This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/24AsigLbaKArrRhQpNvzkLuNdsw.roa File: 24AsigLbaKArrRhQpNvzkLuNdsw.roa (raw, json) Hash identifier: Y6cso1vmOQRNAQC+IgTQnFt9A6yD7HrC8YdvTQc2P8Y= Subject key identifier: DB:80:2C:8A:02:DB:68:A0:2B:AD:18:50:A4:DB:F3:90:BB:8D:76:CC Certificate issuer: /CN=0a97c0c818868373c4014715053adaf61af1da1d Certificate serial: 019B7C11BC0651B650FEFA38BEC45BABD127 Authority key identifier: 0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/24AsigLbaKArrRhQpNvzkLuNdsw.roa Signing time: Fri 02 Jan 2026 00:18:15 +0000 ROA not before: Fri 02 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60068 IP address blocks: 185.180.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:bc:06:51:b6:50:fe:fa:38:be:c4:5b:ab:d1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a97c0c818868373c4014715053adaf61af1da1d Validity Not Before: Jan 2 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db802c8a02db68a02bad1850a4dbf390bb8d76cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:af:ae:a9:e1:a7:94:80:3d:ea:02:38:46: 3d:bc:5a:4e:89:2a:00:c3:1b:36:10:17:48:f3:3f: 6e:36:c4:06:bd:25:1f:61:0c:56:0b:44:65:54:f1: 56:e0:6e:83:67:8b:87:35:38:b5:cf:f2:9b:0f:3a: c4:f6:1c:02:24:4e:4c:9f:6c:f0:f1:43:c0:89:83: a9:93:3b:66:92:7a:33:b0:4f:c8:29:d1:ad:64:79: ed:e2:33:0e:50:e5:e1:73:6e:43:2e:23:15:68:a0: af:2d:42:75:a5:f3:d2:b6:18:f5:5a:3d:ef:82:7e: 4d:56:c3:29:d0:f7:9d:8f:d4:50:9d:b9:9c:97:e8: db:d2:75:34:3e:47:87:2c:af:13:8c:2e:9f:eb:52: 5d:86:e1:0f:51:c8:d1:62:9d:69:e9:d0:6f:a0:2e: 1b:d4:d9:15:d2:d8:b9:23:5a:1a:6a:8d:c0:bb:a8: 73:5f:18:08:9a:9f:ef:d9:75:94:33:67:99:f1:81: 14:a2:f4:cb:df:5c:f8:47:35:29:a7:50:19:ec:b8: a1:13:59:5e:86:c0:d9:46:37:05:d5:9c:ea:42:75: 39:a5:d9:3c:2e:e4:3d:ea:fd:f8:b0:d0:4b:77:c3: db:7f:6f:0e:80:a8:07:1d:3b:e4:c4:ac:95:39:be: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:80:2C:8A:02:DB:68:A0:2B:AD:18:50:A4:DB:F3:90:BB:8D:76:CC X509v3 Authority Key Identifier: keyid:0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/24AsigLbaKArrRhQpNvzkLuNdsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.14.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:93:36:ce:6f:3f:68:e0:25:76:da:05:cf:c8:aa:bb:8c:16: f5:61:2b:72:76:02:48:66:8e:3e:e6:4b:46:bc:86:84:94:cc: 96:15:fc:90:c3:74:22:b5:cd:a2:46:a2:88:72:57:f8:19:ba: 13:a0:f5:83:ff:1b:4d:e5:35:12:04:d1:36:b6:6e:e6:72:a0: 72:4e:a1:9d:ac:4f:2d:ef:0d:d7:be:20:d5:d5:df:d5:d9:77: 34:94:6b:3c:8d:86:b0:24:12:ad:6e:f5:98:fd:5c:0f:c7:34: 4e:a1:db:55:a7:f5:f2:d7:86:b0:e4:aa:9f:bd:de:05:4a:d4: 3b:2e:6c:34:e3:70:3d:f2:4f:4d:df:20:c5:66:fd:98:f9:7c: 59:a0:d4:ba:42:b1:fb:f7:6b:77:63:70:93:66:b3:d0:02:3f: 89:8d:71:cd:14:b5:25:54:29:af:4f:12:ed:1f:1d:cd:fd:57: 9d:a1:ed:68:29:04:da:d5:8f:62:43:59:2d:3f:25:1a:09:e6: 61:57:11:2c:c4:d5:f9:53:58:89:84:74:91:89:7e:cf:45:c9: fd:fe:1b:e3:39:3a:f9:93:ca:e8:48:a4:a1:6e:b6:28:3d:26: d3:0c:44:d7:6a:93:c7:99:f3:79:ab:28:7c:62:81:4e:cb:c7: b3:88:e4:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EbwGUbZQ/vo4vsRbq9EnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOTdjMGM4MTg4NjgzNzNjNDAxNDcxNTA1M2FkYWY2MWFm MWRhMWQwHhcNMjYwMTAyMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjgwMmM4YTAyZGI2OGEwMmJhZDE4NTBhNGRiZjM5MGJiOGQ3NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy+vrqnhp5SAPeoCOEY9vFpOiSoA wxs2EBdI8z9uNsQGvSUfYQxWC0RlVPFW4G6DZ4uHNTi1z/KbDzrE9hwCJE5Mn2zw 8UPAiYOpkztmknozsE/IKdGtZHnt4jMOUOXhc25DLiMVaKCvLUJ1pfPSthj1Wj3v gn5NVsMp0Pedj9RQnbmcl+jb0nU0PkeHLK8TjC6f61JdhuEPUcjRYp1p6dBvoC4b 1NkV0ti5I1oaao3Au6hzXxgImp/v2XWUM2eZ8YEUovTL31z4RzUpp1AZ7LihE1le hsDZRjcF1ZzqQnU5pdk8LuQ96v34sNBLd8Pbf28OgKgHHTvkxKyVOb5NbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNuALIoC22igK60YUKTb85C7jXbMMB8GA1UdIwQY MBaAFAqXwMgYhoNzxAFHFQU62vYa8dodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3BmQXlCaUdnM1BFQVVjVkJUcmE5aHJ4MmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hOTM5OWItZjg2Ny00ODAyLThjNjct ZGJmMmIzNzY5NDQ1LzEvMjRBc2lnTGJhS0FyclJoUXBOdnprTHVOZHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hOTM5OWItZjg2Ny00ODAyLThjNjctZGJmMmIzNzY5NDQ1 LzEvQ3BmQXlCaUdnM1BFQVVjVkJUcmE5aHJ4MmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubQOMA0G CSqGSIb3DQEBCwUAA4IBAQBKkzbObz9o4CV22gXPyKq7jBb1YStydgJIZo4+5ktG vIaElMyWFfyQw3Qitc2iRqKIclf4GboToPWD/xtN5TUSBNE2tm7mcqByTqGdrE8t 7w3XviDV1d/V2Xc0lGs8jYawJBKtbvWY/VwPxzROodtVp/Xy14aw5Kqfvd4FStQ7 Lmw043A98k9N3yDFZv2Y+XxZoNS6QrH792t3Y3CTZrPQAj+JjXHNFLUlVCmvTxLt Hx3N/Vedoe1oKQTa1Y9iQ1ktPyUaCeZhVxEsxNX5U1iJhHSRiX7PRcn9/hvjOTr5 k8roSKShbrYoPSbTDETXapPHmfN5qyh8YoFOy8eziOR2 -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:40 2026 by rpki-client