This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/osG6SqIqqmIP3iBJplJkK58I_pQ.roa File: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (raw, json) Hash identifier: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY= Subject key identifier: A2:C1:BA:4A:A2:2A:AA:62:0F:DE:20:49:A6:52:64:2B:9F:08:FE:94 Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Certificate serial: 019B797F10D5F0EC539C8397EDCBC38798F4 Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/osG6SqIqqmIP3iBJplJkK58I_pQ.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59460 IP address blocks: 185.135.192.0/22 maxlen: 22 185.135.192.0/24 maxlen: 24 185.135.193.0/24 maxlen: 24 185.135.194.0/24 maxlen: 24 185.135.195.0/24 maxlen: 24 194.146.4.0/22 maxlen: 22 194.146.4.0/24 maxlen: 24 194.146.5.0/24 maxlen: 24 194.146.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:10:d5:f0:ec:53:9c:83:97:ed:cb:c3:87:98:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c1ba4aa22aaa620fde2049a652642b9f08fe94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5d:52:44:2e:57:77:e2:e6:e0:9a:46:f9:f0: 65:83:eb:5b:d9:de:4c:ce:0b:e3:02:70:f6:5c:e8: 56:6f:af:ce:8d:09:16:73:82:1e:f3:9a:cf:ff:0b: 68:35:48:6a:63:d1:f4:7a:c6:3b:b9:b8:93:70:f1: 61:a1:80:4a:13:ae:77:da:9a:93:52:19:a8:97:62: ab:98:79:61:11:99:ed:ac:c4:c4:0e:8c:d3:7c:fc: 73:74:2b:85:4d:88:ef:53:74:e5:4f:d4:0f:98:d1: 8c:e7:1e:ee:75:e4:27:a6:4b:a7:fd:08:24:69:7e: 05:4f:9c:4d:2c:f5:35:57:1f:69:23:3d:23:cb:06: ee:58:a4:b9:51:4f:a9:4e:0a:3a:76:9f:23:19:cc: 28:1e:91:aa:0e:2b:f4:01:55:2a:13:ef:78:d9:5c: 6f:c2:62:4b:b9:6a:c2:b6:a2:6a:a4:9a:59:f6:2b: 0f:c3:eb:4d:71:06:92:27:38:f8:26:51:2c:6f:89: 09:76:d6:22:2e:8a:f3:e4:9b:87:01:eb:ba:0b:83: 9c:9b:d3:6d:e0:39:67:07:3b:ad:10:76:74:80:0a: 07:f5:e0:bf:b2:f0:85:af:11:3d:37:3c:f9:dc:f8: 02:bb:91:dd:53:07:dd:c7:77:10:6f:13:c6:b1:6b: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C1:BA:4A:A2:2A:AA:62:0F:DE:20:49:A6:52:64:2B:9F:08:FE:94 X509v3 Authority Key Identifier: keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/osG6SqIqqmIP3iBJplJkK58I_pQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.192.0/22 194.146.4.0/22 Signature Algorithm: sha256WithRSAEncryption 26:df:2e:69:7f:29:d4:66:88:82:65:fb:7f:01:d3:97:33:df: 79:7a:3c:25:bc:c3:b3:51:40:ae:2b:48:44:63:65:78:fc:df: cc:3c:23:93:bf:68:2b:33:db:b2:02:da:9d:57:fc:4f:73:92: 28:23:3b:ff:a4:b1:8f:12:e7:79:7a:00:85:e7:1b:8b:b2:5b: 0a:b9:30:bf:c7:26:29:a7:7a:76:7a:b3:f4:b2:9d:52:d3:77: db:4c:ed:cc:b6:88:59:97:08:b2:80:0b:46:22:fe:aa:02:16: 4f:6a:6d:25:58:48:9f:d4:74:48:05:a6:82:91:fa:03:77:4a: 6d:7d:54:35:cf:61:6d:a9:a0:b8:e4:8f:80:8b:ca:cb:8f:b8: 42:42:d8:4f:74:64:9c:35:37:d2:5a:7e:8b:51:3d:02:32:62: 72:f7:02:5c:fd:a2:e7:2a:ea:5b:da:fa:d5:bb:1e:b8:ef:75: c9:9c:a2:6d:c3:db:90:83:bf:6d:74:26:3b:26:dc:ec:b4:c1: 8b:cc:e1:a9:aa:94:5e:bf:b7:92:22:d7:2b:87:81:0b:a4:0a: c4:4c:9c:04:d9:13:c5:3c:9a:23:3e:02:85:5b:9a:fd:be:04: b6:55:98:18:37:a0:19:bb:ef:a3:20:c2:7b:e8:92:f3:78:a7: fe:cf:f3:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fxDV8OxTnIOX7cvDh5j0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0 ODdmOGQwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmMxYmE0YWEyMmFhYTYyMGZkZTIwNDlhNjUyNjQyYjlmMDhmZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV1SRC5Xd+Lm4JpG+fBlg+tb2d5M zgvjAnD2XOhWb6/OjQkWc4Ie85rP/wtoNUhqY9H0esY7ubiTcPFhoYBKE6532pqT Uhmol2KrmHlhEZntrMTEDozTfPxzdCuFTYjvU3TlT9QPmNGM5x7udeQnpkun/Qgk aX4FT5xNLPU1Vx9pIz0jywbuWKS5UU+pTgo6dp8jGcwoHpGqDiv0AVUqE+942Vxv wmJLuWrCtqJqpJpZ9isPw+tNcQaSJzj4JlEsb4kJdtYiLorz5JuHAeu6C4Ocm9Nt 4DlnBzutEHZ0gAoH9eC/svCFrxE9Nzz53PgCu5HdUwfdx3cQbxPGsWsqswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKLBukqiKqpiD94gSaZSZCufCP6UMB8GA1UdIwQY MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt YTgyODM2ZGUwNWZjLzEvb3NHNlNxSXFxbUlQM2lCSnBsSmtLNThJX3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYfAAwQC wpIEMA0GCSqGSIb3DQEBCwUAA4IBAQAm3y5pfynUZoiCZft/AdOXM995ejwlvMOz UUCuK0hEY2V4/N/MPCOTv2grM9uyAtqdV/xPc5IoIzv/pLGPEud5egCF5xuLslsK uTC/xyYpp3p2erP0sp1S03fbTO3MtohZlwiygAtGIv6qAhZPam0lWEif1HRIBaaC kfoDd0ptfVQ1z2FtqaC45I+Ai8rLj7hCQthPdGScNTfSWn6LUT0CMmJy9wJc/aLn Kupb2vrVux6473XJnKJtw9uQg79tdCY7JtzstMGLzOGpqpRev7eSItcrh4ELpArE TJwE2RPFPJojPgKFW5r9vgS2VZgYN6AZu++jIMJ76JLzeKf+z/PH -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:53 2026 by rpki-client