This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa File: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (raw, json) Hash identifier: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw= Subject key identifier: BD:B1:C1:B5:BD:A2:3C:DC:FF:AA:B0:28:12:4A:42:C6:C6:88:65:97 Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Certificate serial: 019B7DCB52E9E57D0A129013B9C6BAB6E2E4 Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203977 IP address blocks: 185.146.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:52:e9:e5:7d:0a:12:90:13:b9:c6:ba:b6:e2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdb1c1b5bda23cdcffaab028124a42c6c6886597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:3e:80:2e:fc:4b:34:a5:8e:ed:7b:a6:62: ae:e3:41:b6:e8:4e:40:aa:70:fa:8e:90:d4:23:b5: c4:d3:57:66:99:c3:f9:37:6c:50:cb:b3:1a:29:a4: 37:3d:e3:9d:f4:fb:5c:bd:84:aa:6f:f5:c8:33:37: 72:1e:26:21:5d:a7:32:32:e7:c4:f7:aa:d9:97:5f: 34:24:24:4b:9c:96:14:69:e4:a9:2b:44:91:b5:a2: a1:49:fe:32:1f:0d:f9:cd:66:21:03:5d:8f:1b:42: fc:bd:33:14:3a:f9:d8:eb:32:a5:5b:5d:ec:d4:f8: 86:bf:08:d4:9a:bd:f7:47:72:e7:79:64:37:f3:77: 1a:95:39:9e:a9:e3:94:d6:ee:76:70:d6:84:2a:3e: c3:ee:ad:86:00:df:e4:9a:06:06:6d:d6:6c:38:a4: 2e:fe:6f:68:f9:c5:ba:66:bb:c0:49:ff:4a:9e:b5: 61:4d:8b:c3:70:d5:e3:c5:fe:bb:9d:86:46:2a:83: eb:6b:03:15:29:84:49:cb:1d:82:ac:b6:37:95:7f: 09:8e:34:a1:de:d8:3a:b4:50:5f:29:9c:53:fc:d2: d5:12:91:66:0f:77:7c:93:22:1c:00:b5:59:84:3f: 9e:8e:10:9f:a5:8c:ef:44:a3:69:17:cd:e8:a5:f2: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B1:C1:B5:BD:A2:3C:DC:FF:AA:B0:28:12:4A:42:C6:C6:88:65:97 X509v3 Authority Key Identifier: keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.226.0/24 Signature Algorithm: sha256WithRSAEncryption 53:40:9b:f1:67:5f:5d:36:2e:8d:ea:72:f6:68:6e:ed:9c:06: 14:15:d0:a3:bf:cf:57:1e:01:49:9c:d9:76:89:f2:4c:5c:cc: 57:80:59:8d:3b:b9:6f:13:df:13:1f:13:cf:c4:f7:4e:26:53: 2a:85:85:a4:0a:03:ed:6f:1d:e9:6d:3c:92:56:2d:eb:a9:db: e4:45:41:e6:70:8d:05:30:20:8d:c5:53:8d:e7:05:af:7f:1a: 6f:5a:f1:e1:ff:fc:28:45:cf:7f:04:5a:a6:5a:b9:e1:e7:49: 16:d1:d6:c1:da:cc:6e:6b:1d:95:f0:7d:01:21:d2:cc:47:4e: 94:6d:98:b8:b0:2d:a7:4a:46:c0:95:51:25:62:cf:b5:b5:61: cb:8f:e8:28:53:7d:7c:45:1f:63:8a:b1:39:e0:e5:0b:c3:14: 62:c1:0f:10:93:60:da:be:11:56:94:c9:b4:8b:c7:76:72:59: 56:ba:93:d2:c4:83:48:7e:42:af:4d:9e:e7:7a:db:97:48:bc: 57:f0:8c:9c:ed:72:ba:a3:a8:a2:12:33:18:b2:1b:e3:80:db: 4b:a9:eb:d5:70:0b:37:26:c3:5e:83:90:82:71:0e:9c:3b:d3: d6:75:0d:09:6f:bb:32:35:33:4b:ac:75:13:74:28:d6:88:0b: c3:12:40:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1Lp5X0KEpATuca6tuLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZjRlZTE0ZjZkMzhhN2NmMDcxMjc5ZGZmN2IzOTE3MDJl MzcxMzUwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGIxYzFiNWJkYTIzY2RjZmZhYWIwMjgxMjRhNDJjNmM2ODg2NTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mw+gC78SzSlju17pmKu40G26E5A qnD6jpDUI7XE01dmmcP5N2xQy7MaKaQ3PeOd9PtcvYSqb/XIMzdyHiYhXacyMufE 96rZl180JCRLnJYUaeSpK0SRtaKhSf4yHw35zWYhA12PG0L8vTMUOvnY6zKlW13s 1PiGvwjUmr33R3LneWQ383calTmeqeOU1u52cNaEKj7D7q2GAN/kmgYGbdZsOKQu /m9o+cW6ZrvASf9KnrVhTYvDcNXjxf67nYZGKoPrawMVKYRJyx2CrLY3lX8JjjSh 3tg6tFBfKZxT/NLVEpFmD3d8kyIcALVZhD+ejhCfpYzvRKNpF83opfLn9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL2xwbW9ojzc/6qwKBJKQsbGiGWXMB8GA1UdIwQY MBaAFIX07hT204p88HEnnf97ORcC43E1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUt YmZkOTVhOWE2ZTY0LzEvdmJIQnRiMmlQTnpfcXJBb0VrcEN4c2FJWlpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUtYmZkOTVhOWE2ZTY0 LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZLiMA0G CSqGSIb3DQEBCwUAA4IBAQBTQJvxZ19dNi6N6nL2aG7tnAYUFdCjv89XHgFJnNl2 ifJMXMxXgFmNO7lvE98THxPPxPdOJlMqhYWkCgPtbx3pbTySVi3rqdvkRUHmcI0F MCCNxVON5wWvfxpvWvHh//woRc9/BFqmWrnh50kW0dbB2sxuax2V8H0BIdLMR06U bZi4sC2nSkbAlVElYs+1tWHLj+goU318RR9jirE54OULwxRiwQ8Qk2DavhFWlMm0 i8d2cllWupPSxINIfkKvTZ7netuXSLxX8Iyc7XK6o6iiEjMYshvjgNtLqevVcAs3 JsNeg5CCcQ6cO9PWdQ0Jb7syNTNLrHUTdCjWiAvDEkDk -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:24 2026 by rpki-client