This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/9m20uAAFdgNoVQH3076gaYQmYYU.roa File: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (raw, json) Hash identifier: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc= Subject key identifier: F6:6D:B4:B8:00:05:76:03:68:55:01:F7:D3:BE:A0:69:84:26:61:85 Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019B7E37917561788B644DCAE6C49547DD10 Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/9m20uAAFdgNoVQH3076gaYQmYYU.roa Signing time: Fri 02 Jan 2026 10:18:49 +0000 ROA not before: Fri 02 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20517 IP address blocks: 185.20.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:91:75:61:78:8b:64:4d:ca:e6:c4:95:47:dd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Jan 2 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f66db4b800057603685501f7d3bea06984266185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:36:f8:eb:34:14:40:a1:29:17:fc:fb:51: c6:1a:75:f8:22:10:07:b8:14:e1:5d:6f:07:f3:a4: e8:cc:5d:80:b6:c8:fc:1a:92:3a:62:e2:f6:11:29: 95:f7:4a:ac:09:18:0b:93:80:66:f3:45:3a:90:e1: b2:49:b0:6b:5a:d1:22:93:92:b7:49:d7:78:e8:a0: 93:10:0d:28:e2:00:ec:92:c2:cf:27:dc:8a:56:96: 47:fb:21:fb:5f:4c:66:cb:bd:ed:70:ed:72:16:dc: 2b:69:60:ed:0d:d3:a8:e3:f8:f9:63:ff:b8:c3:ae: ae:19:d2:8c:1b:bd:ed:51:a3:9a:3e:1e:bd:01:9d: 0e:a3:17:9f:19:c2:80:99:62:92:1a:81:ac:ea:64: a2:d4:83:37:ea:7b:43:85:d8:52:79:ad:1d:72:e1: bf:b6:33:2b:1c:44:c5:b7:43:5c:86:b1:82:5b:ff: 5e:b9:19:d9:0a:05:dc:a0:e0:59:13:d8:1e:d4:8c: cb:d2:bd:dd:a9:db:6f:f9:27:0e:d0:85:f9:41:f9: bb:ad:24:cb:b8:45:c8:15:11:68:77:27:ba:68:2d: 97:76:da:74:92:28:24:30:15:06:59:d0:19:21:a8: 5a:67:d9:dc:6c:dd:0a:fa:07:ee:8d:a8:b3:9f:77: 24:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6D:B4:B8:00:05:76:03:68:55:01:F7:D3:BE:A0:69:84:26:61:85 X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/9m20uAAFdgNoVQH3076gaYQmYYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.254.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:fe:b0:10:40:c2:48:fc:0b:cb:66:ac:c1:02:93:66:19:75: 6a:d7:75:ed:c1:3a:d2:79:e8:76:10:b6:e7:2c:9a:b1:af:0d: 54:97:f4:ca:97:a7:2f:7b:4f:d4:81:d8:66:8d:89:4c:6c:da: 03:2d:3d:8d:ca:09:02:b5:41:57:a2:d1:06:3a:08:3b:13:34: 7d:72:64:11:1e:cc:00:0f:ca:40:b5:58:38:ec:48:f8:69:39: 94:07:ec:b7:31:16:b5:a5:a2:20:4d:9f:c6:7d:a4:32:27:ea: 8d:fc:0e:22:c7:d2:97:1c:3a:8d:48:c9:fa:b8:0f:22:5c:d9: 03:6a:aa:d6:01:8a:52:7d:15:a8:7f:1e:58:01:6a:46:15:dc: d1:a6:63:25:f4:16:8a:0e:33:d9:76:64:9a:e7:10:ec:53:f9: a1:be:78:23:98:ec:23:b4:3b:57:ae:95:b8:da:aa:13:25:2f: 09:a7:26:2d:3e:3e:eb:86:57:bf:15:e8:58:e6:93:bf:49:81: 4d:90:1d:ae:3d:22:87:7e:83:9c:d1:44:71:ec:5e:a0:01:9f: 76:12:fc:8f:9b:5b:66:fd:28:4c:80:da:b9:e7:36:00:61:71: 54:de:82:e5:e3:b2:6a:81:1a:cf:d9:e1:95:31:34:d8:95:4d: 9f:d9:d2:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5F1YXiLZE3K5sSVR90QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjZkYjRiODAwMDU3NjAzNjg1NTAxZjdkM2JlYTA2OTg0MjY2MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2I2+Os0FEChKRf8+1HGGnX4IhAH uBThXW8H86TozF2Atsj8GpI6YuL2ESmV90qsCRgLk4Bm80U6kOGySbBrWtEik5K3 Sdd46KCTEA0o4gDsksLPJ9yKVpZH+yH7X0xmy73tcO1yFtwraWDtDdOo4/j5Y/+4 w66uGdKMG73tUaOaPh69AZ0OoxefGcKAmWKSGoGs6mSi1IM36ntDhdhSea0dcuG/ tjMrHETFt0NchrGCW/9euRnZCgXcoOBZE9ge1IzL0r3dqdtv+ScO0IX5Qfm7rSTL uEXIFRFodye6aC2Xdtp0kigkMBUGWdAZIahaZ9ncbN0K+gfujaizn3ckmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZttLgABXYDaFUB99O+oGmEJmGFMB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvOW0yMHVBQUZkZ05vVlFIMzA3NmdhWVFtWVlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRT+MA0G CSqGSIb3DQEBCwUAA4IBAQBM/rAQQMJI/AvLZqzBApNmGXVq13XtwTrSeeh2ELbn LJqxrw1Ul/TKl6cve0/UgdhmjYlMbNoDLT2NygkCtUFXotEGOgg7EzR9cmQRHswA D8pAtVg47Ej4aTmUB+y3MRa1paIgTZ/GfaQyJ+qN/A4ix9KXHDqNSMn6uA8iXNkD aqrWAYpSfRWofx5YAWpGFdzRpmMl9BaKDjPZdmSa5xDsU/mhvngjmOwjtDtXrpW4 2qoTJS8JpyYtPj7rhle/FehY5pO/SYFNkB2uPSKHfoOc0URx7F6gAZ92EvyPm1tm /ShMgNq55zYAYXFU3oLl47JqgRrP2eGVMTTYlU2f2dIw -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:01 2026 by rpki-client