This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/lOMeSgGICNYFoZNF-4T9ut0M_ho.roa File: lOMeSgGICNYFoZNF-4T9ut0M_ho.roa (raw, json) Hash identifier: jzNt9rN3TGEUKNe3x8fnk+JbElUXlY3IzJITAj/xh2Y= Subject key identifier: 94:E3:1E:4A:01:88:08:D6:05:A1:93:45:FB:84:FD:BA:DD:0C:FE:1A Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a Certificate serial: 019B99755675B64DFA613CA5CA8B9AE2B5FC Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/lOMeSgGICNYFoZNF-4T9ut0M_ho.roa Signing time: Wed 07 Jan 2026 17:16:02 +0000 ROA not before: Wed 07 Jan 2026 17:16:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29017 IP address blocks: 78.40.58.0/24 maxlen: 24 185.230.220.0/24 maxlen: 24 185.230.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:75:56:75:b6:4d:fa:61:3c:a5:ca:8b:9a:e2:b5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a Validity Not Before: Jan 7 17:16:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94e31e4a018808d605a19345fb84fdbadd0cfe1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:3e:10:d8:fd:d5:4b:d9:86:e7:ab:20:df: 38:fe:ed:47:f9:9b:8d:f5:e4:a7:aa:05:58:09:75: d9:a5:3e:d1:c8:0e:3f:5d:1f:e7:38:3c:0b:54:64: 52:98:a3:e7:94:4e:b8:86:b0:85:df:8d:b3:19:25: 77:55:d5:00:f7:9d:e6:e6:c6:d9:5d:82:47:61:82: b0:ee:ae:2f:0b:10:0a:17:54:f1:c2:b9:16:8c:0e: ea:e7:54:ff:24:de:37:4c:60:df:f5:46:fa:8e:74: b7:a4:99:ab:c8:b7:c1:8b:e7:08:22:ea:6f:bd:5d: 0e:1c:7d:e0:43:60:95:28:68:a1:92:f9:64:ae:9c: b3:f1:65:92:ab:57:fc:fb:0a:60:36:82:e3:bf:89: 0a:e6:42:88:64:48:e4:a3:27:c1:4e:4b:25:05:b6: e7:88:ca:59:44:a3:00:19:cf:38:b1:88:03:02:05: 79:68:b2:78:c6:bc:90:17:df:87:08:0e:32:a3:ef: 73:12:55:26:26:fe:4d:f5:36:de:09:8e:01:5f:03: c5:6b:cd:62:7d:01:22:d0:a7:8b:37:5d:34:9f:9e: 26:2c:92:63:ea:b4:ee:12:c2:c5:1b:f0:d8:9d:13: 19:ab:21:8d:18:9f:f8:69:77:b7:44:5a:d5:95:18: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E3:1E:4A:01:88:08:D6:05:A1:93:45:FB:84:FD:BA:DD:0C:FE:1A X509v3 Authority Key Identifier: keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/lOMeSgGICNYFoZNF-4T9ut0M_ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.58.0/24 185.230.220.0/23 Signature Algorithm: sha256WithRSAEncryption 79:1e:94:62:2c:fc:64:5a:18:bc:76:55:3a:8b:9d:d6:0e:4f: e0:01:65:00:45:0f:50:a9:ff:55:c1:8a:dd:57:a9:00:46:a6: ce:fa:ee:af:eb:2b:7b:e6:21:9d:a1:87:76:fb:44:06:e9:d5: 9d:ba:be:df:64:82:34:26:91:2e:17:e8:64:83:5d:42:27:46: 2e:c5:aa:5c:39:a2:b7:4f:f6:02:92:36:ac:3a:03:a4:e9:28: 23:6d:5d:57:33:e9:e7:86:42:56:ce:cb:07:17:9e:62:f3:04: f3:30:5b:aa:3a:35:eb:3e:62:f1:2a:79:ea:5d:aa:86:1a:81: 1e:f1:e5:56:82:75:ec:9e:19:11:35:1d:ca:b6:7b:de:b7:2d: f9:8f:11:cb:2e:ed:62:ca:e2:7b:47:dc:dc:1e:79:88:c4:20: dc:79:18:17:48:b2:ce:a3:0a:aa:82:8d:2d:1b:e4:3f:47:80: b4:25:fe:53:eb:73:a5:84:c0:63:61:87:cf:f6:64:e2:7b:0c: 70:16:4d:91:6b:f0:97:ea:f9:f0:ae:e6:31:26:5d:c5:2f:fc: 49:f4:39:9a:ca:65:fb:15:9d:e9:fb:e1:b1:1e:8a:db:3e:5e: 53:ea:d9:f7:40:d0:51:53:70:e3:e9:e8:64:0e:f6:d8:82:37: 78:fb:61:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuZdVZ1tk36YTylyoua4rX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI4NmFiZDUzNzRlNTUzMDk4MjA5MDc1YjlhZmVjYWJl ZjMzM2EwHhcNMjYwMTA3MTcxNjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGUzMWU0YTAxODgwOGQ2MDVhMTkzNDVmYjg0ZmRiYWRkMGNmZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Y+ENj91UvZhuerIN84/u1H+ZuN 9eSnqgVYCXXZpT7RyA4/XR/nODwLVGRSmKPnlE64hrCF342zGSV3VdUA953m5sbZ XYJHYYKw7q4vCxAKF1TxwrkWjA7q51T/JN43TGDf9Ub6jnS3pJmryLfBi+cIIupv vV0OHH3gQ2CVKGihkvlkrpyz8WWSq1f8+wpgNoLjv4kK5kKIZEjkoyfBTkslBbbn iMpZRKMAGc84sYgDAgV5aLJ4xryQF9+HCA4yo+9zElUmJv5N9TbeCY4BXwPFa81i fQEi0KeLN100n54mLJJj6rTuEsLFG/DYnRMZqyGNGJ/4aXe3RFrVlRhTtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJTjHkoBiAjWBaGTRfuE/brdDP4aMB8GA1UdIwQY MBaAFE7rhqvVN05VMJggkHW5r+yr7zM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEt YTg5NzhlM2FhZTk4LzEvbE9NZVNnR0lDTllGb1pORi00VDl1dDBNX2hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEtYTg5NzhlM2FhZTk4 LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATig6AwQB uebcMA0GCSqGSIb3DQEBCwUAA4IBAQB5HpRiLPxkWhi8dlU6i53WDk/gAWUARQ9Q qf9VwYrdV6kARqbO+u6v6yt75iGdoYd2+0QG6dWdur7fZII0JpEuF+hkg11CJ0Yu xapcOaK3T/YCkjasOgOk6SgjbV1XM+nnhkJWzssHF55i8wTzMFuqOjXrPmLxKnnq XaqGGoEe8eVWgnXsnhkRNR3Ktnvety35jxHLLu1iyuJ7R9zcHnmIxCDceRgXSLLO owqqgo0tG+Q/R4C0Jf5T63OlhMBjYYfP9mTiewxwFk2Ra/CX6vnwruYxJl3FL/xJ 9DmaymX7FZ3p++GxHorbPl5T6tn3QNBRU3Dj6ehkDvbYgjd4+2FU -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:31 2026 by rpki-client