This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/AHoAIdWXRAPIrDSl4u1SU8YYqSk.roa File: AHoAIdWXRAPIrDSl4u1SU8YYqSk.roa (raw, json) Hash identifier: EWMLVeLj+fyihsFBIWnZZJmtFYOU0n6PSicXw/JZTwQ= Subject key identifier: 00:7A:00:21:D5:97:44:03:C8:AC:34:A5:E2:ED:52:53:C6:18:A9:29 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F1463784FB8B06466415F95E2121BAE Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/AHoAIdWXRAPIrDSl4u1SU8YYqSk.roa Signing time: Fri 02 Jan 2026 14:20:01 +0000 ROA not before: Fri 02 Jan 2026 14:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198592 IP address blocks: 109.120.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:63:78:4f:b8:b0:64:66:41:5f:95:e2:12:1b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=007a0021d5974403c8ac34a5e2ed5253c618a929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:e5:c8:8f:b8:39:b1:89:58:0b:da:1e:95: 0d:a4:6a:17:2e:4c:8c:0c:8b:33:7f:5e:e4:5e:25: 75:b0:08:ca:d1:b4:57:7f:0d:7b:61:65:9d:a9:36: 4c:b9:12:fd:6e:cd:ce:96:fb:46:18:8d:f4:55:cb: 9e:42:82:d4:38:d1:e0:30:36:15:47:31:69:98:82: cd:cf:ee:33:fd:64:d8:f6:79:f4:b4:fc:78:d9:39: 2c:0a:c2:90:8b:73:e5:4e:8e:f7:35:91:f8:66:4e: 58:7b:11:8a:60:4c:88:7e:28:43:ac:10:7e:7d:4f: 80:06:75:c5:7a:93:41:8c:53:d2:13:a1:38:8d:a8: 73:5d:6a:7a:16:4a:b8:95:23:cd:bf:d5:89:75:aa: 44:e3:31:ca:ab:3c:7a:d8:62:88:c0:9b:4d:45:6a: 28:16:44:a8:f2:94:4e:1e:18:21:19:05:ec:89:0e: d5:f5:ea:c1:de:8f:83:94:15:6e:68:e1:cb:24:78: 25:9b:b1:0f:fe:77:d2:cb:a5:04:58:85:1f:6f:34: 03:c9:68:c9:79:26:1b:3b:e6:16:3c:08:83:86:ef: b8:4c:33:8d:2b:62:fc:ae:75:4d:44:97:61:ab:11: 99:10:64:85:0f:55:5f:67:cf:c6:9a:f0:15:b5:70: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:00:21:D5:97:44:03:C8:AC:34:A5:E2:ED:52:53:C6:18:A9:29 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/AHoAIdWXRAPIrDSl4u1SU8YYqSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.148.0/24 Signature Algorithm: sha256WithRSAEncryption 65:bb:be:82:b9:21:cc:40:86:53:49:be:97:f2:af:69:44:97: 47:21:33:57:5c:3b:4f:f7:4f:44:a7:e8:d9:2d:01:6f:5c:d5: 17:65:17:c3:f1:a2:9e:7e:00:dd:17:23:be:c6:9f:ab:1f:34: 11:0b:69:6e:bc:c0:30:f8:ff:0c:23:3d:15:59:17:d3:0e:ab: 1a:88:b8:98:e3:ad:78:b5:41:1f:53:42:f9:45:54:70:c2:f0: 64:37:f9:ff:b2:c3:d8:19:e4:cd:e0:27:e0:1f:ad:b6:9f:53: b9:58:3c:4f:0f:01:46:26:7d:cf:d9:97:6c:af:e5:55:3d:71: 35:7a:03:b4:6b:38:90:9d:43:a9:9a:81:ef:17:e1:14:13:79: cc:cb:79:6e:52:14:e4:4d:c6:e3:61:58:29:e2:9e:f7:b1:22: 14:9d:c9:ff:6d:a1:f6:a0:99:1a:6a:02:c9:66:33:85:c9:ca: 9d:ab:ba:b1:13:c5:30:d2:1a:24:79:c1:f6:35:f7:20:37:b3: e7:37:14:4f:98:bf:b7:0e:a2:46:c2:eb:fc:3b:36:67:1e:ee: 9f:42:36:b8:48:2b:2c:93:b1:1e:e4:24:ce:9e:e2:1b:8f:49: db:05:06:c9:c8:2e:67:f4:bb:ef:6c:9d:25:69:93:1f:ad:30: 81:f2:40:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGN4T7iwZGZBX5XiEhuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDdhMDAyMWQ1OTc0NDAzYzhhYzM0YTVlMmVkNTI1M2M2MThhOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWvlyI+4ObGJWAvaHpUNpGoXLkyM DIszf17kXiV1sAjK0bRXfw17YWWdqTZMuRL9bs3OlvtGGI30VcueQoLUONHgMDYV RzFpmILNz+4z/WTY9nn0tPx42TksCsKQi3PlTo73NZH4Zk5YexGKYEyIfihDrBB+ fU+ABnXFepNBjFPSE6E4jahzXWp6Fkq4lSPNv9WJdapE4zHKqzx62GKIwJtNRWoo FkSo8pROHhghGQXsiQ7V9erB3o+DlBVuaOHLJHglm7EP/nfSy6UEWIUfbzQDyWjJ eSYbO+YWPAiDhu+4TDONK2L8rnVNRJdhqxGZEGSFD1VfZ8/GmvAVtXBVGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAB6ACHVl0QDyKw0peLtUlPGGKkpMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvQUhvQUlkV1hSQVBJckRTbDR1MVNVOFlZcVNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXiUMA0G CSqGSIb3DQEBCwUAA4IBAQBlu76CuSHMQIZTSb6X8q9pRJdHITNXXDtP909Ep+jZ LQFvXNUXZRfD8aKefgDdFyO+xp+rHzQRC2luvMAw+P8MIz0VWRfTDqsaiLiY4614 tUEfU0L5RVRwwvBkN/n/ssPYGeTN4CfgH622n1O5WDxPDwFGJn3P2Zdsr+VVPXE1 egO0aziQnUOpmoHvF+EUE3nMy3luUhTkTcbjYVgp4p73sSIUncn/baH2oJkaagLJ ZjOFycqdq7qxE8Uw0hokecH2NfcgN7PnNxRPmL+3DqJGwuv8OzZnHu6fQja4SCss k7Ee5CTOnuIbj0nbBQbJyC5n9LvvbJ0laZMfrTCB8kBG -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:19 2026 by rpki-client