This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/4anqovF-fJBBhmBYRrbDclJ-kUA.roa File: 4anqovF-fJBBhmBYRrbDclJ-kUA.roa (raw, json) Hash identifier: kPViEs2Fr3y3duugScJzKv03Gg2xLEyx3ip0Wb1jWnc= Subject key identifier: E1:A9:EA:A2:F1:7E:7C:90:41:86:60:58:46:B6:C3:72:52:7E:91:40 Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019BDA7DE2118F31AE808EA8E89C9B5C3147 Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/4anqovF-fJBBhmBYRrbDclJ-kUA.roa Signing time: Tue 20 Jan 2026 08:20:41 +0000 ROA not before: Tue 20 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206065 IP address blocks: 185.222.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:7d:e2:11:8f:31:ae:80:8e:a8:e8:9c:9b:5c:31:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Jan 20 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1a9eaa2f17e7c904186605846b6c372527e9140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:1d:cb:97:c3:7b:97:77:39:c2:c5:1d:35: a9:f1:5e:1d:60:48:0d:cd:3e:28:a2:4a:d3:70:37: 4c:63:6d:13:56:7c:2e:17:38:72:b4:2c:7d:60:2a: ea:35:fb:47:fb:83:3f:77:5f:db:a2:5f:2b:30:da: d7:0e:ec:43:a4:32:04:fa:82:b4:b2:63:46:33:62: 89:da:f9:03:4a:ed:d6:ea:ce:92:49:66:f7:74:7a: 3a:e6:46:00:d6:29:f4:4f:e3:99:36:8f:e9:f7:d8: df:3f:7a:cf:d8:7e:5b:17:d0:cf:ba:5d:94:2d:4c: 4c:35:ab:bd:38:05:77:8c:4a:06:e6:5b:d3:7b:41: d9:09:03:0c:cc:f7:34:7a:e7:b1:a8:12:c8:4d:6f: 16:93:80:d1:96:64:ea:90:b7:03:58:9a:30:0d:55: 1e:21:72:48:ab:27:ca:54:78:8a:2f:9c:98:b5:70: af:60:ce:9e:0c:88:44:b9:3e:f8:5a:5a:0a:2b:ea: b2:6d:99:ee:80:35:ab:fd:71:b2:12:37:91:30:73: c8:5a:05:7b:a8:01:c2:89:bc:97:bb:45:50:a6:ec: 48:03:8d:23:d8:6c:2d:69:9e:a8:72:73:95:b0:c2: 2a:3a:10:1d:fc:70:c0:d6:d6:35:6e:01:80:2b:1c: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:EA:A2:F1:7E:7C:90:41:86:60:58:46:B6:C3:72:52:7E:91:40 X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/4anqovF-fJBBhmBYRrbDclJ-kUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.120.0/24 Signature Algorithm: sha256WithRSAEncryption 78:05:f7:fb:51:f1:ae:e0:73:bb:c2:25:79:95:74:2e:2e:04: 82:09:2a:06:53:c8:ee:42:12:5d:e0:7e:18:05:a3:b7:d1:f3: 70:a2:48:10:48:41:6a:6a:ad:99:44:ea:c8:10:a1:34:29:b1: e9:bc:f8:e3:31:58:47:85:72:0c:98:33:80:0e:bd:d9:e0:34: 19:8f:c9:37:b6:a5:a2:81:b6:38:ae:7d:c9:49:0d:79:f5:f1: 09:22:3e:c5:a7:58:44:b4:e7:b6:84:1e:ee:a0:a2:60:79:14: bd:70:e8:f2:d0:b1:92:ef:5c:24:7c:1d:db:1b:51:e1:3f:2e: ad:f3:64:eb:7c:5b:a6:d6:b0:52:f7:c5:2f:8f:89:98:15:ee: 4c:ac:dd:ae:36:0a:05:2b:95:f1:b9:ce:87:23:97:14:d8:8f: e1:cd:fc:1e:96:f5:89:bd:31:53:19:19:4c:29:8c:78:86:6d: 54:15:f6:fe:61:41:ed:10:ed:47:4f:ca:5f:23:f6:8b:a2:8a: 5c:6d:0e:95:14:68:03:db:82:44:34:62:60:e9:54:13:b9:7d: 94:64:c8:00:1a:08:a3:7b:f2:df:56:c4:54:aa:70:1c:d9:c4: ea:36:fd:26:da:9a:25:fd:8e:05:76:f0:3b:52:01:28:38:d0: 40:bf:09:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvafeIRjzGugI6o6JybXDFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjYwMTIwMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWE5ZWFhMmYxN2U3YzkwNDE4NjYwNTg0NmI2YzM3MjUyN2U5MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY8dy5fDe5d3OcLFHTWp8V4dYEgN zT4ookrTcDdMY20TVnwuFzhytCx9YCrqNftH+4M/d1/bol8rMNrXDuxDpDIE+oK0 smNGM2KJ2vkDSu3W6s6SSWb3dHo65kYA1in0T+OZNo/p99jfP3rP2H5bF9DPul2U LUxMNau9OAV3jEoG5lvTe0HZCQMMzPc0euexqBLITW8Wk4DRlmTqkLcDWJowDVUe IXJIqyfKVHiKL5yYtXCvYM6eDIhEuT74WloKK+qybZnugDWr/XGyEjeRMHPIWgV7 qAHCibyXu0VQpuxIA40j2GwtaZ6ocnOVsMIqOhAd/HDA1tY1bgGAKxwIfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGp6qLxfnyQQYZgWEa2w3JSfpFAMB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvNGFucW92Ri1mSkJCaG1CWVJyYkRjbEota1VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud54MA0G CSqGSIb3DQEBCwUAA4IBAQB4Bff7UfGu4HO7wiV5lXQuLgSCCSoGU8juQhJd4H4Y BaO30fNwokgQSEFqaq2ZROrIEKE0KbHpvPjjMVhHhXIMmDOADr3Z4DQZj8k3tqWi gbY4rn3JSQ159fEJIj7Fp1hEtOe2hB7uoKJgeRS9cOjy0LGS71wkfB3bG1HhPy6t 82TrfFum1rBS98Uvj4mYFe5MrN2uNgoFK5Xxuc6HI5cU2I/hzfwelvWJvTFTGRlM KYx4hm1UFfb+YUHtEO1HT8pfI/aLoopcbQ6VFGgD24JENGJg6VQTuX2UZMgAGgij e/LfVsRUqnAc2cTqNv0m2pol/Y4FdvA7UgEoONBAvwmb -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:00 2026 by rpki-client