This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/ou4bocnw3Euji3HT5v1KCE16yQY.roa File: ou4bocnw3Euji3HT5v1KCE16yQY.roa (raw, json) Hash identifier: vrGzLIG/HF4sMpEEp7dNqybgF7AthS4vTHWglC0DTSE= Subject key identifier: A2:EE:1B:A1:C9:F0:DC:4B:A3:8B:71:D3:E6:FD:4A:08:4D:7A:C9:06 Certificate issuer: /CN=191b1a99358daa58e72625c4ce9d829e918efc86 Certificate serial: 019AE3EF19B8A54961BB60AE46629E06B85C Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/ou4bocnw3Euji3HT5v1KCE16yQY.roa Signing time: Wed 03 Dec 2025 11:18:09 +0000 ROA not before: Wed 03 Dec 2025 11:18:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211235 IP address blocks: 45.89.20.0/24 maxlen: 24 185.133.226.0/24 maxlen: 24 185.217.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:ef:19:b8:a5:49:61:bb:60:ae:46:62:9e:06:b8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86 Validity Not Before: Dec 3 11:18:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2ee1ba1c9f0dc4ba38b71d3e6fd4a084d7ac906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:ba:7f:7e:d5:1c:78:09:9b:89:74:16:eb: 8e:84:14:a3:9a:6b:d2:d6:66:d7:7e:df:c7:b6:36: dd:bc:a2:8c:9c:ff:77:bf:fc:68:28:08:f1:bf:42: ec:a2:0b:05:55:0c:53:07:90:0a:82:9d:d1:39:57: 7a:03:60:77:51:c8:9d:aa:1e:fa:0e:30:d0:6d:8e: 55:c2:e2:af:a8:30:f3:70:52:3d:fe:25:e8:df:5f: 6f:29:8e:ab:11:b8:27:d4:a1:47:47:47:f6:28:a0: 2e:ec:3a:37:5f:50:43:55:44:d7:2c:dc:4e:b2:01: ff:ab:50:f1:38:2b:d0:45:10:e5:95:9a:1f:75:ec: 9f:31:d5:b3:8f:af:3e:94:5b:d0:04:a5:ed:64:d6: 8b:44:97:73:d0:44:41:8e:d0:aa:f9:fa:07:7a:77: 8a:05:7f:83:56:da:de:4d:30:49:78:0f:f9:dc:d9: 5a:90:7f:5a:c5:9d:ff:bf:74:ec:0d:1c:28:99:d6: 5a:ba:2c:ef:c4:8c:9c:cd:00:96:67:a6:9f:f2:e2: fc:c5:b0:5b:fa:5b:2b:db:a2:fc:c6:8d:f5:ac:fc: 83:c6:00:08:25:0c:e8:ae:7d:9c:a9:ce:54:e2:be: 38:3e:9e:6f:d3:9a:89:e1:51:e3:9a:bd:29:29:cb: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EE:1B:A1:C9:F0:DC:4B:A3:8B:71:D3:E6:FD:4A:08:4D:7A:C9:06 X509v3 Authority Key Identifier: keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/ou4bocnw3Euji3HT5v1KCE16yQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.20.0/24 185.133.226.0/24 185.217.61.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:c6:28:2e:39:07:78:bf:56:a1:65:ff:dd:f7:7d:61:03:a9: 34:5c:d1:e8:12:e0:1e:a6:c8:c9:90:90:eb:df:ed:96:86:b9: a0:f1:9c:ab:fe:3f:36:ae:84:ea:79:4d:b4:bc:39:9e:86:a3: 36:f8:eb:fc:71:60:82:14:ab:90:27:e0:3a:c8:bf:bd:e4:1b: be:8a:31:6f:a6:b1:06:e4:a3:5e:98:f7:3c:ce:dc:5c:22:c8: 7e:22:87:89:48:5e:97:b9:3c:ad:23:08:f8:83:b6:96:cd:c0: 1a:b8:df:2c:1c:98:c4:97:63:0b:f1:79:34:e9:4a:77:f3:4f: 03:9b:56:02:22:a8:44:63:07:14:63:e3:d2:9c:04:c7:9a:a8: 69:18:9f:55:5c:ee:84:c1:89:09:05:24:d0:65:69:fe:2e:10: 33:c7:0a:90:3b:16:d2:b6:94:5a:2d:16:bf:44:9a:28:f3:38: e5:3b:23:59:9b:58:3f:21:50:77:8d:f1:9d:c2:bd:f5:c1:ec: f2:48:3d:f6:c0:05:80:d8:f6:a5:ad:54:90:52:ea:93:01:33: fa:a0:20:63:0e:a1:d7:e0:76:6c:49:0d:3a:d0:2e:e8:b7:bf: aa:81:52:7e:44:88:2d:85:a7:60:ac:56:cf:1e:f9:d5:5c:72: db:7d:a8:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrj7xm4pUlhu2CuRmKeBrhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWIxYTk5MzU4ZGFhNThlNzI2MjVjNGNlOWQ4MjllOTE4 ZWZjODYwHhcNMjUxMjAzMTExODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmVlMWJhMWM5ZjBkYzRiYTM4YjcxZDNlNmZkNGEwODRkN2FjOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34e6f37VHHgJm4l0FuuOhBSjmmvS 1mbXft/HtjbdvKKMnP93v/xoKAjxv0LsogsFVQxTB5AKgp3ROVd6A2B3Ucidqh76 DjDQbY5VwuKvqDDzcFI9/iXo319vKY6rEbgn1KFHR0f2KKAu7Do3X1BDVUTXLNxO sgH/q1DxOCvQRRDllZofdeyfMdWzj68+lFvQBKXtZNaLRJdz0ERBjtCq+foHeneK BX+DVtreTTBJeA/53NlakH9axZ3/v3TsDRwomdZauizvxIyczQCWZ6af8uL8xbBb +lsr26L8xo31rPyDxgAIJQzorn2cqc5U4r44Pp5v05qJ4VHjmr0pKcvLNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKLuG6HJ8NxLo4tx0+b9SghNeskGMB8GA1UdIwQY MBaAFBkbGpk1japY5yYlxM6dgp6RjvyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0Yjgt OWU0ZDBjZjk1NTQ0LzEvb3U0Ym9jbnczRXVqaTNIVDV2MUtDRTE2eVFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0YjgtOWU0ZDBjZjk1NTQ0 LzEvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVkUAwQA uYXiAwQAudk9MA0GCSqGSIb3DQEBCwUAA4IBAQAMxiguOQd4v1ahZf/d931hA6k0 XNHoEuAepsjJkJDr3+2Whrmg8Zyr/j82roTqeU20vDmehqM2+Ov8cWCCFKuQJ+A6 yL+95Bu+ijFvprEG5KNemPc8ztxcIsh+IoeJSF6XuTytIwj4g7aWzcAauN8sHJjE l2ML8Xk06Up3808Dm1YCIqhEYwcUY+PSnATHmqhpGJ9VXO6EwYkJBSTQZWn+LhAz xwqQOxbStpRaLRa/RJoo8zjlOyNZm1g/IVB3jfGdwr31wezySD32wAWA2PalrVSQ UuqTATP6oCBjDqHX4HZsSQ060C7ot7+qgVJ+RIgthadgrFbPHvnVXHLbfajk -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:36 2025 by rpki-client