This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/rcDW28Ql6diWNoj2tJn2kOFNpao.roa File: rcDW28Ql6diWNoj2tJn2kOFNpao.roa (raw, json) Hash identifier: 9eSuRyYa2D7hcOjastjTH8aNIhWg7tNIro4SHirmWzs= Subject key identifier: AD:C0:D6:DB:C4:25:E9:D8:96:36:88:F6:B4:99:F6:90:E1:4D:A5:AA Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91 Certificate serial: 019B7E37CFA7AE768A131C20562A8CA0743A Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/rcDW28Ql6diWNoj2tJn2kOFNpao.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57778 IP address blocks: 185.126.44.0/24 maxlen: 24 185.126.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cf:a7:ae:76:8a:13:1c:20:56:2a:8c:a0:74:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91 Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adc0d6dbc425e9d8963688f6b499f690e14da5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:5f:42:bf:d2:db:8b:37:c1:0b:f7:ec:17: 05:4d:75:0d:3f:51:6b:76:33:b6:a8:8f:08:19:3e: 9a:dd:04:9e:6d:a9:50:27:8e:59:c5:d5:32:2c:4c: 7e:de:1d:54:6a:1c:aa:8c:ff:4a:37:d0:27:c7:ae: 34:98:ae:5c:b1:02:7e:7c:af:a5:8a:55:29:2c:65: a1:8b:11:23:42:35:46:fc:2c:d4:9d:d9:97:4b:7a: 3f:c4:e5:8b:9b:93:29:ba:45:10:50:b0:1e:e1:41: e6:3d:10:e7:dc:d3:06:8c:d7:cc:f0:33:b3:ec:aa: 15:c9:dc:b4:7f:05:82:be:ba:d4:de:0f:12:14:f7: 7a:2a:01:00:8e:1a:74:2a:79:8c:b6:df:69:34:e6: e7:50:70:d7:d5:ee:80:ba:7e:5c:6b:96:f3:fa:cc: a1:82:3e:ef:1c:38:be:b7:cb:09:1d:6c:7f:95:c3: 2f:39:b8:7f:75:ac:9b:21:7c:23:34:07:ed:c3:1d: de:82:f6:f6:32:47:68:be:42:cf:f1:1b:8c:97:2b: 39:8e:20:83:b5:87:f9:ba:22:ce:20:7c:ba:b8:d4: 21:92:4c:f0:d7:a5:95:1c:b6:12:7f:0f:ff:fa:ed: 22:c1:ad:2d:eb:f3:03:15:df:7c:74:18:4d:37:21: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C0:D6:DB:C4:25:E9:D8:96:36:88:F6:B4:99:F6:90:E1:4D:A5:AA X509v3 Authority Key Identifier: keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/rcDW28Ql6diWNoj2tJn2kOFNpao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.44.0/23 Signature Algorithm: sha256WithRSAEncryption 64:eb:59:d0:f6:f0:72:37:75:a6:f8:5c:94:be:b0:3b:f2:e7: 79:09:8a:11:86:3d:9c:f0:83:25:f9:62:8d:cd:e0:31:cd:e4: ae:95:be:5f:d8:97:1c:ff:76:c4:70:0c:cb:04:1b:ce:a0:f5: fb:16:40:1e:53:48:45:ed:8e:8a:b3:7f:16:ea:49:99:82:7d: 2c:33:02:d3:96:bb:41:82:8b:c0:67:c3:39:cf:f2:33:d1:6e: a3:d8:ef:d8:95:0c:4a:d5:18:16:0a:fc:23:e8:8f:29:92:a3: 06:2d:99:02:69:00:52:0e:a3:2e:a9:c7:cf:ff:f6:9a:b3:e0: e8:97:6c:38:25:a1:44:34:b0:a8:33:51:20:20:9e:e6:b9:1b: d1:e8:c8:3e:88:82:c7:b9:9d:8e:5e:6d:d2:0d:dd:02:c9:ce: 7b:1f:6b:73:d4:a4:73:d9:d8:82:c8:f2:90:a3:2c:1d:3c:57: 8a:a4:14:99:ae:51:44:45:30:80:b3:d4:8c:e4:aa:54:f9:39: 4e:97:12:28:02:0b:9e:3e:a2:24:ec:a3:d7:2a:a9:10:4e:e0: 90:4b:b2:36:a2:a2:44:a6:5c:0e:8f:be:b5:80:c5:68:94:c3: de:25:40:d2:89:2e:47:ee:8c:29:c4:7b:de:2f:88:7a:15:a8: 0e:a4:e5:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8+nrnaKExwgViqMoHQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTMxZWU5Yzk4OWE2MzExYTA4ZmYyMzIyODk5Nzg0MDE0 MTVlOTEwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGMwZDZkYmM0MjVlOWQ4OTYzNjg4ZjZiNDk5ZjY5MGUxNGRhNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJZfQr/S24s3wQv37BcFTXUNP1Fr djO2qI8IGT6a3QSebalQJ45ZxdUyLEx+3h1UahyqjP9KN9Anx640mK5csQJ+fK+l ilUpLGWhixEjQjVG/CzUndmXS3o/xOWLm5MpukUQULAe4UHmPRDn3NMGjNfM8DOz 7KoVydy0fwWCvrrU3g8SFPd6KgEAjhp0KnmMtt9pNObnUHDX1e6Aun5ca5bz+syh gj7vHDi+t8sJHWx/lcMvObh/daybIXwjNAftwx3egvb2MkdovkLP8RuMlys5jiCD tYf5uiLOIHy6uNQhkkzw16WVHLYSfw//+u0iwa0t6/MDFd98dBhNNyGq9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK3A1tvEJenYljaI9rSZ9pDhTaWqMB8GA1UdIwQY MBaAFH2jHunJiaYxGgj/IyKJl4QBQV6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFNZTZjbUpwakVhQ1A4aklvbVhoQUZCWHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZmI0NzctYThiNy00NTBlLWI1MzMt MTFlNmMwYTNhODA4LzEvcmNEVzI4UWw2ZGlXTm9qMnRKbjJrT0ZOcGFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yZmI0NzctYThiNy00NTBlLWI1MzMtMTFlNmMwYTNhODA4 LzEvZmFNZTZjbUpwakVhQ1A4aklvbVhoQUZCWHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX4sMA0G CSqGSIb3DQEBCwUAA4IBAQBk61nQ9vByN3Wm+FyUvrA78ud5CYoRhj2c8IMl+WKN zeAxzeSulb5f2Jcc/3bEcAzLBBvOoPX7FkAeU0hF7Y6Ks38W6kmZgn0sMwLTlrtB govAZ8M5z/Iz0W6j2O/YlQxK1RgWCvwj6I8pkqMGLZkCaQBSDqMuqcfP//aas+Do l2w4JaFENLCoM1EgIJ7muRvR6Mg+iILHuZ2OXm3SDd0Cyc57H2tz1KRz2diCyPKQ oywdPFeKpBSZrlFERTCAs9SM5KpU+TlOlxIoAguePqIk7KPXKqkQTuCQS7I2oqJE plwOj761gMVolMPeJUDSiS5H7owpxHveL4h6FagOpOVW -----END CERTIFICATE-----Generated at Sun Jan 4 10:05:44 2026 by rpki-client