This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/o4zZlyS221abBwGOsgbFYOgvgMI.roa File: o4zZlyS221abBwGOsgbFYOgvgMI.roa (raw, json) Hash identifier: TiMn5uiz7jjx9HbjbyRUh6Tq/Z12nqOsqsCynyTQnIw= Subject key identifier: A3:8C:D9:97:24:B6:DB:56:9B:07:01:8E:B2:06:C5:60:E8:2F:80:C2 Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Certificate serial: 019B7EA727B6D781ACACC8509FC049ECC264 Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/o4zZlyS221abBwGOsgbFYOgvgMI.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210850 IP address blocks: 91.223.53.0/24 maxlen: 32 185.229.108.0/22 maxlen: 32 185.229.111.0/24 maxlen: 32 213.108.134.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:27:b6:d7:81:ac:ac:c8:50:9f:c0:49:ec:c2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a38cd99724b6db569b07018eb206c560e82f80c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:80:b1:bd:4a:24:86:33:d2:28:5b:4a:b1: f7:12:dd:2e:e3:c6:f5:4d:8e:8d:a1:97:f1:00:75: 22:22:99:6f:27:a6:c0:f2:46:8f:52:de:fd:f8:c0: 5a:09:1c:70:db:14:9e:a4:0a:87:e9:fb:de:1f:1a: 23:51:b8:70:b1:62:4d:e9:83:e2:ba:c2:e9:99:40: 47:42:31:e8:2c:ac:34:b2:fe:ab:91:ee:c3:95:52: 8b:32:b9:86:9a:d7:00:8b:7c:69:4c:1e:10:fc:8f: b2:d8:e3:bb:6e:29:ca:7c:ca:8a:a6:fb:f8:09:2c: e6:db:fc:35:d6:59:72:57:a6:1e:ef:6d:b4:e4:7f: 03:0f:8d:39:6e:f5:02:a3:29:d4:6e:fc:fe:9f:90: 5b:5a:e9:93:9e:ad:6a:6a:1b:10:7b:f0:89:a4:48: 2c:74:f9:4c:b2:1d:c3:9a:15:79:d1:28:68:f6:39: b2:d4:2b:32:b2:d1:ba:27:73:4d:96:f8:89:fa:d1: 3a:38:34:ce:77:29:7e:fd:1c:2b:8e:ba:fc:bc:f0: 87:53:f9:31:92:c6:fe:5d:b2:e4:4e:c5:1d:a5:4e: 2c:44:d2:5a:27:55:62:d1:77:16:61:9c:01:2e:34: 18:17:87:58:76:17:91:5a:36:6d:7a:dd:2d:88:d0: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8C:D9:97:24:B6:DB:56:9B:07:01:8E:B2:06:C5:60:E8:2F:80:C2 X509v3 Authority Key Identifier: keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/o4zZlyS221abBwGOsgbFYOgvgMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.53.0/24 185.229.108.0/22 213.108.134.0/24 Signature Algorithm: sha256WithRSAEncryption 99:ab:d8:0b:ee:be:63:17:31:39:81:f0:da:94:56:ef:df:2d: a4:25:fb:05:ad:73:89:c7:e1:8b:19:f6:66:95:cc:d7:2c:c7: a2:50:f4:d6:ae:c6:4d:43:3f:64:fb:08:57:c9:2f:7f:4b:b6: fd:b3:4f:a2:f8:4c:0d:66:a7:89:e2:6c:9b:8d:e5:ab:ac:f7: 04:76:95:d8:02:b1:d0:5b:02:86:64:b3:c5:fc:2a:6e:16:db: 8d:07:6c:6a:95:b3:5a:36:d5:0a:58:39:3f:88:82:4c:d2:28: 57:d6:bf:e4:6e:83:96:f1:db:f0:02:90:28:de:76:a2:a5:18: 63:6e:d1:5a:6f:68:35:70:1e:c7:0f:87:10:7e:2c:e4:05:d7: 1b:7d:47:b8:5b:7d:d0:6a:ab:b4:c2:c6:a1:b2:00:d0:92:fd: 7a:f1:95:6b:5f:ab:47:6f:84:ea:f2:15:46:8f:90:86:4a:7d: 4b:a2:24:d4:03:97:a3:7d:b9:bf:65:23:2f:48:a0:de:e6:e1: 20:f9:76:e5:1d:e8:01:00:a6:ab:0c:c2:c1:c4:01:91:fe:7f: df:1a:18:d2:85:2a:fe:79:7c:b8:f6:ec:59:de:81:e8:59:8c: f1:3c:69:46:d3:3a:ca:14:76:c8:5b:89:c0:0f:f5:fe:1d:0d: 3d:0f:cd:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pye214GsrMhQn8BJ7MJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh ZjljYTYwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzhjZDk5NzI0YjZkYjU2OWIwNzAxOGViMjA2YzU2MGU4MmY4MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZyAsb1KJIYz0ihbSrH3Et0u48b1 TY6NoZfxAHUiIplvJ6bA8kaPUt79+MBaCRxw2xSepAqH6fveHxojUbhwsWJN6YPi usLpmUBHQjHoLKw0sv6rke7DlVKLMrmGmtcAi3xpTB4Q/I+y2OO7binKfMqKpvv4 CSzm2/w11llyV6Ye72205H8DD405bvUCoynUbvz+n5BbWumTnq1qahsQe/CJpEgs dPlMsh3DmhV50Sho9jmy1CsystG6J3NNlviJ+tE6ODTOdyl+/Rwrjrr8vPCHU/kx ksb+XbLkTsUdpU4sRNJaJ1Vi0XcWYZwBLjQYF4dYdheRWjZtet0tiNBeMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKOM2ZcktttWmwcBjrIGxWDoL4DCMB8GA1UdIwQY MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt MTlhM2M1NjQ5YjU3LzEvbzR6Wmx5UzIyMWFiQndHT3NnYkZZT2d2Z01JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3 LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW981AwQC ueVsAwQA1WyGMA0GCSqGSIb3DQEBCwUAA4IBAQCZq9gL7r5jFzE5gfDalFbv3y2k JfsFrXOJx+GLGfZmlczXLMeiUPTWrsZNQz9k+whXyS9/S7b9s0+i+EwNZqeJ4myb jeWrrPcEdpXYArHQWwKGZLPF/CpuFtuNB2xqlbNaNtUKWDk/iIJM0ihX1r/kboOW 8dvwApAo3naipRhjbtFab2g1cB7HD4cQfizkBdcbfUe4W33Qaqu0wsahsgDQkv16 8ZVrX6tHb4Tq8hVGj5CGSn1LoiTUA5ejfbm/ZSMvSKDe5uEg+XblHegBAKarDMLB xAGR/n/fGhjShSr+eXy49uxZ3oHoWYzxPGlG0zrKFHbIW4nAD/X+HQ09D82Q -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:40 2026 by rpki-client