This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa File: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (raw, json) Hash identifier: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ= Subject key identifier: BF:FA:ED:40:A9:F1:45:17:03:26:33:B6:0D:B1:E1:8C:AE:29:1B:02 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019B7D5C6E7A50958CEA0C75D5FBEE9BA1FB Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa Signing time: Fri 02 Jan 2026 06:19:28 +0000 ROA not before: Fri 02 Jan 2026 06:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214271 IP address blocks: 185.121.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6e:7a:50:95:8c:ea:0c:75:d5:fb:ee:9b:a1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Jan 2 06:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bffaed40a9f14517032633b60db1e18cae291b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:1a:0a:24:2c:06:ea:44:f1:23:ee:17:14: 4d:48:15:8d:12:3b:0a:75:a5:b1:a5:1e:95:bb:d6: c2:aa:27:01:5d:f6:0e:9c:1f:8a:c5:ef:69:9b:99: b4:3e:3a:5c:b1:d4:65:24:be:d9:9d:73:b4:54:e9: 96:50:d3:8a:94:5c:49:7e:34:4e:a7:c8:bc:0d:5c: fc:2d:21:0a:c4:77:30:89:e6:c0:27:22:33:0e:c1: 32:ef:ec:ea:48:e5:fd:80:01:e5:8b:33:7c:b1:65: 7c:a8:f3:32:00:7e:af:1e:9d:b7:76:16:95:97:55: 41:3b:3a:d5:c4:aa:8e:da:6b:59:19:55:80:10:5b: 4f:e5:a4:77:74:d2:81:8b:85:c0:42:3c:f1:c3:42: 3a:2c:c4:bd:20:02:70:6d:a1:3d:f5:77:d8:e7:b7: 0d:7d:15:aa:0a:e3:e1:fd:8b:53:2d:f8:d0:0c:8e: 48:32:d6:9d:43:fe:a9:8b:62:f1:9a:f9:a1:70:e8: 65:16:a8:fe:16:1d:01:9f:81:02:1e:a7:86:43:9e: a9:04:61:de:18:33:19:5e:e6:80:2d:70:b9:5d:c0: 93:ed:c6:92:c5:52:a6:23:4b:6b:77:82:29:d4:cc: 52:ee:53:2a:79:18:53:2b:65:cf:f7:45:94:10:97: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:ED:40:A9:F1:45:17:03:26:33:B6:0D:B1:E1:8C:AE:29:1B:02 X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.226.0/24 Signature Algorithm: sha256WithRSAEncryption c2:28:d5:17:6b:5f:05:bb:c3:2f:76:39:0c:33:7d:db:8d:6c: 5d:b5:34:c8:ef:f1:ce:4e:d3:41:b4:38:ec:0b:3d:1e:c5:19: b1:fa:c5:74:e9:42:7d:c8:27:19:3e:37:1d:cc:60:49:6a:50: e7:65:8d:01:90:69:37:5a:6f:f6:39:44:ad:c6:02:0e:85:fd: fa:a3:36:11:05:05:ec:b2:ec:f4:ad:93:e4:5e:59:5e:df:59: 0c:49:cc:80:9c:c8:b9:c9:9a:06:8f:ca:1c:45:88:54:2e:d5: 07:57:4d:18:7a:cc:81:a2:83:77:e0:70:a8:13:b3:0f:05:5f: db:31:84:29:a7:d7:4d:0d:99:26:4a:0d:7a:23:7b:00:3c:15: f1:c3:dd:93:3f:8b:d3:c4:3b:2c:c7:86:c2:c9:d8:cb:ae:08: b2:15:4a:21:ef:c0:4e:7e:94:8d:76:94:89:90:4b:04:a4:20: 4e:56:70:0a:9f:63:b9:55:2e:d4:bc:af:9a:b5:ba:1c:64:15: 97:c6:c5:18:94:6a:75:65:76:d7:1d:f1:b2:05:a7:90:36:74: 6b:6c:0c:d4:f1:18:8d:11:1b:be:07:57:d1:60:4a:66:f4:a9: 27:f2:1a:53:c8:b8:8d:58:b8:12:df:0a:54:7f:fd:aa:ec:e2: ed:bc:ed:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XG56UJWM6gx11fvum6H7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjYwMTAyMDYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmZhZWQ0MGE5ZjE0NTE3MDMyNjMzYjYwZGIxZTE4Y2FlMjkxYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWgaCiQsBupE8SPuFxRNSBWNEjsK daWxpR6Vu9bCqicBXfYOnB+Kxe9pm5m0PjpcsdRlJL7ZnXO0VOmWUNOKlFxJfjRO p8i8DVz8LSEKxHcwiebAJyIzDsEy7+zqSOX9gAHlizN8sWV8qPMyAH6vHp23dhaV l1VBOzrVxKqO2mtZGVWAEFtP5aR3dNKBi4XAQjzxw0I6LMS9IAJwbaE99XfY57cN fRWqCuPh/YtTLfjQDI5IMtadQ/6pi2LxmvmhcOhlFqj+Fh0Bn4ECHqeGQ56pBGHe GDMZXuaALXC5XcCT7caSxVKmI0trd4Ip1MxS7lMqeRhTK2XP90WUEJeaOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/67UCp8UUXAyYztg2x4YyuKRsCMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvdl9ydFFLbnhSUmNESmpPMkRiSGhqSzRwR3dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXniMA0G CSqGSIb3DQEBCwUAA4IBAQDCKNUXa18Fu8MvdjkMM33bjWxdtTTI7/HOTtNBtDjs Cz0exRmx+sV06UJ9yCcZPjcdzGBJalDnZY0BkGk3Wm/2OUStxgIOhf36ozYRBQXs suz0rZPkXlle31kMScyAnMi5yZoGj8ocRYhULtUHV00YesyBooN34HCoE7MPBV/b MYQpp9dNDZkmSg16I3sAPBXxw92TP4vTxDssx4bCydjLrgiyFUoh78BOfpSNdpSJ kEsEpCBOVnAKn2O5VS7UvK+atbocZBWXxsUYlGp1ZXbXHfGyBaeQNnRrbAzU8RiN ERu+B1fRYEpm9Kkn8hpTyLiNWLgS3wpUf/2q7OLtvO01 -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:51 2026 by rpki-client