This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/vCblwnfnVDcB7QAInr9wO3fWjIk.roa File: vCblwnfnVDcB7QAInr9wO3fWjIk.roa (raw, json) Hash identifier: d2afxpid86oKujS9MPLVfD/AYLN6Tg4NNXIDg5DemP0= Subject key identifier: BC:26:E5:C2:77:E7:54:37:01:ED:00:08:9E:BF:70:3B:77:D6:8C:89 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A2A4891811BDA2EBC2DB0FA135412F Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/vCblwnfnVDcB7QAInr9wO3fWjIk.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401951 IP address blocks: 185.161.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a4:89:18:11:bd:a2:eb:c2:db:0f:a1:35:41:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc26e5c277e7543701ed00089ebf703b77d68c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:69:19:82:b0:87:97:47:92:75:d3:5e:42: ad:02:5c:83:61:a3:20:98:47:5b:61:d9:d6:55:09: c2:44:cb:91:b9:64:88:eb:c9:9d:e7:d6:22:75:3c: 35:45:44:db:2b:ef:ce:6d:5f:64:db:5b:ad:b1:cf: 5a:98:7d:5b:a1:35:24:03:3d:d7:a6:4c:07:ef:4e: 46:04:94:51:43:18:09:4e:82:21:f6:95:f8:f4:9b: 38:cd:cb:ad:9f:44:39:94:48:11:59:dd:fc:be:39: 5f:0e:ca:d1:09:43:5c:27:fe:cd:ce:d9:44:70:28: 29:2d:2d:82:73:01:19:4c:e2:39:8b:4f:4a:1c:06: f4:b0:a7:05:96:65:46:f4:58:35:a3:bd:7e:3c:47: 97:c9:0e:a8:98:ac:af:dd:5f:82:cd:57:65:7e:90: f7:c9:9d:46:20:84:86:df:5b:bf:99:9e:e2:a0:79: f3:db:44:be:72:32:94:6d:5d:3a:68:32:01:57:3b: ba:03:92:5a:86:44:29:70:ac:7e:17:13:3f:91:b9: 6d:a2:04:98:71:df:c3:70:42:a8:cc:5c:1c:0c:c7: ea:df:85:75:98:e1:98:98:50:53:98:12:a2:f9:36: ed:34:5b:34:99:f9:f3:66:4e:e3:fe:20:3a:69:03: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:26:E5:C2:77:E7:54:37:01:ED:00:08:9E:BF:70:3B:77:D6:8C:89 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/vCblwnfnVDcB7QAInr9wO3fWjIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.252.0/22 Signature Algorithm: sha256WithRSAEncryption 74:a8:ec:5e:58:c0:2a:cd:cf:83:06:20:1f:30:da:bd:12:00: 68:3a:a5:a3:9d:2a:3d:46:cf:f7:ee:71:89:f8:23:ed:34:61: 57:b7:9c:c1:c2:5c:88:a5:13:0d:66:a7:17:12:c9:7c:d1:43: 7b:2d:e2:ce:51:08:31:c7:a4:27:a4:e8:85:d4:d1:a2:36:fb: 57:92:a2:3b:3a:d5:e6:6f:83:9d:0c:51:28:52:96:46:bd:f4: a4:56:a7:66:f3:86:0c:d3:67:1c:be:10:e5:ca:7e:57:6d:81: ac:96:69:45:7f:90:10:a1:52:74:ab:16:f1:c4:68:a1:05:2a: 3d:f6:8e:62:70:6f:e0:50:aa:01:eb:fe:3d:a8:bd:48:c8:5b: 76:6d:46:28:b8:59:67:be:2c:8a:35:cf:7b:79:d3:7e:15:36: b3:5f:e9:0e:13:24:f4:b5:a3:ea:31:f4:b2:f4:2d:e1:1c:35: a4:a9:3c:16:4a:dc:f2:86:62:76:33:ca:c6:31:2a:95:9d:b6: ce:55:8d:b4:aa:69:79:58:a3:71:aa:4e:de:0e:ea:3e:60:36: c9:c7:43:58:e5:8a:cd:62:74:46:fc:e3:f4:e9:c0:51:c4:3f: ab:a0:44:52:a0:aa:3e:65:de:6c:6e:16:1e:e6:74:c0:53:ec: 74:09:25:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqSJGBG9ouvC2w+hNUEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzI2ZTVjMjc3ZTc1NDM3MDFlZDAwMDg5ZWJmNzAzYjc3ZDY4Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRZpGYKwh5dHknXTXkKtAlyDYaMg mEdbYdnWVQnCRMuRuWSI68md59YidTw1RUTbK+/ObV9k21utsc9amH1boTUkAz3X pkwH705GBJRRQxgJToIh9pX49Js4zcutn0Q5lEgRWd38vjlfDsrRCUNcJ/7NztlE cCgpLS2CcwEZTOI5i09KHAb0sKcFlmVG9Fg1o71+PEeXyQ6omKyv3V+CzVdlfpD3 yZ1GIISG31u/mZ7ioHnz20S+cjKUbV06aDIBVzu6A5JahkQpcKx+FxM/kbltogSY cd/DcEKozFwcDMfq34V1mOGYmFBTmBKi+TbtNFs0mfnzZk7j/iA6aQPnSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwm5cJ351Q3Ae0ACJ6/cDt31oyJMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvdkNibHduZm5WRGNCN1FBSW5yOXdPM2ZXaklrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaH8MA0G CSqGSIb3DQEBCwUAA4IBAQB0qOxeWMAqzc+DBiAfMNq9EgBoOqWjnSo9Rs/37nGJ +CPtNGFXt5zBwlyIpRMNZqcXEsl80UN7LeLOUQgxx6QnpOiF1NGiNvtXkqI7OtXm b4OdDFEoUpZGvfSkVqdm84YM02ccvhDlyn5XbYGslmlFf5AQoVJ0qxbxxGihBSo9 9o5icG/gUKoB6/49qL1IyFt2bUYouFlnviyKNc97edN+FTazX+kOEyT0taPqMfSy 9C3hHDWkqTwWStzyhmJ2M8rGMSqVnbbOVY20qml5WKNxqk7eDuo+YDbJx0NY5YrN YnRG/OP06cBRxD+roERSoKo+Zd5sbhYe5nTAU+x0CSVK -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:23 2026 by rpki-client