This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/10zU5k5ICxgrM5-Ip5yncI3GNGs.roa File: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (raw, json) Hash identifier: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s= Subject key identifier: D7:4C:D4:E6:4E:48:0B:18:2B:33:9F:88:A7:9C:A7:70:8D:C6:34:6B Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380 Certificate serial: 019B7DCB4A5FC6859BD8C22A80E83A4C1517 Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/10zU5k5ICxgrM5-Ip5yncI3GNGs.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199826 IP address blocks: 185.33.45.0/24 maxlen: 24 185.33.46.0/24 maxlen: 24 185.33.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:5f:c6:85:9b:d8:c2:2a:80:e8:3a:4c:15:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d74cd4e64e480b182b339f88a79ca7708dc6346b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:4d:9a:c8:24:9f:c4:fa:b9:09:a7:c2:64: 8e:af:eb:61:26:be:7b:66:d4:95:d8:bc:24:1b:49: b7:a0:3e:9e:32:43:8d:ea:64:bd:68:9b:d8:cd:dd: f4:9e:16:37:10:3d:20:97:ad:f6:6f:6f:4f:c2:cf: b0:25:42:31:59:7e:4e:77:79:db:ae:b0:c5:e6:29: 50:55:3a:df:60:c2:69:83:44:fb:c5:dd:fe:48:1f: 52:5d:f6:bc:92:4a:82:44:5d:2d:bf:03:f9:e5:38: d7:bc:d4:e4:b0:12:fe:ab:80:08:cb:41:ad:da:5b: c3:5a:e9:b3:66:2c:08:b1:c8:45:81:d1:eb:e2:50: 7f:b5:18:bb:e6:ac:2a:2b:52:d7:5b:83:54:90:c3: 20:d4:61:08:0a:53:36:98:77:3c:d8:c3:e3:d4:85: 0a:eb:dc:3b:68:8a:cd:61:38:1b:9f:9c:3b:a0:b2: 3f:4e:97:e6:24:a6:b4:46:b4:e3:29:b7:70:ef:7d: a3:54:6d:0c:69:b5:6b:90:63:53:64:91:d9:52:ff: be:25:52:89:b8:54:56:e2:6f:69:7a:1f:2c:d9:0d: f2:42:ec:7c:2e:19:45:48:a5:bc:06:09:7a:f3:c8: 38:b5:8e:79:4d:46:c3:00:dd:5f:33:d8:15:f5:8c: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4C:D4:E6:4E:48:0B:18:2B:33:9F:88:A7:9C:A7:70:8D:C6:34:6B X509v3 Authority Key Identifier: keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/10zU5k5ICxgrM5-Ip5yncI3GNGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.45.0-185.33.47.255 Signature Algorithm: sha256WithRSAEncryption 57:7d:01:a8:34:cf:9e:2a:cb:8d:51:6c:28:ec:a5:12:98:0c: a0:53:ef:06:54:0f:28:3b:54:7b:97:b8:49:45:95:1f:27:53: d1:8c:0e:03:54:81:13:e6:8c:e7:86:23:f0:60:9b:5f:5f:f7: b9:ec:56:0e:1e:6d:a3:ad:d8:45:8b:44:bc:2f:d4:32:0f:32: 42:47:2e:d4:f8:20:61:7f:1a:5e:24:da:d0:08:be:98:33:ee: 8b:a5:40:dd:31:50:59:fc:d3:7e:b3:de:c7:49:61:46:60:a8: f4:00:eb:92:fc:36:31:2e:1c:cd:eb:ce:92:94:41:05:44:d5: 31:5b:94:90:a9:2c:b6:51:9e:a9:b2:7a:65:0c:5b:53:17:9d: 71:f0:54:19:c4:8d:7d:8f:cb:92:7d:9a:04:40:7f:11:6b:d8: 21:9c:fe:64:e0:58:cf:2e:95:44:b5:d5:79:ca:dc:81:de:1e: a8:55:b0:cb:57:b2:e2:fb:0b:db:2c:fe:3c:9d:1b:d5:a4:0d: 44:7a:f9:f2:25:23:8b:a9:be:50:dc:e2:bd:b5:a3:3a:84:0a: 7f:87:70:9b:47:a2:12:e0:69:d6:02:38:66:6b:c9:f0:c7:a3: 94:72:db:8c:a2:9b:6b:6b:b0:d4:7d:f4:a5:33:1e:64:81:ba: 1d:cd:d5:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9y0pfxoWb2MIqgOg6TBUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0 OGEzODAwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzRjZDRlNjRlNDgwYjE4MmIzMzlmODhhNzljYTc3MDhkYzYzNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV1Nmsgkn8T6uQmnwmSOr+thJr57 ZtSV2LwkG0m3oD6eMkON6mS9aJvYzd30nhY3ED0gl632b29Pws+wJUIxWX5Od3nb rrDF5ilQVTrfYMJpg0T7xd3+SB9SXfa8kkqCRF0tvwP55TjXvNTksBL+q4AIy0Gt 2lvDWumzZiwIschFgdHr4lB/tRi75qwqK1LXW4NUkMMg1GEIClM2mHc82MPj1IUK 69w7aIrNYTgbn5w7oLI/TpfmJKa0RrTjKbdw732jVG0MabVrkGNTZJHZUv++JVKJ uFRW4m9peh8s2Q3yQux8LhlFSKW8Bgl688g4tY55TUbDAN1fM9gV9YwrewIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNdM1OZOSAsYKzOfiKecp3CNxjRrMB8GA1UdIwQY MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt MTZiMzZkMDgwMWU5LzEvMTB6VTVrNUlDeGdyTTUtSXA1eW5jSTNHTkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5 LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5IS0D BAS5ISAwDQYJKoZIhvcNAQELBQADggEBAFd9Aag0z54qy41RbCjspRKYDKBT7wZU Dyg7VHuXuElFlR8nU9GMDgNUgRPmjOeGI/Bgm19f97nsVg4ebaOt2EWLRLwv1DIP MkJHLtT4IGF/Gl4k2tAIvpgz7oulQN0xUFn8036z3sdJYUZgqPQA65L8NjEuHM3r zpKUQQVE1TFblJCpLLZRnqmyemUMW1MXnXHwVBnEjX2Py5J9mgRAfxFr2CGc/mTg WM8ulUS11XnK3IHeHqhVsMtXsuL7C9ss/jydG9WkDUR6+fIlI4upvlDc4r21ozqE Cn+HcJtHohLgadYCOGZryfDHo5Ry24yim2trsNR99KUzHmSBuh3N1RM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:55 2026 by rpki-client