This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/26V_3Mvd5HzKd--IVekz7E66T7M.roa File: 26V_3Mvd5HzKd--IVekz7E66T7M.roa (raw, json) Hash identifier: vR3cG90fuQ7doDsdAb/Dcwa0EbD0JM2o7zzPUpuTRJk= Subject key identifier: DB:A5:7F:DC:CB:DD:E4:7C:CA:77:EF:88:55:E9:33:EC:4E:BA:4F:B3 Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03 Certificate serial: 019B7F8578EC242072D348A9D2D313B8AB23 Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/26V_3Mvd5HzKd--IVekz7E66T7M.roa Signing time: Fri 02 Jan 2026 16:23:32 +0000 ROA not before: Fri 02 Jan 2026 16:23:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39398 IP address blocks: 5.199.228.0/24 maxlen: 24 5.199.229.0/24 maxlen: 24 5.199.230.0/24 maxlen: 24 5.199.231.0/24 maxlen: 24 185.119.248.0/22 maxlen: 24 185.119.248.0/24 maxlen: 24 185.119.249.0/24 maxlen: 24 185.119.250.0/24 maxlen: 24 185.119.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:78:ec:24:20:72:d3:48:a9:d2:d3:13:b8:ab:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dba57fdccbdde47cca77ef8855e933ec4eba4fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:cd:3e:39:87:e6:32:86:4b:7c:d7:9b:60: 06:07:f4:30:41:0c:a4:1f:d4:74:2d:d8:fc:1d:1c: 5e:5e:a3:ef:8c:6b:f4:3b:67:01:2f:c8:31:d4:f6: 1c:bb:60:b7:81:8f:43:07:d8:6f:03:c7:93:3d:65: d7:bc:a6:01:19:de:08:64:66:fb:a9:43:52:a9:7f: 75:7e:be:68:8c:87:e3:c2:23:c0:b3:1c:ae:5b:64: e3:32:84:38:99:75:33:df:f5:22:c9:3d:74:50:97: 83:e2:91:60:d8:52:53:6f:62:4c:42:a3:4a:92:8d: b3:d4:65:14:40:1c:26:f8:bf:da:9f:46:f1:25:2c: 01:83:89:4e:75:0f:90:16:af:41:4c:a5:4a:60:cc: e2:09:f4:83:64:10:62:22:3a:9a:a9:99:81:02:81: d0:72:23:76:90:fc:a9:87:c0:bd:79:7c:57:71:fd: 16:a3:ab:89:29:0e:53:98:ee:3d:d1:f7:92:19:f5: 61:38:e0:32:d2:e2:b2:a1:7a:16:17:e1:13:a0:55: e9:39:a5:92:0b:9e:81:73:0e:eb:f2:5f:aa:b1:90: fa:8e:b6:6c:3d:91:3d:a3:06:53:32:98:8d:93:a6: 73:86:33:d3:30:d0:a0:da:6c:1a:e4:2b:40:56:f4: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A5:7F:DC:CB:DD:E4:7C:CA:77:EF:88:55:E9:33:EC:4E:BA:4F:B3 X509v3 Authority Key Identifier: keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/26V_3Mvd5HzKd--IVekz7E66T7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.228.0/22 185.119.248.0/22 Signature Algorithm: sha256WithRSAEncryption 10:f5:49:dc:5c:20:1d:f1:d3:68:d1:b3:50:91:61:cc:8e:c9: a7:3a:9a:ce:a7:f6:8e:a0:fd:0b:4e:cd:c3:a2:67:ed:a5:16: 3b:e5:fb:85:cf:0e:d5:ca:77:39:8c:80:89:be:6c:1c:85:a9: 8b:cd:ea:37:c5:f9:14:19:71:31:63:81:bf:13:11:af:a3:b8: 9c:da:18:35:4f:12:93:21:e9:ae:a0:61:a5:56:e8:3f:94:a3: 86:86:ab:b4:36:67:5b:d7:a7:d6:c2:88:5a:00:8a:bd:1d:af: 32:a3:07:57:31:fb:f1:68:a7:06:81:52:f6:cb:01:1b:25:0e: 9f:13:d6:17:fe:8a:63:c0:a2:3e:90:d4:95:fd:ed:9a:7c:58: 0f:60:57:c0:5b:72:ca:3c:18:ef:d4:2c:04:81:41:3e:ac:81: a7:60:6b:99:7e:9a:1c:fd:fa:27:26:f3:57:5b:92:b8:61:93: 0f:51:1f:8b:56:51:a2:5a:2b:44:f4:65:93:7b:b1:4c:6b:57: 63:f4:1c:b6:f4:97:aa:c4:4e:aa:3b:67:cd:cb:54:e1:2d:fd: 3d:9a:c7:97:6a:ec:da:cb:bd:37:ea:d2:60:31:eb:72:98:7a: 0c:58:dc:11:b4:84:21:8b:94:f4:67:37:02:fe:9b:97:b1:ab: 9b:4e:27:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hXjsJCBy00ip0tMTuKsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMWE4ODdlNzY1M2EyZGU0NGYxMzE2M2UxODcwMzczMjZh MjlhMDMwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmE1N2ZkY2NiZGRlNDdjY2E3N2VmODg1NWU5MzNlYzRlYmE0ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutHNPjmH5jKGS3zXm2AGB/QwQQyk H9R0Ldj8HRxeXqPvjGv0O2cBL8gx1PYcu2C3gY9DB9hvA8eTPWXXvKYBGd4IZGb7 qUNSqX91fr5ojIfjwiPAsxyuW2TjMoQ4mXUz3/UiyT10UJeD4pFg2FJTb2JMQqNK ko2z1GUUQBwm+L/an0bxJSwBg4lOdQ+QFq9BTKVKYMziCfSDZBBiIjqaqZmBAoHQ ciN2kPyph8C9eXxXcf0Wo6uJKQ5TmO490feSGfVhOOAy0uKyoXoWF+EToFXpOaWS C56Bcw7r8l+qsZD6jrZsPZE9owZTMpiNk6ZzhjPTMNCg2mwa5CtAVvTgoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNulf9zL3eR8ynfviFXpM+xOuk+zMB8GA1UdIwQY MBaAFL4aiH52U6LeRPExY+GHA3MmopoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYt ODZjNTQxY2E5ZDcxLzEvMjZWXzNNdmQ1SHpLZC0tSVZla3o3RTY2VDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYtODZjNTQxY2E5ZDcx LzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBcfkAwQC uXf4MA0GCSqGSIb3DQEBCwUAA4IBAQAQ9UncXCAd8dNo0bNQkWHMjsmnOprOp/aO oP0LTs3DomftpRY75fuFzw7Vync5jICJvmwchamLzeo3xfkUGXExY4G/ExGvo7ic 2hg1TxKTIemuoGGlVug/lKOGhqu0Nmdb16fWwohaAIq9Ha8yowdXMfvxaKcGgVL2 ywEbJQ6fE9YX/opjwKI+kNSV/e2afFgPYFfAW3LKPBjv1CwEgUE+rIGnYGuZfpoc /fonJvNXW5K4YZMPUR+LVlGiWitE9GWTe7FMa1dj9By29JeqxE6qO2fNy1ThLf09 mseXauzay7036tJgMetymHoMWNwRtIQhi5T0ZzcC/puXsaubTicW -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:14 2026 by rpki-client