This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa File: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (raw, json) Hash identifier: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow= Subject key identifier: 4C:49:B3:80:48:0A:C9:0A:3D:E8:6A:A4:DC:E0:97:CA:EF:09:68:EF Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860 Certificate serial: 019B77C6F0AC646DFDC07D5ADF79E9159115 Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 185.195.60.0/24 maxlen: 24 185.240.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f0:ac:64:6d:fd:c0:7d:5a:df:79:e9:15:91:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c49b380480ac90a3de86aa4dce097caef0968ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:0a:82:e7:7c:ec:eb:21:e2:dc:ec:67:ca: 46:ab:93:20:92:ba:2e:33:c8:f8:91:4e:7c:8b:76: 2a:17:97:29:b0:8a:3a:85:68:b6:14:c8:81:2f:90: 94:b4:dd:a7:33:ef:f2:bc:d2:e7:86:59:46:36:c6: 79:cd:44:05:b6:6f:62:00:2a:11:08:61:7e:57:15: 14:eb:15:81:2b:95:cc:5f:f4:42:4f:d2:48:5c:71: ae:25:75:be:97:01:ba:d6:51:ed:fb:83:aa:ad:6f: 99:72:05:7e:2a:33:49:63:9e:4d:b2:ea:94:36:86: ec:b9:05:4d:b6:2a:33:4f:61:dd:17:57:a3:0f:6f: c0:e3:88:9d:e6:9c:a7:29:6d:9e:fc:d4:63:4b:b8: c0:f4:c7:87:58:a9:d5:6c:fe:03:01:cc:91:7d:5e: 23:d9:f9:8e:e7:40:c1:c7:b0:35:48:e7:1c:67:b0: bb:9c:ab:38:a7:da:ad:b3:3b:3a:5f:f1:05:de:54: 59:75:9b:de:07:19:d1:dc:5f:79:fe:dc:2b:ad:38: 2b:41:d6:97:c9:dd:9b:72:c3:74:ed:06:4b:06:ec: 11:ab:f7:c8:36:3e:d2:cf:4d:30:7e:dd:e0:78:0d: c9:ed:2b:41:b5:90:04:7a:8b:ac:54:95:35:4a:bc: 28:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:49:B3:80:48:0A:C9:0A:3D:E8:6A:A4:DC:E0:97:CA:EF:09:68:EF X509v3 Authority Key Identifier: keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.60.0/24 185.240.79.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:73:63:f3:55:c8:c5:87:0c:1c:9e:d3:97:65:1d:b5:1b:b2: 67:5e:ff:6e:92:76:7e:25:96:a4:fd:7a:25:95:f3:91:49:a4: ff:ae:0f:13:c0:4e:21:fa:38:b6:aa:0d:5e:51:ff:75:e5:c3: bd:79:67:49:b6:7a:79:36:c1:ca:6c:33:44:36:05:83:20:d9: a7:56:ac:7e:92:e3:34:d4:18:19:99:25:f7:b0:9a:73:76:d0: 6d:72:d7:61:dd:49:a0:32:41:b7:3e:11:16:49:5b:79:50:86: 8c:3f:f3:52:df:db:c0:44:b0:aa:e0:82:e6:8e:2a:1d:2d:35: 8d:68:5c:e8:b0:49:a9:0b:cd:fd:58:0f:a4:d3:44:81:36:68: 77:a6:48:25:7a:b1:54:2e:a8:d8:73:fe:8b:b9:ce:b9:02:3d: df:eb:59:b7:4f:f8:da:8e:40:fd:b2:9b:1c:09:b8:bd:d6:bb: e2:69:ec:6a:dd:94:8a:a6:43:b6:34:12:8b:24:0d:f2:82:68: 49:7c:85:31:34:f8:4d:c8:b2:20:5d:de:63:37:cf:1b:39:b6: de:c5:92:3d:22:7a:40:96:95:dc:9f:01:0e:dc:0b:68:f9:ed: 08:14:f1:eb:f9:cd:bd:1e:50:a2:c8:1c:0f:4d:b4:0d:99:23: 1c:7b:12:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvCsZG39wH1a33npFZEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1 ZWQ4NjAwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzQ5YjM4MDQ4MGFjOTBhM2RlODZhYTRkY2UwOTdjYWVmMDk2OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoYKgud87Osh4tzsZ8pGq5Mgkrou M8j4kU58i3YqF5cpsIo6hWi2FMiBL5CUtN2nM+/yvNLnhllGNsZ5zUQFtm9iACoR CGF+VxUU6xWBK5XMX/RCT9JIXHGuJXW+lwG61lHt+4OqrW+ZcgV+KjNJY55NsuqU NobsuQVNtiozT2HdF1ejD2/A44id5pynKW2e/NRjS7jA9MeHWKnVbP4DAcyRfV4j 2fmO50DBx7A1SOccZ7C7nKs4p9qtszs6X/EF3lRZdZveBxnR3F95/twrrTgrQdaX yd2bcsN07QZLBuwRq/fINj7Sz00wft3geA3J7StBtZAEeousVJU1Srwo5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFExJs4BICskKPehqpNzgl8rvCWjvMB8GA1UdIwQY MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt ODRmOWVkODdhYzMxLzEvVEVtemdFZ0t5UW85NkdxazNPQ1h5dThKYU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucM8AwQA ufBPMA0GCSqGSIb3DQEBCwUAA4IBAQBLc2PzVcjFhwwcntOXZR21G7JnXv9uknZ+ JZak/XollfORSaT/rg8TwE4h+ji2qg1eUf915cO9eWdJtnp5NsHKbDNENgWDINmn Vqx+kuM01BgZmSX3sJpzdtBtctdh3UmgMkG3PhEWSVt5UIaMP/NS39vARLCq4ILm jiodLTWNaFzosEmpC839WA+k00SBNmh3pkglerFULqjYc/6Luc65Aj3f61m3T/ja jkD9spscCbi91rviaexq3ZSKpkO2NBKLJA3ygmhJfIUxNPhNyLIgXd5jN88bObbe xZI9InpAlpXcnwEO3Ato+e0IFPHr+c29HlCiyBwPTbQNmSMcexJR -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:39 2026 by rpki-client