This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa
File: e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa (raw, json)
Hash identifier: uCVQMuNimm2kRxYums+7bm1dwpOCnLao+2OKBBHNm54=
Subject key identifier: 7B:B2:42:29:93:3B:4A:3E:E7:67:E8:E7:D1:CB:A5:C3:1C:67:99:16
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 019B78A21958CE2C89AD913D545540EEE99E
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa
Signing time: Thu 01 Jan 2026 08:17:27 +0000
ROA not before: Thu 01 Jan 2026 08:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210474
IP address blocks: 194.26.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:19:58:ce:2c:89:ad:91:3d:54:55:40:ee:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Jan 1 08:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bb24229933b4a3ee767e8e7d1cba5c31c679916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:d9:59:a8:bf:f4:a8:0f:b8:c3:86:83:21:
5a:07:a0:54:0d:e8:6f:15:81:91:0f:e7:ff:28:91:
da:1a:48:52:79:f4:10:f7:4a:7f:14:f4:ab:93:2b:
a9:92:50:c4:2e:7a:9d:d4:de:58:2e:ca:24:28:0d:
c7:ac:c0:45:a8:78:07:56:fe:7d:ba:d5:62:6c:af:
9b:a6:56:61:46:58:14:c7:d0:35:ef:80:f1:5e:03:
2e:e6:de:5d:48:f2:36:62:09:00:8f:c8:6c:af:47:
88:d6:90:49:37:46:57:c3:53:9d:d7:d4:9e:d7:f7:
d7:72:8a:1e:d4:f4:7f:9f:58:76:c0:4e:73:33:72:
d5:c7:ab:b7:02:43:12:d4:49:8c:4c:e5:19:98:19:
7b:2d:d3:f8:88:d1:3f:4c:95:ea:af:9f:bd:a4:6f:
f1:e2:40:18:72:c7:0a:c3:f1:54:f7:39:12:54:f5:
1f:06:21:86:00:89:bc:fc:bd:ad:f4:15:24:df:15:
22:14:da:7f:3f:80:00:8a:24:37:03:b0:b3:fb:c0:
b9:e7:d4:dc:a2:d5:12:bb:39:0d:c2:92:27:e5:9e:
e6:3a:49:7a:7b:61:45:c2:c1:5f:16:3c:15:53:c6:
17:94:7f:7c:e0:36:00:bd:84:12:95:a2:f8:38:7d:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:42:29:93:3B:4A:3E:E7:67:E8:E7:D1:CB:A5:C3:1C:67:99:16
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.99.0/24
Signature Algorithm: sha256WithRSAEncryption
74:39:ba:f9:57:52:e9:cc:e5:8b:62:20:11:60:3b:9c:4b:08:
11:e9:8d:07:6e:61:22:5c:ef:19:52:c0:06:ab:62:da:bb:46:
99:0f:f7:f1:63:16:b1:75:c3:cc:55:b3:1b:24:58:ab:86:eb:
bd:5e:94:be:5b:f4:95:07:7b:b1:c0:ee:27:30:b9:32:1d:32:
8e:ba:bf:4d:ce:2d:ad:64:97:e5:b2:82:1e:5e:89:24:05:08:
8c:49:5d:ed:a5:27:a0:2e:85:cc:27:17:e0:4c:6f:d8:ae:c9:
97:b2:db:44:53:94:5b:75:63:f4:d0:72:8f:6e:2f:c7:7f:62:
af:9e:19:78:65:bc:66:20:d5:26:3c:5e:a4:0f:41:80:f1:e3:
82:10:a1:7a:a7:e4:4c:27:6c:c4:77:74:f3:99:58:2d:46:1f:
a6:47:f8:78:07:1f:eb:f7:cb:a9:2f:c7:30:89:00:aa:3e:2a:
24:04:df:18:e8:07:c3:f6:b1:a5:5a:f6:d4:16:34:9c:79:52:
db:8c:e3:f8:b2:0a:3e:8f:ef:b9:c4:96:3e:26:ab:38:97:37:
12:97:3e:0b:ac:92:3a:8b:8d:90:8b:ae:b7:89:de:92:e6:d7:
94:3e:60:3d:15:42:e3:6a:68:ee:89:be:8a:c3:e8:96:0e:6d:
61:6f:f9:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ohlYziyJrZE9VFVA7umeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjNDZkMGU1ZmZmMDQzN2NiNjk3ODNmZTM5OWYxOTAz
MjAwZDUwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmIyNDIyOTkzM2I0YTNlZTc2N2U4ZTdkMWNiYTVjMzFjNjc5OTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGXZWai/9KgPuMOGgyFaB6BUDehv
FYGRD+f/KJHaGkhSefQQ90p/FPSrkyupklDELnqd1N5YLsokKA3HrMBFqHgHVv59
utVibK+bplZhRlgUx9A174DxXgMu5t5dSPI2YgkAj8hsr0eI1pBJN0ZXw1Od19Se
1/fXcooe1PR/n1h2wE5zM3LVx6u3AkMS1EmMTOUZmBl7LdP4iNE/TJXqr5+9pG/x
4kAYcscKw/FU9zkSVPUfBiGGAIm8/L2t9BUk3xUiFNp/P4AAiiQ3A7Cz+8C559Tc
otUSuzkNwpIn5Z7mOkl6e2FFwsFfFjwVU8YXlH984DYAvYQSlaL4OH0cNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHuyQimTO0o+52fo59HLpcMcZ5kWMB8GA1UdIwQY
MBaAFHsmxG0OX/8EN8tpeD/jmfGQMgDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliRWJRNWZfd1EzeTJsNFAtT1o4WkF5QU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YWIwZWYtMWFlYS00ZTczLWFkZDct
NzRkYjlhMjlhNzNjLzEvZTdKQ0taTTdTajduWi1qbjBjdWx3eHhubVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YWIwZWYtMWFlYS00ZTczLWFkZDctNzRkYjlhMjlhNzNj
LzEvZXliRWJRNWZfd1EzeTJsNFAtT1o4WkF5QU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhpjMA0G
CSqGSIb3DQEBCwUAA4IBAQB0Obr5V1LpzOWLYiARYDucSwgR6Y0HbmEiXO8ZUsAG
q2Lau0aZD/fxYxaxdcPMVbMbJFirhuu9XpS+W/SVB3uxwO4nMLkyHTKOur9Nzi2t
ZJflsoIeXokkBQiMSV3tpSegLoXMJxfgTG/YrsmXsttEU5RbdWP00HKPbi/Hf2Kv
nhl4ZbxmINUmPF6kD0GA8eOCEKF6p+RMJ2zEd3TzmVgtRh+mR/h4Bx/r98upL8cw
iQCqPiokBN8Y6AfD9rGlWvbUFjSceVLbjOP4sgo+j++5xJY+Jqs4lzcSlz4LrJI6
i42Qi663id6S5teUPmA9FULjamjuib6Kw+iWDm1hb/l2
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:10 2026 by rpki-client