This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa File: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (raw, json) Hash identifier: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg= Subject key identifier: D8:11:3C:38:BF:14:53:2B:13:09:8D:99:65:2D:19:FA:1C:9F:DB:A5 Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6 Certificate serial: 019B7759222F808A5CEFE9F56AFAC0DE2A4A Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6750 IP address blocks: 185.130.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:22:2f:80:8a:5c:ef:e9:f5:6a:fa:c0:de:2a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8113c38bf14532b13098d99652d19fa1c9fdba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:be:b2:bc:83:cf:7b:22:2f:dd:3e:1d:ef: 63:d6:f6:3e:c5:e3:4c:ea:c4:13:b5:0b:b5:c2:7d: f6:ac:00:5b:34:af:78:81:b0:12:e0:23:0f:2e:5c: c2:70:d6:dc:3b:f7:5f:2b:28:6b:da:f2:cb:e7:4b: 0f:91:c1:57:bb:94:e6:9d:5a:47:fa:dc:d3:28:59: ee:28:95:2a:83:82:93:45:5d:02:8b:21:85:21:da: 0a:96:23:d5:c7:9b:6e:42:d8:1c:ab:4d:6a:93:b3: b1:8b:60:02:58:98:53:bc:b4:8b:aa:b1:59:9d:40: e7:80:3e:38:1f:f3:b8:66:f6:1f:6d:c3:3f:88:d3: c9:4a:82:e5:8d:23:8d:e5:e1:7f:8e:cc:03:b3:c0: 61:54:33:0f:6a:b0:64:d3:1c:8b:ab:33:87:16:2e: a6:d4:8c:9d:81:6a:10:b2:a7:88:dc:04:f6:e8:db: c0:bb:5c:ff:3c:50:dd:26:7b:31:ef:ae:6d:44:7a: 79:7e:45:9d:d9:07:a8:c8:10:d5:7f:b7:92:cc:6f: da:4a:12:90:07:12:69:73:cc:f6:ac:ad:67:a1:ea: bd:f5:f5:f9:13:22:e6:15:b8:83:78:78:68:df:a7: e0:42:02:e3:d0:6e:d5:df:f4:fd:11:4d:73:22:12: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:11:3C:38:BF:14:53:2B:13:09:8D:99:65:2D:19:FA:1C:9F:DB:A5 X509v3 Authority Key Identifier: keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.200.0/22 Signature Algorithm: sha256WithRSAEncryption a0:0a:7e:c3:32:3f:85:55:73:e6:ed:4c:6a:27:85:ce:a1:42: 76:bc:49:b3:80:d8:cc:8a:83:ba:b1:69:83:65:da:86:16:d3: f9:68:b4:a9:24:e2:b5:d7:dd:0c:ef:7c:46:e7:cf:23:08:e8: f5:5c:ed:5e:22:7c:27:29:f7:e0:fa:05:6d:48:f6:0c:2c:eb: 26:22:a5:09:e6:ad:b5:a8:52:26:e7:c1:7e:dd:39:ff:53:89: e7:3c:b4:de:76:cd:fa:13:39:e0:06:d0:ba:6d:09:32:0f:ba: ef:a6:0f:ec:52:e1:8c:eb:72:95:66:ce:79:a4:e6:41:bc:a7: ed:57:5e:ab:d1:1e:bf:de:a7:0c:cc:2c:0e:c9:7b:a1:8d:10: dd:e5:9f:9e:66:92:bd:7f:36:c7:61:30:14:23:70:22:ca:e6: 1a:ef:99:75:be:47:ca:8e:6f:39:30:77:85:24:24:8b:5e:4c: 15:5d:b9:ab:c3:ec:ba:bd:d8:dd:8b:83:50:33:15:9b:9f:12: fb:82:a9:ce:5b:90:26:bc:ad:99:54:d7:8f:78:fe:5a:d0:b8: d7:b7:05:7c:76:e2:c7:51:40:24:0a:0f:be:65:d3:b5:ea:27: 6e:87:c0:59:3e:c0:64:79:ba:d5:7e:e9:c9:fb:c7:44:a1:e7: 9d:9e:3e:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSIvgIpc7+n1avrA3ipKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMWYzZGMyMjk1MzA2Y2M3ZGY4NzJjZWVjY2Q2ODk0ZDBl MGVhZTYwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODExM2MzOGJmMTQ1MzJiMTMwOThkOTk2NTJkMTlmYTFjOWZkYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAS+sryDz3siL90+He9j1vY+xeNM 6sQTtQu1wn32rABbNK94gbAS4CMPLlzCcNbcO/dfKyhr2vLL50sPkcFXu5TmnVpH +tzTKFnuKJUqg4KTRV0CiyGFIdoKliPVx5tuQtgcq01qk7Oxi2ACWJhTvLSLqrFZ nUDngD44H/O4ZvYfbcM/iNPJSoLljSON5eF/jswDs8BhVDMParBk0xyLqzOHFi6m 1IydgWoQsqeI3AT26NvAu1z/PFDdJnsx765tRHp5fkWd2QeoyBDVf7eSzG/aShKQ BxJpc8z2rK1noeq99fX5EyLmFbiDeHho36fgQgLj0G7V3/T9EU1zIhIJHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNgRPDi/FFMrEwmNmWUtGfocn9ulMB8GA1UdIwQY MBaAFL4fPcIpUwbMffhyzuzNaJTQ4OrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEt YjUxYWRmZmM2ZWVjLzEvMkJFOE9MOFVVeXNUQ1kyWlpTMFotaHlmMjZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEtYjUxYWRmZmM2ZWVj LzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYLIMA0G CSqGSIb3DQEBCwUAA4IBAQCgCn7DMj+FVXPm7UxqJ4XOoUJ2vEmzgNjMioO6sWmD ZdqGFtP5aLSpJOK1190M73xG588jCOj1XO1eInwnKffg+gVtSPYMLOsmIqUJ5q21 qFIm58F+3Tn/U4nnPLTeds36EzngBtC6bQkyD7rvpg/sUuGM63KVZs55pOZBvKft V16r0R6/3qcMzCwOyXuhjRDd5Z+eZpK9fzbHYTAUI3AiyuYa75l1vkfKjm85MHeF JCSLXkwVXbmrw+y6vdjdi4NQMxWbnxL7gqnOW5AmvK2ZVNePeP5a0LjXtwV8duLH UUAkCg++ZdO16iduh8BZPsBkebrVfunJ+8dEoeednj7i -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:01 2026 by rpki-client