This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/gJih9xv-CWYQaALlecQOJ_TACmo.roa File: gJih9xv-CWYQaALlecQOJ_TACmo.roa (raw, json) Hash identifier: 9e9Q4Zs2imMTV1ntB9s+yN3H0/1A7f9/M0HJ8dsTuhg= Subject key identifier: 80:98:A1:F7:1B:FE:09:66:10:68:02:E5:79:C4:0E:27:F4:C0:0A:6A Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9 Certificate serial: 019B76EB59A8800568E5CB85BFB3DB4504B3 Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/gJih9xv-CWYQaALlecQOJ_TACmo.roa Signing time: Thu 01 Jan 2026 00:18:14 +0000 ROA not before: Thu 01 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203343 IP address blocks: 185.120.24.0/22 maxlen: 24 2a0f:a5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:59:a8:80:05:68:e5:cb:85:bf:b3:db:45:04:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8098a1f71bfe0966106802e579c40e27f4c00a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:e9:3b:78:1c:93:59:43:bf:47:ec:69:e1: 53:04:cf:c6:b8:50:6b:7b:e9:91:e0:27:4f:28:3f: ca:05:c3:cb:71:20:48:0c:fe:1d:1f:68:37:87:42: 1b:b8:75:5e:5a:e6:93:32:1a:3d:c2:d4:01:ab:93: b7:4e:e5:c3:58:cc:62:5c:97:b2:8c:6d:9e:8e:6e: e3:d5:e4:30:22:f2:ea:29:d7:8b:1d:d9:68:3b:b6: 57:4d:f5:38:f4:f2:4b:d8:dd:85:bb:a3:29:4c:30: 94:3b:73:c6:2d:4b:35:47:9c:6f:6a:41:9d:63:6c: e8:e7:8f:7d:8b:30:f6:ac:d8:4b:f6:c9:37:b4:da: 59:97:e3:aa:5e:5c:6c:a1:e8:df:39:f9:c9:42:b5: 29:ef:81:03:11:38:cc:bf:ef:1c:50:34:11:3a:a0: e0:5c:4a:1e:4b:85:4e:44:19:2c:03:3b:39:ec:bf: 4d:81:27:c8:83:68:33:61:5a:3f:c3:7f:bf:ea:7a: 72:56:c9:83:98:8b:34:08:0f:af:cc:31:19:79:cd: f6:61:52:af:74:03:42:fa:8a:67:fe:4f:d8:2a:5a: 71:8d:e7:54:14:00:5e:d7:63:a6:7d:80:70:a4:09: dc:26:50:5a:f3:04:df:d1:8d:1f:f0:78:7c:9b:c8: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:98:A1:F7:1B:FE:09:66:10:68:02:E5:79:C4:0E:27:F4:C0:0A:6A X509v3 Authority Key Identifier: keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/gJih9xv-CWYQaALlecQOJ_TACmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.24.0/22 IPv6: 2a0f:a5c0::/32 Signature Algorithm: sha256WithRSAEncryption 24:99:f2:aa:5e:9e:8f:5d:1c:12:68:86:41:1d:49:6e:ba:96: de:b5:d9:3c:ef:5f:90:51:a3:58:a4:4d:5d:c7:e4:05:a2:e0: 48:80:8c:ff:cd:dd:ed:36:ae:56:fa:e8:a6:51:09:e7:d4:f5: 09:e1:21:02:d3:26:15:32:9f:3b:07:9d:18:2f:fc:f5:fe:de: e4:4d:eb:63:9c:cb:bb:02:df:53:4b:ee:72:d7:5f:12:db:83: 9d:26:fc:af:70:08:b7:13:21:51:20:07:8d:01:31:c7:f2:99: 59:6d:f2:9d:5b:c9:95:93:f9:3e:b2:82:97:9f:1c:bc:dc:4b: fd:c1:48:31:ce:15:37:d6:1d:13:42:9c:bc:c3:07:c8:ee:45: a9:23:0c:fd:5b:05:20:f6:ad:ed:5a:20:f8:49:a0:26:18:63: 5a:fd:c5:07:93:14:4a:34:f4:8c:ca:eb:0b:11:fc:ed:34:e7: 4e:ad:f7:f6:8b:2a:89:b9:11:06:4b:df:c4:7c:ed:1c:ab:2e: fb:38:ad:b0:3d:4c:c3:8f:00:fe:b1:c2:9e:b0:eb:2d:c0:34: 00:3b:08:2d:67:25:de:df:9b:f6:de:36:37:08:fc:93:d9:fa: 95:4a:32:8b:da:f0:75:23:51:8f:cf:40:7d:8f:4e:0f:97:32: 61:88:2f:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt261mogAVo5cuFv7PbRQSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMWM5MzhiYjIwNmEzODk2ZDA2NGMwODUyZmE5ODg1ZmYy Y2ViZDkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDk4YTFmNzFiZmUwOTY2MTA2ODAyZTU3OWM0MGUyN2Y0YzAwYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApevpO3gck1lDv0fsaeFTBM/GuFBr e+mR4CdPKD/KBcPLcSBIDP4dH2g3h0IbuHVeWuaTMho9wtQBq5O3TuXDWMxiXJey jG2ejm7j1eQwIvLqKdeLHdloO7ZXTfU49PJL2N2Fu6MpTDCUO3PGLUs1R5xvakGd Y2zo5499izD2rNhL9sk3tNpZl+OqXlxsoejfOfnJQrUp74EDETjMv+8cUDQROqDg XEoeS4VORBksAzs57L9NgSfIg2gzYVo/w3+/6npyVsmDmIs0CA+vzDEZec32YVKv dANC+opn/k/YKlpxjedUFABe12OmfYBwpAncJlBa8wTf0Y0f8Hh8m8gnywIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFICYofcb/glmEGgC5XnEDif0wApqMB8GA1UdIwQY MBaAFD8ck4uyBqOJbQZMCFL6mIX/LOvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQt ZTA1MjYwMzNhNDg0LzEvZ0ppaDl4di1DV1lRYUFMbGVjUU9KX1RBQ21vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQtZTA1MjYwMzNhNDg0 LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXgYMA0E AgACMAcDBQAqD6XAMA0GCSqGSIb3DQEBCwUAA4IBAQAkmfKqXp6PXRwSaIZBHUlu upbetdk871+QUaNYpE1dx+QFouBIgIz/zd3tNq5W+uimUQnn1PUJ4SEC0yYVMp87 B50YL/z1/t7kTetjnMu7At9TS+5y118S24OdJvyvcAi3EyFRIAeNATHH8plZbfKd W8mVk/k+soKXnxy83Ev9wUgxzhU31h0TQpy8wwfI7kWpIwz9WwUg9q3tWiD4SaAm GGNa/cUHkxRKNPSMyusLEfztNOdOrff2iyqJuREGS9/EfO0cqy77OK2wPUzDjwD+ scKesOstwDQAOwgtZyXe35v23jY3CPyT2fqVSjKL2vB1I1GPz0B9j04PlzJhiC+Z -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:02 2026 by rpki-client