This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/z20tkJ9aM0VxzsTv6McuHmggfYg.roa File: z20tkJ9aM0VxzsTv6McuHmggfYg.roa (raw, json) Hash identifier: HyTTXZdN54NL3quW2ViSSrBjGEpXj05e9dah+eMXfH8= Subject key identifier: CF:6D:2D:90:9F:5A:33:45:71:CE:C4:EF:E8:C7:2E:1E:68:20:7D:88 Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f Certificate serial: 019B7AC8A7024ABDE0398F4BCA760A9335ED Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/z20tkJ9aM0VxzsTv6McuHmggfYg.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50057 IP address blocks: 185.161.112.0/24 maxlen: 24 185.161.113.0/24 maxlen: 24 185.161.114.0/24 maxlen: 24 185.161.115.0/24 maxlen: 24 193.150.66.0/24 maxlen: 24 2a07:c200::/32 maxlen: 32 2a07:c201::/32 maxlen: 32 2a07:c202::/32 maxlen: 32 2a07:c203::/32 maxlen: 32 2a07:c204::/32 maxlen: 32 2a07:c205::/32 maxlen: 32 2a07:c206::/32 maxlen: 32 2a07:c207::/32 maxlen: 32 2a0f:6400::/32 maxlen: 32 2a0f:6401::/32 maxlen: 32 2a0f:6402::/32 maxlen: 32 2a0f:6403::/32 maxlen: 32 2a0f:6404::/32 maxlen: 32 2a0f:6405::/32 maxlen: 32 2a0f:6406::/32 maxlen: 32 2a0f:6407::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a7:02:4a:bd:e0:39:8f:4b:ca:76:0a:93:35:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf6d2d909f5a334571cec4efe8c72e1e68207d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:32:0f:62:a3:8c:eb:10:53:5b:96:bc:4e: 88:ed:f6:46:6e:52:c5:5c:d4:dd:a9:5e:cf:ee:0c: 8a:3b:4f:aa:a2:77:ef:a1:67:05:90:62:ee:f4:15: 31:0c:21:70:fb:f2:2f:a3:30:62:e5:59:a6:99:83: dc:2a:b6:41:a1:8a:3c:fb:3f:b4:6d:1e:19:a5:4a: 41:19:9a:da:e7:67:8a:f8:27:9f:e1:82:2c:b1:07: e5:96:8a:7b:06:17:84:d5:23:30:2f:68:0f:8c:14: d6:f0:ce:ba:59:80:a8:9e:e5:e1:18:08:c9:79:cf: a0:a2:0f:83:a0:b0:51:ec:04:33:99:24:c1:f8:c5: 76:b9:5d:17:b5:42:ea:48:07:11:18:36:0c:e0:6e: 9c:b6:23:b0:34:8b:e2:57:44:dd:48:ed:e7:94:74: bf:f6:02:ae:0b:e5:5a:57:c0:bb:7b:67:f7:b6:d6: 81:b2:b4:f5:e7:77:b8:cf:71:32:ac:93:8b:88:ba: 3c:c1:8d:cc:9d:f8:6a:d2:a9:ed:c1:de:b0:8b:fb: 8b:68:e4:45:0f:7f:23:1a:44:27:96:07:97:54:b2: a1:bc:06:51:da:e4:29:47:bb:1f:00:db:9f:32:c8: cf:91:3a:87:f5:af:f8:1c:bf:3f:0f:a4:42:8c:c6: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6D:2D:90:9F:5A:33:45:71:CE:C4:EF:E8:C7:2E:1E:68:20:7D:88 X509v3 Authority Key Identifier: keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/z20tkJ9aM0VxzsTv6McuHmggfYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.112.0/22 