This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa File: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (raw, json) Hash identifier: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0= Subject key identifier: BB:60:29:4C:3B:96:9F:81:CE:62:F6:D6:9F:5C:5A:FD:C9:E2:F9:D4 Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4 Certificate serial: 019B7B35CAA0037DCD94E0F58CEFAA5917CC Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208428 IP address blocks: 185.26.25.0/24 maxlen: 24 2a02:f404::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ca:a0:03:7d:cd:94:e0:f5:8c:ef:aa:59:17:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb60294c3b969f81ce62f6d69f5c5afdc9e2f9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:f6:fd:5d:b9:57:c1:4f:90:76:e8:91:15: 76:39:5c:ce:bb:b1:87:af:02:97:cd:03:13:ef:5b: 26:f5:af:ac:8d:ad:b5:27:ea:3b:65:0d:cf:4b:ac: 9d:a0:3c:68:a4:b8:40:27:83:4c:7f:68:c6:36:62: 78:dc:32:c5:4f:02:fa:83:db:41:44:e7:1c:9e:41: a8:72:9a:0a:f1:2c:30:e4:c0:3d:1b:35:70:29:af: 9a:bc:98:2a:2b:fd:ff:ba:e3:98:d4:a9:ed:e6:90: 18:fd:22:77:a1:43:dd:8b:90:66:c6:55:14:c6:19: 05:ef:e5:a6:4b:4c:ec:f6:79:72:3a:e6:b2:6e:62: 95:a7:88:e9:6d:6a:a8:b0:9e:ed:65:5d:b8:1e:1c: b4:d7:eb:ac:4a:f3:1f:e9:6c:c7:5e:81:e7:45:5a: af:41:c7:83:f6:9c:c0:0a:17:a9:9d:10:74:a5:eb: f2:49:69:a6:44:aa:a0:db:ef:75:a4:2a:8d:eb:d5: f0:9f:db:c3:08:96:fc:d0:10:84:b7:d4:40:98:4c: a2:88:74:f6:9a:e9:df:3a:24:d7:38:b3:55:c0:ee: e2:2a:be:d4:28:f8:6f:f6:b9:41:4b:d4:00:d9:15: a8:ec:01:65:6e:51:d1:27:83:03:a4:69:fa:e3:73: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:60:29:4C:3B:96:9F:81:CE:62:F6:D6:9F:5C:5A:FD:C9:E2:F9:D4 X509v3 Authority Key Identifier: keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.25.0/24 IPv6: 2a02:f404::/32 Signature Algorithm: sha256WithRSAEncryption b5:1d:79:8b:04:12:34:3e:23:6c:29:6b:54:5f:0b:47:62:94: a9:bf:d4:ff:c5:f0:d4:4d:4d:04:58:10:e2:f4:20:bc:33:24: 87:90:cc:41:55:4c:29:ce:5c:17:06:fb:78:c4:94:e1:83:bc: b3:92:e9:7a:80:4d:d0:7b:cf:8b:71:23:c0:ee:62:fb:cb:b1: a5:84:ef:91:0b:68:63:5b:5a:27:55:7b:9d:19:d7:e7:5a:45: e2:8c:01:ac:b9:ee:e1:cb:4b:c1:46:d4:79:11:2c:81:88:f9: c5:24:ea:26:5f:30:fc:6e:6c:1f:11:6b:2e:ed:a2:1c:ac:c0: 29:e4:53:1f:c5:d8:59:f3:9a:b7:5e:d4:c2:0c:e2:2f:0b:39: a0:80:53:35:c4:74:d0:a6:7b:f1:3d:4b:8b:cb:5a:d6:8e:a3: d7:93:ef:40:30:d6:e3:dc:7b:1d:23:89:3d:2a:72:27:2e:a2: 53:b5:4d:70:f6:e9:ae:0f:3f:d2:f6:44:a7:06:24:d6:ee:f7: 48:f2:3f:74:d4:d0:25:6b:a4:5f:8c:93:ae:76:b5:7d:61:4c: af:65:67:f0:75:39:71:1a:a4:87:e6:36:66:19:e6:c7:a4:9a: 53:23:81:7d:40:d1:1c:eb:d9:96:43:0f:5f:69:d2:b4:fa:75: 2a:ae:fd:2d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NcqgA33NlOD1jO+qWRfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk NGJjYTQwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjYwMjk0YzNiOTY5ZjgxY2U2MmY2ZDY5ZjVjNWFmZGM5ZTJmOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCT2/V25V8FPkHbokRV2OVzOu7GH rwKXzQMT71sm9a+sja21J+o7ZQ3PS6ydoDxopLhAJ4NMf2jGNmJ43DLFTwL6g9tB ROccnkGocpoK8Sww5MA9GzVwKa+avJgqK/3/uuOY1Knt5pAY/SJ3oUPdi5BmxlUU xhkF7+WmS0zs9nlyOuaybmKVp4jpbWqosJ7tZV24Hhy01+usSvMf6WzHXoHnRVqv QceD9pzAChepnRB0pevySWmmRKqg2+91pCqN69Xwn9vDCJb80BCEt9RAmEyiiHT2 munfOiTXOLNVwO7iKr7UKPhv9rlBS9QA2RWo7AFlblHRJ4MDpGn643MHuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLtgKUw7lp+BzmL21p9cWv3J4vnUMB8GA1UdIwQY MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt MGEwZjNlNzhhNDkzLzEvdTJBcFREdVduNEhPWXZiV24xeGFfY25pLWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRoZMA0E AgACMAcDBQAqAvQEMA0GCSqGSIb3DQEBCwUAA4IBAQC1HXmLBBI0PiNsKWtUXwtH YpSpv9T/xfDUTU0EWBDi9CC8MySHkMxBVUwpzlwXBvt4xJThg7yzkul6gE3Qe8+L cSPA7mL7y7GlhO+RC2hjW1onVXudGdfnWkXijAGsue7hy0vBRtR5ESyBiPnFJOom XzD8bmwfEWsu7aIcrMAp5FMfxdhZ85q3XtTCDOIvCzmggFM1xHTQpnvxPUuLy1rW jqPXk+9AMNbj3HsdI4k9KnInLqJTtU1w9umuDz/S9kSnBiTW7vdI8j901NAla6Rf jJOudrV9YUyvZWfwdTlxGqSH5jZmGebHpJpTI4F9QNEc69mWQw9fadK0+nUqrv0t -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:07 2026 by rpki-client