This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa File: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (raw, json) Hash identifier: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU= Subject key identifier: 02:7F:6D:4A:8F:60:F8:6C:BD:52:9E:06:94:F1:C9:DB:B2:EF:59:7B Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Certificate serial: 019B78353CAF4F4C817D5E2456BC36D7BA8A Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 193.148.40.0/24 maxlen: 24 193.148.41.0/24 maxlen: 24 193.148.42.0/24 maxlen: 24 193.148.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3c:af:4f:4c:81:7d:5e:24:56:bc:36:d7:ba:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=027f6d4a8f60f86cbd529e0694f1c9dbb2ef597b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:0c:64:a7:dd:27:21:53:70:3a:67:4e:d2: b1:2c:ae:d1:dc:2b:13:89:2a:b4:64:bd:92:d6:eb: b0:83:2e:ff:92:6e:b7:27:49:c0:79:42:f5:ec:ca: cf:ff:9c:6b:dc:ef:d8:a5:4c:c6:cb:99:78:c6:02: 2c:bc:f1:aa:b0:0d:72:68:93:59:d9:43:36:11:b7: cb:2c:ff:e2:75:ba:38:fb:bb:74:22:ca:54:85:4c: bc:58:ee:47:0b:27:67:da:34:e4:15:98:8d:23:68: 4a:35:a6:86:7a:6c:ab:89:f0:e3:de:f9:28:27:f2: 53:83:b4:c2:fa:ba:b6:96:12:54:9e:c1:d7:16:79: 4e:dc:f1:8f:89:2f:33:9a:bf:80:c3:8e:32:c0:f3: 42:ba:1b:f3:13:6e:f9:eb:11:bb:7d:d4:14:39:0c: 42:88:ef:d6:0b:e7:da:cf:d9:7d:33:f0:ab:7e:d2: 52:04:5d:e4:b2:73:ad:61:78:6e:44:07:d8:55:b8: b6:9a:5d:55:59:78:68:a3:d1:b0:55:52:78:ba:c7: 28:ef:99:80:69:17:ca:c0:e3:a2:03:7e:9b:83:41: bc:1f:c8:2a:04:e1:d1:91:3b:a5:92:56:c0:9a:6d: ca:e8:b8:a9:29:d1:63:4d:cf:1f:1c:9d:1e:5b:b7: 55:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:6D:4A:8F:60:F8:6C:BD:52:9E:06:94:F1:C9:DB:B2:EF:59:7B X509v3 Authority Key Identifier: keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.40.0/22 Signature Algorithm: sha256WithRSAEncryption 13:ac:88:4e:08:98:57:92:3d:cd:19:08:09:42:f5:1f:ce:f2: e5:37:78:67:d4:7c:47:9a:db:e7:32:8f:a4:cd:8a:90:29:2d: 33:16:f9:e5:6f:26:f9:32:6c:27:e6:df:0e:ed:e3:18:e4:02: 90:2f:a8:6a:fa:d0:31:35:b2:80:fa:80:6b:52:a9:79:40:b0: 73:26:5f:e7:7d:f1:ac:e3:ba:2f:e0:1d:a8:da:ea:9a:04:52: 5c:1c:a0:c4:9f:c9:1b:b0:10:32:58:ab:18:01:8e:e8:9d:d8: 36:01:a0:99:9b:d3:f4:79:2b:bd:1a:fc:06:16:8e:62:97:35: b4:f9:d4:c5:0d:3c:ce:5f:d8:bf:1c:e9:b1:08:78:c7:56:f7: 4e:7e:a0:a9:a0:d8:63:bd:fb:2b:12:82:a8:2a:26:ee:32:f7: 58:cd:e3:7d:69:6b:a8:78:64:a9:d0:5b:c7:fa:9d:61:4d:86: 18:cc:fa:40:1f:83:a9:d0:0b:bc:fa:fb:78:5f:aa:55:69:2a: 6a:c8:eb:29:d8:a1:93:e9:7b:89:a3:24:44:f0:a7:31:a9:51: 34:20:b9:ad:a5:76:c0:13:f1:43:6a:48:68:30:b6:a2:91:ac: 20:d0:d3:69:0a:53:db:b3:7a:bd:84:3c:ef:e8:a1:68:da:65: 70:f4:4c:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTyvT0yBfV4kVrw217qKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjBiZGJhNDZjZTUwYzBhYTBjNDFmMGIxYjQ5ZmE3ZWQ2 ODEwY2IwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjdmNmQ0YThmNjBmODZjYmQ1MjllMDY5NGYxYzlkYmIyZWY1OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0oMZKfdJyFTcDpnTtKxLK7R3CsT iSq0ZL2S1uuwgy7/km63J0nAeUL17MrP/5xr3O/YpUzGy5l4xgIsvPGqsA1yaJNZ 2UM2EbfLLP/idbo4+7t0IspUhUy8WO5HCydn2jTkFZiNI2hKNaaGemyrifDj3vko J/JTg7TC+rq2lhJUnsHXFnlO3PGPiS8zmr+Aw44ywPNCuhvzE2756xG7fdQUOQxC iO/WC+faz9l9M/CrftJSBF3ksnOtYXhuRAfYVbi2ml1VWXhoo9GwVVJ4usco75mA aRfKwOOiA36bg0G8H8gqBOHRkTulklbAmm3K6LipKdFjTc8fHJ0eW7dV0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAJ/bUqPYPhsvVKeBpTxyduy71l7MB8GA1UdIwQY MBaAFGAgvbpGzlDAqgxB8LG0n6ftaBDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2Yt YjMwOTExMmQyZWVjLzEvQW45dFNvOWctR3k5VXA0R2xQSEoyN0x2V1hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2YtYjMwOTExMmQyZWVj LzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwZQoMA0G CSqGSIb3DQEBCwUAA4IBAQATrIhOCJhXkj3NGQgJQvUfzvLlN3hn1HxHmtvnMo+k zYqQKS0zFvnlbyb5Mmwn5t8O7eMY5AKQL6hq+tAxNbKA+oBrUql5QLBzJl/nffGs 47ov4B2o2uqaBFJcHKDEn8kbsBAyWKsYAY7ondg2AaCZm9P0eSu9GvwGFo5ilzW0 +dTFDTzOX9i/HOmxCHjHVvdOfqCpoNhjvfsrEoKoKibuMvdYzeN9aWuoeGSp0FvH +p1hTYYYzPpAH4Op0Au8+vt4X6pVaSpqyOsp2KGT6XuJoyRE8KcxqVE0ILmtpXbA E/FDakhoMLaikawg0NNpClPbs3q9hDzv6KFo2mVw9Eyh -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:15 2026 by rpki-client