This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/_DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa File: _DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa (raw, json) Hash identifier: OwteAVyJT3/CYxZ6V5psgfpGz0TIbw1l1ToKZNhqTPM= Subject key identifier: FC:31:07:A5:9F:BE:72:CD:C5:F6:61:94:EA:08:CE:DC:26:F4:CC:AD Certificate issuer: /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40 Certificate serial: 019B7DCAF37B9628520CA79F3538F851AAD0 Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/_DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa Signing time: Fri 02 Jan 2026 08:20:11 +0000 ROA not before: Fri 02 Jan 2026 08:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205192 IP address blocks: 185.226.160.0/24 maxlen: 24 185.226.161.0/24 maxlen: 24 185.226.162.0/24 maxlen: 24 185.226.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f3:7b:96:28:52:0c:a7:9f:35:38:f8:51:aa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40 Validity Not Before: Jan 2 08:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc3107a59fbe72cdc5f66194ea08cedc26f4ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:c4:10:66:c8:b0:f4:a3:38:d3:32:15:0d: 1c:98:fd:5c:b6:4b:df:f0:e0:bf:8b:e6:1a:f1:78: 96:f9:b6:4f:e7:bb:59:5c:4b:22:4d:a9:78:54:e2: 27:7a:0c:3e:96:a5:e2:6e:05:85:bc:52:b4:5e:2c: 01:af:ab:28:dd:ee:bd:b0:ab:a0:03:50:6f:ce:9c: 9b:7a:16:7e:19:7e:12:98:25:16:52:6c:cb:5d:4f: 64:b6:33:19:3f:66:f6:d2:6a:f0:b1:07:e1:a3:aa: ab:a7:81:12:79:04:12:3f:fb:2e:61:71:be:ee:34: 1b:9a:d2:f3:4d:d9:40:d0:54:01:20:a7:1c:4c:3a: b7:af:27:3f:e3:98:a8:c4:9a:24:4d:f3:ca:9d:1a: 40:a8:40:bf:df:67:b2:c7:de:9c:a6:a4:a9:73:5a: 15:66:8d:8d:cc:6e:55:50:5b:9c:3c:f3:24:74:83: bd:f4:b3:cd:f3:df:86:28:27:2a:fb:89:86:23:c7: 87:df:13:22:09:33:06:f0:a1:c4:10:cb:43:73:cc: 52:35:01:1a:bb:bb:52:0a:04:37:b7:a5:cf:88:fc: f8:82:9b:ec:e4:ed:e9:4d:8f:da:50:3d:47:3c:ed: bb:80:96:08:46:c8:03:c0:68:67:d7:1d:48:a0:a3: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:31:07:A5:9F:BE:72:CD:C5:F6:61:94:EA:08:CE:DC:26:F4:CC:AD X509v3 Authority Key Identifier: keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/_DEHpZ--cs3F9mGU6gjO3Cb0zK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.160.0/22 Signature Algorithm: sha256WithRSAEncryption bf:07:62:ef:36:7d:71:c0:7a:7f:3f:c1:07:df:62:0c:6c:b9: 48:bd:81:71:07:fe:b6:04:a4:1c:65:c9:2f:b0:0e:f2:e0:1f: bd:97:f7:89:df:2a:dd:ed:0f:be:63:95:61:57:31:8c:7e:5c: 34:4c:dc:e2:06:12:f5:eb:45:e6:35:75:32:b1:c0:7e:da:f9: 8b:c6:2f:f4:2d:e5:03:22:9b:12:c8:f8:ab:1f:ae:75:81:2b: ae:b9:f8:e4:8d:f4:58:f1:a2:7a:68:7d:af:74:f7:7b:11:f9: 72:d7:19:a3:cd:e1:dc:83:0d:ac:47:dd:74:98:49:70:c6:d8: fb:dc:bd:55:4d:1d:9d:33:74:80:e6:92:20:16:a0:53:e3:50: 26:50:d3:78:63:74:8f:bc:6d:ef:81:2b:5f:3d:6f:59:50:3c: 40:ac:ee:17:12:8d:fb:82:01:a0:88:34:10:6b:e0:74:d7:ac: b8:ec:06:ca:2c:b0:09:db:3e:43:76:3a:92:fa:c7:07:0a:4a: b5:f0:9b:96:d9:cd:56:6a:98:17:7c:31:45:0c:73:c3:6c:2c: 3c:60:86:e4:42:79:fd:aa:47:e9:01:e6:44:b8:37:8d:e1:bd: 24:b1:15:0f:c9:06:ca:f2:63:a7:67:ce:8b:b1:a2:80:f2:17: 42:e4:e5:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvN7lihSDKefNTj4UarQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNTc5ZDFkNWZhN2ZkMmE0NDViNWRkOGVlOGYyNjM3YjQx ZjBkNDAwHhcNMjYwMTAyMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzMxMDdhNTlmYmU3MmNkYzVmNjYxOTRlYTA4Y2VkYzI2ZjRjY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x/EEGbIsPSjONMyFQ0cmP1ctkvf 8OC/i+Ya8XiW+bZP57tZXEsiTal4VOInegw+lqXibgWFvFK0XiwBr6so3e69sKug A1BvzpybehZ+GX4SmCUWUmzLXU9ktjMZP2b20mrwsQfho6qrp4ESeQQSP/suYXG+ 7jQbmtLzTdlA0FQBIKccTDq3ryc/45ioxJokTfPKnRpAqEC/32eyx96cpqSpc1oV Zo2NzG5VUFucPPMkdIO99LPN89+GKCcq+4mGI8eH3xMiCTMG8KHEEMtDc8xSNQEa u7tSCgQ3t6XPiPz4gpvs5O3pTY/aUD1HPO27gJYIRsgDwGhn1x1IoKPgFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPwxB6WfvnLNxfZhlOoIztwm9MytMB8GA1UdIwQY MBaAFG1XnR1fp/0qRFtd2O6PJje0Hw1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDct ZjYzOTU4NjBmYzk4LzEvX0RFSHBaLS1jczNGOW1HVTZnak8zQ2IwekswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDctZjYzOTU4NjBmYzk4 LzEvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueKgMA0G CSqGSIb3DQEBCwUAA4IBAQC/B2LvNn1xwHp/P8EH32IMbLlIvYFxB/62BKQcZckv sA7y4B+9l/eJ3yrd7Q++Y5VhVzGMflw0TNziBhL160XmNXUyscB+2vmLxi/0LeUD IpsSyPirH651gSuuufjkjfRY8aJ6aH2vdPd7Efly1xmjzeHcgw2sR910mElwxtj7 3L1VTR2dM3SA5pIgFqBT41AmUNN4Y3SPvG3vgStfPW9ZUDxArO4XEo37ggGgiDQQ a+B016y47AbKLLAJ2z5DdjqS+scHCkq18JuW2c1WapgXfDFFDHPDbCw8YIbkQnn9 qkfpAeZEuDeN4b0ksRUPyQbK8mOnZ86LsaKA8hdC5OWV -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:07 2026 by rpki-client