6b:3f:24: ae:ba:70:00:ea:46:51:bb:83:9f:b1:40:25:ae:70: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:98:BF:E7:81:35:36:25:BA:EB:1F:36:BE:1D:65:EE:F3:0B:F7 X509v3 Authority Key Identifier: keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/OmKYv-eBNTYluusfNr4dZe7zC_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.93.0/24 185.188.95.0/24 Signature Algorithm: sha256WithRSAEncryption 56:4a:6f:c5:b9:f0:51:73:a6:dd:85:d0:1d:0c:9d:bc:00:0e: 02:eb:ab:96:9b:e3:93:cb:78:6b:fa:cd:2c:ff:20:b4:f2:2d: 8a:9c:6c:eb:4e:8d:e6:68:4d:97:1e:92:d9:34:ca:a8:7d:a5: c2:f2:52:80:6f:a3:5d:47:44:8d:82:e1:df:15:5e:6f:9c:eb: c2:4c:1e:b4:df:5f:ec:b7:a1:2c:e7:5b:e3:7c:0e:43:3c:61: 25:37:5a:a5:32:0e:da:27:7e:d6:34:50:04:ce:af:02:7a:9e: d4:0c:c8:54:30:bc:57:00:57:05:6d:f2:8c:9b:05:a8:f3:0c: 03:97:c6:54:a2:1c:ff:5a:8a:7a:71:6b:43:20:ea:f6:65:1f: 2f:d6:5d:fa:da:eb:c7:35:d0:60:2a:0b:49:83:ae:79:c5:5a: 9c:d3:39:fc:88:d3:ba:a6:c2:3f:6f:07:e9:c9:07:01:ab:da: 21:20:5d:67:df:38:8e:f7:5b:c5:95:49:b8:76:8e:bc:4c:c2: 4f:0a:06:94:9d:f8:9c:71:4e:2c:df:5d:d4:4f:0e:d3:1a:c4: 4a:df:0c:b2:f7:92:43:da:7e:41:1f:c4:cc:45:9d:c6:a2:29: d2:f7:92:51:12:2b:b7:52:36:86:3d:10:96:2b:a3:ae:88:7c: c5:cc:66:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WxW8yWLoJ0TMdjIPLfXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk MjE2NjYwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTYyOThiZmU3ODEzNTM2MjViYWViMWYzNmJlMWQ2NWVlZjMwYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+C2/JcvEyBJgorWRmlCNiRYnHMbP hRsffEzSlTJKOl1V+N8YVr1p8cZt5h2hxGWMJYVs3r5zKwD7Yz3o/PT6DRTwA9mW rJl4CPUe3fuZ6BChez3ewqjA2/MsUnr6gGTqXCVTT3Mc+nX8ycPE/dWWhR4L75XX tg/wPRX+CVpVqTfuS1A35tfeH2e7D+dvR8yQjz1VFegkY/avy6e3fdWmgtX8vq4l 3/jsfjWug1wI7FqqrQAwzbkKXtvDhViWUbhJ8KLmji1T7VAh0rDfV7nwkCQ6yCXU vzFuJiQFb8ofq82HlnGSx3vQ9wxs5pZrPySuunAA6kZRu4OfsUAlrnCJ6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDpimL/ngTU2JbrrHza+HWXu8wv3MB8GA1UdIwQY MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt YTgxNTQ0ZWE1YjY3LzEvT21LWXYtZUJOVFlsdXVzZk5yNGRaZTd6Q19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3 LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubxdAwQA ubxfMA0GCSqGSIb3DQEBCwUAA4IBAQBWSm/FufBRc6bdhdAdDJ28AA4C66uWm+OT y3hr+s0s/yC08i2KnGzrTo3maE2XHpLZNMqofaXC8lKAb6NdR0SNguHfFV5vnOvC TB6031/st6Es51vjfA5DPGElN1qlMg7aJ37WNFAEzq8Cep7UDMhUMLxXAFcFbfKM mwWo8wwDl8ZUohz/Wop6cWtDIOr2ZR8v1l362uvHNdBgKgtJg655xVqc0zn8iNO6 psI/bwfpyQcBq9ohIF1n3ziO91vFlUm4do68TMJPCgaUnficcU4s313UTw7TGsRK 3wyy95JD2n5BH8TMRZ3GoinS95JREiu3UjaGPRCWK6OuiHzFzGYj -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:26 2026 by rpki-client