This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/S826_Q-NbK6gPOimYuOXQySil64.roa File: S826_Q-NbK6gPOimYuOXQySil64.roa (raw, json) Hash identifier: ypRvVTmwSn3/rmoJJkwc/n3dQQIZ4UY66Unr5qq9Mxo= Subject key identifier: 4B:CD:BA:FD:0F:8D:6C:AE:A0:3C:E8:A6:62:E3:97:43:24:A2:97:AE Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B9AE9B1083CD4773140402A33EB9 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/S826_Q-NbK6gPOimYuOXQySil64.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211567 IP address blocks: 185.88.173.0/24 maxlen: 24 185.250.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b9:ae:9b:10:83:cd:47:73:14:04:02:a3:3e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bcdbafd0f8d6caea03ce8a662e3974324a297ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:86:54:5d:5f:f3:cc:fd:e5:44:f2:8b:04: 81:b8:f2:d7:d5:d6:2f:eb:99:48:ee:52:ec:e7:6a: 20:b9:2a:45:41:da:12:9c:9f:3f:cf:3c:18:fd:ec: f0:db:50:76:f5:17:ed:bb:4a:f5:11:8c:b2:9f:e8: fc:f1:1b:e1:a7:d8:bd:52:8e:f5:77:fe:f9:1d:30: fe:85:cb:89:c8:78:2f:bd:a9:c1:c2:78:4b:68:73: d1:93:31:09:87:33:99:3e:a4:fb:a5:6f:1d:2e:79: ab:ed:ba:a5:ff:e3:11:e0:13:b9:5b:c9:7d:52:23: 01:98:72:40:89:d8:8c:45:db:02:4f:8c:aa:73:c0: 6e:19:ad:c4:cf:21:2f:54:00:be:29:4a:0b:a9:a5: 31:e9:2a:3a:e9:ad:37:9c:be:6d:c3:f7:e5:9b:13: 1a:74:39:99:e9:7e:2f:ae:55:a0:21:a7:49:a1:0d: d1:7b:f8:70:f5:ee:cb:e8:da:6f:59:98:35:9f:80: dd:81:41:7f:d9:54:fe:4f:41:3f:e5:49:fc:fe:28: ff:7d:b3:ca:29:d2:a3:ad:3f:a0:3f:ce:e1:81:36: ea:83:46:3a:39:01:64:87:dc:41:96:c0:a0:37:39: ec:6d:67:17:af:a6:90:6b:4e:a6:d8:af:de:87:43: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CD:BA:FD:0F:8D:6C:AE:A0:3C:E8:A6:62:E3:97:43:24:A2:97:AE X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/S826_Q-NbK6gPOimYuOXQySil64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.173.0/24 185.250.210.0/24 Signature Algorithm: sha256WithRSAEncryption 51:6f:9d:9a:f4:2d:5b:2d:c0:8e:22:a9:9f:a6:92:3e:99:7b: 17:09:77:a0:3f:f0:b0:74:05:d3:44:e8:8d:f4:79:93:cd:34: 28:34:4d:bc:b4:ef:48:bf:06:b6:c9:b2:88:a7:a0:ca:94:8d: 44:c1:41:78:93:b9:86:9b:fc:33:66:a6:24:ed:8b:0f:fa:59: ab:2b:41:ee:88:b7:a8:b8:a3:c3:76:4a:20:95:e5:b4:96:99: 39:ab:e5:cb:bc:b9:53:75:0a:37:ba:a3:ff:ef:05:58:7d:85: 19:f1:b0:0d:ab:96:83:94:25:3e:d8:7a:19:68:e4:af:5a:5c: 0c:fd:e0:b6:43:ae:93:32:df:73:10:41:e1:9e:c5:ae:1d:a7: ff:dd:eb:4d:56:96:fc:0d:32:8b:c9:2f:a4:97:18:8e:1b:4d: b4:1d:db:f7:f0:20:48:33:83:8f:a3:6f:a3:2a:4a:18:d4:5c: ec:cb:70:bb:50:0e:4e:49:6e:5f:63:a9:ae:c8:71:9f:20:a7: 1d:cd:d4:7d:b9:c3:1c:8e:bd:36:68:65:37:98:ef:2c:15:37: 34:ba:a0:2b:67:5e:fa:b9:d8:fe:cf:69:c3:61:2a:2d:99:78: 40:6c:89:3c:ec:63:e4:de:6f:c6:be:ab:02:d4:cd:88:2c:f4: 49:25:16:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WLmumxCDzUdzFAQCoz65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmNkYmFmZDBmOGQ2Y2FlYTAzY2U4YTY2MmUzOTc0MzI0YTI5N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYuGVF1f88z95UTyiwSBuPLX1dYv 65lI7lLs52oguSpFQdoSnJ8/zzwY/ezw21B29Rftu0r1EYyyn+j88Rvhp9i9Uo71 d/75HTD+hcuJyHgvvanBwnhLaHPRkzEJhzOZPqT7pW8dLnmr7bql/+MR4BO5W8l9 UiMBmHJAidiMRdsCT4yqc8BuGa3EzyEvVAC+KUoLqaUx6So66a03nL5tw/flmxMa dDmZ6X4vrlWgIadJoQ3Re/hw9e7L6NpvWZg1n4DdgUF/2VT+T0E/5Un8/ij/fbPK KdKjrT+gP87hgTbqg0Y6OQFkh9xBlsCgNznsbWcXr6aQa06m2K/eh0MopQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEvNuv0PjWyuoDzopmLjl0MkopeuMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvUzgyNl9RLU5iSzZnUE9pbVl1T1hReVNpbDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVitAwQA ufrSMA0GCSqGSIb3DQEBCwUAA4IBAQBRb52a9C1bLcCOIqmfppI+mXsXCXegP/Cw dAXTROiN9HmTzTQoNE28tO9Ivwa2ybKIp6DKlI1EwUF4k7mGm/wzZqYk7YsP+lmr K0HuiLeouKPDdkogleW0lpk5q+XLvLlTdQo3uqP/7wVYfYUZ8bANq5aDlCU+2HoZ aOSvWlwM/eC2Q66TMt9zEEHhnsWuHaf/3etNVpb8DTKLyS+klxiOG020Hdv38CBI M4OPo2+jKkoY1Fzsy3C7UA5OSW5fY6muyHGfIKcdzdR9ucMcjr02aGU3mO8sFTc0 uqArZ176udj+z2nDYSotmXhAbIk87GPk3m/GvqsC1M2ILPRJJRaf -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:04 2026 by rpki-client