This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/anOK_t3CyTqq8NlqFB7A075gooA.roa File: anOK_t3CyTqq8NlqFB7A075gooA.roa (raw, json) Hash identifier: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg= Subject key identifier: 6A:73:8A:FE:DD:C2:C9:3A:AA:F0:D9:6A:14:1E:C0:D3:BE:60:A2:80 Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Certificate serial: 019B7B3665B567A94CEFF48600BF559BBE97 Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/anOK_t3CyTqq8NlqFB7A075gooA.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205086 IP address blocks: 185.231.20.0/22 maxlen: 22 185.231.20.0/24 maxlen: 24 185.231.21.0/24 maxlen: 24 185.231.22.0/24 maxlen: 24 185.231.23.0/24 maxlen: 24 2a0a:9580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:65:b5:67:a9:4c:ef:f4:86:00:bf:55:9b:be:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a738afeddc2c93aaaf0d96a141ec0d3be60a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:e0:35:38:e1:e2:cd:af:32:ea:65:4e:fe: d7:92:f0:5b:f8:c0:cd:5c:33:59:56:54:5e:21:ca: b3:cd:82:10:a3:fd:7b:74:01:51:b9:d6:86:2f:eb: 0b:46:cf:85:29:e1:8c:fb:75:00:49:6d:83:1e:2c: 79:46:27:f5:ae:50:d3:4b:54:10:e0:f5:0a:ca:17: c8:3e:f8:95:5f:b0:29:03:ef:e5:92:82:19:e3:26: 59:7b:ae:8c:5b:52:e8:4c:94:ea:42:b6:f4:de:ce: cf:92:31:42:79:fe:b0:ef:2a:d0:1f:84:a4:f8:1a: 69:70:3b:c5:69:dc:fa:fb:73:cf:e4:41:40:0d:ac: 58:0b:12:30:2c:17:5e:ff:d0:80:5a:6b:59:4f:44: 35:37:12:e1:cd:25:cb:07:22:33:1c:14:e8:9e:10: a4:ea:3f:fd:2b:61:e5:bb:86:c7:0f:b2:bc:af:2e: 12:46:66:f5:63:50:2b:80:74:84:b6:12:34:62:36: 98:63:1a:bc:ee:32:15:76:74:cd:54:48:59:82:3f: ef:ea:52:91:99:3a:b5:f8:e1:1c:55:2c:21:24:9c: f2:b8:a2:9c:3b:fb:37:16:db:1f:56:64:23:6c:72: 58:35:db:11:04:04:02:34:d7:bd:32:bf:a8:be:a4: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:73:8A:FE:DD:C2:C9:3A:AA:F0:D9:6A:14:1E:C0:D3:BE:60:A2:80 X509v3 Authority Key Identifier: keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/anOK_t3CyTqq8NlqFB7A075gooA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.20.0/22 IPv6: 2a0a:9580::/29 Signature Algorithm: sha256WithRSAEncryption aa:e7:cd:7d:be:15:22:7f:bb:8a:90:d3:b1:70:49:6e:4c:99: 0e:6d:5d:47:99:50:45:5b:48:d8:17:82:4a:12:8b:b9:33:96: 5c:c1:c4:ff:a8:8a:2d:70:de:68:1c:2c:31:09:49:8c:93:12: 66:90:75:cf:1e:05:8d:3e:0f:46:80:4e:f1:ca:91:55:54:ed: 88:31:62:1c:24:42:be:77:9a:8c:5f:c9:01:a3:8e:8b:cc:02: 2b:fb:86:84:9a:ea:f5:0d:33:92:0d:92:c0:bb:f3:26:94:a6: 88:5b:f3:88:29:fd:c2:2d:af:83:b0:f5:d6:66:4e:c0:1a:d9: ae:69:c9:ea:34:16:0e:87:6a:a9:fa:fd:af:52:bf:6b:d0:dd: f9:a0:0f:27:b2:1c:08:20:c1:cc:b1:24:80:3f:31:8b:92:cd: b8:70:44:ae:5e:af:c2:c1:74:3c:b9:d9:31:93:79:e7:c6:0c: 31:02:0e:29:da:9f:9d:aa:8e:51:b3:1d:a5:d5:e5:44:48:34: d3:50:45:7e:0a:e2:0a:a8:6a:2a:83:0a:81:af:e6:77:50:cd: 3a:91:92:f1:66:10:50:32:01:25:91:2c:e5:c2:06:2c:e0:c9: 25:fd:01:0f:ae:42:5d:82:fc:7e:02:a1:37:a3:94:8b:3a:5f: 5e:a4:13:cb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NmW1Z6lM7/SGAL9Vm76XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MTRiZGMyMzEyNDAwZGZhOWY1MDY1MGQ1MWVlMDQ0 M2RmMTYwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTczOGFmZWRkYzJjOTNhYWFmMGQ5NmExNDFlYzBkM2JlNjBhMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrbgNTjh4s2vMuplTv7XkvBb+MDN XDNZVlReIcqzzYIQo/17dAFRudaGL+sLRs+FKeGM+3UASW2DHix5Rif1rlDTS1QQ 4PUKyhfIPviVX7ApA+/lkoIZ4yZZe66MW1LoTJTqQrb03s7PkjFCef6w7yrQH4Sk +BppcDvFadz6+3PP5EFADaxYCxIwLBde/9CAWmtZT0Q1NxLhzSXLByIzHBTonhCk 6j/9K2Hlu4bHD7K8ry4SRmb1Y1ArgHSEthI0YjaYYxq87jIVdnTNVEhZgj/v6lKR mTq1+OEcVSwhJJzyuKKcO/s3FtsfVmQjbHJYNdsRBAQCNNe9Mr+ovqSncwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGpziv7dwsk6qvDZahQewNO+YKKAMB8GA1UdIwQY MBaAFH4TQUvcIxJADfqfUGUNUe4EQ98WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQt MDRmY2VjYWQ3MGVjLzEvYW5PS190M0N5VHFxOE5scUZCN0EwNzVnb29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQtMDRmY2VjYWQ3MGVj LzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuecUMA0E AgACMAcDBQMqCpWAMA0GCSqGSIb3DQEBCwUAA4IBAQCq5819vhUif7uKkNOxcElu TJkObV1HmVBFW0jYF4JKEou5M5ZcwcT/qIotcN5oHCwxCUmMkxJmkHXPHgWNPg9G gE7xypFVVO2IMWIcJEK+d5qMX8kBo46LzAIr+4aEmur1DTOSDZLAu/MmlKaIW/OI Kf3CLa+DsPXWZk7AGtmuacnqNBYOh2qp+v2vUr9r0N35oA8nshwIIMHMsSSAPzGL ks24cESuXq/CwXQ8udkxk3nnxgwxAg4p2p+dqo5Rsx2l1eVESDTTUEV+CuIKqGoq gwqBr+Z3UM06kZLxZhBQMgElkSzlwgYs4Mkl/QEPrkJdgvx+AqE3o5SLOl9epBPL -----END CERTIFICATE-----Generated at Mon Jan 12 16:18:10 2026 by rpki-client