This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS26737.roa
File: AS26737.roa (raw, json)
Hash identifier: Vc/FKDmyx98zWDD+dpcEs1KaLrcbAiRBX7IcsuzTCOk=
Subject key identifier: 22:C4:ED:73:11:47:38:7C:39:F0:B9:FF:E3:87:5A:31:02:59:36:A8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3BF8FD04C99E34C828CBF01230E5A6D332FCA180
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS26737.roa
Signing time: Sat 13 Dec 2025 11:58:09 +0000
ROA not before: Sat 13 Dec 2025 11:53:09 +0000
ROA not after: Sat 12 Dec 2026 11:58:09 +0000
asID: 26737
IP address blocks: 91.124.26.0/23 maxlen: 24
91.124.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f8:fd:04:c9:9e:34:c8:28:cb:f0:12:30:e5:a6:d3:32:fc:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Dec 13 11:53:09 2025 GMT
Not After : Dec 12 11:58:09 2026 GMT
Subject: CN=22C4ED731147387C39F0B9FFE3875A31025936A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:99:55:11:8c:6b:70:6c:46:a5:c5:3b:c2:
81:1b:0e:17:0b:05:c5:1c:9e:1b:9d:8d:cb:d7:ce:
e4:88:67:b0:4b:3c:a9:3f:3b:95:6b:ab:0e:cc:61:
bd:35:fe:ba:90:b7:9e:58:75:a6:9b:63:b3:b5:21:
d4:60:0f:75:57:af:6a:7a:b4:54:00:97:5b:ec:a9:
51:5d:60:49:83:c9:fd:9a:bc:db:57:e8:f0:af:9a:
2d:86:82:6f:9d:c8:87:70:2a:97:45:1a:29:1f:e9:
2c:4b:30:ac:85:a4:b5:1d:ec:15:d6:fc:75:e9:fe:
fe:cf:97:d1:ce:cc:db:58:13:70:78:2c:ec:39:f7:
78:c8:67:c6:63:6c:96:37:25:2d:b0:08:d1:26:5c:
6c:a1:78:95:18:2a:ff:b6:f8:9e:9a:2e:33:32:90:
74:f9:4e:83:ff:67:53:4d:4e:c8:a4:07:af:2b:5e:
68:5d:c7:a8:91:af:8e:38:f7:0a:02:47:70:d5:31:
62:14:b0:59:46:c4:5d:d8:92:ff:9c:ef:f3:6b:aa:
6b:39:df:71:b5:01:7c:ea:a7:e0:f7:6b:e6:48:f5:
44:2d:d4:0d:69:2e:af:e6:24:6b:23:9a:17:6e:f1:
6f:fa:f4:4c:24:af:aa:86:25:78:cd:24:4a:23:e3:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C4:ED:73:11:47:38:7C:39:F0:B9:FF:E3:87:5A:31:02:59:36:A8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS26737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.26.0-91.124.29.255
Signature Algorithm: sha256WithRSAEncryption
05:ce:41:05:0b:99:ba:ef:50:42:9c:b9:09:38:d5:4d:31:cd:
95:ff:84:e5:8f:9d:71:fa:85:ed:ac:6d:11:b4:73:d1:61:36:
fa:bc:13:6e:be:87:57:5b:52:c1:92:5c:29:d6:be:10:7e:6c:
3f:8f:bd:77:10:b2:a3:c2:4f:fd:c4:45:4e:84:0e:40:1a:4e:
d2:28:c8:4f:37:4a:37:44:ce:1b:40:ee:fb:cb:aa:ed:a2:b8:
15:c6:21:62:f7:69:51:40:4e:87:34:26:93:54:3f:4e:dd:af:
14:a6:a9:02:69:54:04:46:61:b0:6b:9b:37:03:95:f9:11:fc:
09:94:1d:ce:ea:3c:b1:2f:65:99:75:88:14:df:96:ea:80:f6:
44:13:08:c6:4a:9f:dc:9a:29:c1:6f:3f:61:1f:a1:67:78:fa:
ed:28:ed:cd:43:6d:30:fd:e0:7e:64:f2:2c:54:b3:b7:d8:53:
92:43:5e:e4:8f:38:92:c4:3e:26:f3:20:38:b2:7a:58:b0:69:
f5:85:2e:d9:f5:10:65:0a:98:2a:8f:51:b2:eb:20:f2:a6:58:
21:d1:73:4d:5f:5b:58:9c:5a:8c:fb:4c:48:d4:88:ed:e9:7d:
23:ee:77:ba:60:50:49:18:39:d6:35:8a:86:ce:8d:df:ab:14:
cf:06:83:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 15:33:53 2025 by rpki-client