This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa File: rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa (raw, json) Hash identifier: M2Sx/zjlYAhCYCRsT+YiI+82fP7xUoFDJFNJGn+EKeA= Subject key identifier: AF:12:24:1A:B2:E7:FE:90:87:D4:A2:79:98:52:52:E7:1A:DC:9B:57 Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Certificate serial: 019B7F156839AE3AB9A7A67E6DFAFA9C6FDE Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60706 IP address blocks: 185.26.196.0/24 maxlen: 24 185.26.197.0/24 maxlen: 24 2a00:8c60:1::/48 maxlen: 48 2a00:8c60:a::/48 maxlen: 48 2a00:8c60:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:68:39:ae:3a:b9:a7:a6:7e:6d:fa:fa:9c:6f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af12241ab2e7fe9087d4a279985252e71adc9b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:5a:cf:4c:c8:68:ee:c6:74:77:2e:9e:11: 58:b6:c0:58:8b:26:f0:f6:55:89:61:86:38:20:7e: 3e:7d:24:27:b3:ef:89:92:6d:9d:e9:05:ed:13:21: e0:25:61:7e:7d:cc:fc:2b:92:79:ea:15:3d:54:d6: 08:b6:43:85:72:52:82:fe:f5:3b:af:16:27:a2:30: 09:05:a8:b7:5b:96:78:ba:81:65:90:a3:2c:9b:78: 26:5f:4d:4e:f1:15:f9:34:e6:eb:c9:d2:1b:96:b1: 74:00:64:15:00:a0:db:00:12:15:46:72:f2:13:5b: 8d:53:5c:d0:99:c4:71:cf:a4:25:51:04:e4:69:52: a2:35:ca:e7:bf:a5:1f:a3:9c:4a:6d:5e:c3:9a:93: 18:8e:b0:06:34:97:ba:cb:f2:cc:4a:fa:38:6f:13: ea:ad:5f:37:10:65:9c:25:5f:eb:ca:16:04:f2:01: 78:e8:c5:cc:d4:46:75:a3:28:1a:f4:f8:b5:97:82: 02:bb:af:34:cb:49:38:d2:26:a8:34:48:f0:1d:43: c0:1a:9b:5a:db:63:69:89:ec:fb:08:e4:98:5e:f7: 6d:a5:79:b8:a9:b8:7b:42:b4:7b:4c:c5:ed:b5:a1: 2e:65:ba:35:3f:94:04:5b:19:b8:6d:0a:14:40:9d: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:24:1A:B2:E7:FE:90:87:D4:A2:79:98:52:52:E7:1A:DC:9B:57 X509v3 Authority Key Identifier: keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.196.0/23 IPv6: 2a00:8c60:1::/48 2a00:8c60:a::/47 Signature Algorithm: sha256WithRSAEncryption 60:5e:ee:8c:67:a8:8b:d6:13:4c:3f:0a:e0:48:c8:49:fc:dd: 29:8f:41:62:fb:33:e5:02:cb:e5:14:d9:a0:94:7a:be:a8:05: 76:41:31:a2:48:17:62:5b:6d:72:44:1a:fe:de:c3:71:c4:c3: 82:f5:49:af:bc:e7:84:5b:b3:53:52:dc:82:46:99:21:59:c1: ec:6e:89:3a:e0:eb:ba:f8:f8:82:5e:ce:68:1f:68:7a:f0:19: ee:28:19:6e:a1:04:c3:28:ad:c0:f6:83:b8:3e:fc:79:ae:8e: d8:ee:db:6b:5a:91:fc:fd:e7:f7:f7:f0:4c:6d:c2:58:b7:e1: ba:fd:6c:c6:93:d4:97:e0:91:0a:64:8b:96:7c:c4:cd:57:d3: b7:03:d0:68:88:f8:4f:79:50:83:dc:92:cc:04:25:aa:bc:6b: 08:2c:ea:8e:14:91:96:7e:38:71:ec:41:4d:20:2f:81:5d:21: 59:01:99:21:3f:be:eb:41:c3:2b:6b:a7:cc:56:88:c4:29:e9: 88:62:3a:e2:c6:78:e9:4d:24:ab:94:25:bd:ce:36:6d:e4:df: 93:37:94:85:41:56:ef:e1:2d:7d:8c:95:1a:c2:24:c8:20:6c: e2:90:49:bd:48:ec:f2:6b:42:8d:81:19:8f:b8:15:ce:80:61: 1e:df:a7:35 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FWg5rjq5p6Z+bfr6nG/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0 ZDk0ZGQwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjEyMjQxYWIyZTdmZTkwODdkNGEyNzk5ODUyNTJlNzFhZGM5YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnetaz0zIaO7GdHcunhFYtsBYiybw 9lWJYYY4IH4+fSQns++Jkm2d6QXtEyHgJWF+fcz8K5J56hU9VNYItkOFclKC/vU7 rxYnojAJBai3W5Z4uoFlkKMsm3gmX01O8RX5NObrydIblrF0AGQVAKDbABIVRnLy E1uNU1zQmcRxz6QlUQTkaVKiNcrnv6Ufo5xKbV7DmpMYjrAGNJe6y/LMSvo4bxPq rV83EGWcJV/ryhYE8gF46MXM1EZ1oyga9Pi1l4ICu680y0k40iaoNEjwHUPAGpta 22Npiez7COSYXvdtpXm4qbh7QrR7TMXttaEuZbo1P5QEWxm4bQoUQJ0AwwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFK8SJBqy5/6Qh9SieZhSUuca3JtXMB8GA1UdIwQY MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut ODBiMmQyNWJmOWM4LzEvcnhJa0dyTG5fcENIMUtKNW1GSlM1eHJjbTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4 LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBuRrEMBgE AgACMBIDBwAqAIxgAAEDBwEqAIxgAAowDQYJKoZIhvcNAQELBQADggEBAGBe7oxn qIvWE0w/CuBIyEn83SmPQWL7M+UCy+UU2aCUer6oBXZBMaJIF2JbbXJEGv7ew3HE w4L1Sa+854Rbs1NS3IJGmSFZwexuiTrg67r4+IJezmgfaHrwGe4oGW6hBMMorcD2 g7g+/Hmujtju22takfz95/f38Extwli34br9bMaT1JfgkQpki5Z8xM1X07cD0GiI +E95UIPckswEJaq8awgs6o4UkZZ+OHHsQU0gL4FdIVkBmSE/vutBwytrp8xWiMQp 6YhiOuLGeOlNJKuUJb3ONm3k35M3lIVBVu/hLX2MlRrCJMggbOKQSb1I7PJrQo2B GY+4Fc6AYR7fpzU= -----END CERTIFICATE-----Generated at Mon Feb 2 12:41:24 2026 by rpki-client