This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/HcRjOad0Jgw2fXpLk5Z26hUVX48.roa File: HcRjOad0Jgw2fXpLk5Z26hUVX48.roa (raw, json) Hash identifier: Jts6Ul+OZL4ReYfArq63fWdA1/CEjhnpGojqHaYBoKY= Subject key identifier: 1D:C4:63:39:A7:74:26:0C:36:7D:7A:4B:93:96:76:EA:15:15:5F:8F Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE71B9646A27CEE57CC11450FD551F Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/HcRjOad0Jgw2fXpLk5Z26hUVX48.roa Signing time: Fri 02 Jan 2026 04:19:20 +0000 ROA not before: Fri 02 Jan 2026 04:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216221 IP address blocks: 79.172.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:71:b9:64:6a:27:ce:e5:7c:c1:14:50:fd:55:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dc46339a774260c367d7a4b939676ea15155f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:17:f8:f0:cd:0a:ec:af:f7:0e:83:78:74: ac:c6:34:8d:a3:97:88:97:e9:29:62:40:b5:30:1f: b7:d3:71:f2:7a:06:0d:50:1c:9a:c7:d4:3c:b7:16: 3b:b7:59:d7:da:45:88:5d:f5:72:82:82:76:bc:0e: 46:29:a5:0f:19:57:36:1a:9e:50:26:19:6a:42:80: a3:1a:3d:73:2a:a9:9d:56:7f:e2:97:9d:fa:95:f1: a6:7c:62:2e:52:65:7d:b7:dc:ac:ba:0b:c9:9e:20: a8:b9:c6:33:41:2c:92:fb:88:39:95:1c:0c:6e:ec: 20:83:70:2d:0c:bf:c0:b2:2e:dc:d2:48:a9:c4:9b: 08:dd:55:f1:f4:4f:64:58:09:94:50:1e:21:26:c3: dd:1e:cc:fd:31:e8:80:16:79:26:26:68:be:44:ed: b0:10:45:8f:a0:34:94:a1:67:b3:c5:79:d1:4b:86: dc:aa:cc:30:b2:c7:5d:b1:e9:45:db:12:df:e9:eb: 78:e7:0e:9f:f8:81:8b:ec:b5:bc:9f:53:d3:52:37: 7a:fb:88:2a:fd:7a:80:e8:4a:45:09:ba:fd:58:29: f4:ce:cb:81:03:20:2e:83:f3:e6:47:9f:59:bf:05: 0c:ab:b3:32:ce:11:33:39:39:85:43:bd:d0:f7:ce: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:63:39:A7:74:26:0C:36:7D:7A:4B:93:96:76:EA:15:15:5F:8F X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/HcRjOad0Jgw2fXpLk5Z26hUVX48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.207.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b1:83:ca:bc:27:f3:a8:53:bd:df:3e:98:f3:0b:91:84:32: fa:13:37:72:e0:48:36:49:03:5a:f7:ca:0a:a5:68:8c:da:c5: b9:90:b5:f3:5c:41:1e:e9:8c:9c:cc:d0:64:49:0e:a5:d0:00: 6e:19:14:7d:c9:91:dc:51:5e:4b:2e:8c:1a:8d:43:b3:56:f8: 38:95:11:d4:6e:9b:18:99:c8:19:c5:50:3d:27:8f:ee:45:f9: 75:3f:89:1a:58:43:9f:83:15:82:c0:8d:d9:fc:ec:f2:fc:f0: e4:73:a8:09:d7:1c:05:27:88:94:73:8a:72:0b:a2:24:a1:40: 14:5b:b6:bd:21:67:00:ac:94:37:0a:f7:58:8d:7e:7e:94:4b: 10:66:44:04:58:1f:d4:d9:16:c0:89:9f:f5:52:40:b9:32:b8: ad:00:08:48:2f:1b:c7:c6:6f:0a:00:f2:9e:04:3b:52:99:2f: e7:e7:b1:40:0d:1b:e4:a5:81:51:2f:d2:90:aa:7a:de:52:f2: d3:dc:29:1f:03:83:5d:d2:22:8b:80:91:82:e3:6d:c1:e6:1f: f0:31:54:d9:34:a6:99:49:8f:3c:7e:cd:ea:d1:81:ee:0d:79: 99:72:2f:e6:c4:cd:f9:79:be:ed:29:d3:7d:b1:28:ea:c3:cc: b5:f7:9b:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87nG5ZGonzuV8wRRQ/VUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGM0NjMzOWE3NzQyNjBjMzY3ZDdhNGI5Mzk2NzZlYTE1MTU1ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuYX+PDNCuyv9w6DeHSsxjSNo5eI l+kpYkC1MB+303HyegYNUByax9Q8txY7t1nX2kWIXfVygoJ2vA5GKaUPGVc2Gp5Q JhlqQoCjGj1zKqmdVn/il536lfGmfGIuUmV9t9ysugvJniCoucYzQSyS+4g5lRwM buwgg3AtDL/Asi7c0kipxJsI3VXx9E9kWAmUUB4hJsPdHsz9MeiAFnkmJmi+RO2w EEWPoDSUoWezxXnRS4bcqswwssddselF2xLf6et45w6f+IGL7LW8n1PTUjd6+4gq /XqA6EpFCbr9WCn0zsuBAyAug/PmR59ZvwUMq7MyzhEzOTmFQ73Q984PLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB3EYzmndCYMNn16S5OWduoVFV+PMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvSGNSak9hZDBKZ3cyZlhwTGs1WjI2aFVWWDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zPMA0G CSqGSIb3DQEBCwUAA4IBAQAUsYPKvCfzqFO93z6Y8wuRhDL6Ezdy4Eg2SQNa98oK pWiM2sW5kLXzXEEe6YyczNBkSQ6l0ABuGRR9yZHcUV5LLowajUOzVvg4lRHUbpsY mcgZxVA9J4/uRfl1P4kaWEOfgxWCwI3Z/Ozy/PDkc6gJ1xwFJ4iUc4pyC6IkoUAU W7a9IWcArJQ3CvdYjX5+lEsQZkQEWB/U2RbAiZ/1UkC5MritAAhILxvHxm8KAPKe BDtSmS/n57FADRvkpYFRL9KQqnreUvLT3CkfA4Nd0iKLgJGC423B5h/wMVTZNKaZ SY88fs3q0YHuDXmZci/mxM35eb7tKdN9sSjqw8y195u4 -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:46 2026 by rpki-client