This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/gw26QBwPzQF9bT3yyu20z1tgJyk.roa File: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (raw, json) Hash identifier: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao= Subject key identifier: 83:0D:BA:40:1C:0F:CD:01:7D:6D:3D:F2:CA:ED:B4:CF:5B:60:27:29 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019B7A5B331B45577F5666EC1330AB48B246 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/gw26QBwPzQF9bT3yyu20z1tgJyk.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47232 IP address blocks: 185.151.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:33:1b:45:57:7f:56:66:ec:13:30:ab:48:b2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=830dba401c0fcd017d6d3df2caedb4cf5b602729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ea:20:72:4c:af:74:0e:68:2b:63:8d:98:6e: 7b:2f:43:96:c3:fc:6f:30:af:8b:25:3f:9a:11:94: fb:57:15:a1:b4:82:92:6d:1c:75:84:89:80:43:45: 14:4c:70:8f:5c:f6:fd:62:f3:59:a8:bc:fa:a4:48: e1:aa:15:0c:76:c8:f9:35:1f:5e:83:db:4b:72:ab: c1:34:b5:24:fc:bd:10:9d:9b:cb:fb:c5:96:cc:7b: 4a:23:25:e0:ea:62:23:cc:98:d4:76:79:c3:2f:94: 88:c5:83:a0:d0:d0:0f:4a:6f:96:df:c7:5c:41:70: a4:44:a0:90:b2:8d:56:ea:ca:5f:1f:bb:bf:b9:f3: 8d:ac:d9:79:b2:db:4e:77:cf:9b:5e:6a:bd:9e:15: 94:e0:62:7f:ad:15:8a:7a:76:f4:44:21:a9:a7:fc: f2:36:84:3d:6d:07:39:c6:c8:81:91:0f:a1:07:79: 20:7b:26:54:2a:71:3a:1e:0f:3e:13:4a:e6:47:7b: f8:7b:0d:4e:84:94:01:3b:b6:a4:12:02:99:c1:aa: e6:c1:fe:2a:5c:7f:24:46:85:5c:a5:1d:07:ea:60: e2:e8:50:9f:b1:8a:88:e5:c6:f7:65:36:c2:11:41: 54:e1:36:fe:e1:c5:6c:22:81:2a:46:c7:b1:88:30: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0D:BA:40:1C:0F:CD:01:7D:6D:3D:F2:CA:ED:B4:CF:5B:60:27:29 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/gw26QBwPzQF9bT3yyu20z1tgJyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.171.0/24 Signature Algorithm: sha256WithRSAEncryption 22:1d:ec:8f:e8:ee:51:d8:9b:14:b4:a0:b0:3a:30:c6:a5:12: 38:81:d5:f4:65:ac:5a:c7:d0:ab:de:9e:c4:d3:c9:66:8a:4d: 39:77:3e:9e:c8:06:aa:85:b3:01:8d:ce:b9:14:5e:50:ec:bc: ad:4a:43:c2:d8:6c:1e:fb:a3:0a:b7:95:48:70:40:68:93:0a: da:d8:c7:7c:86:21:b5:4c:4b:a1:ef:0c:93:29:6e:18:de:25: 2a:fb:a5:22:ac:d2:5b:1a:03:5f:78:bc:6f:20:cb:f9:a4:71: a5:dd:9a:4b:1f:b5:47:f8:1d:88:7b:4f:37:89:30:fa:33:8a: b4:61:4d:2d:e9:09:5f:16:88:eb:a8:04:01:0b:e3:81:b7:1c: 0b:a9:28:fe:ec:64:38:36:f6:74:16:34:1a:95:cb:bb:a5:5b: 59:f5:b2:bd:e3:1c:af:70:31:a7:e5:cb:95:28:f6:f3:e9:89: b7:e9:fe:0b:bf:39:6a:70:5e:de:25:9a:06:5d:e2:13:d5:fc: 71:43:8c:3f:5f:9f:c6:d9:0c:04:8a:50:a2:c0:f6:65:97:b6: 33:60:d2:dc:bf:30:06:73:9c:5e:4f:93:4c:a3:29:ea:6a:25: 41:07:9c:bd:5d:2d:5e:51:f4:e7:0b:a2:ca:c1:62:be:a6:a5: 5f:92:c7:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzMbRVd/VmbsEzCrSLJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzBkYmE0MDFjMGZjZDAxN2Q2ZDNkZjJjYWVkYjRjZjViNjAyNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uogckyvdA5oK2ONmG57L0OWw/xv MK+LJT+aEZT7VxWhtIKSbRx1hImAQ0UUTHCPXPb9YvNZqLz6pEjhqhUMdsj5NR9e g9tLcqvBNLUk/L0QnZvL+8WWzHtKIyXg6mIjzJjUdnnDL5SIxYOg0NAPSm+W38dc QXCkRKCQso1W6spfH7u/ufONrNl5sttOd8+bXmq9nhWU4GJ/rRWKenb0RCGpp/zy NoQ9bQc5xsiBkQ+hB3kgeyZUKnE6Hg8+E0rmR3v4ew1OhJQBO7akEgKZwarmwf4q XH8kRoVcpR0H6mDi6FCfsYqI5cb3ZTbCEUFU4Tb+4cVsIoEqRsexiDC+GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMNukAcD80BfW098srttM9bYCcpMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvZ3cyNlFCd1B6UUY5YlQzeXl1MjB6MXRnSnlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZerMA0G CSqGSIb3DQEBCwUAA4IBAQAiHeyP6O5R2JsUtKCwOjDGpRI4gdX0Zaxax9Cr3p7E 08lmik05dz6eyAaqhbMBjc65FF5Q7LytSkPC2Gwe+6MKt5VIcEBokwra2Md8hiG1 TEuh7wyTKW4Y3iUq+6UirNJbGgNfeLxvIMv5pHGl3ZpLH7VH+B2Ie083iTD6M4q0 YU0t6QlfFojrqAQBC+OBtxwLqSj+7GQ4NvZ0FjQalcu7pVtZ9bK94xyvcDGn5cuV KPbz6Ym36f4LvzlqcF7eJZoGXeIT1fxxQ4w/X5/G2QwEilCiwPZll7YzYNLcvzAG c5xeT5NMoynqaiVBB5y9XS1eUfTnC6LKwWK+pqVfksdC -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:10 2026 by rpki-client