This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/18mBvWMTzIGjuf0KvgUDpqaEgck.roa File: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (raw, json) Hash identifier: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys= Subject key identifier: D7:C9:81:BD:63:13:CC:81:A3:B9:FD:0A:BE:05:03:A6:A6:84:81:C9 Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Certificate serial: 019B78A37AA2893A12AD2996154DD0035D06 Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/18mBvWMTzIGjuf0KvgUDpqaEgck.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49034 IP address blocks: 185.39.56.0/22 maxlen: 22 193.218.95.0/24 maxlen: 24 2a00:f6e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7a:a2:89:3a:12:ad:29:96:15:4d:d0:03:5d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7c981bd6313cc81a3b9fd0abe0503a6a68481c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:9a:4b:a5:f5:3c:6b:40:1d:b1:4b:84:07: 14:a4:aa:ad:d6:30:d5:f7:50:3d:5d:eb:22:8d:6b: 3f:e5:cf:af:ba:57:43:97:82:94:e1:3d:81:bf:b5: 45:57:52:56:d3:19:9d:f3:94:1e:52:55:81:df:92: 41:3f:1e:8f:92:90:56:8c:11:87:6f:5a:b3:eb:3e: 99:a9:b7:92:92:93:4d:6d:cd:41:a8:39:de:28:70: 9d:c6:e1:9c:59:1e:d4:49:a1:8d:c1:0c:ec:23:14: f5:58:25:69:37:22:43:bd:08:8d:20:d9:93:30:a0: 07:17:04:19:54:81:ec:70:c8:69:37:f3:04:77:a3: 9a:b4:ea:2b:cc:59:cf:53:2d:8c:81:8d:fb:15:68: c9:70:4e:4a:14:83:ed:77:c3:8b:e2:ef:73:96:a2: dc:30:37:76:01:05:bc:9f:8c:93:5a:96:46:4c:0f: da:a2:56:31:06:b7:55:3b:cd:07:e1:88:e8:42:04: ff:57:3f:42:8c:5e:ff:22:d8:ad:5b:9f:2e:9c:58: 09:31:0f:9a:09:93:2b:97:0b:0c:f8:1b:3a:b7:86: 94:e4:02:2d:0c:de:d4:2a:2a:ac:44:29:b1:60:66: bf:fc:cc:79:8d:4a:76:1b:f2:4c:cb:54:bc:78:e4: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C9:81:BD:63:13:CC:81:A3:B9:FD:0A:BE:05:03:A6:A6:84:81:C9 X509v3 Authority Key Identifier: keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/18mBvWMTzIGjuf0KvgUDpqaEgck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.56.0/22 193.218.95.0/24 IPv6: 2a00:f6e0::/32 Signature Algorithm: sha256WithRSAEncryption a6:70:f1:15:26:73:27:cb:1b:64:0d:2c:76:92:44:ed:01:66: f7:0b:53:2a:2e:a6:a3:5e:f0:00:fa:d8:41:53:58:26:0c:04: 9e:9c:33:2a:19:5b:b7:23:31:08:13:95:f1:84:18:fd:13:bd: fe:64:c9:fa:2c:8c:4c:dc:d7:2b:65:7e:80:21:f0:50:3a:7d: 6c:f7:87:bd:d4:b2:32:18:e9:c4:57:b1:73:21:ea:95:4b:94: 98:17:a3:11:9b:11:9a:c4:31:f7:90:3b:2f:cb:7a:46:66:9e: f9:cc:ca:ad:25:6b:59:4e:bb:7b:ab:3b:b0:08:10:b5:9a:44: c0:0a:33:c2:06:d6:09:87:0b:7f:c5:31:44:9e:32:88:83:95: 0c:ca:30:1a:d0:ba:e9:5c:0a:e7:f1:93:4a:b7:01:65:28:8f: b7:28:b7:9a:f3:5f:7c:45:70:d5:52:dc:1c:0c:5e:4e:f7:aa: ff:76:48:9a:ed:a6:71:a4:8c:4d:be:2f:83:d4:1d:57:67:bd: ce:38:9f:a4:c1:10:7b:79:6c:6f:f3:a9:aa:de:70:e1:54:df: 04:8f:a3:26:12:e8:73:68:5f:74:98:1a:4b:f5:da:5b:d4:9e: 15:f9:42:02:d9:f6:c9:f4:25:81:cd:52:a8:50:79:96:39:2a: 8b:5a:51:18 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4o3qiiToSrSmWFU3QA10GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk NjBiZWYwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2M5ODFiZDYzMTNjYzgxYTNiOWZkMGFiZTA1MDNhNmE2ODQ4MWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzeaS6X1PGtAHbFLhAcUpKqt1jDV 91A9XesijWs/5c+vuldDl4KU4T2Bv7VFV1JW0xmd85QeUlWB35JBPx6PkpBWjBGH b1qz6z6ZqbeSkpNNbc1BqDneKHCdxuGcWR7USaGNwQzsIxT1WCVpNyJDvQiNINmT MKAHFwQZVIHscMhpN/MEd6OatOorzFnPUy2MgY37FWjJcE5KFIPtd8OL4u9zlqLc MDd2AQW8n4yTWpZGTA/aolYxBrdVO80H4YjoQgT/Vz9CjF7/ItitW58unFgJMQ+a CZMrlwsM+Bs6t4aU5AItDN7UKiqsRCmxYGa//Mx5jUp2G/JMy1S8eOR5RwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNfJgb1jE8yBo7n9Cr4FA6amhIHJMB8GA1UdIwQY MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt NWU1YTYyNGQ3NGI4LzEvMThtQnZXTVR6SUdqdWYwS3ZnVURwcWFFZ2NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4 LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSc4AwQA wdpfMA0EAgACMAcDBQAqAPbgMA0GCSqGSIb3DQEBCwUAA4IBAQCmcPEVJnMnyxtk DSx2kkTtAWb3C1MqLqajXvAA+thBU1gmDASenDMqGVu3IzEIE5XxhBj9E73+ZMn6 LIxM3NcrZX6AIfBQOn1s94e91LIyGOnEV7FzIeqVS5SYF6MRmxGaxDH3kDsvy3pG Zp75zMqtJWtZTrt7qzuwCBC1mkTACjPCBtYJhwt/xTFEnjKIg5UMyjAa0LrpXArn 8ZNKtwFlKI+3KLea8198RXDVUtwcDF5O96r/dkia7aZxpIxNvi+D1B1XZ73OOJ+k wRB7eWxv86mq3nDhVN8Ej6MmEuhzaF90mBpL9dpb1J4V+UIC2fbJ9CWBzVKoUHmW OSqLWlEY -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:17 2026 by rpki-client