This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa File: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (raw, json) Hash identifier: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA= Subject key identifier: 6B:5F:0B:9C:4F:43:72:01:BB:CE:E8:0E:EA:2A:10:DD:8E:C2:4B:B5 Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019B79108BD0B8F0AB799956957D191B348C Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214452 IP address blocks: 195.35.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8b:d0:b8:f0:ab:79:99:56:95:7d:19:1b:34:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b5f0b9c4f437201bbcee80eea2a10dd8ec24bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:ff:85:a1:ba:78:f7:89:2e:5e:21:a8:47: 3c:ca:d5:56:3f:b9:44:d5:1c:0b:bd:8c:10:be:05: f5:50:2c:57:cf:38:25:d2:c0:bd:7a:34:d3:f8:c2: 90:58:ce:85:01:6b:05:f3:0b:5f:aa:7b:c0:22:e2: 39:2f:e5:82:64:0c:66:d2:08:14:e2:78:a1:52:d7: e6:0a:fe:ca:e4:2f:bd:06:9e:01:52:64:45:71:90: 02:8c:51:d8:b2:49:04:ed:5b:aa:37:c4:0b:be:0d: f1:9a:8b:43:f8:0c:90:97:01:a6:7d:d8:50:b5:b6: 54:39:31:34:2c:50:e3:b8:a1:34:2e:65:fb:30:c0: ab:79:85:b4:b5:78:01:70:94:d8:11:88:32:6f:cc: 89:69:14:c4:62:b4:6e:15:47:ee:ce:3b:b8:f6:b9: bc:c4:a2:57:44:02:66:9e:42:81:66:8d:18:48:cc: 9d:30:b6:52:eb:22:3f:e3:dd:8f:aa:04:c4:29:b6: d1:de:3a:4b:39:2b:82:f8:01:43:9f:23:70:4e:df: 10:7a:2e:61:0c:38:48:b7:e8:2c:9b:6f:e4:63:2f: 2a:6b:5d:dc:eb:7c:98:87:ba:49:bd:05:12:6d:fb: 0d:4e:d3:58:bb:08:9e:c8:2e:f4:1b:46:01:23:72: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5F:0B:9C:4F:43:72:01:BB:CE:E8:0E:EA:2A:10:DD:8E:C2:4B:B5 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.35.92.0/24 Signature Algorithm: sha256WithRSAEncryption 21:38:f4:fe:81:e8:21:4d:35:b3:1d:46:62:23:9f:6f:02:b2: ee:7f:6a:48:dd:e8:d5:b2:db:b5:50:9e:42:8a:a3:e9:88:cf: b7:59:ec:68:73:cd:bf:9e:ba:04:60:f8:ee:97:63:e1:ec:ab: ca:4d:cc:3c:37:18:36:9a:0c:c4:ca:d4:d9:83:5e:f8:72:19: 2c:08:9c:03:90:ea:4a:05:df:7f:be:1c:c4:8b:84:26:47:43: bd:76:30:c8:0a:a0:3e:a4:fa:7a:1f:09:a7:aa:74:2d:cd:18: 51:43:2d:be:9f:c1:a6:b9:5b:a7:c4:7d:23:da:55:cb:45:e9: 14:c4:3e:8c:fe:13:65:6e:26:7e:7f:63:e6:73:ac:1e:e5:3b: 0a:76:39:21:97:fa:2c:d7:57:7c:e9:c9:5e:83:39:0e:bd:12: ca:86:c6:c8:be:29:38:de:10:d0:6f:8a:b1:e3:1b:ba:23:e3: 89:81:c1:47:f6:d7:4c:78:f9:f6:e0:4a:0e:78:7e:0a:2b:c9: 50:92:7f:ce:6c:32:bd:eb:cd:6a:07:c2:56:f6:40:39:1e:22: 02:78:83:44:55:5a:1b:25:62:8b:7c:e3:a1:1b:8b:9b:b3:7c: f3:ac:43:cb:2b:62:c8:e7:32:af:39:d9:65:d6:00:33:e0:f3: dd:cf:ee:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIvQuPCreZlWlX0ZGzSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjVmMGI5YzRmNDM3MjAxYmJjZWU4MGVlYTJhMTBkZDhlYzI0YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9T/haG6ePeJLl4hqEc8ytVWP7lE 1RwLvYwQvgX1UCxXzzgl0sC9ejTT+MKQWM6FAWsF8wtfqnvAIuI5L+WCZAxm0ggU 4nihUtfmCv7K5C+9Bp4BUmRFcZACjFHYskkE7VuqN8QLvg3xmotD+AyQlwGmfdhQ tbZUOTE0LFDjuKE0LmX7MMCreYW0tXgBcJTYEYgyb8yJaRTEYrRuFUfuzju49rm8 xKJXRAJmnkKBZo0YSMydMLZS6yI/492PqgTEKbbR3jpLOSuC+AFDnyNwTt8Qei5h DDhIt+gsm2/kYy8qa13c63yYh7pJvQUSbfsNTtNYuwieyC70G0YBI3I6SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGtfC5xPQ3IBu87oDuoqEN2Owku1MB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvYTE4TG5FOURjZ0c3enVnTzZpb1EzWTdDUzdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyNcMA0G CSqGSIb3DQEBCwUAA4IBAQAhOPT+geghTTWzHUZiI59vArLuf2pI3ejVstu1UJ5C iqPpiM+3Wexoc82/nroEYPjul2Ph7KvKTcw8Nxg2mgzEytTZg174chksCJwDkOpK Bd9/vhzEi4QmR0O9djDICqA+pPp6HwmnqnQtzRhRQy2+n8GmuVunxH0j2lXLRekU xD6M/hNlbiZ+f2Pmc6we5TsKdjkhl/os11d86clegzkOvRLKhsbIvik43hDQb4qx 4xu6I+OJgcFH9tdMePn24EoOeH4KK8lQkn/ObDK9681qB8JW9kA5HiICeINEVVob JWKLfOOhG4ubs3zzrEPLK2LI5zKvOdll1gAz4PPdz+6V -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:14 2026 by rpki-client