This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/AH8BkwVFANpM3D-2UXxmQPvm-gI.roa File: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (raw, json) Hash identifier: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs= Subject key identifier: 00:7F:01:93:05:45:00:DA:4C:DC:3F:B6:51:7C:66:40:FB:E6:FA:02 Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Certificate serial: 019B7D5BC7BF2A1FFE2A75B67034ECB03541 Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/AH8BkwVFANpM3D-2UXxmQPvm-gI.roa Signing time: Fri 02 Jan 2026 06:18:45 +0000 ROA not before: Fri 02 Jan 2026 06:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.150.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c7:bf:2a:1f:fe:2a:75:b6:70:34:ec:b0:35:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Validity Not Before: Jan 2 06:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=007f0193054500da4cdc3fb6517c6640fbe6fa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:78:e9:c1:9e:6d:31:c9:54:56:16:2c:ae: 48:6a:55:16:19:e2:b2:5d:fc:d7:ab:fb:09:12:85: 9c:a6:d4:e0:10:36:07:b9:c8:b6:8f:a2:2c:a5:b3: 96:2e:aa:c7:ca:46:66:c9:31:0d:de:10:7e:53:c1: f2:29:1d:50:d5:96:d2:e6:a3:a5:1f:53:f2:95:23: 7c:36:42:e8:fa:4a:8c:7e:be:b2:d8:a7:71:ca:27: 44:24:de:87:4f:80:0f:2b:cf:c3:93:60:f7:10:82: 6c:2f:74:82:3b:0f:1d:6a:00:dc:a8:61:e5:b3:eb: 19:02:4b:7c:52:b6:63:cd:d3:6d:fc:21:de:8c:56: f1:a4:41:2e:43:75:e6:59:60:23:5d:43:21:ca:92: 0c:3d:1b:ca:83:ae:78:ae:f7:03:eb:54:2f:5a:c3: 76:22:76:15:fd:cc:ce:3a:41:54:bd:dc:10:0c:a9: 96:d2:06:ea:a3:be:62:c8:d4:a1:fb:7c:43:4e:f7: 02:e0:d1:f0:17:1d:1d:ef:3f:43:a3:63:63:e0:d8: 0d:55:0b:4a:77:57:4b:bc:2e:c0:04:fe:b5:40:7f: 6c:41:25:c2:4b:b2:0e:6c:55:eb:f7:d7:39:62:f3: b2:10:34:1b:88:af:d6:4b:a4:f8:b4:5a:7c:7b:44: 59:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7F:01:93:05:45:00:DA:4C:DC:3F:B6:51:7C:66:40:FB:E6:FA:02 X509v3 Authority Key Identifier: keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/AH8BkwVFANpM3D-2UXxmQPvm-gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.179.0/24 Signature Algorithm: sha256WithRSAEncryption b2:75:ed:ed:9b:a6:ee:09:b6:a7:76:16:bd:5e:52:cc:43:ed: f3:6d:9a:b1:3f:19:80:2b:59:6c:72:0b:86:b8:54:ca:49:94: cb:da:2f:b9:b9:92:ff:09:06:07:7c:2d:87:54:ca:a6:85:bd: e7:d5:bd:03:a2:cb:e1:e7:5a:be:59:ab:6b:bd:b0:23:1b:b1: db:9a:e8:f9:36:5e:6f:80:ed:aa:56:e0:b8:12:be:15:59:38: 12:df:22:61:19:b5:6a:37:df:a4:32:04:de:4c:04:7b:ef:b6: a5:9b:d5:cf:08:a5:b7:ee:01:00:bc:9f:3f:86:bc:af:20:db: c3:b6:d3:69:e9:c1:4b:d4:04:35:08:67:c9:64:83:7a:2e:99: 85:f4:1f:9e:6b:17:71:6d:5f:7e:c4:96:6e:04:bb:46:16:80: ad:43:92:26:4e:d2:f3:84:7c:5e:35:e7:1e:b0:34:2b:8c:70: dd:f5:a1:88:22:db:b4:48:ed:b3:c2:53:2b:41:9c:14:3f:1d: 6b:41:89:f3:b4:96:c1:75:71:3c:6f:00:f7:e7:ce:4b:31:9d: 88:7b:16:19:98:fc:cd:86:a5:9a:47:55:0b:fc:ea:88:8b:2e: 14:97:f0:88:d4:20:62:08:83:76:e2:22:cc:c2:39:4f:ab:8a: 81:85:56:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W8e/Kh/+KnW2cDTssDVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy MmFjZTcwHhcNMjYwMTAyMDYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDdmMDE5MzA1NDUwMGRhNGNkYzNmYjY1MTdjNjY0MGZiZTZmYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf546cGebTHJVFYWLK5IalUWGeKy XfzXq/sJEoWcptTgEDYHuci2j6IspbOWLqrHykZmyTEN3hB+U8HyKR1Q1ZbS5qOl H1PylSN8NkLo+kqMfr6y2KdxyidEJN6HT4APK8/Dk2D3EIJsL3SCOw8dagDcqGHl s+sZAkt8UrZjzdNt/CHejFbxpEEuQ3XmWWAjXUMhypIMPRvKg654rvcD61QvWsN2 InYV/czOOkFUvdwQDKmW0gbqo75iyNSh+3xDTvcC4NHwFx0d7z9Do2Nj4NgNVQtK d1dLvC7ABP61QH9sQSXCS7IObFXr99c5YvOyEDQbiK/WS6T4tFp8e0RZSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAB/AZMFRQDaTNw/tlF8ZkD75voCMB8GA1UdIwQY MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt OGQzZGNjMzNhZDBhLzEvQUg4Qmt3VkZBTnBNM0QtMlVYeG1RUHZtLWdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZazMA0G CSqGSIb3DQEBCwUAA4IBAQCyde3tm6buCbandha9XlLMQ+3zbZqxPxmAK1lscguG uFTKSZTL2i+5uZL/CQYHfC2HVMqmhb3n1b0Dosvh51q+WatrvbAjG7Hbmuj5Nl5v gO2qVuC4Er4VWTgS3yJhGbVqN9+kMgTeTAR777alm9XPCKW37gEAvJ8/hryvINvD ttNp6cFL1AQ1CGfJZIN6LpmF9B+eaxdxbV9+xJZuBLtGFoCtQ5ImTtLzhHxeNece sDQrjHDd9aGIItu0SO2zwlMrQZwUPx1rQYnztJbBdXE8bwD3585LMZ2IexYZmPzN hqWaR1UL/OqIiy4Ul/CI1CBiCIN24iLMwjlPq4qBhVbT -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:06 2026 by rpki-client