This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa File: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (raw, json) Hash identifier: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg= Subject key identifier: 3A:67:6F:63:19:AB:2E:7F:CB:DF:0B:BE:B4:A2:9E:DC:27:E0:BC:A2 Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b Certificate serial: 019B76EB6B68C76F62741043A15521902F5A Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12741 IP address blocks: 46.182.96.0/21 maxlen: 21 78.154.64.0/19 maxlen: 19 185.9.124.0/22 maxlen: 22 217.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6b:68:c7:6f:62:74:10:43:a1:55:21:90:2f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a676f6319ab2e7fcbdf0bbeb4a29edc27e0bca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1b:be:76:f4:bf:9f:02:a6:0a:9b:62:e1:02: e8:80:96:f6:37:98:2e:59:24:46:45:d2:94:74:54: 18:6d:93:c2:a7:67:67:1c:9e:60:75:97:8e:f5:6c: 41:21:0c:de:25:26:d3:30:0f:81:95:5c:04:ef:b9: bf:cf:89:fc:17:d5:ad:9c:5f:92:03:87:eb:3f:a1: 3e:5e:53:ba:d2:58:8f:c0:67:28:cb:f3:8f:23:c8: 2a:0c:f0:83:ec:4f:ba:69:68:e6:f5:b5:f3:67:1d: 86:ca:8e:13:b9:fa:cf:76:c7:e4:77:ae:24:8a:2d: 96:76:8f:c3:96:e0:22:cc:34:55:ef:e0:da:fa:f8: 7d:0d:b1:95:f0:c0:b9:b4:ab:9e:8e:62:97:1a:ae: 44:fc:27:d0:83:00:d8:dd:03:29:69:4b:4b:16:25: c6:10:5d:29:b3:9e:6f:9e:7f:e0:e2:a7:d1:5d:e2: e3:b6:3b:d0:53:e9:cf:1d:ab:63:54:64:e3:5a:a8: 91:51:5b:f3:76:ce:cd:a7:82:a7:fb:72:6b:b1:99: 71:53:62:75:c4:fc:f2:08:41:00:9b:75:b7:31:be: 45:5c:c3:73:d9:40:04:23:1a:b1:3d:8a:83:d8:46: 1d:d4:3a:f7:f0:67:04:bb:cd:25:6f:2c:89:90:6b: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:6F:63:19:AB:2E:7F:CB:DF:0B:BE:B4:A2:9E:DC:27:E0:BC:A2 X509v3 Authority Key Identifier: keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.96.0/21 78.154.64.0/19 185.9.124.0/22 217.28.144.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:14:2a:88:36:fc:9b:0a:f0:c3:1f:dd:94:aa:71:5a:4a:73: 36:34:6c:9f:e2:fc:47:bd:20:ab:98:5f:8d:aa:70:90:5d:13: c9:fa:59:8d:7c:fd:c2:f1:79:74:22:f6:2b:44:04:50:c6:55: c2:a3:ca:1b:ef:ae:35:77:d8:b6:cb:31:97:16:0b:c7:65:76: 1c:71:ed:c3:80:d3:6f:a7:f5:25:7b:cc:af:4d:9b:9d:15:a8: 7b:a3:75:b8:47:b8:87:b8:fd:92:45:80:6e:34:b6:ea:5a:0f: 36:83:fc:33:09:19:45:18:ab:12:f4:fd:4d:3a:84:5e:9b:90: 1c:90:e9:33:38:a9:02:dd:e8:9b:6b:a2:be:ab:03:e5:b7:19: cc:70:75:7d:46:48:74:02:44:71:b1:50:ef:4a:10:ea:76:f8: a6:74:ab:46:55:f3:02:ad:21:68:7c:24:ae:25:ed:88:49:34: eb:f8:cb:e1:7b:48:7b:5b:52:31:29:82:9c:40:e1:e2:87:64: 12:0e:37:a5:12:5d:0f:ba:47:1b:56:d8:01:c3:22:7a:e5:62: 1d:57:d9:a6:fb:13:36:99:c1:40:69:4c:fd:99:be:65:56:2f: c2:e7:99:a2:56:38:8d:34:3b:76:c5:f1:97:04:ce:e1:28:be: ed:19:33:07 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt262tox29idBBDoVUhkC9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz MjliMmIwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTY3NmY2MzE5YWIyZTdmY2JkZjBiYmViNGEyOWVkYzI3ZTBiY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xu+dvS/nwKmCpti4QLogJb2N5gu WSRGRdKUdFQYbZPCp2dnHJ5gdZeO9WxBIQzeJSbTMA+BlVwE77m/z4n8F9WtnF+S A4frP6E+XlO60liPwGcoy/OPI8gqDPCD7E+6aWjm9bXzZx2Gyo4TufrPdsfkd64k ii2Wdo/DluAizDRV7+Da+vh9DbGV8MC5tKuejmKXGq5E/CfQgwDY3QMpaUtLFiXG EF0ps55vnn/g4qfRXeLjtjvQU+nPHatjVGTjWqiRUVvzds7Np4Kn+3JrsZlxU2J1 xPzyCEEAm3W3Mb5FXMNz2UAEIxqxPYqD2EYd1Dr38GcEu80lbyyJkGuZlwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDpnb2MZqy5/y98LvrSintwn4LyiMB8GA1UdIwQY MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt MTdlZmE1N2IzOWQ3LzEvT21kdll4bXJMbl9MM3d1LXRLS2UzQ2ZndktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3 LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLrZgAwQF TppAAwQCuQl8AwQE2RyQMA0GCSqGSIb3DQEBCwUAA4IBAQCdFCqINvybCvDDH92U qnFaSnM2NGyf4vxHvSCrmF+NqnCQXRPJ+lmNfP3C8Xl0IvYrRARQxlXCo8ob7641 d9i2yzGXFgvHZXYcce3DgNNvp/Ule8yvTZudFah7o3W4R7iHuP2SRYBuNLbqWg82 g/wzCRlFGKsS9P1NOoRem5AckOkzOKkC3eiba6K+qwPltxnMcHV9Rkh0AkRxsVDv ShDqdvimdKtGVfMCrSFofCSuJe2ISTTr+Mvhe0h7W1IxKYKcQOHih2QSDjelEl0P ukcbVtgBwyJ65WIdV9mm+xM2mcFAaUz9mb5lVi/C55miVjiNNDt2xfGXBM7hKL7t GTMH -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:26 2026 by rpki-client