This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/sbLArHFCdDYFp-yc45bbnWWHLZk.roa File: sbLArHFCdDYFp-yc45bbnWWHLZk.roa (raw, json) Hash identifier: 50x3swjFzea0ZMQjb8qdEs7d3Kpvn0F3/nLybrYDPSY= Subject key identifier: B1:B2:C0:AC:71:42:74:36:05:A7:EC:9C:E3:96:DB:9D:65:87:2D:99 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB19DD07CD2FAEF7FC7819FAA2241C Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/sbLArHFCdDYFp-yc45bbnWWHLZk.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206752 IP address blocks: 185.130.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:dd:07:cd:2f:ae:f7:fc:78:19:fa:a2:24:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1b2c0ac7142743605a7ec9ce396db9d65872d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:49:a7:b2:34:31:b7:67:c9:c3:2e:86:1d: 15:96:47:41:f2:74:10:9e:18:3a:a1:ba:14:1e:8d: 2d:16:2b:8a:be:4d:1c:f1:f1:f5:1a:74:3f:06:5f: 79:fe:2b:a3:31:93:cb:68:0e:a6:7b:57:c3:cf:75: 8c:9b:93:82:17:ee:10:73:05:71:56:a6:07:8e:de: b5:0e:48:28:98:af:7e:2a:74:e7:dd:9d:d9:c6:d3: fa:d8:ab:19:fa:be:a3:4d:41:29:70:bd:04:af:60: 25:25:71:60:67:7a:5f:9f:e8:65:55:d2:4b:68:cb: 0e:e4:bb:5e:52:31:60:7e:e8:eb:fb:6b:c5:94:75: e8:e2:a7:cc:3b:62:4f:ea:05:26:c5:4c:f2:be:59: a5:31:96:c1:03:b3:85:a5:26:99:2d:fe:25:e8:b8: c0:74:61:22:c8:96:0c:43:34:45:9a:9f:7e:98:b1: 2d:62:ef:45:f6:7d:fe:e5:f5:b8:77:3c:76:6f:ca: 9b:bf:c7:79:c8:fd:91:fd:aa:ba:a0:92:55:f2:ce: 0e:e7:7c:da:26:a4:3b:ca:b6:81:f6:ba:4a:71:ac: 68:d5:7f:50:42:e0:f7:a7:40:e7:4d:40:a7:d5:07: 82:ca:d7:43:7d:66:31:9a:1c:e6:83:88:e0:b7:28: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B2:C0:AC:71:42:74:36:05:A7:EC:9C:E3:96:DB:9D:65:87:2D:99 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/sbLArHFCdDYFp-yc45bbnWWHLZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.26.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c2:0a:6e:f5:fe:87:de:cf:63:6f:b3:75:52:42:c8:c4:14: c5:01:aa:58:1e:1a:d7:f6:73:0e:78:47:18:4b:3c:82:3f:24: 69:31:37:d6:1e:01:b9:15:69:0b:cc:8d:50:6c:d1:7a:0c:c5: 36:0b:f2:cc:b3:56:7c:84:c4:22:e9:25:89:0b:07:38:19:32: 88:e1:62:a2:42:c9:a3:3f:2b:df:bc:d2:f4:86:49:9f:f3:d3: af:3f:93:cc:1b:c6:10:9e:ca:12:d1:5b:22:ac:94:7d:ce:93: f5:d1:c0:7d:74:c7:60:5f:30:50:ec:e7:74:89:fa:f0:f9:73: 7d:ad:81:54:5f:e4:b3:cf:d6:20:02:80:cc:7d:39:b5:08:75: bd:ac:1e:5d:ac:b1:5c:8e:60:9b:65:52:02:11:4b:a6:3e:96: 22:8a:28:ed:26:f3:4e:4f:a1:9a:f9:a3:a5:f0:b2:24:17:d7: fe:ba:39:a3:fb:d1:fe:0e:38:11:23:35:8a:60:83:23:50:c2: d3:ab:a3:2f:e2:3d:56:55:1a:09:c9:7a:78:a2:62:9e:f4:11: e9:f1:b9:c8:7d:55:4f:ac:8d:70:7d:09:08:a5:75:ed:f4:88: 2f:51:63:06:eb:9f:9b:bf:0c:e5:38:e6:c6:e5:f9:17:1c:a6: 81:88:40:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xndB80vrvf8eBn6oiQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWIyYzBhYzcxNDI3NDM2MDVhN2VjOWNlMzk2ZGI5ZDY1ODcyZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14RJp7I0MbdnycMuhh0VlkdB8nQQ nhg6oboUHo0tFiuKvk0c8fH1GnQ/Bl95/iujMZPLaA6me1fDz3WMm5OCF+4QcwVx VqYHjt61DkgomK9+KnTn3Z3ZxtP62KsZ+r6jTUEpcL0Er2AlJXFgZ3pfn+hlVdJL aMsO5LteUjFgfujr+2vFlHXo4qfMO2JP6gUmxUzyvlmlMZbBA7OFpSaZLf4l6LjA dGEiyJYMQzRFmp9+mLEtYu9F9n3+5fW4dzx2b8qbv8d5yP2R/aq6oJJV8s4O53za JqQ7yraB9rpKcaxo1X9QQuD3p0DnTUCn1QeCytdDfWYxmhzmg4jgtyh11wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGywKxxQnQ2BafsnOOW251lhy2ZMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvc2JMQXJIRkNkRFlGcC15YzQ1YmJuV1dITFprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYIaMA0G CSqGSIb3DQEBCwUAA4IBAQBJwgpu9f6H3s9jb7N1UkLIxBTFAapYHhrX9nMOeEcY SzyCPyRpMTfWHgG5FWkLzI1QbNF6DMU2C/LMs1Z8hMQi6SWJCwc4GTKI4WKiQsmj PyvfvNL0hkmf89OvP5PMG8YQnsoS0VsirJR9zpP10cB9dMdgXzBQ7Od0ifrw+XN9 rYFUX+Szz9YgAoDMfTm1CHW9rB5drLFcjmCbZVICEUumPpYiiijtJvNOT6Ga+aOl 8LIkF9f+ujmj+9H+DjgRIzWKYIMjUMLTq6Mv4j1WVRoJyXp4omKe9BHp8bnIfVVP rI1wfQkIpXXt9IgvUWMG65+bvwzlOObG5fkXHKaBiED1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:06 2026 by rpki-client