This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/26PCuULcHS-vm3v3fQgA6-1DVmQ.roa File: 26PCuULcHS-vm3v3fQgA6-1DVmQ.roa (raw, json) Hash identifier: tTyj68LqKHap/YbHLtgQzuaQZ2ESKiv4xe4q4toZyQQ= Subject key identifier: DB:A3:C2:B9:42:DC:1D:2F:AF:9B:7B:F7:7D:08:00:EB:ED:43:56:64 Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788 Certificate serial: 019B7DC9C6901EFE555AF45690E7A5D0C49D Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/26PCuULcHS-vm3v3fQgA6-1DVmQ.roa Signing time: Fri 02 Jan 2026 08:18:54 +0000 ROA not before: Fri 02 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62302 IP address blocks: 185.137.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:c6:90:1e:fe:55:5a:f4:56:90:e7:a5:d0:c4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788 Validity Not Before: Jan 2 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dba3c2b942dc1d2faf9b7bf77d0800ebed435664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:8b:dc:1b:79:5d:f1:49:36:97:25:df:4f: a1:6c:7f:08:88:48:25:07:b5:1b:99:2f:ad:3b:61: a7:43:6a:66:bf:8e:67:95:2f:19:3f:62:78:37:bc: bc:ec:e0:b3:2f:b1:f5:b9:4b:69:d8:9c:a1:0b:a7: 0b:92:2b:4e:3d:3e:95:52:51:6d:5f:11:db:a2:8f: 97:e1:52:e6:47:72:06:4b:49:ac:2e:f6:5a:6f:fc: 9d:f3:ea:b0:55:da:0e:54:ec:df:ba:99:11:bd:c6: 6a:7f:02:30:37:9c:3e:1f:88:d1:66:79:34:a1:14: 62:48:03:3f:98:6b:b8:13:63:6a:3a:6b:01:f4:92: 38:ab:17:51:a1:29:14:4f:da:90:61:c5:2e:d1:a9: 81:fe:59:f3:68:97:85:aa:98:7c:23:dc:ef:a3:32: 1c:96:5a:93:90:e4:82:c0:2e:d5:03:9e:f2:3b:6c: 0e:35:0a:96:59:e1:0a:a7:30:bf:b0:d7:82:6b:28: 24:b7:6e:cc:5c:8d:f1:16:d3:ac:e4:ab:97:fe:b2: e6:9e:18:41:2e:1a:cc:06:8b:62:ca:61:87:72:df: 32:26:53:2d:c4:29:f5:43:29:7e:95:c6:9b:aa:8f: f1:5e:c2:b2:9e:c5:51:e0:7e:7d:e2:27:a1:95:7a: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A3:C2:B9:42:DC:1D:2F:AF:9B:7B:F7:7D:08:00:EB:ED:43:56:64 X509v3 Authority Key Identifier: keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/26PCuULcHS-vm3v3fQgA6-1DVmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.132.0/22 Signature Algorithm: sha256WithRSAEncryption 18:7b:bd:5d:0f:4a:2a:8f:7b:1d:66:e0:e7:7c:98:f5:8b:42: d5:16:6c:e8:54:ab:96:bc:47:7f:60:4c:9e:01:31:f2:ad:8d: f1:39:d1:47:44:5d:c7:bd:6c:e8:4d:27:ae:7a:a7:91:3e:8d: 48:96:72:97:5e:51:36:9d:73:19:1b:fe:70:0e:f6:3f:52:e6: 94:11:7b:24:4b:b8:10:6f:45:52:75:ab:92:f0:8d:d7:71:27: 39:e9:a3:ec:2e:9e:ac:6b:ab:c6:63:91:84:81:ff:79:29:67: 5f:9d:aa:d7:d3:0b:34:2f:0e:10:c8:b7:cb:1d:42:96:1c:57: 6c:e1:ca:1f:f2:32:6f:73:da:c2:4b:d7:d0:87:ab:7a:b2:fb: 0f:f7:25:2b:8c:46:ae:66:7f:c9:65:b7:c4:ce:da:3b:73:2e: 23:be:7b:0e:c4:55:a8:08:d8:49:60:40:82:6d:da:52:91:65: 7f:3d:ec:c3:29:c8:87:44:2d:5b:5a:09:c5:33:d4:ec:bb:d4: d6:31:22:c7:92:27:e9:01:4b:06:5d:96:46:f7:9c:b0:2e:75: ae:75:5d:79:2b:15:8e:5e:41:4a:91:d4:d3:05:a2:ff:8e:cf: c3:c9:b8:65:3f:31:c5:c1:ad:2b:c1:f2:bc:14:c8:4d:1b:22: 56:09:eb:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ycaQHv5VWvRWkOel0MSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWJmNTRkMDI4ZWU0NzY0ZjYyZjc4YWQ4NzFkYmYwMjYy Mjg3ODgwHhcNMjYwMTAyMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmEzYzJiOTQyZGMxZDJmYWY5YjdiZjc3ZDA4MDBlYmVkNDM1NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CiL3Bt5XfFJNpcl30+hbH8IiEgl B7UbmS+tO2GnQ2pmv45nlS8ZP2J4N7y87OCzL7H1uUtp2JyhC6cLkitOPT6VUlFt XxHboo+X4VLmR3IGS0msLvZab/yd8+qwVdoOVOzfupkRvcZqfwIwN5w+H4jRZnk0 oRRiSAM/mGu4E2NqOmsB9JI4qxdRoSkUT9qQYcUu0amB/lnzaJeFqph8I9zvozIc llqTkOSCwC7VA57yO2wONQqWWeEKpzC/sNeCaygkt27MXI3xFtOs5KuX/rLmnhhB LhrMBotiymGHct8yJlMtxCn1Qyl+lcabqo/xXsKynsVR4H594iehlXoN7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNujwrlC3B0vr5t7930IAOvtQ1ZkMB8GA1UdIwQY MBaAFKHr9U0CjuR2T2L3ithx2/AmIoeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQt NDdhNWJmNWIzMTNkLzEvMjZQQ3VVTGNIUy12bTN2M2ZRZ0E2LTFEVm1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQtNDdhNWJmNWIzMTNk LzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYmEMA0G CSqGSIb3DQEBCwUAA4IBAQAYe71dD0oqj3sdZuDnfJj1i0LVFmzoVKuWvEd/YEye ATHyrY3xOdFHRF3HvWzoTSeueqeRPo1IlnKXXlE2nXMZG/5wDvY/UuaUEXskS7gQ b0VSdauS8I3XcSc56aPsLp6sa6vGY5GEgf95KWdfnarX0ws0Lw4QyLfLHUKWHFds 4cof8jJvc9rCS9fQh6t6svsP9yUrjEauZn/JZbfEzto7cy4jvnsOxFWoCNhJYECC bdpSkWV/PezDKciHRC1bWgnFM9Tsu9TWMSLHkifpAUsGXZZG95ywLnWudV15KxWO XkFKkdTTBaL/js/DybhlPzHFwa0rwfK8FMhNGyJWCevQ -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:11 2026 by rpki-client