This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/a66me_Qj7lU21dLU6uUthXtmShA.roa File: a66me_Qj7lU21dLU6uUthXtmShA.roa (raw, json) Hash identifier: NA3UULnm/cfQYWHU1U4cRpnkE9MPtrokY4wZikBBiP8= Subject key identifier: 6B:AE:A6:7B:F4:23:EE:55:36:D5:D2:D4:EA:E5:2D:85:7B:66:4A:10 Certificate issuer: /CN=191b1a99358daa58e72625c4ce9d829e918efc86 Certificate serial: 019AE3EF197CD9446E674D3F43A3EC1DB1F7 Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/a66me_Qj7lU21dLU6uUthXtmShA.roa Signing time: Wed 03 Dec 2025 11:18:08 +0000 ROA not before: Wed 03 Dec 2025 11:18:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203459 IP address blocks: 185.133.224.0/24 maxlen: 24 185.133.225.0/24 maxlen: 24 185.133.226.0/24 maxlen: 24 185.133.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:ef:19:7c:d9:44:6e:67:4d:3f:43:a3:ec:1d:b1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86 Validity Not Before: Dec 3 11:18:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6baea67bf423ee5536d5d2d4eae52d857b664a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:96:82:e7:15:81:dc:14:0e:14:97:ee:25: 8d:46:49:aa:f3:70:fd:95:4a:a2:da:7e:fd:bb:c7: e9:99:58:87:a0:a4:f4:12:9d:c8:02:0e:90:bd:f9: 83:eb:85:e6:80:e0:d6:cb:ad:56:9a:04:0e:f3:c6: 07:51:69:f8:82:54:6c:5a:ae:f1:d5:59:d4:f2:73: 59:49:c7:06:bf:2f:01:f5:94:f7:d4:b8:2a:5a:e1: ec:3c:a4:fb:c5:43:6e:3e:a5:30:5d:6c:ff:a5:ca: 6c:86:7f:e7:42:97:f2:d0:f3:c2:73:ed:3e:60:42: b1:4f:15:43:57:ce:ec:55:9a:72:9e:e6:17:db:49: f1:22:4e:d9:dc:b0:50:28:19:46:fd:bd:db:ba:7e: 3c:61:ca:0e:c4:fa:64:67:d8:c7:64:95:ca:66:fb: d5:89:7f:e4:6c:41:e1:77:ef:57:52:66:e5:d9:04: 99:61:7f:12:5e:0a:21:24:62:9d:e9:20:1f:24:c6: 43:8f:de:63:be:0c:16:2f:a5:7b:8d:b3:58:77:06: 94:ce:7e:69:8c:09:26:72:1e:dd:13:6d:05:16:94: 74:bf:ec:4c:1a:63:40:41:9b:b0:cb:b6:9b:a6:cd: 94:2f:44:5b:fd:e7:1f:d1:33:ee:e5:c5:b9:16:25: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AE:A6:7B:F4:23:EE:55:36:D5:D2:D4:EA:E5:2D:85:7B:66:4A:10 X509v3 Authority Key Identifier: keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/a66me_Qj7lU21dLU6uUthXtmShA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.224.0/22 Signature Algorithm: sha256WithRSAEncryption 70:a5:66:fa:c3:45:3e:b6:af:72:64:8d:04:c9:80:21:27:51: ec:94:dd:ac:1f:00:87:f4:cc:8e:02:83:f7:c5:30:ae:d2:a0: 64:20:13:6a:b5:80:9e:28:85:55:f1:4a:d2:41:ba:e9:94:34: 74:08:ab:7d:bc:32:ea:15:c2:0f:51:e4:3f:97:e8:7b:f0:41: e5:a0:b5:a7:bb:3c:d3:95:db:d1:c8:d2:a9:5c:81:68:73:11: 76:70:59:03:83:56:77:bc:24:dd:36:ed:91:17:b6:b6:6d:27: 89:ea:77:57:65:b5:ea:fe:69:33:7d:06:c5:4a:b8:46:6f:88: 9b:14:df:c2:2b:04:82:30:e1:d6:46:26:b4:e9:af:fe:65:1f: 74:bb:76:d6:7e:43:c8:14:f4:52:2d:49:d1:84:88:81:00:fe: dd:ba:32:9b:ce:17:81:b7:7b:09:18:d5:00:d6:0a:06:4f:ed: e7:8f:5f:9f:25:86:5b:ac:d8:02:91:3e:6e:c4:03:7f:75:f8: 08:ec:cf:a0:0e:c1:e1:b6:cb:27:d6:37:14:86:8d:b3:ac:81: 38:5b:ee:a6:ba:ed:dd:70:a6:a3:2d:cc:38:83:a2:20:47:70: 95:26:cd:a3:11:f0:2e:07:4e:80:6b:f0:f8:73:2c:ed:1a:e9: a7:e6:68:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrj7xl82URuZ00/Q6PsHbH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWIxYTk5MzU4ZGFhNThlNzI2MjVjNGNlOWQ4MjllOTE4 ZWZjODYwHhcNMjUxMjAzMTExODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmFlYTY3YmY0MjNlZTU1MzZkNWQyZDRlYWU1MmQ4NTdiNjY0YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQeWgucVgdwUDhSX7iWNRkmq83D9 lUqi2n79u8fpmViHoKT0Ep3IAg6QvfmD64XmgODWy61WmgQO88YHUWn4glRsWq7x 1VnU8nNZSccGvy8B9ZT31LgqWuHsPKT7xUNuPqUwXWz/pcpshn/nQpfy0PPCc+0+ YEKxTxVDV87sVZpynuYX20nxIk7Z3LBQKBlG/b3bun48YcoOxPpkZ9jHZJXKZvvV iX/kbEHhd+9XUmbl2QSZYX8SXgohJGKd6SAfJMZDj95jvgwWL6V7jbNYdwaUzn5p jAkmch7dE20FFpR0v+xMGmNAQZuwy7abps2UL0Rb/ecf0TPu5cW5FiUNzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGuupnv0I+5VNtXS1OrlLYV7ZkoQMB8GA1UdIwQY MBaAFBkbGpk1japY5yYlxM6dgp6RjvyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0Yjgt OWU0ZDBjZjk1NTQ0LzEvYTY2bWVfUWo3bFUyMWRMVTZ1VXRoWHRtU2hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0YjgtOWU0ZDBjZjk1NTQ0 LzEvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYXgMA0G CSqGSIb3DQEBCwUAA4IBAQBwpWb6w0U+tq9yZI0EyYAhJ1HslN2sHwCH9MyOAoP3 xTCu0qBkIBNqtYCeKIVV8UrSQbrplDR0CKt9vDLqFcIPUeQ/l+h78EHloLWnuzzT ldvRyNKpXIFocxF2cFkDg1Z3vCTdNu2RF7a2bSeJ6ndXZbXq/mkzfQbFSrhGb4ib FN/CKwSCMOHWRia06a/+ZR90u3bWfkPIFPRSLUnRhIiBAP7dujKbzheBt3sJGNUA 1goGT+3nj1+fJYZbrNgCkT5uxAN/dfgI7M+gDsHhtssn1jcUho2zrIE4W+6muu3d cKajLcw4g6IgR3CVJs2jEfAuB06Aa/D4cyztGumn5mgb -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:30 2025 by rpki-client