This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/O21Shcq_z6RKIQVhghQ8x3iEUgo.roa File: O21Shcq_z6RKIQVhghQ8x3iEUgo.roa (raw, json) Hash identifier: PftCITy+sH9MILDPnvPA0rgTafRE24Enke6NGZ2wU40= Subject key identifier: 3B:6D:52:85:CA:BF:CF:A4:4A:21:05:61:82:14:3C:C7:78:84:52:0A Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995 Certificate serial: 019B7AC91CC816A4D679506EAF1F7564DF28 Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/O21Shcq_z6RKIQVhghQ8x3iEUgo.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24631 IP address blocks: 185.110.236.0/24 maxlen: 24 185.110.237.0/24 maxlen: 24 185.110.238.0/24 maxlen: 24 185.110.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1c:c8:16:a4:d6:79:50:6e:af:1f:75:64:df:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b6d5285cabfcfa44a21056182143cc77884520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:66:e7:f4:92:0d:19:f5:14:6c:01:dc:97: fa:88:1c:1f:fd:b5:fb:0c:71:c9:b5:69:5a:dd:0b: 1e:60:74:3c:c9:03:a0:8c:bf:a3:02:06:cd:42:32: 7c:fe:29:6d:f8:dd:03:05:29:11:56:09:e8:ac:b0: 67:2c:88:2a:d5:ca:ae:f2:a7:bb:f1:0a:95:81:12: 76:0d:47:78:7a:47:07:56:f3:14:a2:33:4d:0b:37: 12:fb:ff:b2:6f:1a:8a:df:e2:88:c9:ad:1a:01:25: cd:2f:cd:70:27:02:dc:17:e9:c0:3c:f0:a9:8f:9e: 53:aa:dc:24:38:a9:40:5d:7e:2f:4b:be:10:69:b7: 48:d9:c4:2e:e4:9e:96:9c:0e:6a:11:d3:97:55:d5: 7b:f4:93:a8:1a:30:29:8c:17:0c:24:df:ad:23:6e: bf:5f:b1:ef:66:da:0a:74:28:d8:f5:21:63:9c:82: df:9e:e4:94:47:f0:83:4b:cf:88:67:9c:67:e3:00: ca:88:44:05:93:f2:55:9d:d1:ad:c5:43:63:ee:26: e8:06:76:93:76:e6:13:4f:37:27:1f:9a:ab:4f:53: 53:ee:11:8c:52:f2:2d:c0:46:03:39:a7:0f:04:b8: 11:e2:4b:7f:20:59:f2:c1:1b:6e:8d:a6:c7:2b:6d: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6D:52:85:CA:BF:CF:A4:4A:21:05:61:82:14:3C:C7:78:84:52:0A X509v3 Authority Key Identifier: keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/O21Shcq_z6RKIQVhghQ8x3iEUgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.236.0/22 Signature Algorithm: sha256WithRSAEncryption 30:c9:f2:98:c1:e6:a6:72:d1:8a:78:b2:6b:92:f8:7c:5c:e8: 04:20:4f:0e:0e:c0:cd:33:e6:b8:8b:55:14:b7:8c:f1:cb:b9: 83:e5:68:cb:27:00:8b:be:d7:2e:6e:9e:72:c4:32:48:d1:1b: c2:73:84:01:83:1d:b9:43:3b:ae:05:2f:13:40:61:d8:09:d4: 80:ea:fc:c1:1a:e2:aa:80:c8:f8:e9:8b:f2:d4:6d:a9:da:4d: a4:19:4c:70:c4:e3:6b:5c:8e:2e:10:de:1a:ec:1a:09:13:d7: 75:e7:da:dd:65:8e:9c:7f:4b:28:75:37:86:10:50:c6:63:d2: e7:62:13:55:e5:86:8c:9a:1c:5b:14:47:2e:7a:b6:31:96:21: fe:ed:11:a9:a6:01:91:80:ff:6a:d3:5f:07:76:38:81:33:f7: 82:9a:5b:14:37:46:80:52:bc:4b:e1:7d:1d:3f:13:6e:9b:88: ff:ef:51:a4:82:59:c6:e4:c9:fc:bf:16:80:91:84:3f:fd:43: a7:2e:04:d6:f8:85:c7:41:88:5b:f3:9e:eb:66:d6:86:23:ed: 76:8e:17:5e:8d:c4:f1:0f:08:e9:4a:3b:91:84:95:e8:8d:b2: dc:ca:a3:f3:8a:b1:b0:15:9a:dd:80:79:fe:5c:23:11:db:1a: 3c:e1:f4:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRzIFqTWeVBurx91ZN8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1 NDE5OTUwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjZkNTI4NWNhYmZjZmE0NGEyMTA1NjE4MjE0M2NjNzc4ODQ1MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8T5m5/SSDRn1FGwB3Jf6iBwf/bX7 DHHJtWla3QseYHQ8yQOgjL+jAgbNQjJ8/ilt+N0DBSkRVgnorLBnLIgq1cqu8qe7 8QqVgRJ2DUd4ekcHVvMUojNNCzcS+/+ybxqK3+KIya0aASXNL81wJwLcF+nAPPCp j55TqtwkOKlAXX4vS74QabdI2cQu5J6WnA5qEdOXVdV79JOoGjApjBcMJN+tI26/ X7HvZtoKdCjY9SFjnILfnuSUR/CDS8+IZ5xn4wDKiEQFk/JVndGtxUNj7iboBnaT duYTTzcnH5qrT1NT7hGMUvItwEYDOacPBLgR4kt/IFnywRtujabHK2240QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDttUoXKv8+kSiEFYYIUPMd4hFIKMB8GA1UdIwQY MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt YzMyMGU1MGEzYzc5LzEvTzIxU2hjcV96NlJLSVFWaGdoUTh4M2lFVWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5 LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW7sMA0G CSqGSIb3DQEBCwUAA4IBAQAwyfKYweamctGKeLJrkvh8XOgEIE8ODsDNM+a4i1UU t4zxy7mD5WjLJwCLvtcubp5yxDJI0RvCc4QBgx25QzuuBS8TQGHYCdSA6vzBGuKq gMj46Yvy1G2p2k2kGUxwxONrXI4uEN4a7BoJE9d159rdZY6cf0sodTeGEFDGY9Ln YhNV5YaMmhxbFEcuerYxliH+7RGppgGRgP9q018HdjiBM/eCmlsUN0aAUrxL4X0d PxNum4j/71GkglnG5Mn8vxaAkYQ//UOnLgTW+IXHQYhb857rZtaGI+12jhdejcTx DwjpSjuRhJXojbLcyqPzirGwFZrdgHn+XCMR2xo84fQ9 -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:13 2026 by rpki-client