This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/kq8a46tLEeqaFqiTieRfOg3LWKo.roa File: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (raw, json) Hash identifier: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o= Subject key identifier: 92:AF:1A:E3:AB:4B:11:EA:9A:16:A8:93:89:E4:5F:3A:0D:CB:58:AA Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35 Certificate serial: 019B7D5CEEFE0688C7F098D86E9F16D45949 Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/kq8a46tLEeqaFqiTieRfOg3LWKo.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202896 IP address blocks: 78.26.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ee:fe:06:88:c7:f0:98:d8:6e:9f:16:d4:59:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92af1ae3ab4b11ea9a16a89389e45f3a0dcb58aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:bb:13:b5:ca:37:90:8d:57:76:86:43:fd: 84:78:75:91:ca:a3:2d:7d:16:5a:52:20:44:30:e1: c6:5d:e8:d8:01:ea:79:d3:68:d0:89:81:00:65:4f: f1:d1:d6:85:e7:38:90:04:60:43:9a:54:68:92:29: d4:87:ff:0e:b3:79:62:3d:02:c7:c3:60:3a:e0:93: f3:3c:f3:fb:fb:48:24:36:a4:3a:8d:11:4f:18:dc: d4:d4:55:4b:cd:22:a0:4c:8d:ce:0a:99:e3:40:3d: 69:f5:2d:20:01:66:75:44:31:d7:61:ec:cf:8c:10: 9d:57:74:e6:4a:c5:7b:16:01:73:6f:2a:32:fc:3a: d8:b9:b6:cf:ba:31:46:ba:09:5d:fa:eb:77:e4:1b: 17:74:d2:3b:bf:72:99:bc:fd:1b:69:e5:88:6c:1f: 9b:41:c7:82:06:c9:e7:81:9b:2a:c0:6b:c1:88:ba: 3c:5f:8b:39:cc:15:be:22:6b:1b:77:3c:48:b2:7c: 52:1e:81:31:88:76:0a:0e:52:93:e5:26:4b:0f:27: 9b:52:3a:36:d2:52:d3:14:c4:0e:bc:05:60:b4:61: 77:13:1b:40:87:b7:3e:f7:b3:f8:ed:f7:8d:50:0f: 31:4f:f6:14:43:fb:b8:63:86:d6:3e:32:b0:b8:14: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:1A:E3:AB:4B:11:EA:9A:16:A8:93:89:E4:5F:3A:0D:CB:58:AA X509v3 Authority Key Identifier: keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/kq8a46tLEeqaFqiTieRfOg3LWKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.26.126.0/24 Signature Algorithm: sha256WithRSAEncryption d9:e0:e0:03:d9:be:9b:1b:a3:01:a8:71:f0:99:4e:29:25:07: 9f:f2:60:2c:04:30:0e:c4:da:93:8d:79:7a:f5:0f:aa:02:03: 82:2c:5e:2b:e8:b3:03:c7:bb:46:bc:f8:fa:41:cd:61:09:5c: 7f:9a:fe:dd:a4:bd:85:00:ce:2a:30:bb:38:b8:e3:84:55:74: df:bc:ce:2a:8d:af:80:3c:e6:e8:5e:7c:85:1b:e8:a9:08:5a: 8c:56:bb:bc:5f:df:49:c9:7a:c2:3a:aa:70:b4:9e:53:15:06: 2a:e3:ac:6e:23:41:29:47:9b:14:a6:ea:4a:40:e4:5f:14:87: d8:9d:9a:14:99:2e:49:f7:f9:aa:ae:70:58:9c:9b:2b:84:d1: d5:30:25:2a:8e:4e:3f:3a:d1:24:71:cb:76:45:e0:a1:cd:78: 9d:12:e6:55:64:f8:5a:48:62:4c:5f:5b:75:90:58:cd:c1:00: 88:73:28:f3:96:3e:f8:8c:35:57:f3:85:80:a6:09:37:f3:5f: 90:09:1a:27:bd:f6:c8:23:6c:a2:69:1a:57:e8:c0:bb:bf:d6: b5:90:ca:3e:65:8e:e2:8b:24:a0:bb:cd:4c:95:60:bd:6f:25: 33:05:c6:e0:6a:88:a1:65:ea:75:1c:de:90:64:1f:40:95:94: 07:34:af:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XO7+BojH8JjYbp8W1FlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYzk0ZmY0Nzk3Nzg2NTFhNjA1MTIxZjFmZmU2NzgxOTYz MjhmMzUwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmFmMWFlM2FiNGIxMWVhOWExNmE4OTM4OWU0NWYzYTBkY2I1OGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAray7E7XKN5CNV3aGQ/2EeHWRyqMt fRZaUiBEMOHGXejYAep502jQiYEAZU/x0daF5ziQBGBDmlRokinUh/8Os3liPQLH w2A64JPzPPP7+0gkNqQ6jRFPGNzU1FVLzSKgTI3OCpnjQD1p9S0gAWZ1RDHXYezP jBCdV3TmSsV7FgFzbyoy/DrYubbPujFGugld+ut35BsXdNI7v3KZvP0baeWIbB+b QceCBsnngZsqwGvBiLo8X4s5zBW+ImsbdzxIsnxSHoExiHYKDlKT5SZLDyebUjo2 0lLTFMQOvAVgtGF3ExtAh7c+97P47feNUA8xT/YUQ/u4Y4bWPjKwuBQrXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKvGuOrSxHqmhaok4nkXzoNy1iqMB8GA1UdIwQY MBaAFDzJT/R5d4ZRpgUSHx/+Z4GWMo81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYt NWJlZjY0MjBhMDI4LzEva3E4YTQ2dExFZXFhRnFpVGllUmZPZzNMV0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYtNWJlZjY0MjBhMDI4 LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThp+MA0G CSqGSIb3DQEBCwUAA4IBAQDZ4OAD2b6bG6MBqHHwmU4pJQef8mAsBDAOxNqTjXl6 9Q+qAgOCLF4r6LMDx7tGvPj6Qc1hCVx/mv7dpL2FAM4qMLs4uOOEVXTfvM4qja+A POboXnyFG+ipCFqMVru8X99JyXrCOqpwtJ5TFQYq46xuI0EpR5sUpupKQORfFIfY nZoUmS5J9/mqrnBYnJsrhNHVMCUqjk4/OtEkcct2ReChzXidEuZVZPhaSGJMX1t1 kFjNwQCIcyjzlj74jDVX84WApgk381+QCRonvfbII2yiaRpX6MC7v9a1kMo+ZY7i iySgu81MlWC9byUzBcbgaoihZep1HN6QZB9AlZQHNK8S -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:46 2026 by rpki-client