This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa File: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (raw, json) Hash identifier: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E= Subject key identifier: DB:AA:4D:9D:90:2C:E9:E4:17:B7:31:01:97:E2:6E:57:F1:EB:E3:09 Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b Certificate serial: 019B7A5B83C72CEC9D761200DA9E3FCFB195 Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49453 IP address blocks: 78.41.63.0/24 maxlen: 24 2a14:bc80:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:83:c7:2c:ec:9d:76:12:00:da:9e:3f:cf:b1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbaa4d9d902ce9e417b7310197e26e57f1ebe309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:26:77:72:5b:c6:3f:57:07:29:86:4a:2d: a9:56:01:1b:79:92:aa:71:2f:e6:11:e1:15:c1:27: 9f:b2:71:60:f3:e2:1d:c2:8b:05:66:70:96:3b:f4: 8f:bb:0a:92:2e:00:fc:51:25:3a:f6:e0:31:a7:e2: f3:9b:d6:8f:32:f2:ce:a2:f3:d9:20:81:f0:73:d7: e2:7d:2b:54:ba:68:57:4b:83:fb:0c:bc:b7:2f:30: da:7c:92:e1:d0:94:87:d1:5d:ee:0c:3b:cd:50:9f: 49:0e:e6:89:11:a5:8c:f0:a0:36:af:54:39:b7:8f: 90:e9:d9:c4:98:0f:e4:15:8c:bd:84:a9:20:4c:31: 90:57:bf:cd:d0:9e:53:04:2a:03:6f:f6:c9:09:06: b4:4c:56:23:e2:16:56:a1:f8:0e:ac:79:54:0c:e5: 6e:e1:84:72:22:4d:0c:a1:69:83:5b:bd:80:21:ea: 21:fd:43:9a:bf:5e:d5:8b:8b:58:36:5e:f4:cd:60: 10:8e:f2:80:c0:62:a1:58:24:93:ec:91:4b:a1:df: fc:51:84:d4:d1:99:a1:a6:bc:a1:1a:ad:04:66:7e: 64:44:47:06:d1:a7:84:d1:0a:fc:6f:03:ee:14:c0: 97:9a:c3:fe:7d:08:c4:c2:35:1d:71:a4:6e:8c:4f: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AA:4D:9D:90:2C:E9:E4:17:B7:31:01:97:E2:6E:57:F1:EB:E3:09 X509v3 Authority Key Identifier: keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.63.0/24 IPv6: 2a14:bc80:101::/48 Signature Algorithm: sha256WithRSAEncryption 94:76:3c:b1:fe:88:e2:27:52:f2:76:c7:e5:22:19:89:90:96: 5f:43:49:3d:d8:1e:f5:42:be:57:73:3c:b0:cc:ba:0f:d3:cb: 13:3b:1f:12:49:74:82:6c:87:fd:1f:58:37:64:df:21:00:46: f3:bd:6d:74:48:9c:1e:07:30:c3:5a:e9:62:0a:6b:30:08:b8: fc:12:3c:ac:bd:26:48:40:c5:cd:7c:ff:81:1a:8c:61:46:05: c7:4c:75:2a:59:6d:54:5d:03:0f:13:45:3f:86:71:75:52:e1: 4d:0a:cc:7d:1c:2e:4f:d7:71:51:6e:07:c4:e5:da:ac:c9:00: 42:16:67:6f:ac:fe:3e:4d:c7:b3:e8:ac:43:01:c4:b6:5b:2c: bc:67:5d:58:e7:54:ac:63:09:47:7b:c8:2d:49:6d:4c:86:4b: f9:89:f0:76:99:34:ea:14:fe:00:a6:fe:fa:d8:f7:35:da:f1: 88:8e:6d:8d:61:90:11:34:18:6d:49:05:38:92:aa:3a:1e:ee: 9b:cf:56:70:b9:f3:db:c5:32:23:d9:5a:ca:92:73:b0:6b:68: 04:5f:16:09:97:cb:16:30:5d:c4:2f:93:8c:05:61:19:2f:76: 9d:6e:35:52:d5:5a:e3:88:4e:2b:5b:23:7a:1e:8f:63:ab:c5: 7b:cd:2e:21 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6W4PHLOyddhIA2p4/z7GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjExZDJlY2Q2MDkyNGVmMjI3NmY4NjkzOWIwNzBjMDA4 MTU3NGIwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmFhNGQ5ZDkwMmNlOWU0MTdiNzMxMDE5N2UyNmU1N2YxZWJlMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Mmd3Jbxj9XBymGSi2pVgEbeZKq cS/mEeEVwSefsnFg8+IdwosFZnCWO/SPuwqSLgD8USU69uAxp+Lzm9aPMvLOovPZ IIHwc9fifStUumhXS4P7DLy3LzDafJLh0JSH0V3uDDvNUJ9JDuaJEaWM8KA2r1Q5 t4+Q6dnEmA/kFYy9hKkgTDGQV7/N0J5TBCoDb/bJCQa0TFYj4hZWofgOrHlUDOVu 4YRyIk0MoWmDW72AIeoh/UOav17Vi4tYNl70zWAQjvKAwGKhWCST7JFLod/8UYTU 0ZmhpryhGq0EZn5kREcG0aeE0Qr8bwPuFMCXmsP+fQjEwjUdcaRujE9btwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNuqTZ2QLOnkF7cxAZfiblfx6+MJMB8GA1UdIwQY MBaAFPMhHS7NYJJO8idvhpObBwwAgVdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2Qt YzVjZjA4ZWVkYjljLzEvMjZwTm5aQXM2ZVFYdHpFQmwtSnVWX0hyNHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2QtYzVjZjA4ZWVkYjlj LzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQATik/MA8E AgACMAkDBwAqFLyAAQEwDQYJKoZIhvcNAQELBQADggEBAJR2PLH+iOInUvJ2x+Ui GYmQll9DST3YHvVCvldzPLDMug/TyxM7HxJJdIJsh/0fWDdk3yEARvO9bXRInB4H MMNa6WIKazAIuPwSPKy9JkhAxc18/4EajGFGBcdMdSpZbVRdAw8TRT+GcXVS4U0K zH0cLk/XcVFuB8Tl2qzJAEIWZ2+s/j5Nx7PorEMBxLZbLLxnXVjnVKxjCUd7yC1J bUyGS/mJ8HaZNOoU/gCm/vrY9zXa8YiObY1hkBE0GG1JBTiSqjoe7pvPVnC589vF MiPZWsqSc7BraARfFgmXyxYwXcQvk4wFYRkvdp1uNVLVWuOITitbI3oej2OrxXvN LiE= -----END CERTIFICATE-----Generated at Sun Jan 25 21:07:01 2026 by rpki-client