This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/o4qKzlqUjlfJw5mToRgjxC7n1O4.roa File: o4qKzlqUjlfJw5mToRgjxC7n1O4.roa (raw, json) Hash identifier: UH8UjpUKTO3GjlnBNdij2jbooU/lh2POzfzQloszWlg= Subject key identifier: A3:8A:8A:CE:5A:94:8E:57:C9:C3:99:93:A1:18:23:C4:2E:E7:D4:EE Certificate issuer: /CN=191b1a99358daa58e72625c4ce9d829e918efc86 Certificate serial: 019B7C803781F61E87F0223D544268DE7C1C Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/o4qKzlqUjlfJw5mToRgjxC7n1O4.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203459 IP address blocks: 185.133.224.0/24 maxlen: 24 185.133.225.0/24 maxlen: 24 185.133.226.0/24 maxlen: 24 185.133.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:37:81:f6:1e:87:f0:22:3d:54:42:68:de:7c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a38a8ace5a948e57c9c39993a11823c42ee7d4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:88:8f:8c:c1:aa:fb:c4:0d:08:6f:f2:ab: f5:81:08:9d:42:d2:c1:53:59:f7:41:5a:7e:9f:98: 4a:2f:da:72:e6:ea:d1:65:33:39:eb:10:0e:e9:a7: 73:7a:92:d1:f2:11:f0:ae:cc:6a:b6:0d:f7:41:7c: c6:8c:e5:c6:8d:56:85:0b:1e:25:70:d5:82:d7:e2: 7f:30:55:b5:9b:70:73:70:d4:76:e8:1c:2c:f7:02: 49:30:20:3d:f7:58:9b:b7:0c:fe:18:a9:fe:48:05: d5:6a:9c:d5:51:9d:73:b0:5f:66:15:23:f9:79:5a: 7a:27:78:f5:b7:db:7d:ed:5b:c2:8f:f2:21:b8:e2: 1c:63:3b:e4:03:d8:1b:17:bc:0f:7e:6a:d5:ad:dc: a2:fb:2f:97:66:e8:f9:3d:f6:c2:cf:9a:35:11:5b: d4:d9:83:4d:85:ca:56:b5:09:cb:df:02:f6:86:24: 59:14:ac:5d:81:02:a6:d0:e6:1e:11:f6:0c:23:46: 08:dc:be:7c:6a:2a:15:3a:8c:09:a7:9d:95:ef:37: 6d:76:18:bf:f9:87:af:4d:bd:53:46:b6:34:81:cf: 72:15:85:35:2f:fb:6c:24:d4:c2:66:b0:c1:36:eb: 7d:df:3c:bc:26:75:43:05:6e:dc:a8:12:79:13:e3: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8A:8A:CE:5A:94:8E:57:C9:C3:99:93:A1:18:23:C4:2E:E7:D4:EE X509v3 Authority Key Identifier: keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/o4qKzlqUjlfJw5mToRgjxC7n1O4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.224.0/22 Signature Algorithm: sha256WithRSAEncryption 92:ff:6f:48:12:cd:9e:d4:85:78:ac:54:1e:4d:a1:07:6b:9a: cf:97:80:aa:6d:a0:b0:14:a2:32:8c:68:09:a7:3a:da:88:28: 02:b9:63:37:5b:47:0a:48:ce:bf:89:fe:81:eb:40:79:e3:37: 80:e4:c4:b1:1e:44:e5:e0:88:60:c9:2b:37:7d:0f:56:ae:be: 32:1d:07:47:32:29:c9:3d:41:9e:7f:81:67:bb:39:cc:3f:3d: 45:1d:f1:7e:df:33:35:a8:45:02:cd:df:7f:27:b0:3c:61:17: 87:84:91:2a:a5:b9:1e:4b:1b:2f:b4:0c:da:af:20:88:d9:37: ae:81:a3:0e:9a:84:5d:39:92:ea:99:b7:8c:1f:0b:3f:bc:6f: 0d:94:2a:d8:23:b4:83:3e:11:1b:7d:f4:99:1c:bc:61:c1:f8: c3:95:91:27:86:db:29:c9:b9:1b:08:f2:c5:64:b1:8a:90:59: af:a8:55:a9:b3:ef:01:d3:d3:69:45:fc:de:a7:da:91:33:e7: fc:57:b1:a5:a0:12:da:1f:11:ef:c3:7a:ee:a6:8f:62:bc:ad: 59:2a:30:2c:df:ea:e2:09:69:51:2a:79:05:d9:6c:e4:c3:19: 22:04:ea:8d:0a:6c:67:54:b6:a5:61:d6:de:46:e6:16:0f:d6: 4a:5e:6c:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDeB9h6H8CI9VEJo3nwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWIxYTk5MzU4ZGFhNThlNzI2MjVjNGNlOWQ4MjllOTE4 ZWZjODYwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzhhOGFjZTVhOTQ4ZTU3YzljMzk5OTNhMTE4MjNjNDJlZTdkNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudaIj4zBqvvEDQhv8qv1gQidQtLB U1n3QVp+n5hKL9py5urRZTM56xAO6adzepLR8hHwrsxqtg33QXzGjOXGjVaFCx4l cNWC1+J/MFW1m3BzcNR26Bws9wJJMCA991ibtwz+GKn+SAXVapzVUZ1zsF9mFSP5 eVp6J3j1t9t97VvCj/IhuOIcYzvkA9gbF7wPfmrVrdyi+y+XZuj5PfbCz5o1EVvU 2YNNhcpWtQnL3wL2hiRZFKxdgQKm0OYeEfYMI0YI3L58aioVOowJp52V7zdtdhi/ +YevTb1TRrY0gc9yFYU1L/tsJNTCZrDBNut93zy8JnVDBW7cqBJ5E+P4DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKOKis5alI5XycOZk6EYI8Qu59TuMB8GA1UdIwQY MBaAFBkbGpk1japY5yYlxM6dgp6RjvyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0Yjgt OWU0ZDBjZjk1NTQ0LzEvbzRxS3pscVVqbGZKdzVtVG9SZ2p4QzduMU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0YjgtOWU0ZDBjZjk1NTQ0 LzEvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYXgMA0G CSqGSIb3DQEBCwUAA4IBAQCS/29IEs2e1IV4rFQeTaEHa5rPl4CqbaCwFKIyjGgJ pzraiCgCuWM3W0cKSM6/if6B60B54zeA5MSxHkTl4IhgySs3fQ9Wrr4yHQdHMinJ PUGef4FnuznMPz1FHfF+3zM1qEUCzd9/J7A8YReHhJEqpbkeSxsvtAzaryCI2Teu gaMOmoRdOZLqmbeMHws/vG8NlCrYI7SDPhEbffSZHLxhwfjDlZEnhtspybkbCPLF ZLGKkFmvqFWps+8B09NpRfzep9qRM+f8V7GloBLaHxHvw3rupo9ivK1ZKjAs3+ri CWlRKnkF2WzkwxkiBOqNCmxnVLalYdbeRuYWD9ZKXmw7 -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:33 2026 by rpki-client