This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/S26hfP1BT8O4C447UhaCygwPQWI.roa File: S26hfP1BT8O4C447UhaCygwPQWI.roa (raw, json) Hash identifier: +53cRX698lifV/VIJ2tyQ5f4Lx93epMoKg9qTm5GnSA= Subject key identifier: 4B:6E:A1:7C:FD:41:4F:C3:B8:0B:8E:3B:52:16:82:CA:0C:0F:41:62 Certificate issuer: /CN=feeb528ca48b1f447582c54ccf6ed780751b51d5 Certificate serial: 019B7A5A0768A6AFF62B5A0E06549B8F4ADC Authority key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/S26hfP1BT8O4C447UhaCygwPQWI.roa Signing time: Thu 01 Jan 2026 16:17:59 +0000 ROA not before: Thu 01 Jan 2026 16:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208555 IP address blocks: 95.128.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:07:68:a6:af:f6:2b:5a:0e:06:54:9b:8f:4a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5 Validity Not Before: Jan 1 16:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b6ea17cfd414fc3b80b8e3b521682ca0c0f4162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:7b:cc:4c:9b:c7:19:e3:3e:d6:37:88:6b: 48:13:72:ce:28:94:ee:ad:a7:49:bf:1f:ae:2e:54: 50:af:92:39:ad:e3:5a:61:e2:7e:dc:ab:f9:f3:a1: 32:e5:26:34:d6:04:4f:ac:3b:f5:4b:57:b5:55:87: 98:12:ba:86:78:0a:5d:22:2f:90:1d:2f:ab:0a:ff: 3b:59:e1:2b:7d:da:07:47:59:3c:24:f9:43:2c:54: 2d:9a:47:46:1e:46:72:6b:1b:e2:4d:a5:bb:0b:bf: fb:0b:c5:a5:e2:7f:f6:60:3e:7e:c3:c3:89:16:4f: 4e:46:1a:86:88:00:fd:d3:26:d1:eb:03:c4:81:d8: b1:b1:47:0d:52:7f:c8:7e:ab:fd:41:b5:d4:9d:f3: 35:a8:74:b8:79:31:98:0d:f7:73:d7:b2:9b:c6:80: e4:a6:43:f0:a4:ed:f6:96:e7:86:47:c4:e3:84:60: 85:95:df:1f:6e:77:e2:68:f3:cb:47:40:eb:06:ef: fc:83:66:85:8c:67:04:08:2a:b4:e6:32:86:84:e7: 05:36:6e:20:b9:b7:eb:b8:ac:28:05:3a:06:06:7f: 3a:af:02:f0:b4:7c:55:f9:6e:5e:9f:bc:18:34:c3: 6d:94:2c:5e:e1:a3:d4:4a:98:ed:06:44:58:0a:65: 1c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6E:A1:7C:FD:41:4F:C3:B8:0B:8E:3B:52:16:82:CA:0C:0F:41:62 X509v3 Authority Key Identifier: keyid:FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/S26hfP1BT8O4C447UhaCygwPQWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.194.0/24 Signature Algorithm: sha256WithRSAEncryption 46:6a:37:63:5a:94:13:fd:a3:17:4a:fe:13:6e:52:cf:05:6f: b9:4b:7e:bc:ef:52:b9:0d:f0:e4:30:7a:d3:38:3a:53:91:28: 11:b6:9b:8c:39:fd:03:d6:a9:36:4e:7a:db:28:76:5c:ac:44: ba:17:46:55:e1:21:47:c8:9b:a9:e0:f8:b1:48:d7:46:9b:3d: ba:f0:88:18:70:5d:9d:c7:48:fb:0b:8e:f6:f3:a9:7c:32:a3: 33:1c:c3:82:23:2a:4d:0e:57:d6:68:f1:1a:f4:a7:ce:6d:e3: 72:8f:24:85:c1:77:51:24:fe:0d:be:12:b6:89:23:cd:55:8e: b2:f3:29:af:88:97:46:40:c3:5a:0a:3c:47:b5:a9:39:6d:6b: 92:c4:35:23:8d:2f:ba:0d:b4:37:19:9e:5b:5e:3f:db:24:a9: f9:75:a6:ad:e2:40:0f:11:36:ee:e3:64:47:be:70:a4:34:50: 68:2f:fb:6e:d2:6b:be:91:d1:0a:b8:df:00:84:c8:78:88:6f: 80:fd:a6:1c:9c:6d:c1:a8:67:12:85:b3:f9:52:65:f5:b0:05: dc:c1:27:2c:40:1e:45:89:3c:9a:cc:84:72:2a:07:16:81:4a: e6:5f:1e:86:85:8d:d6:43:c9:12:c8:7d:a4:33:55:83:36:79: a8:7c:00:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wgdopq/2K1oOBlSbj0rcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZWI1MjhjYTQ4YjFmNDQ3NTgyYzU0Y2NmNmVkNzgwNzUx YjUxZDUwHhcNMjYwMTAxMTYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjZlYTE3Y2ZkNDE0ZmMzYjgwYjhlM2I1MjE2ODJjYTBjMGY0MTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsV7zEybxxnjPtY3iGtIE3LOKJTu radJvx+uLlRQr5I5reNaYeJ+3Kv586Ey5SY01gRPrDv1S1e1VYeYErqGeApdIi+Q HS+rCv87WeErfdoHR1k8JPlDLFQtmkdGHkZyaxviTaW7C7/7C8Wl4n/2YD5+w8OJ Fk9ORhqGiAD90ybR6wPEgdixsUcNUn/Ifqv9QbXUnfM1qHS4eTGYDfdz17KbxoDk pkPwpO32lueGR8TjhGCFld8fbnfiaPPLR0DrBu/8g2aFjGcECCq05jKGhOcFNm4g ubfruKwoBToGBn86rwLwtHxV+W5en7wYNMNtlCxe4aPUSpjtBkRYCmUcfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtuoXz9QU/DuAuOO1IWgsoMD0FiMB8GA1UdIwQY MBaAFP7rUoykix9EdYLFTM9u14B1G1HVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3V0U2pLU0xIMFIxZ3NWTXoyN1hnSFViVWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNWY5ZDUtN2Y0YS00ZTJmLWJhNGUt NzM4ODg2ZmQ0ZWRkLzEvUzI2aGZQMUJUOE80QzQ0N1VoYUN5Z3dQUVdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jNWY5ZDUtN2Y0YS00ZTJmLWJhNGUtNzM4ODg2ZmQ0ZWRk LzEvX3V0U2pLU0xIMFIxZ3NWTXoyN1hnSFViVWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DCMA0G CSqGSIb3DQEBCwUAA4IBAQBGajdjWpQT/aMXSv4TblLPBW+5S36871K5DfDkMHrT ODpTkSgRtpuMOf0D1qk2TnrbKHZcrES6F0ZV4SFHyJup4PixSNdGmz268IgYcF2d x0j7C47286l8MqMzHMOCIypNDlfWaPEa9KfObeNyjySFwXdRJP4NvhK2iSPNVY6y 8ymviJdGQMNaCjxHtak5bWuSxDUjjS+6DbQ3GZ5bXj/bJKn5daat4kAPETbu42RH vnCkNFBoL/tu0mu+kdEKuN8AhMh4iG+A/aYcnG3BqGcShbP5UmX1sAXcwScsQB5F iTyazIRyKgcWgUrmXx6GhY3WQ8kSyH2kM1WDNnmofADg -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:38 2026 by rpki-client