This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/226BZyJmLGvxoWLAf4PKwDePW1M.roa File: 226BZyJmLGvxoWLAf4PKwDePW1M.roa (raw, json) Hash identifier: naS4Hl+qEsGHYxRmEuAcqgInMtduGMJYAggaVrJL7yU= Subject key identifier: DB:6E:81:67:22:66:2C:6B:F1:A1:62:C0:7F:83:CA:C0:37:8F:5B:53 Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353 Certificate serial: 019B7C7F03C1D9077C3145D4B0F9B567750A Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/226BZyJmLGvxoWLAf4PKwDePW1M.roa Signing time: Fri 02 Jan 2026 02:17:37 +0000 ROA not before: Fri 02 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50157 IP address blocks: 62.76.121.0/24 maxlen: 24 195.209.152.0/24 maxlen: 24 195.209.153.0/24 maxlen: 24 195.209.154.0/24 maxlen: 24 195.209.155.0/24 maxlen: 24 195.209.156.0/24 maxlen: 24 195.209.157.0/24 maxlen: 24 195.209.158.0/24 maxlen: 24 195.209.159.0/24 maxlen: 24 212.192.191.0/24 maxlen: 24 2001:67c:614::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:03:c1:d9:07:7c:31:45:d4:b0:f9:b5:67:75:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353 Validity Not Before: Jan 2 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db6e816722662c6bf1a162c07f83cac0378f5b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:48:ca:06:f0:69:a8:6c:27:d8:09:17:e2: f8:37:bc:f0:89:0a:eb:9f:99:f1:d9:5d:d5:47:9b: 13:5c:21:c1:8f:78:30:75:a6:3d:0f:6e:6d:2c:55: f2:22:fd:43:be:e7:8e:2b:2f:06:3a:ed:37:8d:17: 7a:3c:60:47:d2:10:ad:e0:19:dd:2f:ff:cc:05:d7: 8c:83:5b:bd:9f:a1:24:89:b7:2e:4a:c6:d3:9d:47: 09:c4:6e:63:db:8a:15:b7:11:0e:70:cc:4b:45:77: ef:7c:61:bb:ae:a1:c9:11:9e:c2:ab:36:17:0a:9c: 6f:3b:4e:55:44:4e:f6:da:0e:4d:db:7f:a7:1e:ca: ca:4e:1b:23:70:c0:07:f2:5e:4a:fc:0b:c3:c0:3d: 59:61:5b:c7:d6:ef:94:03:c2:1f:10:07:fd:3b:14: cb:63:21:e5:4a:63:fa:e5:6f:e8:c9:69:07:ee:d0: 3c:f3:52:a4:ff:68:f6:6d:ed:8f:03:4c:db:63:1f: c6:5d:80:89:ad:dd:dd:50:42:42:f9:18:56:8a:35: 58:13:c3:19:a0:b6:53:b9:47:1d:26:62:68:f2:1b: be:1a:1c:65:4d:08:46:b1:a6:87:ea:34:f2:7e:ea: 8a:78:a9:15:38:ac:d8:21:be:0c:91:33:46:59:38: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6E:81:67:22:66:2C:6B:F1:A1:62:C0:7F:83:CA:C0:37:8F:5B:53 X509v3 Authority Key Identifier: keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/226BZyJmLGvxoWLAf4PKwDePW1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.121.0/24 195.209.152.0/21 212.192.191.0/24 IPv6: 2001:67c:614::/48 Signature Algorithm: