This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/1bWashext9122i8GtxbzSUnEQOQ.roa File: 1bWashext9122i8GtxbzSUnEQOQ.roa (raw, json) Hash identifier: XJz5JuLVIrs1ixBvcHUnXk+6Mw8nbek7Q6f2/l5+pE8= Subject key identifier: D5:B5:9A:B2:17:B1:B7:DD:76:DA:2F:06:B7:16:F3:49:49:C4:40:E4 Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431 Certificate serial: 019BC347C39FC799AFA215C1550777F207F0 Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/1bWashext9122i8GtxbzSUnEQOQ.roa Signing time: Thu 15 Jan 2026 20:10:18 +0000 ROA not before: Thu 15 Jan 2026 20:10:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64289 IP address blocks: 185.225.26.0/24 maxlen: 24 192.189.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:47:c3:9f:c7:99:af:a2:15:c1:55:07:77:f2:07:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e40b16d369ad27ced85499465328f095b155f431 Validity Not Before: Jan 15 20:10:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5b59ab217b1b7dd76da2f06b716f34949c440e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:07:59:d2:92:e0:40:e0:af:4f:26:62:1f: 4a:07:53:ab:c9:f2:64:89:96:a0:09:0c:14:3f:25: 6e:6e:ae:a5:d6:a4:6b:5d:07:33:8f:9c:42:31:6d: 84:92:6e:67:4a:c8:ab:00:fe:15:72:50:0d:97:1f: 93:b0:c3:6a:d3:53:f2:f7:4e:47:bd:d2:f7:25:76: 55:4d:bb:7c:8a:ce:8f:23:19:a1:18:61:6d:d1:74: 3e:73:50:95:5c:1a:36:54:7b:be:ed:a9:0f:12:e3: 14:45:f1:fb:c7:3c:5c:bb:1f:4c:a4:95:7f:c7:96: 00:b6:7b:52:7f:37:af:c6:2c:ad:25:21:c8:43:7d: 59:40:f5:dc:f7:45:13:89:01:0e:a7:fb:ec:c7:13: 88:eb:8f:25:e0:75:93:42:92:3b:0b:5f:94:5d:8a: 65:75:fd:27:57:dd:06:dc:71:db:ad:d3:a6:4e:b8: 4c:f7:11:6d:59:05:f3:19:cc:b2:06:43:f1:0e:99: 2f:39:1c:2a:77:5f:30:1d:66:4b:ec:44:35:a1:4c: 3f:4c:c3:8d:e1:c8:ae:1d:a4:e4:b7:3c:7d:2c:5d: 02:df:a1:d6:39:02:d0:ae:bb:aa:28:5e:83:a7:0a: 92:dd:e9:e8:cd:77:84:1f:45:a5:81:a9:ce:62:b3: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:9A:B2:17:B1:B7:DD:76:DA:2F:06:B7:16:F3:49:49:C4:40:E4 X509v3 Authority Key Identifier: keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/1bWashext9122i8GtxbzSUnEQOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.26.0/24 192.189.157.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:b2:ce:df:8e:53:da:c4:f2:f4:c1:c0:aa:54:19:6e:d0:d9: e4:77:1d:2e:c2:50:22:c9:bd:de:2e:7c:63:91:7a:65:7c:9d: 42:18:ae:69:a6:73:b8:8b:60:19:29:54:70:3d:1f:d6:d0:b1: 5d:27:17:25:4c:a4:29:b1:0a:0d:d5:1f:bc:15:dd:61:1c:4e: 99:8d:d0:5a:f7:78:49:bf:6f:0b:b6:41:59:02:83:93:04:94: aa:ab:73:fc:2e:f3:21:77:ee:53:97:6b:4b:17:0d:a4:82:11: ad:f7:e8:c7:d8:bd:12:da:40:52:6b:87:31:59:ee:df:1f:24: 79:1a:c5:ef:1d:13:db:d8:3c:fe:ca:8d:0f:c9:b3:3c:b0:77: f8:63:f0:c4:18:47:ef:46:9b:86:d2:22:a5:e8:ee:b2:69:b0: 07:5d:7e:b0:33:03:3b:1d:41:7a:f0:8f:23:f4:d2:5d:d7:4e: b2:44:69:b6:bf:e4:2f:8f:57:9a:64:dc:40:5d:4c:22:c5:f9: 6c:08:d1:0e:bc:98:c3:9a:cb:15:7b:7c:eb:df:ab:0f:85:6e: 47:c0:58:94:98:1c:8c:3c:31:1d:d0:2e:2b:fd:61:9c:25:f0: fe:31:db:e4:34:09:7b:63:26:78:f4:31:ea:58:90:de:0b:47: a6:c6:b1:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvDR8Ofx5mvohXBVQd38gfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MGIxNmQzNjlhZDI3Y2VkODU0OTk0NjUzMjhmMDk1YjE1 NWY0MzEwHhcNMjYwMTE1MjAxMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWI1OWFiMjE3YjFiN2RkNzZkYTJmMDZiNzE2ZjM0OTQ5YzQ0MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXkHWdKS4EDgr08mYh9KB1OryfJk iZagCQwUPyVubq6l1qRrXQczj5xCMW2Ekm5nSsirAP4VclANlx+TsMNq01Py905H vdL3JXZVTbt8is6PIxmhGGFt0XQ+c1CVXBo2VHu+7akPEuMURfH7xzxcux9MpJV/ x5YAtntSfzevxiytJSHIQ31ZQPXc90UTiQEOp/vsxxOI648l4HWTQpI7C1+UXYpl df0nV90G3HHbrdOmTrhM9xFtWQXzGcyyBkPxDpkvORwqd18wHWZL7EQ1oUw/TMON 4ciuHaTktzx9LF0C36HWOQLQrruqKF6DpwqS3enozXeEH0WlganOYrN25QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNW1mrIXsbfddtovBrcW80lJxEDkMB8GA1UdIwQY MBaAFOQLFtNprSfO2FSZRlMo8JWxVfQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAt MDM3MWQ0YjQ1NDdhLzEvMWJXYXNoZXh0OTEyMmk4R3R4YnpTVW5FUU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAtMDM3MWQ0YjQ1NDdh LzEvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueEaAwQA wL2dMA0GCSqGSIb3DQEBCwUAA4IBAQAqss7fjlPaxPL0wcCqVBlu0Nnkdx0uwlAi yb3eLnxjkXplfJ1CGK5ppnO4i2AZKVRwPR/W0LFdJxclTKQpsQoN1R+8Fd1hHE6Z jdBa93hJv28LtkFZAoOTBJSqq3P8LvMhd+5Tl2tLFw2kghGt9+jH2L0S2kBSa4cx We7fHyR5GsXvHRPb2Dz+yo0PybM8sHf4Y/DEGEfvRpuG0iKl6O6yabAHXX6wMwM7 HUF68I8j9NJd106yRGm2v+Qvj1eaZNxAXUwixflsCNEOvJjDmssVe3zr36sPhW5H wFiUmByMPDEd0C4r/WGcJfD+MdvkNAl7YyZ49DHqWJDeC0emxrFc -----END CERTIFICATE-----Generated at Mon Feb 2 14:22:55 2026 by rpki-client