This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/o4wjR8pZMB50VMWQpLsPi-iVTDE.roa File: o4wjR8pZMB50VMWQpLsPi-iVTDE.roa (raw, json) Hash identifier: ATIz3XapJ04NxEJg4iAdFVY462a3mfpQBCW4sSM6kew= Subject key identifier: A3:8C:23:47:CA:59:30:1E:74:54:C5:90:A4:BB:0F:8B:E8:95:4C:31 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019C39620CDC189649EFFA4F928FB469AB1C Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/o4wjR8pZMB50VMWQpLsPi-iVTDE.roa Signing time: Sat 07 Feb 2026 18:34:12 +0000 ROA not before: Sat 07 Feb 2026 18:34:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51396 IP address blocks: 176.65.132.0/24 maxlen: 24 176.65.139.0/24 maxlen: 24 176.65.148.0/24 maxlen: 24 176.65.149.0/24 maxlen: 24 176.65.150.0/24 maxlen: 24 176.65.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:39:62:0c:dc:18:96:49:ef:fa:4f:92:8f:b4:69:ab:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Feb 7 18:34:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a38c2347ca59301e7454c590a4bb0f8be8954c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:99:c1:68:78:5b:60:5e:7d:3f:ce:a3:ff: e6:30:b3:68:69:dc:54:7a:9b:b8:21:ef:52:32:dc: e7:d7:e8:7a:b6:5a:9f:c9:c8:d7:d5:a9:33:1e:00: 27:3b:6f:3f:5d:a6:3f:6e:04:e9:33:63:89:1a:7a: e9:be:51:1f:a2:23:4b:56:f7:07:8a:ab:36:94:3f: 6c:ac:54:db:f4:eb:5e:66:69:a6:42:b9:26:30:06: 06:c7:48:90:32:74:85:44:94:f7:ed:3f:f5:5c:9d: b3:ce:24:bd:3e:47:83:01:9c:20:5c:3e:b5:51:4c: 15:cc:09:a0:fe:9e:78:eb:f8:a2:28:f2:d2:8b:73: 2c:1a:00:59:63:be:dc:b6:c8:c9:09:ad:ad:b3:cc: 39:a7:18:8e:9e:08:f8:13:6a:48:1b:2c:70:75:62: 2f:2f:5e:68:9a:0b:68:9b:c7:c8:52:ee:a9:82:f8: 84:e7:f2:8b:eb:e1:05:a9:cf:0b:41:4f:fd:0d:5d: ad:ab:64:4b:f7:b0:9b:09:61:14:00:22:4f:f2:e5: 01:98:67:a7:ca:5a:fb:b0:fc:6b:e7:33:66:60:77: 26:a2:dd:e3:76:7b:8a:0d:ba:41:50:89:25:3b:b4: 99:6a:66:53:7c:1e:1c:5c:38:2c:36:06:21:cf:ff: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8C:23:47:CA:59:30:1E:74:54:C5:90:A4:BB:0F:8B:E8:95:4C:31 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/o4wjR8pZMB50VMWQpLsPi-iVTDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.132.0/24 176.65.139.0/24 176.65.148.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:b8:28:a4:c8:a0:fa:2d:eb:38:e8:82:72:64:2d:b8:4b:08: 4a:4b:da:e3:6f:32:26:a8:2d:98:6f:a6:00:f2:da:f8:08:b9: 74:c2:7f:9b:9d:4e:32:d4:67:7e:d8:a1:fb:2f:cf:cf:fc:19: be:78:3d:05:3f:61:56:e7:0c:ff:a4:cb:83:12:15:a6:25:be: 48:de:0f:65:fd:94:44:1c:34:4d:ab:b6:44:23:89:3d:6e:96: 74:bd:44:2b:a8:03:62:d2:d2:a2:83:89:7e:33:a2:e3:07:5b: c7:31:12:2b:cb:81:0a:a6:04:f3:a5:5b:22:7f:80:f5:79:ba: f4:74:1b:29:42:0e:c9:a7:03:1b:22:45:55:82:ad:d4:51:85: 19:32:12:e0:f7:c8:c7:cf:85:1d:36:8c:33:50:25:bd:4a:02: 23:9b:8c:4a:10:54:76:03:c2:eb:ba:4c:38:c1:57:c1:6d:e6: 0a:1f:d4:b6:e8:ce:c4:25:65:3d:3d:ec:c5:e0:f6:70:f9:50: f4:8f:6a:de:80:a1:71:a7:80:94:99:d1:56:b6:4f:f5:f0:d0: 22:b6:74:36:bf:38:4d:4b:7c:78:2d:1e:1f:80:3d:6d:be:68: 70:15:d6:ad:aa:ce:25:10:2c:05:fe:66:a3:5b:25:51:6b:7e: 0c:9e:53:50 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZw5YgzcGJZJ7/pPko+0aascMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMjA3MTgzNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzhjMjM0N2NhNTkzMDFlNzQ1NGM1OTBhNGJiMGY4YmU4OTU0YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqaZwWh4W2BefT/Oo//mMLNoadxU epu4Ie9SMtzn1+h6tlqfycjX1akzHgAnO28/XaY/bgTpM2OJGnrpvlEfoiNLVvcH iqs2lD9srFTb9OteZmmmQrkmMAYGx0iQMnSFRJT37T/1XJ2zziS9PkeDAZwgXD61 UUwVzAmg/p546/iiKPLSi3MsGgBZY77ctsjJCa2ts8w5pxiOngj4E2pIGyxwdWIv L15omgtom8fIUu6pgviE5/KL6+EFqc8LQU/9DV2tq2RL97CbCWEUACJP8uUBmGen ylr7sPxr5zNmYHcmot3jdnuKDbpBUIklO7SZamZTfB4cXDgsNgYhz//KzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKOMI0fKWTAedFTFkKS7D4volUwxMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvbzR3alI4cFpNQjUwVk1XUXBMc1BpLWlWVERFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsEGEAwQA sEGLAwQCsEGUMA0GCSqGSIb3DQEBCwUAA4IBAQBcuCikyKD6Les46IJyZC24SwhK S9rjbzImqC2Yb6YA8tr4CLl0wn+bnU4y1Gd+2KH7L8/P/Bm+eD0FP2FW5wz/pMuD EhWmJb5I3g9l/ZREHDRNq7ZEI4k9bpZ0vUQrqANi0tKig4l+M6LjB1vHMRIry4EK pgTzpVsif4D1ebr0dBspQg7JpwMbIkVVgq3UUYUZMhLg98jHz4UdNowzUCW9SgIj m4xKEFR2A8Lrukw4wVfBbeYKH9S26M7EJWU9PezF4PZw+VD0j2regKFxp4CUmdFW tk/18NAitnQ2vzhNS3x4LR4fgD1tvmhwFdatqs4lECwF/majWyVRa34MnlNQ -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:18 2026 by rpki-client