This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/u26dzWx1WsuAyPhRE3IG1GMmdJc.roa File: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (raw, json) Hash identifier: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY= Subject key identifier: BB:6E:9D:CD:6C:75:5A:CB:80:C8:F8:51:13:72:06:D4:63:26:74:97 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59B213D5ED849E81FD320E22F758E3 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/u26dzWx1WsuAyPhRE3IG1GMmdJc.roa Signing time: Thu 01 Jan 2026 16:17:37 +0000 ROA not before: Thu 01 Jan 2026 16:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205659 IP address blocks: 45.14.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b2:13:d5:ed:84:9e:81:fd:32:0e:22:f7:58:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb6e9dcd6c755acb80c8f851137206d463267497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:aa:5f:55:a0:92:36:ab:bd:bf:7b:96:93:62: 39:4b:f8:92:2c:86:29:d5:f6:6e:42:20:81:ba:28: 17:1a:46:0a:f0:af:14:c7:9f:dc:7b:2d:7a:8b:c8: c5:1a:34:2f:e1:bb:67:30:06:07:47:8f:82:80:b3: f2:80:7f:a5:f8:df:b7:5a:75:b9:74:03:31:9c:e7: 60:ae:85:bd:53:e5:dd:41:e4:cb:37:e3:38:46:eb: a6:95:40:08:99:00:ab:d8:46:bb:26:11:de:94:13: c9:78:07:b1:88:04:cc:8b:18:ac:eb:47:03:99:8c: 90:9e:16:87:d1:f0:89:75:49:c6:55:58:da:a5:5b: 10:98:4d:f1:15:3b:af:36:8c:ed:0b:5b:c6:02:7b: 19:ee:cc:fc:10:e2:1d:3f:ef:e6:75:6a:89:d6:fb: e6:4e:68:3b:cd:a6:d2:e4:69:a5:dc:da:ff:e9:e7: 42:ac:84:41:90:85:42:5e:27:44:d2:83:08:ef:49: 95:80:f5:97:86:c2:9a:70:f8:ce:6a:c0:b6:76:f7: 60:6a:a6:bc:58:e2:b8:3c:15:c9:8e:6d:7d:3f:d6: e8:bf:75:23:d8:b5:aa:23:33:56:9e:d7:ea:de:59: 36:81:ea:2a:c4:61:73:f9:5e:cf:31:4d:f7:0e:a2: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6E:9D:CD:6C:75:5A:CB:80:C8:F8:51:13:72:06:D4:63:26:74:97 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/u26dzWx1WsuAyPhRE3IG1GMmdJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.74.0/23 Signature Algorithm: sha256WithRSAEncryption 02:97:89:72:40:8f:77:9f:d8:74:14:10:8d:ed:67:61:87:2b: 73:4f:87:34:d3:e9:d9:5d:9f:33:12:ac:54:04:8c:12:8d:98: 52:31:c7:09:7a:71:2d:1a:38:d0:cb:71:8c:a1:21:5f:68:0a: 8b:b7:81:08:54:b1:e5:d4:e6:a6:25:51:9f:a6:ec:59:0f:00: 01:e0:cb:05:b0:50:9c:37:ae:9c:27:bf:6f:71:cd:59:c7:51: b0:e6:94:94:e0:b9:46:4f:0c:d0:67:51:20:33:6a:0b:43:28: b2:ca:5f:92:5b:b1:34:48:d1:bd:5d:be:56:4b:1b:4d:1d:61: ad:88:00:e8:66:7b:02:bb:8a:9d:4f:38:af:11:c9:02:e6:3d: 03:da:22:fb:90:0b:1a:92:03:21:a3:66:2f:a1:33:bc:b3:b2: 99:27:43:5f:1c:28:e8:37:82:1c:27:29:73:6c:df:0c:16:7b: 4a:ee:fe:e1:f5:86:0f:f7:49:92:0a:e8:27:6f:68:7b:dd:53: 6f:ed:2e:32:95:5f:4d:fc:7d:dd:65:a7:e6:eb:f7:ea:89:6d: ba:cd:8e:1b:39:8f:58:ac:d2:72:b2:f9:75:50:aa:16:1f:58: d5:02:3d:d8:e3:cc:68:df:e4:e5:4d:4e:76:f6:f9:5a:a6:b2: 3c:ae:5c:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WbIT1e2EnoH9Mg4i91jjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjZlOWRjZDZjNzU1YWNiODBjOGY4NTExMzcyMDZkNDYzMjY3NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qpfVaCSNqu9v3uWk2I5S/iSLIYp 1fZuQiCBuigXGkYK8K8Ux5/cey16i8jFGjQv4btnMAYHR4+CgLPygH+l+N+3WnW5 dAMxnOdgroW9U+XdQeTLN+M4RuumlUAImQCr2Ea7JhHelBPJeAexiATMixis60cD mYyQnhaH0fCJdUnGVVjapVsQmE3xFTuvNoztC1vGAnsZ7sz8EOIdP+/mdWqJ1vvm Tmg7zabS5Gml3Nr/6edCrIRBkIVCXidE0oMI70mVgPWXhsKacPjOasC2dvdgaqa8 WOK4PBXJjm19P9bov3Uj2LWqIzNWntfq3lk2geoqxGFz+V7PMU33DqLN0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtunc1sdVrLgMj4URNyBtRjJnSXMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvdTI2ZHpXeDFXc3VBeVBoUkUzSUcxR01tZEpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ5KMA0G CSqGSIb3DQEBCwUAA4IBAQACl4lyQI93n9h0FBCN7WdhhytzT4c00+nZXZ8zEqxU BIwSjZhSMccJenEtGjjQy3GMoSFfaAqLt4EIVLHl1OamJVGfpuxZDwAB4MsFsFCc N66cJ79vcc1Zx1Gw5pSU4LlGTwzQZ1EgM2oLQyiyyl+SW7E0SNG9Xb5WSxtNHWGt iADoZnsCu4qdTzivEckC5j0D2iL7kAsakgMho2YvoTO8s7KZJ0NfHCjoN4IcJylz bN8MFntK7v7h9YYP90mSCugnb2h73VNv7S4ylV9N/H3dZafm6/fqiW26zY4bOY9Y rNJysvl1UKoWH1jVAj3Y48xo3+TlTU529vlaprI8rlwf -----END CERTIFICATE-----Generated at Mon Jan 5 03:57:51 2026 by rpki-client