This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/n26cCYAcOhIFYAKn4bjFjFh7xRc.roa File: n26cCYAcOhIFYAKn4bjFjFh7xRc.roa (raw, json) Hash identifier: DPfOpP0A4iPdwjipLuqhqxwCuOKqp7u2xmFkTIq4Dqc= Subject key identifier: 9F:6E:9C:09:80:1C:3A:12:05:60:02:A7:E1:B8:C5:8C:58:7B:C5:17 Certificate issuer: /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Certificate serial: 019B7EA68FCD002EC9CEA6270ED80DBEFAAF Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/n26cCYAcOhIFYAKn4bjFjFh7xRc.roa Signing time: Fri 02 Jan 2026 12:20:03 +0000 ROA not before: Fri 02 Jan 2026 12:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59956 IP address blocks: 195.39.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8f:cd:00:2e:c9:ce:a6:27:0e:d8:0d:be:fa:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Validity Not Before: Jan 2 12:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f6e9c09801c3a12056002a7e1b8c58c587bc517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e9:27:6c:a5:ee:58:98:c2:e2:03:fd:b5:53: b1:34:d3:c2:fc:67:74:fa:7e:c9:84:90:22:85:83: 09:1e:26:cb:1b:d3:14:9e:6c:7d:41:a6:15:89:32: cd:a5:fa:3f:f7:4b:a1:7d:2c:d3:eb:69:d1:a1:b9: fe:70:cf:5c:fe:ae:36:e1:25:bd:ab:05:fc:3f:41: d3:76:17:54:c7:48:8c:73:5b:dc:ad:0d:bd:b3:ac: 77:d6:6c:0f:da:0e:bb:58:fe:50:57:bf:eb:b8:f1: 85:de:e5:07:1a:b4:68:5d:15:82:c8:62:dd:64:a1: 1f:4d:44:ae:e3:8f:82:60:d4:ef:9d:46:6b:31:a0: 48:57:84:34:9a:af:b7:07:16:ba:b0:03:2e:a5:ad: dd:96:cc:f6:12:53:d5:76:71:5e:4f:71:b2:9a:fe: 92:fa:93:5a:83:48:b2:7e:95:11:fb:1a:f6:b7:f1: 60:1f:82:e9:28:de:af:91:3b:5d:52:da:ed:fd:6d: 98:82:6f:e4:19:c0:d6:87:5b:e8:5e:98:b2:9b:2d: 96:26:c5:f1:2d:f7:14:30:06:12:f1:a9:dd:10:a5: 79:2a:64:56:3f:3a:34:55:0a:a2:d3:d2:e2:74:8f: f5:6f:54:24:2c:b5:2a:e0:ac:10:cc:1d:41:be:21: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6E:9C:09:80:1C:3A:12:05:60:02:A7:E1:B8:C5:8C:58:7B:C5:17 X509v3 Authority Key Identifier: keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/n26cCYAcOhIFYAKn4bjFjFh7xRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.240.0/24 Signature Algorithm: sha256WithRSAEncryption 60:38:42:c8:85:2e:02:a8:9d:2c:71:19:3a:69:98:00:c2:d8: e8:8b:39:20:72:1a:42:df:7d:ab:97:9c:ef:69:46:25:81:03: a2:e0:74:ac:81:35:aa:a7:30:13:c1:e3:d3:18:13:d7:27:2d: 4e:77:02:4a:a2:46:ef:92:ca:5c:ef:05:3e:c2:cc:2f:40:28: da:ff:b9:6a:f5:51:1f:b2:f0:04:71:93:5b:b5:72:45:6a:d0: e1:c6:c3:d2:f0:93:7d:f8:d8:da:62:8a:cc:ef:fe:b1:17:97: 3b:cc:1a:97:98:df:0c:2b:f7:92:a8:bb:1f:29:05:d6:6f:d1: 54:4b:e1:0e:52:d8:73:2b:b7:99:31:be:9c:bd:08:04:8d:4f: 4f:80:fb:be:d4:43:0b:74:ca:06:38:ec:1b:b3:c1:61:98:e3: 4c:24:5e:51:bf:1b:9c:27:a2:7d:a7:df:47:95:2e:af:21:ec: 99:77:bf:1a:ee:54:d8:f0:a0:f7:f2:ed:c1:59:90:01:63:6f: 58:60:dd:0b:32:20:6b:ac:86:74:fa:86:16:60:ac:a1:2e:36: e4:3c:53:e1:95:32:50:38:e8:62:c8:ec:b7:4b:e8:32:8c:b8: 4e:01:e1:11:37:32:4e:40:5e:fe:9f:34:4f:4a:53:17:4d:36: f6:c4:9f:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+po/NAC7JzqYnDtgNvvqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWU1YzA5ZDk5MDRlYjc0NGY5MDY3MzhjZjlmMDdmMjNm YjU1NjcwHhcNMjYwMTAyMTIyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjZlOWMwOTgwMWMzYTEyMDU2MDAyYTdlMWI4YzU4YzU4N2JjNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveknbKXuWJjC4gP9tVOxNNPC/Gd0 +n7JhJAihYMJHibLG9MUnmx9QaYViTLNpfo/90uhfSzT62nRobn+cM9c/q424SW9 qwX8P0HTdhdUx0iMc1vcrQ29s6x31mwP2g67WP5QV7/ruPGF3uUHGrRoXRWCyGLd ZKEfTUSu44+CYNTvnUZrMaBIV4Q0mq+3Bxa6sAMupa3dlsz2ElPVdnFeT3Gymv6S +pNag0iyfpUR+xr2t/FgH4LpKN6vkTtdUtrt/W2Ygm/kGcDWh1voXpiymy2WJsXx LfcUMAYS8andEKV5KmRWPzo0VQqi09LidI/1b1QkLLUq4KwQzB1BviEULQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9unAmAHDoSBWACp+G4xYxYe8UXMB8GA1UdIwQY MBaAFOquXAnZkE63RPkGc4z58H8j+1VnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUt YWYzYzhmNTgzNDQ5LzEvbjI2Y0NZQWNPaElGWUFLbjRiakZqRmg3eFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUtYWYzYzhmNTgzNDQ5 LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfwMA0G CSqGSIb3DQEBCwUAA4IBAQBgOELIhS4CqJ0scRk6aZgAwtjoizkgchpC332rl5zv aUYlgQOi4HSsgTWqpzATwePTGBPXJy1OdwJKokbvkspc7wU+wswvQCja/7lq9VEf svAEcZNbtXJFatDhxsPS8JN9+NjaYorM7/6xF5c7zBqXmN8MK/eSqLsfKQXWb9FU S+EOUthzK7eZMb6cvQgEjU9PgPu+1EMLdMoGOOwbs8FhmONMJF5RvxucJ6J9p99H lS6vIeyZd78a7lTY8KD38u3BWZABY29YYN0LMiBrrIZ0+oYWYKyhLjbkPFPhlTJQ OOhiyOy3S+gyjLhOAeERNzJOQF7+nzRPSlMXTTb2xJ98 -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:34 2026 by rpki-client