This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/0Lb-drTpA0q5ebXv85gCnaFggHg.roa File: 0Lb-drTpA0q5ebXv85gCnaFggHg.roa (raw, json) Hash identifier: o+Ylyc+Dh5qbOBllykeo3o5DJF0I1eOH3ixeecVsyxA= Subject key identifier: D0:B6:FE:76:B4:E9:03:4A:B9:79:B5:EF:F3:98:02:9D:A1:60:80:78 Certificate issuer: /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672 Certificate serial: 019B7AC898A12D859A4866C4027C6F413C73 Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/0Lb-drTpA0q5ebXv85gCnaFggHg.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211799 IP address blocks: 185.40.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:98:a1:2d:85:9a:48:66:c4:02:7c:6f:41:3c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0b6fe76b4e9034ab979b5eff398029da1608078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:f8:57:92:6c:33:28:90:24:21:6f:56:9b: 5c:d9:88:42:3f:3e:2a:f1:f7:84:8f:5b:ed:8f:2b: 58:77:a1:55:97:72:f5:ab:84:af:b0:b2:82:72:49: b3:77:c6:9d:c1:bd:b0:b9:c2:2b:62:b9:06:5a:a1: 51:07:a2:21:4b:2c:7e:a0:b8:65:aa:36:db:d2:66: 5b:74:13:12:8b:75:7d:52:82:20:13:d8:90:3f:41: db:6a:c1:8a:57:61:86:d9:d6:d5:ce:33:52:aa:6d: f9:f8:5b:6d:ee:e8:5a:d4:34:41:e1:ab:6c:4b:0b: 13:74:8e:f1:30:ab:41:f1:f2:bb:e3:e3:ec:4c:21: 4f:85:24:ce:37:bd:e1:7f:bb:e1:9b:a2:f1:c1:35: d9:88:f7:48:3e:4d:54:4e:77:be:2f:00:f4:56:f6: be:20:da:1f:2e:6d:64:1c:b3:9a:60:db:ca:dc:2c: d9:98:88:e2:aa:cd:13:4c:4b:ef:36:70:59:7d:00: ad:17:91:21:3f:6e:01:40:5b:fe:65:ba:54:65:19: f3:7a:5a:c0:0b:9b:de:06:d6:82:c3:ed:e7:12:24: 53:2a:5d:11:a2:ab:0f:97:db:66:0f:be:f9:f3:db: 34:8f:3e:8f:c4:14:ae:8a:39:98:ed:89:5b:fb:5f: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:FE:76:B4:E9:03:4A:B9:79:B5:EF:F3:98:02:9D:A1:60:80:78 X509v3 Authority Key Identifier: keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/0Lb-drTpA0q5ebXv85gCnaFggHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.17.0/24 Signature Algorithm: sha256WithRSAEncryption 25:a1:ae:ed:85:b1:ad:f7:4f:87:fe:c8:03:a6:c4:13:57:3e: 8d:bd:43:51:61:b5:c5:12:50:98:5d:4a:44:ce:1a:36:a9:87: 0b:9b:e4:f6:48:f8:a6:c5:c7:dc:d4:77:1c:3f:91:23:91:15: 90:9c:e5:d5:2f:2d:4f:6b:e3:2f:29:53:a7:f9:b6:e9:27:b4: c2:99:df:eb:91:ee:4b:82:ec:b9:73:ee:38:cc:a0:19:79:a7: 97:b3:0f:7a:41:b0:1e:8b:dd:50:f6:f4:1e:6c:5a:9e:2e:48: 2f:04:6f:17:c3:5d:35:54:6e:6f:55:95:c0:f2:c1:1b:8b:53: 37:94:67:72:8a:c7:e0:ba:fe:38:46:98:11:69:6d:11:f5:70: eb:d5:f9:4f:93:60:58:88:4c:93:60:4d:96:a9:48:a6:2a:32: c8:1a:30:38:bf:da:2a:ef:6f:f9:f4:5f:a2:c7:3e:85:2b:f4: a4:ab:b5:63:fd:d2:ed:27:57:ea:26:e7:53:6a:1b:1c:a2:ed: a0:42:48:17:f4:41:72:f9:e0:3a:4d:54:56:a6:05:7f:4b:fc: 53:99:ec:cc:f2:1b:dd:28:88:b5:fa:30:95:16:69:c2:30:f9: 75:a2:92:67:99:e0:7a:fb:61:da:20:be:35:c2:f2:7e:ec:4a: 4c:0c:90:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJihLYWaSGbEAnxvQTxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDNkYjhiZWQzNTRiNDc4YzZkMTcwNGExZTNhZTZjOTI2 ZDU2NzIwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGI2ZmU3NmI0ZTkwMzRhYjk3OWI1ZWZmMzk4MDI5ZGExNjA4MDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpH4V5JsMyiQJCFvVptc2YhCPz4q 8feEj1vtjytYd6FVl3L1q4SvsLKCckmzd8adwb2wucIrYrkGWqFRB6IhSyx+oLhl qjbb0mZbdBMSi3V9UoIgE9iQP0HbasGKV2GG2dbVzjNSqm35+Ftt7uha1DRB4ats SwsTdI7xMKtB8fK74+PsTCFPhSTON73hf7vhm6LxwTXZiPdIPk1UTne+LwD0Vva+ INofLm1kHLOaYNvK3CzZmIjiqs0TTEvvNnBZfQCtF5EhP24BQFv+ZbpUZRnzelrA C5veBtaCw+3nEiRTKl0RoqsPl9tmD77589s0jz6PxBSuijmY7Ylb+1+4VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNC2/na06QNKuXm17/OYAp2hYIB4MB8GA1UdIwQY MBaAFCbT24vtNUtHjG0XBKHjrmySbVZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQt Y2U2YmI3MWE4ZGE2LzEvMExiLWRyVHBBMHE1ZWJYdjg1Z0NuYUZnZ0hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQtY2U2YmI3MWE4ZGE2 LzEvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSgRMA0G CSqGSIb3DQEBCwUAA4IBAQAloa7thbGt90+H/sgDpsQTVz6NvUNRYbXFElCYXUpE zho2qYcLm+T2SPimxcfc1HccP5EjkRWQnOXVLy1Pa+MvKVOn+bbpJ7TCmd/rke5L guy5c+44zKAZeaeXsw96QbAei91Q9vQebFqeLkgvBG8Xw101VG5vVZXA8sEbi1M3 lGdyisfguv44RpgRaW0R9XDr1flPk2BYiEyTYE2WqUimKjLIGjA4v9oq72/59F+i xz6FK/Skq7Vj/dLtJ1fqJudTahscou2gQkgX9EFy+eA6TVRWpgV/S/xTmezM8hvd KIi1+jCVFmnCMPl1opJnmeB6+2HaIL41wvJ+7EpMDJDw -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:11 2026 by rpki-client