This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/bh26FSDEWHE7GM9y8WYKONSOSrY.roa File: bh26FSDEWHE7GM9y8WYKONSOSrY.roa (raw, json) Hash identifier: Ila3oBxBNWBNEgBFCA9ys1NdnbH6OtXjqF11+XnaK9w= Subject key identifier: 6E:1D:BA:15:20:C4:58:71:3B:18:CF:72:F1:66:0A:38:D4:8E:4A:B6 Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Certificate serial: 019B212CE7CE965479DFB6AC36FC0520C5F3 Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/bh26FSDEWHE7GM9y8WYKONSOSrY.roa Signing time: Mon 15 Dec 2025 08:42:29 +0000 ROA not before: Mon 15 Dec 2025 08:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 185.240.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:2c:e7:ce:96:54:79:df:b6:ac:36:fc:05:20:c5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Validity Not Before: Dec 15 08:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e1dba1520c458713b18cf72f1660a38d48e4ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:70:1a:85:83:86:ed:5e:59:c0:bf:d0:64: 47:a5:de:25:c8:43:c4:7e:fb:a5:ac:72:15:ff:ea: bd:bb:48:1e:59:e2:e9:3b:a7:2b:5c:29:0c:b5:06: 82:5a:da:0a:27:ea:79:55:26:85:92:c8:1d:5a:b3: da:c2:83:86:96:fa:69:1c:c2:14:0d:bd:8f:29:d9: 90:17:ca:3a:36:d6:56:47:50:cf:ea:0b:73:16:1b: fb:7d:7e:30:1a:12:00:0c:69:73:ef:c6:96:d6:7f: 4b:df:61:db:3d:e0:57:01:3b:b3:7b:c2:6e:7a:9c: c4:19:87:f1:fe:dc:ee:43:0c:d0:27:c0:a9:fe:66: 0a:0d:89:90:45:09:80:9a:12:31:fa:2b:12:96:03: 00:1a:3a:17:11:79:4d:b9:9a:18:36:82:9a:4a:36: ad:f7:3b:df:05:a2:c9:77:5e:8f:a6:74:0b:1a:b6: 82:a1:fe:9c:2e:8a:ad:59:b4:c8:ae:de:2a:b5:6d: ca:b9:a9:98:95:3c:cd:bb:db:25:e8:ca:23:4a:82: 96:0d:7a:da:e2:1c:b2:e2:d0:80:23:8f:ae:37:50: 38:30:29:40:22:c9:95:f0:e9:dd:46:8e:9d:de:9d: 62:72:b1:50:f0:20:18:5b:25:dd:e9:1b:98:dd:4f: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:BA:15:20:C4:58:71:3B:18:CF:72:F1:66:0A:38:D4:8E:4A:B6 X509v3 Authority Key Identifier: keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/bh26FSDEWHE7GM9y8WYKONSOSrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.128.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:9d:4b:1f:17:a9:d7:60:51:59:bc:0a:68:0b:52:fc:d7:58: a5:12:2e:be:86:bc:f8:16:e6:22:c7:d1:25:9b:52:7f:a3:66: 76:2d:0b:03:d3:18:f6:f8:df:3d:af:a5:1f:c3:b4:ec:6a:b3: 1f:50:34:4b:97:3d:0d:2e:2b:26:d7:de:53:c4:15:7b:f7:06: 47:c3:1a:ff:3f:ec:e2:af:14:ba:db:77:9e:b3:51:4e:20:e6: cc:49:fd:1b:e2:40:d3:b8:d9:98:08:37:b0:1f:c4:7d:da:ef: 20:2d:01:e6:2e:8a:a0:34:bf:ad:57:8a:48:ce:a9:b9:d1:2d: e2:91:e7:00:6b:9f:f0:8e:f1:e8:cd:25:8f:f2:2a:17:e0:f0: ed:da:29:6b:ac:e5:72:fb:70:46:8d:67:b0:0b:0c:20:f0:23: f5:fc:c8:8a:d4:8e:eb:eb:58:01:2a:8b:62:a3:53:0b:4a:fc: d2:49:ef:a3:e3:d4:04:95:c8:cc:39:e1:dc:b6:ef:94:1e:2c: 04:2d:e1:f8:00:9f:22:e1:56:28:89:52:08:f9:32:7d:81:80: 3c:31:86:9b:7a:88:58:b9:10:00:96:de:30:77:e8:69:8d:e7: b0:99:a2:e7:c6:c0:14:e7:7e:b6:45:ff:d1:39:76:8e:2a:34: cd:41:4b:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshLOfOllR537asNvwFIMXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz MmVhOWIwHhcNMjUxMjE1MDg0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTFkYmExNTIwYzQ1ODcxM2IxOGNmNzJmMTY2MGEzOGQ0OGU0YWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquZwGoWDhu1eWcC/0GRHpd4lyEPE fvulrHIV/+q9u0geWeLpO6crXCkMtQaCWtoKJ+p5VSaFksgdWrPawoOGlvppHMIU Db2PKdmQF8o6NtZWR1DP6gtzFhv7fX4wGhIADGlz78aW1n9L32HbPeBXATuze8Ju epzEGYfx/tzuQwzQJ8Cp/mYKDYmQRQmAmhIx+isSlgMAGjoXEXlNuZoYNoKaSjat 9zvfBaLJd16PpnQLGraCof6cLoqtWbTIrt4qtW3KuamYlTzNu9sl6MojSoKWDXra 4hyy4tCAI4+uN1A4MClAIsmV8OndRo6d3p1icrFQ8CAYWyXd6RuY3U/yNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG4duhUgxFhxOxjPcvFmCjjUjkq2MB8GA1UdIwQY MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt ZmRhMDExZTVjOTcyLzEvYmgyNkZTREVXSEU3R005eThXWUtPTlNPU3JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufCAMA0G CSqGSIb3DQEBCwUAA4IBAQCNnUsfF6nXYFFZvApoC1L811ilEi6+hrz4FuYix9El m1J/o2Z2LQsD0xj2+N89r6Ufw7TsarMfUDRLlz0NLism195TxBV79wZHwxr/P+zi rxS623ees1FOIObMSf0b4kDTuNmYCDewH8R92u8gLQHmLoqgNL+tV4pIzqm50S3i kecAa5/wjvHozSWP8ioX4PDt2ilrrOVy+3BGjWewCwwg8CP1/MiK1I7r61gBKoti o1MLSvzSSe+j49QElcjMOeHctu+UHiwELeH4AJ8i4VYoiVII+TJ9gYA8MYabeohY uRAAlt4wd+hpjeewmaLnxsAU5362Rf/ROXaOKjTNQUtt -----END CERTIFICATE-----Generated at Thu Dec 18 18:26:25 2025 by rpki-client