This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/26IGIkKKzrFcY_mAcu5qAWXSYNM.roa File: 26IGIkKKzrFcY_mAcu5qAWXSYNM.roa (raw, json) Hash identifier: AipHDf8GM8mnMeuhSsY7F7gLpKfZW2aW0smCsw7aDgA= Subject key identifier: DB:A2:06:22:42:8A:CE:B1:5C:63:F9:80:72:EE:6A:01:65:D2:60:D3 Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019ABFE65B9FE8B4EE477EF2BB8C257727E3 Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/26IGIkKKzrFcY_mAcu5qAWXSYNM.roa Signing time: Wed 26 Nov 2025 11:22:16 +0000 ROA not before: Wed 26 Nov 2025 11:22:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199998 IP address blocks: 185.39.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:e6:5b:9f:e8:b4:ee:47:7e:f2:bb:8c:25:77:27:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Nov 26 11:22:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dba20622428aceb15c63f98072ee6a0165d260d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:85:f4:98:fe:d7:b1:4a:ac:f3:06:15:fa: 1b:ad:bd:ff:a2:e1:ca:1a:a4:35:67:2f:83:80:00: 8d:e9:75:65:82:ba:d2:fa:c3:92:90:cb:d0:c7:c5: 9c:95:7e:5a:9e:79:c7:90:38:0d:62:21:ae:54:d1: 5a:9d:ae:13:54:ed:97:1a:7a:73:3a:87:25:aa:18: ff:7f:27:b7:cf:8b:70:0b:f4:f2:69:62:f3:6e:d0: 9b:3f:81:06:e1:88:67:53:f9:91:b7:ab:c9:07:12: 15:a7:5e:69:ad:25:c1:c9:25:18:92:b3:a9:11:47: c2:07:28:d4:ce:78:f4:35:bb:c0:47:56:70:3c:ef: 80:3b:f4:e3:9a:a5:22:03:02:0d:87:cf:69:a1:d3: ff:87:de:11:0b:32:90:01:c3:ae:cd:bb:df:e9:4a: aa:16:fe:06:30:12:74:a8:35:c6:b6:fa:b9:97:c0: b6:87:9c:49:fc:c3:33:be:db:7a:c6:3b:30:8a:b6: e4:bf:16:f2:59:d3:f7:be:8d:24:f7:2d:65:89:c4: 62:3f:08:35:f4:8f:af:a0:4c:9d:10:b8:12:ca:05: 3a:60:5a:88:80:95:b5:bf:2f:23:34:af:58:98:d3: 35:8d:a7:b7:8d:f1:18:7e:f4:64:ef:b1:2d:1d:f1: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A2:06:22:42:8A:CE:B1:5C:63:F9:80:72:EE:6A:01:65:D2:60:D3 X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/26IGIkKKzrFcY_mAcu5qAWXSYNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.124.0/22 Signature Algorithm: sha256WithRSAEncryption 82:cf:d3:9a:30:f4:9c:d4:4e:41:40:2f:f3:50:2c:64:3e:ff: 2b:09:a1:2e:c6:15:f5:3c:da:6c:d9:fb:83:f1:b9:46:f8:08: 45:a5:08:8d:ca:a8:5c:40:6e:a8:7c:18:a9:a8:cb:d0:68:ce: 76:15:bd:d5:c8:e6:0e:fa:15:4b:ab:23:0f:53:2f:bd:a7:9e: 9c:9b:df:46:e4:60:47:f5:99:94:59:5a:ed:e6:fc:07:ca:7b: b8:84:c3:3a:b8:64:56:3e:a9:fc:cc:78:79:bb:c9:12:d7:c0: bf:8e:49:6d:54:14:41:57:d6:b9:cb:28:01:77:07:bb:fb:99: 6c:73:ac:ea:fb:00:b7:9c:5b:84:dd:7d:a7:4e:d8:df:23:02: 98:e6:31:f0:1f:7c:9a:76:6b:6a:a7:b6:b9:7d:f5:fa:c7:25: 91:d7:cd:5a:0b:f1:77:a4:7d:f1:af:45:6a:4f:73:83:f8:11: f7:77:bd:a9:d4:2e:4f:e5:c6:9f:2a:04:cd:c9:bd:4d:fc:69: ea:11:bc:34:5e:dc:02:52:2b:c1:91:36:b3:e1:b8:09:2f:0c: 03:08:2d:9d:ff:c2:dc:30:47:d1:a2:89:40:d5:82:69:14:4c: 7c:be:73:6f:aa:d1:1d:24:b4:79:86:5f:a3:53:c0:cd:ff:40: ef:c5:47:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq/5luf6LTuR37yu4wldyfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjUxMTI2MTEyMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmEyMDYyMjQyOGFjZWIxNWM2M2Y5ODA3MmVlNmEwMTY1ZDI2MGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZGF9Jj+17FKrPMGFfobrb3/ouHK GqQ1Zy+DgACN6XVlgrrS+sOSkMvQx8WclX5annnHkDgNYiGuVNFana4TVO2XGnpz Ooclqhj/fye3z4twC/TyaWLzbtCbP4EG4YhnU/mRt6vJBxIVp15prSXBySUYkrOp EUfCByjUznj0NbvAR1ZwPO+AO/TjmqUiAwINh89podP/h94RCzKQAcOuzbvf6Uqq Fv4GMBJ0qDXGtvq5l8C2h5xJ/MMzvtt6xjswirbkvxbyWdP3vo0k9y1licRiPwg1 9I+voEydELgSygU6YFqIgJW1vy8jNK9YmNM1jae3jfEYfvRk77EtHfFPEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNuiBiJCis6xXGP5gHLuagFl0mDTMB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvMjZJR0lrS0t6ckZjWV9tQWN1NXFBV1hTWU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSd8MA0G CSqGSIb3DQEBCwUAA4IBAQCCz9OaMPSc1E5BQC/zUCxkPv8rCaEuxhX1PNps2fuD 8blG+AhFpQiNyqhcQG6ofBipqMvQaM52Fb3VyOYO+hVLqyMPUy+9p56cm99G5GBH 9ZmUWVrt5vwHynu4hMM6uGRWPqn8zHh5u8kS18C/jkltVBRBV9a5yygBdwe7+5ls c6zq+wC3nFuE3X2nTtjfIwKY5jHwH3yadmtqp7a5ffX6xyWR181aC/F3pH3xr0Vq T3OD+BH3d72p1C5P5cafKgTNyb1N/GnqEbw0XtwCUivBkTaz4bgJLwwDCC2d/8Lc MEfRoolA1YJpFEx8vnNvqtEdJLR5hl+jU8DN/0DvxUd2 -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:10 2025 by rpki-client