This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oMbkLubRHpA6QKVm4O5LMWLQtSY.roa File: oMbkLubRHpA6QKVm4O5LMWLQtSY.roa (raw, json) Hash identifier: E8qozcbC+2Ne/l2gvjBAhkNeL30d9qDBiZcSfFbFzUk= Subject key identifier: A0:C6:E4:2E:E6:D1:1E:90:3A:40:A5:66:E0:EE:4B:31:62:D0:B5:26 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B92D396595FA0CE0C15407B223DF78077 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oMbkLubRHpA6QKVm4O5LMWLQtSY.roa Signing time: Tue 06 Jan 2026 10:21:38 +0000 ROA not before: Tue 06 Jan 2026 10:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212289 IP address blocks: 194.116.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:d3:96:59:5f:a0:ce:0c:15:40:7b:22:3d:f7:80:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 6 10:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0c6e42ee6d11e903a40a566e0ee4b3162d0b526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:8d:c8:b5:0f:cd:77:8d:09:d6:8f:4a:f9: 61:76:75:9d:f6:a1:fd:16:f4:1f:38:42:78:5d:ab: b3:de:ea:a8:fc:50:00:2b:51:2e:83:a6:40:c1:1e: f6:cb:ea:f0:3a:06:54:75:af:6a:e1:af:20:ed:7c: 93:55:6c:b7:2a:56:49:31:e2:ec:ad:0a:a2:b1:d0: 51:ef:fe:4a:4e:92:57:5b:d9:26:62:f1:91:d0:46: d6:96:7d:2e:f2:a1:15:cc:36:15:c0:eb:b6:4e:fb: 77:f8:32:d9:3e:df:9a:e9:84:80:56:a3:98:fd:c7: c7:34:6e:19:09:a9:15:34:6b:9f:09:92:2b:e8:da: 97:d0:69:0f:d5:fe:21:ad:4e:1d:e5:1e:af:f3:26: f7:21:6a:e6:34:23:a9:d8:5a:3d:b9:54:e4:fc:4b: 73:c8:b4:03:de:fc:b9:f8:15:61:4d:de:cd:49:0d: aa:08:3c:65:e4:89:65:32:28:31:f3:4d:35:ab:d8: 17:03:41:dd:51:16:07:6f:ae:48:e7:1c:a9:9a:af: 42:41:30:56:71:1b:b1:ef:4d:03:5d:b6:47:3c:46: 4b:97:25:eb:6a:b4:72:da:c9:3a:0f:50:36:b2:d5: 6e:ee:26:6f:ed:b7:e8:2e:9c:05:49:c6:57:2a:bb: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C6:E4:2E:E6:D1:1E:90:3A:40:A5:66:E0:EE:4B:31:62:D0:B5:26 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/oMbkLubRHpA6QKVm4O5LMWLQtSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.229.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c6:b1:69:5d:a9:8a:73:60:2e:62:7c:40:d5:3c:2c:6b:dc: 45:cd:fa:8a:3c:e7:cc:04:78:5f:2a:b2:1e:35:56:40:29:e4: b0:34:45:51:3a:cd:ff:7f:70:27:22:f5:ff:10:7f:60:e7:50: 30:6c:c1:f0:30:fa:19:ac:67:4c:0f:f0:d4:72:99:cc:1a:25: a4:a6:00:41:d7:4c:9e:ef:f3:dc:14:fa:f5:c0:f9:a3:31:8d: 72:71:e0:c9:bf:7d:f8:44:bf:9e:90:c6:0b:3c:dc:bb:d7:6d: 99:58:75:22:11:ec:2a:d5:f1:44:0f:2f:29:49:91:5c:9b:aa: bf:65:4a:b7:ca:2b:a5:57:3f:b9:b4:f1:3b:b0:6e:26:ee:89: d7:5f:6b:1a:68:a7:a7:ed:5e:e2:fe:bb:21:7d:a0:32:d7:01: 6f:79:5f:73:b6:33:0f:c5:ad:ef:e3:99:0c:c8:5e:06:0e:f9: 3a:cd:81:66:7f:ca:84:78:65:39:d7:28:05:b4:96:3b:bb:14: ae:67:72:a7:23:93:6f:d8:c5:3a:63:5c:d8:ac:cc:6f:9b:b6: 21:a0:e8:d5:b1:cc:3a:8d:32:1f:d3:26:46:6a:36:c9:49:76: d4:af:e1:df:6e:20:12:55:87:af:69:5e:73:b7:69:0e:cb:fc: 40:0f:c1:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuS05ZZX6DODBVAeyI994B3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTA2MTAyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGM2ZTQyZWU2ZDExZTkwM2E0MGE1NjZlMGVlNGIzMTYyZDBiNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohuNyLUPzXeNCdaPSvlhdnWd9qH9 FvQfOEJ4Xauz3uqo/FAAK1Eug6ZAwR72y+rwOgZUda9q4a8g7XyTVWy3KlZJMeLs rQqisdBR7/5KTpJXW9kmYvGR0EbWln0u8qEVzDYVwOu2Tvt3+DLZPt+a6YSAVqOY /cfHNG4ZCakVNGufCZIr6NqX0GkP1f4hrU4d5R6v8yb3IWrmNCOp2Fo9uVTk/Etz yLQD3vy5+BVhTd7NSQ2qCDxl5IllMigx8001q9gXA0HdURYHb65I5xypmq9CQTBW cRux700DXbZHPEZLlyXrarRy2sk6D1A2stVu7iZv7bfoLpwFScZXKrtq1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDG5C7m0R6QOkClZuDuSzFi0LUmMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvb01ia0x1YlJIcEE2UUtWbTRPNUxNV0xRdFNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTlMA0G CSqGSIb3DQEBCwUAA4IBAQAsxrFpXamKc2AuYnxA1Twsa9xFzfqKPOfMBHhfKrIe NVZAKeSwNEVROs3/f3AnIvX/EH9g51AwbMHwMPoZrGdMD/DUcpnMGiWkpgBB10ye 7/PcFPr1wPmjMY1yceDJv334RL+ekMYLPNy7122ZWHUiEewq1fFEDy8pSZFcm6q/ ZUq3yiulVz+5tPE7sG4m7onXX2saaKen7V7i/rshfaAy1wFveV9ztjMPxa3v45kM yF4GDvk6zYFmf8qEeGU51ygFtJY7uxSuZ3KnI5Nv2MU6Y1zYrMxvm7YhoOjVscw6 jTIf0yZGajbJSXbUr+HfbiASVYevaV5zt2kOy/xAD8Gu -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:22 2026 by rpki-client