This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/k26mF9MmuzhiFpBjSAPIbbJx6NA.roa File: k26mF9MmuzhiFpBjSAPIbbJx6NA.roa (raw, json) Hash identifier: expI8ju4pO9T2VDPcQtkx64FF7f+z+QlEkn5dvh9hp8= Subject key identifier: 93:6E:A6:17:D3:26:BB:38:62:16:90:63:48:03:C8:6D:B2:71:E8:D0 Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492 Certificate serial: 019B7BA523AABF64B4ABFBC5DC41B0BFA2C5 Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/k26mF9MmuzhiFpBjSAPIbbJx6NA.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 5.178.112.0/21 maxlen: 24 185.105.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:aa:bf:64:b4:ab:fb:c5:dc:41:b0:bf:a2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=936ea617d326bb38621690634803c86db271e8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:4f:e8:5b:76:c3:c6:6e:ec:f7:df:11:3b: a1:9c:2f:62:6a:44:63:94:ec:17:07:af:73:1d:12: 96:ca:6d:9d:43:2b:f1:86:4c:a6:62:56:20:9c:71: b2:1c:1c:3e:92:a7:97:3d:61:1b:2a:9e:4f:33:40: 6f:bd:39:ad:12:93:27:b3:78:d7:d9:b7:fd:9f:0f: 1b:6a:64:a9:7d:6d:de:c2:4c:b9:d6:1b:9d:a2:ab: 61:12:b9:d9:a6:8f:97:cb:9e:78:bb:0f:cf:00:21: 4f:ff:df:d9:7e:99:08:c7:97:47:23:4f:8d:73:ba: 0d:d7:e7:e9:84:22:f2:0e:8e:4d:96:bd:b1:99:7a: 58:8c:9a:0b:d6:60:95:85:d4:38:31:52:ef:bc:53: 48:37:75:b3:96:1f:06:40:d6:f5:cf:8e:52:5a:a6: 1e:57:df:a6:6f:9b:d4:63:df:dc:43:9e:4e:26:a8: 64:c5:33:f4:5b:55:a2:9f:6a:64:ea:a4:c1:4a:46: 4a:86:60:28:92:6a:cb:ea:de:1e:c7:b7:30:13:72: 97:03:3d:3c:1b:5d:65:c8:40:ef:96:44:92:d9:a8: 59:e7:65:f9:eb:1c:38:48:86:8b:bc:bb:58:28:c6: 3c:38:60:f7:28:03:39:5a:15:b2:09:cc:dc:aa:64: da:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6E:A6:17:D3:26:BB:38:62:16:90:63:48:03:C8:6D:B2:71:E8:D0 X509v3 Authority Key Identifier: keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/k26mF9MmuzhiFpBjSAPIbbJx6NA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.112.0/21 185.105.76.0/22 Signature Algorithm: sha256WithRSAEncryption 25:17:49:f5:57:7c:bc:72:d5:8f:6f:64:46:71:2c:2c:15:ff: 21:fd:2d:dc:63:5f:4d:e1:c9:03:b1:ee:5d:d8:45:a5:3c:8f: b6:c3:90:3b:5d:d0:b2:a1:1a:41:98:06:fa:f8:bd:29:b7:22: 3b:c8:70:e8:40:d3:9d:cd:6a:a2:d2:16:11:be:3b:9b:80:9c: 02:37:96:d6:bc:55:89:97:6f:0f:e6:cc:e0:5d:93:32:3b:24: a1:64:9b:4c:2b:30:59:75:01:87:cc:78:b6:ed:93:88:7e:4b: 7d:72:44:13:2f:2c:2c:76:e7:41:06:ca:91:3e:e4:e5:29:62: 9c:0a:a4:40:90:d6:26:2b:41:ef:79:8d:08:31:fd:fc:47:5d: 60:83:d6:f7:93:f9:5f:c6:42:bb:de:33:cc:13:46:81:6c:ea: 64:a6:8f:ba:cc:ba:09:e0:b6:78:ef:f4:d8:f6:f5:07:32:fe: ad:a5:c9:9a:a2:dc:e4:c7:33:b5:53:a1:da:17:cc:76:a1:87: 1f:28:f6:57:2e:59:7c:9f:f5:99:54:11:0d:c0:0d:a8:84:ac: 81:15:42:f5:15:77:90:d1:d5:4f:87:86:ba:74:94:00:c3:0d: 9f:98:50:51:a5:74:58:af:d1:6a:59:d9:8b:92:07:bd:bb:de: bc:52:45:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pSOqv2S0q/vF3EGwv6LFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYjU0YmNjNDkyOTFhMWYzMmI3Y2VhZDRmMjk2ODgyZDA1 MzE0OTIwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzZlYTYxN2QzMjZiYjM4NjIxNjkwNjM0ODAzYzg2ZGIyNzFlOGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3lP6Ft2w8Zu7PffETuhnC9iakRj lOwXB69zHRKWym2dQyvxhkymYlYgnHGyHBw+kqeXPWEbKp5PM0BvvTmtEpMns3jX 2bf9nw8bamSpfW3ewky51hudoqthErnZpo+Xy554uw/PACFP/9/ZfpkIx5dHI0+N c7oN1+fphCLyDo5Nlr2xmXpYjJoL1mCVhdQ4MVLvvFNIN3Wzlh8GQNb1z45SWqYe V9+mb5vUY9/cQ55OJqhkxTP0W1Win2pk6qTBSkZKhmAokmrL6t4ex7cwE3KXAz08 G11lyEDvlkSS2ahZ52X56xw4SIaLvLtYKMY8OGD3KAM5WhWyCczcqmTaWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJNuphfTJrs4YhaQY0gDyG2ycejQMB8GA1UdIwQY MBaAFKy1S8xJKRofMrfOrU8paILQUxSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYt YWYzYTY4NWQ1NzlmLzEvazI2bUY5TW11emhpRnBCalNBUEliYkp4Nk5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYtYWYzYTY4NWQ1Nzlm LzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBbJwAwQC uWlMMA0GCSqGSIb3DQEBCwUAA4IBAQAlF0n1V3y8ctWPb2RGcSwsFf8h/S3cY19N 4ckDse5d2EWlPI+2w5A7XdCyoRpBmAb6+L0ptyI7yHDoQNOdzWqi0hYRvjubgJwC N5bWvFWJl28P5szgXZMyOyShZJtMKzBZdQGHzHi27ZOIfkt9ckQTLywsdudBBsqR PuTlKWKcCqRAkNYmK0HveY0IMf38R11gg9b3k/lfxkK73jPME0aBbOpkpo+6zLoJ 4LZ47/TY9vUHMv6tpcmaotzkxzO1U6HaF8x2oYcfKPZXLll8n/WZVBENwA2ohKyB FUL1FXeQ0dVPh4a6dJQAww2fmFBRpXRYr9FqWdmLkge9u968UkV6 -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:37 2026 by rpki-client