sha256WithRSAEncryption c0:18:a9:7a:24:22:4b:29:af:66:c1:cf:18:cb:22:c2:ec:42: 4a:97:19:f7:99:59:2b:61:d6:e1:b2:50:a7:d6:1c:f9:52:66: c6:78:f4:14:31:b4:9b:ce:b6:a5:c1:cf:3f:9d:f8:94:8b:ef: 2e:e5:10:3e:af:f4:32:96:3b:fc:6e:ab:c0:b8:ce:2c:fb:88: 48:e3:91:87:77:d7:6e:40:b4:56:3a:43:1a:69:8c:54:3e:6e: 47:a7:d1:17:f8:29:87:cd:25:b4:c8:c7:80:40:f5:74:76:95: bb:53:97:49:59:7c:e8:56:60:4e:79:70:3f:8d:a8:7a:17:4a: 06:96:20:e9:55:e0:d0:e6:62:75:09:b8:34:7b:48:62:c4:74: ca:b5:d5:e8:c2:88:ec:da:34:bc:1c:0e:56:b2:34:11:21:57: 5e:84:f9:b5:90:4f:05:c3:8c:82:12:28:da:ce:48:b5:7b:64: bb:4b:ea:f5:bd:74:c9:90:be:55:90:3b:c5:84:5b:22:5c:28: 86:6a:00:03:17:6a:ef:44:b1:4c:c8:d2:ee:5b:e7:e1:2e:69: 9e:65:5f:76:77:1b:8a:46:36:2a:29:2a:9c:7e:5f:27:53:44: fb:b2:d8:ef:77:c7:52:79:35:ab:d9:26:5f:66:f2:1d:a2:6b: 4d:e3:76:ea -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8fwPB2Qd8MUXUsPm1Z3UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmQyMzViZmQyYmI3N2Q5ODg2YjE0Y2IxMGRjNDljNDIw ODIzNTMwHhcNMjYwMTAyMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjZlODE2NzIyNjYyYzZiZjFhMTYyYzA3ZjgzY2FjMDM3OGY1YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B1IygbwaahsJ9gJF+L4N7zwiQrr n5nx2V3VR5sTXCHBj3gwdaY9D25tLFXyIv1DvueOKy8GOu03jRd6PGBH0hCt4Bnd L//MBdeMg1u9n6EkibcuSsbTnUcJxG5j24oVtxEOcMxLRXfvfGG7rqHJEZ7CqzYX CpxvO05VRE722g5N23+nHsrKThsjcMAH8l5K/AvDwD1ZYVvH1u+UA8IfEAf9OxTL YyHlSmP65W/oyWkH7tA881Kk/2j2be2PA0zbYx/GXYCJrd3dUEJC+RhWijVYE8MZ oLZTuUcdJmJo8hu+GhxlTQhGsaaH6jTyfuqKeKkVOKzYIb4MkTNGWTi4WwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFNtugWciZixr8aFiwH+DysA3j1tTMB8GA1UdIwQY MBaAFC5tI1v9K7d9mIaxTLENxJxCCCNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUt MWU5ODQ4Y2IxNzQ1LzEvMjI2Qlp5Sm1MR3Z4b1dMQWY0UEt3RGVQVzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUtMWU5ODQ4Y2IxNzQ1 LzEvTG0waldfMHJ0MzJZaHJGTXNRM0VuRUlJSTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAPkx5AwQD w9GYAwQA1MC/MA8EAgACMAkDBwAgAQZ8BhQwDQYJKoZIhvcNAQELBQADggEBAMAY qXokIkspr2bBzxjLIsLsQkqXGfeZWSth1uGyUKfWHPlSZsZ49BQxtJvOtqXBzz+d +JSL7y7lED6v9DKWO/xuq8C4ziz7iEjjkYd3125AtFY6QxppjFQ+bken0Rf4KYfN JbTIx4BA9XR2lbtTl0lZfOhWYE55cD+NqHoXSgaWIOlV4NDmYnUJuDR7SGLEdMq1 1ejCiOzaNLwcDlayNBEhV16E+bWQTwXDjIISKNrOSLV7ZLtL6vW9dMmQvlWQO8WE WyJcKIZqAAMXau9EsUzI0u5b5+EuaZ5lX3Z3G4pGNiopKpx+XydTRPuy2O93x1J5 NavZJl9m8h2ia03jduo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:26 2026 by rpki-client