This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/DiLBDAdX2Rn6IbzlG165KKHARDw.roa File: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (raw, json) Hash identifier: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8= Subject key identifier: 0E:22:C1:0C:07:57:D9:19:FA:21:BC:E5:1B:5E:B9:28:A1:C0:44:3C Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df Certificate serial: 019B79101CB6BBF9D56315AAF24C758B493C Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/DiLBDAdX2Rn6IbzlG165KKHARDw.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61380 IP address blocks: 185.8.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1c:b6:bb:f9:d5:63:15:aa:f2:4c:75:8b:49:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e22c10c0757d919fa21bce51b5eb928a1c0443c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:ee:c6:b9:1d:f5:8b:56:6f:ba:50:ef:d3: 0e:b9:53:59:1b:0a:31:fe:12:87:90:01:ec:ca:04: 7c:59:b0:be:11:b1:44:cc:2e:9f:3e:6e:93:4a:ab: 1f:26:6b:6c:4a:fa:56:af:74:4d:53:f6:e4:d7:80: b0:cb:8d:61:f5:b5:0a:d0:d6:48:4c:10:3b:51:25: 8b:76:8a:c5:98:01:b3:9d:73:21:3c:b5:53:4d:74: d5:ae:f8:d8:5f:17:f4:23:19:cf:f8:b8:37:c1:24: 67:aa:ec:92:0b:93:3b:37:5a:3d:03:ef:34:40:fe: 2f:72:54:20:00:3a:0c:35:fd:18:e5:64:f6:ab:78: a6:43:48:51:a2:f5:b6:92:b2:bb:ef:d9:eb:33:30: e7:52:3e:17:5d:d5:d1:af:71:2f:96:c7:1c:e9:32: 48:a4:e4:cc:76:a5:9f:ac:1f:38:fc:03:86:8d:2f: 25:ab:7c:5a:56:de:e4:60:52:07:f6:43:0c:3c:50: 3f:5a:22:a2:cd:0c:d4:4b:a1:21:d1:a2:54:61:8c: 0e:e9:88:42:37:63:26:8f:3d:07:81:ff:b0:bb:6e: ab:50:ef:5f:d1:bf:d9:65:42:89:58:28:97:c4:2b: fc:58:7e:7c:df:e9:2d:ea:06:b5:4a:a3:65:cc:3b: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:22:C1:0C:07:57:D9:19:FA:21:BC:E5:1B:5E:B9:28:A1:C0:44:3C X509v3 Authority Key Identifier: keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/DiLBDAdX2Rn6IbzlG165KKHARDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.156.0/22 Signature Algorithm: sha256WithRSAEncryption 23:b3:5a:f6:fa:94:c4:1c:ed:3f:fa:b6:fd:94:a2:8e:02:62: 43:52:3e:8c:cd:1a:b8:ab:2b:93:41:af:c3:82:3e:aa:2c:43: df:47:75:1e:c5:a4:70:41:5a:b9:b2:24:dd:ca:d2:f6:ae:2e: 5f:55:7a:ed:c8:a0:57:72:29:dd:e2:3a:a5:f6:6b:fa:aa:8e: f5:c4:c3:c4:58:d3:3f:d3:a4:d1:7b:3f:95:1d:8a:b9:5e:5e: cf:84:1a:b8:6d:cc:6b:37:e1:03:fc:09:fa:d5:1e:86:9f:f1: cc:d0:68:1a:1f:1c:de:8f:d6:bb:55:44:58:4a:c9:9d:a0:49: 48:4f:28:ad:11:66:7a:43:d4:bd:7d:c3:be:51:79:94:56:34: b1:58:65:4b:e9:f5:c0:0e:f3:64:c9:ed:0b:e6:43:f4:03:ac: 20:38:3e:9b:3c:67:58:1f:37:89:44:e7:13:a2:3f:7f:c9:db: 9a:35:66:c8:4c:c9:11:c8:bd:50:9f:f2:25:d4:55:19:f9:68: 64:d1:4a:93:aa:bb:4a:4a:c7:de:23:a9:4e:c9:06:bc:60:ea: 50:40:6d:5f:2a:8c:ae:35:44:05:9a:dc:66:ae:34:ed:5e:d0: e1:f3:a0:a6:2a:c5:e9:e7:4a:d2:07:31:9a:07:92:0d:47:8c: 12:88:d0:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBy2u/nVYxWq8kx1i0k8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWE4MTIyYzI0N2QzZWZiYmQyZjZhODE0YTVmNjg3NDU0 MTg4ZGYwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTIyYzEwYzA3NTdkOTE5ZmEyMWJjZTUxYjVlYjkyOGExYzA0NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ/uxrkd9YtWb7pQ79MOuVNZGwox /hKHkAHsygR8WbC+EbFEzC6fPm6TSqsfJmtsSvpWr3RNU/bk14Cwy41h9bUK0NZI TBA7USWLdorFmAGznXMhPLVTTXTVrvjYXxf0IxnP+Lg3wSRnquySC5M7N1o9A+80 QP4vclQgADoMNf0Y5WT2q3imQ0hRovW2krK779nrMzDnUj4XXdXRr3Evlscc6TJI pOTMdqWfrB84/AOGjS8lq3xaVt7kYFIH9kMMPFA/WiKizQzUS6Eh0aJUYYwO6YhC N2Mmjz0Hgf+wu26rUO9f0b/ZZUKJWCiXxCv8WH583+kt6ga1SqNlzDtBSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4iwQwHV9kZ+iG85RteuSihwEQ8MB8GA1UdIwQY MBaAFAJagSLCR9Pvu9L2qBSl9odFQYjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgt MWIzZTM1OTUxMDFiLzEvRGlMQkRBZFgyUm42SWJ6bEcxNjVLS0hBUkR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgtMWIzZTM1OTUxMDFi LzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQicMA0G CSqGSIb3DQEBCwUAA4IBAQAjs1r2+pTEHO0/+rb9lKKOAmJDUj6MzRq4qyuTQa/D gj6qLEPfR3UexaRwQVq5siTdytL2ri5fVXrtyKBXcind4jql9mv6qo71xMPEWNM/ 06TRez+VHYq5Xl7PhBq4bcxrN+ED/An61R6Gn/HM0GgaHxzej9a7VURYSsmdoElI TyitEWZ6Q9S9fcO+UXmUVjSxWGVL6fXADvNkye0L5kP0A6wgOD6bPGdYHzeJROcT oj9/yduaNWbITMkRyL1Qn/Il1FUZ+Whk0UqTqrtKSsfeI6lOyQa8YOpQQG1fKoyu NUQFmtxmrjTtXtDh86CmKsXp50rSBzGaB5INR4wSiNCH -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:19 2026 by rpki-client