193.150.66.0/24 IPv6: 2a07:c200::/29 2a0f:6400::/29 Signature Algorithm: sha256WithRSAEncryption 9e:3c:43:05:a0:a7:26:66:36:d0:b4:62:3d:af:11:02:a3:a1: b2:70:6b:4c:24:86:cc:09:55:aa:2d:96:c8:34:37:e1:9a:b5: 68:21:70:02:e2:64:c1:a1:8b:32:fb:b1:0f:bc:bf:57:8e:d4: 89:b0:e0:8d:51:84:23:a8:bd:98:57:0a:ef:cf:de:55:5c:fc: 3f:41:8f:a2:c4:e7:88:64:72:4c:e9:a5:98:bf:92:64:bf:fa: 24:cc:df:8f:db:ef:3c:1e:a7:e3:28:6a:b4:90:8e:cc:44:c8: e1:7c:25:bf:02:51:b5:a7:ea:1e:42:67:8e:04:0f:9a:3a:bc: a1:2a:30:27:43:d2:73:78:81:9c:8d:2f:09:13:3f:8e:38:83: d8:40:59:23:e9:6d:72:e9:d8:b0:64:f9:25:6f:d2:a2:5c:a3: e2:9a:ba:45:59:ac:33:dc:ad:b0:2a:4c:78:ca:15:21:1c:49: 85:08:b7:d1:b3:38:6d:b9:3c:3e:db:54:f0:06:9b:2c:c3:e8: 8c:ed:f5:97:66:26:e9:d1:18:d3:1d:e4:e8:e2:13:5b:2a:b2: 48:3b:f6:93:13:76:e4:d0:07:e7:c1:6d:01:2e:5d:a2:89:a3: ec:35:a1:c1:52:72:22:76:92:b7:5c:90:d7:91:b8:af:22:60: aa:6d:4c:b7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6yKcCSr3gOY9LynYKkzXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2 YjUwMGYwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjZkMmQ5MDlmNWEzMzQ1NzFjZWM0ZWZlOGM3MmUxZTY4MjA3ZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohkyD2KjjOsQU1uWvE6I7fZGblLF XNTdqV7P7gyKO0+qonfvoWcFkGLu9BUxDCFw+/IvozBi5VmmmYPcKrZBoYo8+z+0 bR4ZpUpBGZra52eK+Cef4YIssQfllop7BheE1SMwL2gPjBTW8M66WYConuXhGAjJ ec+gog+DoLBR7AQzmSTB+MV2uV0XtULqSAcRGDYM4G6ctiOwNIviV0TdSO3nlHS/ 9gKuC+VaV8C7e2f3ttaBsrT153e4z3EyrJOLiLo8wY3Mnfhq0qntwd6wi/uLaORF D38jGkQnlgeXVLKhvAZR2uQpR7sfANufMsjPkTqH9a/4HL8/D6RCjMacgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM9tLZCfWjNFcc7E7+jHLh5oIH2IMB8GA1UdIwQY MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt ZjQyMTc2Y2QwNDQ1LzEvejIwdGtKOWFNMFZ4enNUdjZNY3VIbWdnZllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1 LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuaFwAwQA wZZCMBQEAgACMA4DBQMqB8IAAwUDKg9kADANBgkqhkiG9w0BAQsFAAOCAQEAnjxD BaCnJmY20LRiPa8RAqOhsnBrTCSGzAlVqi2WyDQ34Zq1aCFwAuJkwaGLMvuxD7y/ V47UibDgjVGEI6i9mFcK78/eVVz8P0GPosTniGRyTOmlmL+SZL/6JMzfj9vvPB6n 4yhqtJCOzETI4XwlvwJRtafqHkJnjgQPmjq8oSowJ0PSc3iBnI0vCRM/jjiD2EBZ I+ltcunYsGT5JW/Solyj4pq6RVmsM9ytsCpMeMoVIRxJhQi30bM4bbk8PttU8Aab LMPojO31l2Ym6dEY0x3k6OITWyqySDv2kxN25NAH58FtAS5doomj7DWhwVJyInaS t1yQ15G4ryJgqm1Mtw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:41 2026 by rpki-client