This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Ak9vOxGpJOtM5ZM2WAZaWA80hJ0.roa File: Ak9vOxGpJOtM5ZM2WAZaWA80hJ0.roa (raw, json) Hash identifier: eWX9AMTey3Vg1fgVIDxnxj6ffwC52UU2QqjvGjmMTlQ= Subject key identifier: 02:4F:6F:3B:11:A9:24:EB:4C:E5:93:36:58:06:5A:58:0F:34:84:9D Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f Certificate serial: 019B7CED433E346842814D04CE423B4E7935 Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Ak9vOxGpJOtM5ZM2WAZaWA80hJ0.roa Signing time: Fri 02 Jan 2026 04:18:02 +0000 ROA not before: Fri 02 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61010 IP address blocks: 185.20.120.0/22 maxlen: 22 185.20.120.0/24 maxlen: 24 185.20.121.0/24 maxlen: 24 185.20.122.0/24 maxlen: 24 185.20.123.0/24 maxlen: 24 2a00:47a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:43:3e:34:68:42:81:4d:04:ce:42:3b:4e:79:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=024f6f3b11a924eb4ce5933658065a580f34849d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:36:75:55:16:85:03:55:b8:05:51:b9:e7: 15:01:01:14:a8:7a:99:81:45:b5:ef:9c:68:8d:c2: 0f:e7:3e:f9:91:2f:44:dd:d5:08:05:11:f2:93:1f: c4:38:79:c1:31:13:8a:a6:d5:57:fe:5b:db:f4:43: a6:b3:04:ac:9a:50:c4:dd:e4:a6:b8:73:8c:0c:b3: 2f:6b:af:8a:fc:82:83:93:00:3d:29:2b:28:24:16: 89:8c:69:eb:56:15:a9:62:7b:83:42:e4:1b:77:2c: 0b:e7:4a:a1:3a:7b:0c:d6:11:24:d4:93:89:bb:e9: 29:9c:ed:cf:b3:c6:83:2d:38:43:ec:76:60:ff:e1: ad:07:c3:8b:e1:ad:54:51:ee:1d:f2:da:3d:14:73: 73:36:07:a7:52:92:4d:5e:78:cb:01:3c:24:e7:12: c0:55:06:66:d8:70:40:00:da:88:32:f7:a7:67:a3: 89:8e:73:62:a5:9f:e1:9f:0a:63:86:04:a5:6d:80: dc:41:e8:61:11:79:3d:24:09:63:47:1e:4a:8f:a0: 8c:c5:94:aa:30:83:7d:2b:d3:99:28:28:db:38:73: f7:69:40:51:17:b3:93:52:a0:fb:9a:a6:2b:97:4f: 18:e2:34:6a:cd:85:3c:e7:70:4a:e7:8a:60:a8:f8: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:6F:3B:11:A9:24:EB:4C:E5:93:36:58:06:5A:58:0F:34:84:9D X509v3 Authority Key Identifier: keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Ak9vOxGpJOtM5ZM2WAZaWA80hJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.120.0/22 IPv6: 2a00:47a0::/32 Signature Algorithm: sha256WithRSAEncryption d2:2d:d7:c7:e7:e8:21:b1:b4:f4:df:42:8a:9c:6f:37:9c:00: 5b:35:ce:64:73:02:57:a3:c0:e4:ea:14:fa:05:6c:50:04:1e: 00:8e:99:66:b7:aa:fe:64:97:f3:7b:d7:02:1c:13:ca:b0:36: 59:4b:9d:18:58:0f:26:ef:40:ca:2d:ad:d9:fa:c5:8c:9e:40: ff:ac:47:0c:aa:8f:2e:78:c4:e0:97:ff:c3:83:b8:50:dc:79: 7e:04:31:bd:88:01:9a:00:f2:67:b7:1d:dc:09:0a:95:60:e9: 01:f8:33:31:aa:6d:7b:19:b9:af:78:da:2e:e0:6d:e3:56:6b: 6d:40:69:da:e3:5e:cd:8f:d1:0c:66:0d:b9:92:34:ee:2a:a6: 15:95:26:df:4f:7a:38:61:ed:69:f1:92:36:43:bf:93:3d:b3: cd:2a:ad:18:68:b6:f6:b9:99:21:bc:10:3c:11:c0:2c:a5:36: 41:61:27:fc:95:93:c9:1e:9d:2f:d0:86:c6:05:3e:9b:4c:21: 75:8e:4f:f5:51:82:80:61:35:3c:dd:4e:f0:7a:af:22:5f:b3: 8a:6a:1c:d5:da:53:7f:b8:45:61:33:60:0f:a0:7b:5d:39:0b: a9:39:24:60:3b:10:f3:09:51:27:4b:6b:c1:6b:92:3c:84:cc: e6:d0:94:6c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87UM+NGhCgU0EzkI7Tnk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWNhZmU2MTM0M2Q3MTBkZjYwY2Q5MWRlMDg5MDFmZGJi YTZmOGYwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjRmNmYzYjExYTkyNGViNGNlNTkzMzY1ODA2NWE1ODBmMzQ4NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Q2dVUWhQNVuAVRuecVAQEUqHqZ gUW175xojcIP5z75kS9E3dUIBRHykx/EOHnBMROKptVX/lvb9EOmswSsmlDE3eSm uHOMDLMva6+K/IKDkwA9KSsoJBaJjGnrVhWpYnuDQuQbdywL50qhOnsM1hEk1JOJ u+kpnO3Ps8aDLThD7HZg/+GtB8OL4a1UUe4d8to9FHNzNgenUpJNXnjLATwk5xLA VQZm2HBAANqIMvenZ6OJjnNipZ/hnwpjhgSlbYDcQehhEXk9JAljRx5Kj6CMxZSq MIN9K9OZKCjbOHP3aUBRF7OTUqD7mqYrl08Y4jRqzYU853BK54pgqPiEOwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAJPbzsRqSTrTOWTNlgGWlgPNISdMB8GA1UdIwQY MBaAFEasr+YTQ9cQ32DNkd4IkB/bum+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYt ZDNhODVhNzFiMDI5LzEvQWs5dk94R3BKT3RNNVpNMldBWmFXQTgwaEowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYtZDNhODVhNzFiMDI5 LzEvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRR4MA0E AgACMAcDBQAqAEegMA0GCSqGSIb3DQEBCwUAA4IBAQDSLdfH5+ghsbT030KKnG83 nABbNc5kcwJXo8Dk6hT6BWxQBB4Ajplmt6r+ZJfze9cCHBPKsDZZS50YWA8m70DK La3Z+sWMnkD/rEcMqo8ueMTgl//Dg7hQ3Hl+BDG9iAGaAPJntx3cCQqVYOkB+DMx qm17GbmveNou4G3jVmttQGna417Nj9EMZg25kjTuKqYVlSbfT3o4Ye1p8ZI2Q7+T PbPNKq0YaLb2uZkhvBA8EcAspTZBYSf8lZPJHp0v0IbGBT6bTCF1jk/1UYKAYTU8 3U7weq8iX7OKahzV2lN/uEVhM2APoHtdOQupOSRgOxDzCVEnS2vBa5I8hMzm0JRs -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:31 2026 by rpki-client