This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa File: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (raw, json) Hash identifier: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA= Subject key identifier: 0A:30:5A:6B:D3:05:38:77:45:72:C2:26:E0:BC:7C:7F:70:19:EB:12 Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9 Certificate serial: 019B7EA65518A1751E0F4E05EBCBBA0373A0 Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa Signing time: Fri 02 Jan 2026 12:19:48 +0000 ROA not before: Fri 02 Jan 2026 12:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60815 IP address blocks: 185.20.24.0/22 maxlen: 22 185.20.24.0/23 maxlen: 23 185.20.24.0/24 maxlen: 24 185.20.25.0/24 maxlen: 24 185.20.26.0/23 maxlen: 23 185.20.26.0/24 maxlen: 24 185.20.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:55:18:a1:75:1e:0f:4e:05:eb:cb:ba:03:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9 Validity Not Before: Jan 2 12:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a305a6bd30538774572c226e0bc7c7f7019eb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:25:13:62:9a:bc:26:ba:6c:8a:25:f1:3c: b4:8c:2b:6a:57:e1:29:77:a4:c6:46:82:14:2d:92: b7:ab:fb:e7:59:30:ca:57:b6:fd:95:50:ea:e5:43: 73:43:c4:d1:03:b8:16:23:c6:03:9f:4c:bf:d3:7b: de:70:a5:c3:10:84:1b:92:a1:ac:e0:75:53:eb:23: 44:80:8b:af:3e:01:66:2a:0f:c8:80:5b:82:07:28: f9:10:17:4b:4b:ed:7e:83:7e:cb:1b:a7:03:b6:e1: c9:c3:4f:b2:14:12:bf:7c:f4:82:39:f8:7c:1f:5e: b1:0c:5f:4a:1f:64:43:a0:33:c1:c1:5a:69:6b:43: 2b:00:bc:0d:ac:49:35:60:75:61:eb:1c:76:93:87: 25:97:84:a3:af:9d:6f:0e:34:3e:dc:27:5e:7f:00: 82:43:2c:7d:0a:c5:cd:54:73:ac:bd:66:38:0d:20: f4:a5:e8:95:81:ba:95:7e:67:43:cf:c8:73:c5:01: 41:80:8a:e8:b5:ec:0e:96:6f:51:7f:1a:5f:94:57: 1c:49:d0:7d:d3:e2:df:ee:28:ea:4c:8d:b2:4e:78: 11:fa:86:7e:56:b7:61:92:4b:f9:5a:db:03:2b:1c: 23:6a:d6:bd:89:9c:b4:24:60:97:cf:07:fb:bf:ba: 78:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:30:5A:6B:D3:05:38:77:45:72:C2:26:E0:BC:7C:7F:70:19:EB:12 X509v3 Authority Key Identifier: keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:d0:cf:b8:30:21:ea:a7:8f:8a:21:48:22:b0:ad:5a:46:e6: 34:95:13:d7:7b:46:a7:4a:f1:36:ce:67:b3:96:06:3c:83:79: 56:4f:07:42:21:84:d9:76:0a:eb:9c:e8:56:0d:6a:c7:39:f8: 40:ef:0f:1f:14:58:7d:d3:29:af:29:87:c5:e6:49:e2:65:f6: de:cd:2d:4a:98:2c:e8:42:12:4e:99:9b:1d:55:7a:1e:39:2f: ee:d1:a8:19:b0:93:e7:c8:0b:1e:f7:32:c3:69:f5:59:80:52: 43:7b:9e:d3:88:99:b6:02:c4:9c:6a:dc:f2:8c:00:19:8e:20: 21:67:39:77:c1:dd:a6:22:e0:a5:67:1f:43:5e:5c:78:85:ba: a7:1b:16:4d:e9:04:1e:52:ea:8a:eb:a3:5b:45:15:cc:ce:14: b9:b4:ed:e1:21:a4:71:e6:13:5a:0b:bb:d7:ba:2f:8b:b8:2b: f8:2e:13:6e:82:b7:2e:28:18:ba:cd:6c:e8:5d:5f:a0:73:d8: b8:fb:b0:b2:2d:65:71:1a:80:96:15:9a:ea:f9:19:53:03:96: a8:1c:fb:c8:e5:86:54:fe:4e:5e:80:85:24:8b:1c:9d:f5:d4: 1a:e3:20:4b:23:4a:13:16:2a:b6:98:f2:b4:19:a1:9c:3c:fe: 10:e9:13:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+plUYoXUeD04F68u6A3OgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MTA3NGUzMjgyMmM4YmVmM2E3ZGNiMzEyODA4MjViZDI3 NTQ1YzkwHhcNMjYwMTAyMTIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTMwNWE2YmQzMDUzODc3NDU3MmMyMjZlMGJjN2M3ZjcwMTllYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BElE2KavCa6bIol8Ty0jCtqV+Ep d6TGRoIULZK3q/vnWTDKV7b9lVDq5UNzQ8TRA7gWI8YDn0y/03vecKXDEIQbkqGs 4HVT6yNEgIuvPgFmKg/IgFuCByj5EBdLS+1+g37LG6cDtuHJw0+yFBK/fPSCOfh8 H16xDF9KH2RDoDPBwVppa0MrALwNrEk1YHVh6xx2k4cll4Sjr51vDjQ+3CdefwCC Qyx9CsXNVHOsvWY4DSD0peiVgbqVfmdDz8hzxQFBgIrotewOlm9RfxpflFccSdB9 0+Lf7ijqTI2yTngR+oZ+Vrdhkkv5WtsDKxwjata9iZy0JGCXzwf7v7p4gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAowWmvTBTh3RXLCJuC8fH9wGesSMB8GA1UdIwQY MBaAFOgQdOMoIsi+86fcsxKAglvSdUXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQt M2U0ZTg0ZjM1Y2QwLzEvQ2pCYWE5TUZPSGRGY3NJbTRMeDhmM0FaNnhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQtM2U0ZTg0ZjM1Y2Qw LzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRQYMA0G CSqGSIb3DQEBCwUAA4IBAQA/0M+4MCHqp4+KIUgisK1aRuY0lRPXe0anSvE2zmez lgY8g3lWTwdCIYTZdgrrnOhWDWrHOfhA7w8fFFh90ymvKYfF5kniZfbezS1KmCzo QhJOmZsdVXoeOS/u0agZsJPnyAse9zLDafVZgFJDe57TiJm2AsScatzyjAAZjiAh Zzl3wd2mIuClZx9DXlx4hbqnGxZN6QQeUuqK66NbRRXMzhS5tO3hIaRx5hNaC7vX ui+LuCv4LhNugrcuKBi6zWzoXV+gc9i4+7CyLWVxGoCWFZrq+RlTA5aoHPvI5YZU /k5egIUkixyd9dQa4yBLI0oTFiq2mPK0GaGcPP4Q6RNB -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:04 2026 by rpki-client