This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/POtSiaRU3J6NN-3FcEzbyyc3iz4.roa File: POtSiaRU3J6NN-3FcEzbyyc3iz4.roa (raw, json) Hash identifier: xQmKcGL1aOnWYp2nu+qGyN+OtS+NUIMwhRaeCUEKn08= Subject key identifier: 3C:EB:52:89:A4:54:DC:9E:8D:37:ED:C5:70:4C:DB:CB:27:37:8B:3E Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662 Certificate serial: 019B7D5D20972538DD2650BAE211DDA8B9D3 Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/POtSiaRU3J6NN-3FcEzbyyc3iz4.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202784 IP address blocks: 185.133.24.0/24 maxlen: 24 185.133.25.0/24 maxlen: 24 185.133.26.0/23 maxlen: 23 2a00:6700::/48 maxlen: 48 2a00:6700:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:20:97:25:38:dd:26:50:ba:e2:11:dd:a8:b9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662 Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ceb5289a454dc9e8d37edc5704cdbcb27378b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:b5:cd:d9:b7:d2:b0:e3:82:bb:fe:2b:32: 89:a4:aa:e2:27:a8:4e:10:d9:3a:88:26:42:19:d7: a7:71:09:4b:13:e8:4a:bf:5c:f6:da:a1:2c:d4:a5: ff:57:45:78:66:63:d4:fd:60:0a:78:a6:d4:cb:c8: 18:65:5a:44:4f:70:3b:b3:8a:e6:13:a2:05:35:05: d5:d6:03:40:75:c6:ce:2d:b6:07:1a:79:7b:d2:53: 68:c7:a6:17:1f:fb:2c:3a:98:cc:55:8c:36:14:88: c2:b0:86:5a:69:84:2e:38:4a:d6:c9:22:71:80:e3: 45:cc:5b:3d:ce:ec:30:f2:bf:e5:c5:8e:67:66:2f: ff:96:23:d4:a1:b3:af:b6:1f:89:3e:5f:62:19:e6: ae:88:4c:ee:8b:a7:45:c0:bb:23:26:e5:f7:05:c4: 53:56:26:d4:a1:df:bb:45:45:61:d2:d9:aa:03:25: 18:fe:19:1c:a6:2f:4b:f0:11:38:3f:41:72:ba:96: ac:a9:e6:fe:0c:b1:23:8c:50:27:7e:17:09:89:cb: c9:3e:a7:01:34:ba:f0:29:71:48:92:9e:a7:18:8e: 0c:aa:19:3e:19:dc:b0:17:3f:0e:d5:df:ae:c7:3e: 42:fd:0c:bb:36:bb:0a:7c:eb:80:0d:ae:ce:4d:c1: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EB:52:89:A4:54:DC:9E:8D:37:ED:C5:70:4C:DB:CB:27:37:8B:3E X509v3 Authority Key Identifier: keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/POtSiaRU3J6NN-3FcEzbyyc3iz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.24.0/22 IPv6: 2a00:6700::/47 Signature Algorithm: sha256WithRSAEncryption 18:27:b8:5e:78:17:f7:41:5d:5f:bf:2b:c4:89:9c:a2:61:bc: 77:75:e1:33:f4:0b:32:2d:c1:e5:79:3d:36:bd:8c:f1:3f:dc: b6:b5:33:d1:f2:44:ce:7c:3d:fa:9e:98:fc:58:f2:33:78:20: 11:9b:41:59:cc:39:cf:6b:b6:29:b0:02:33:fc:d5:3e:4f:87: 50:db:e0:e6:a8:41:40:2b:fc:3c:3e:b2:b6:d3:b2:e5:ed:90: 38:7c:d8:68:db:9f:f2:1f:c7:e2:06:4f:2a:28:75:92:91:a6: ec:c5:fb:bd:d4:60:89:d9:03:2c:60:43:a6:60:23:b3:4e:50: 6c:72:fb:f1:e7:cb:72:c4:27:2e:2d:bb:2d:c4:e2:fe:aa:79: 3c:84:e9:2d:e2:f9:60:8d:ac:51:4c:70:64:61:f0:2f:c5:f3: 2d:4d:54:29:83:a9:30:ea:7b:7f:3e:da:70:3f:fa:1d:86:25: 96:2b:ad:a5:cf:5d:52:b9:23:5e:1a:5f:f3:7b:cd:83:c0:49: da:52:d3:fd:e0:3b:8b:ce:3b:c3:e5:1e:62:67:ac:02:56:da: 57:f7:db:a8:47:82:b2:1f:54:2e:24:8a:1e:1c:93:d7:b2:38: 19:30:d8:11:21:98:32:06:b2:72:b0:f2:20:d7:e8:27:a0:a4: e3:3a:4b:e2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XSCXJTjdJlC64hHdqLnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1 M2U2NjIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2ViNTI4OWE0NTRkYzllOGQzN2VkYzU3MDRjZGJjYjI3Mzc4YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWa1zdm30rDjgrv+KzKJpKriJ6hO ENk6iCZCGdencQlLE+hKv1z22qEs1KX/V0V4ZmPU/WAKeKbUy8gYZVpET3A7s4rm E6IFNQXV1gNAdcbOLbYHGnl70lNox6YXH/ssOpjMVYw2FIjCsIZaaYQuOErWySJx gONFzFs9zuww8r/lxY5nZi//liPUobOvth+JPl9iGeauiEzui6dFwLsjJuX3BcRT VibUod+7RUVh0tmqAyUY/hkcpi9L8BE4P0Fyupasqeb+DLEjjFAnfhcJicvJPqcB NLrwKXFIkp6nGI4Mqhk+GdywFz8O1d+uxz5C/Qy7NrsKfOuADa7OTcFK4wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDzrUomkVNyejTftxXBM28snN4s+MB8GA1UdIwQY MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt NmUyMmJmNDM2MzA0LzEvUE90U2lhUlUzSjZOTi0zRmNFemJ5eWMzaXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0 LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuYUYMA8E AgACMAkDBwEqAGcAAAAwDQYJKoZIhvcNAQELBQADggEBABgnuF54F/dBXV+/K8SJ nKJhvHd14TP0CzItweV5PTa9jPE/3La1M9HyRM58PfqemPxY8jN4IBGbQVnMOc9r timwAjP81T5Ph1Db4OaoQUAr/Dw+srbTsuXtkDh82Gjbn/Ifx+IGTyoodZKRpuzF +73UYInZAyxgQ6ZgI7NOUGxy+/Hny3LEJy4tuy3E4v6qeTyE6S3i+WCNrFFMcGRh 8C/F8y1NVCmDqTDqe38+2nA/+h2GJZYrraXPXVK5I14aX/N7zYPASdpS0/3gO4vO O8PlHmJnrAJW2lf326hHgrIfVC4kih4ck9eyOBkw2BEhmDIGsnKw8iDX6CegpOM6 S+I= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:22 2026 by rpki-client