This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/n7K--VygPD5bxJ2Nh4nbk7uTznw.roa File: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (raw, json) Hash identifier: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE= Subject key identifier: 9F:B2:BE:F9:5C:A0:3C:3E:5B:C4:9D:8D:87:89:DB:93:BB:93:CE:7C Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Certificate serial: 019B7B362FB56E61A79110B5FBD85FCE99FE Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/n7K--VygPD5bxJ2Nh4nbk7uTznw.roa Signing time: Thu 01 Jan 2026 20:18:27 +0000 ROA not before: Thu 01 Jan 2026 20:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 194.50.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2f:b5:6e:61:a7:91:10:b5:fb:d8:5f:ce:99:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fb2bef95ca03c3e5bc49d8d8789db93bb93ce7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:d3:c5:04:a9:86:6b:07:59:48:07:fb:d6: 5a:99:13:90:df:11:0d:54:47:33:46:2c:3d:76:9b: 4b:da:6c:e9:c8:43:a6:83:00:7a:9b:94:22:1c:a2: a2:ac:74:f3:47:fd:71:7b:36:b4:62:22:a8:7d:59: 1c:a5:d3:d9:08:8b:06:68:be:8f:59:2a:02:40:03: 13:f7:8c:dc:2b:77:f0:7c:85:44:9c:7c:83:60:76: 60:c2:be:08:2c:4a:74:69:1f:25:e6:ff:48:7c:da: dd:a0:d5:2c:0e:2c:2a:73:bf:81:b8:7d:98:a1:0a: 62:ba:9b:be:5e:99:ea:5a:dd:f3:59:2d:d7:f6:40: 69:6c:35:f0:88:9e:fd:35:72:3d:8b:d1:0b:9b:06: 20:b5:da:5e:50:d6:eb:a3:a3:ae:c8:32:71:18:5b: 71:27:dd:d5:1b:a1:02:44:65:7b:a1:4e:3d:6f:e1: 5c:29:aa:8c:ec:8d:43:e1:31:2b:1e:ff:2a:4c:1f: 11:e5:50:c2:d4:df:ce:cb:d7:3f:15:26:9e:11:76: 82:39:61:83:a4:c2:49:d2:71:d4:60:b6:6b:f3:e0: 80:ee:50:1d:78:bc:0c:c1:d5:bb:ec:bd:81:5a:2c: bf:57:d5:fc:3c:b7:d1:1a:8b:a8:39:c2:66:10:cd: 11:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B2:BE:F9:5C:A0:3C:3E:5B:C4:9D:8D:87:89:DB:93:BB:93:CE:7C X509v3 Authority Key Identifier: keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/n7K--VygPD5bxJ2Nh4nbk7uTznw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.26.0/23 Signature Algorithm: sha256WithRSAEncryption 01:12:c8:b4:93:28:f6:ab:38:f7:5b:1d:08:0c:13:cb:e4:0b: a2:19:88:18:15:52:d4:87:9a:2d:59:28:af:9a:55:17:83:1a: 94:35:3a:c0:43:02:24:b5:55:83:5d:e7:2e:1a:f0:97:0d:86: 18:b9:04:30:8a:fd:60:e8:4a:61:c9:7c:7d:ae:54:11:3b:4e: f6:b8:c0:6a:ed:cd:e5:7b:7a:e0:08:64:c5:fe:2b:07:a6:3b: 37:97:37:ce:60:cb:55:91:55:33:c6:e8:4d:46:86:f1:11:b2: a5:df:b1:d9:a5:4c:e0:54:e7:34:e0:95:80:47:75:58:3c:1c: c5:9e:7d:76:d5:a1:97:ea:bf:90:da:79:96:f8:a8:6a:24:b6: 48:ce:28:4f:e8:9d:d1:1c:5c:87:64:05:70:fc:16:aa:d7:d0: 19:63:a6:c6:5f:15:6f:03:b8:f6:75:db:d0:1e:f5:e5:43:08: ec:5b:05:7f:34:87:3e:a1:f0:7e:d6:39:03:85:35:0e:bf:23: b5:a4:c1:6c:b9:9b:71:be:9e:40:22:ee:0d:14:64:9c:99:32: 74:0a:ad:7f:c9:8d:b1:66:0d:2f:47:ac:0f:61:ae:6d:8d:17: ec:98:8d:e7:59:3c:c4:14:9e:cd:87:f8:30:7b:4f:79:ca:b2: b5:ad:38:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ni+1bmGnkRC1+9hfzpn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl MTQzYmIwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmIyYmVmOTVjYTAzYzNlNWJjNDlkOGQ4Nzg5ZGI5M2JiOTNjZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7fTxQSphmsHWUgH+9ZamROQ3xEN VEczRiw9dptL2mzpyEOmgwB6m5QiHKKirHTzR/1xeza0YiKofVkcpdPZCIsGaL6P WSoCQAMT94zcK3fwfIVEnHyDYHZgwr4ILEp0aR8l5v9IfNrdoNUsDiwqc7+BuH2Y oQpiupu+XpnqWt3zWS3X9kBpbDXwiJ79NXI9i9ELmwYgtdpeUNbro6OuyDJxGFtx J93VG6ECRGV7oU49b+FcKaqM7I1D4TErHv8qTB8R5VDC1N/Oy9c/FSaeEXaCOWGD pMJJ0nHUYLZr8+CA7lAdeLwMwdW77L2BWiy/V9X8PLfRGouoOcJmEM0RewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+yvvlcoDw+W8SdjYeJ25O7k858MB8GA1UdIwQY MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt MjFlYzY1NjVjOWJlLzEvbjdLLS1WeWdQRDVieEoyTmg0bmJrN3VUem53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjIaMA0G CSqGSIb3DQEBCwUAA4IBAQABEsi0kyj2qzj3Wx0IDBPL5AuiGYgYFVLUh5otWSiv mlUXgxqUNTrAQwIktVWDXecuGvCXDYYYuQQwiv1g6EphyXx9rlQRO072uMBq7c3l e3rgCGTF/isHpjs3lzfOYMtVkVUzxuhNRobxEbKl37HZpUzgVOc04JWAR3VYPBzF nn121aGX6r+Q2nmW+KhqJLZIzihP6J3RHFyHZAVw/Baq19AZY6bGXxVvA7j2ddvQ HvXlQwjsWwV/NIc+ofB+1jkDhTUOvyO1pMFsuZtxvp5AIu4NFGScmTJ0Cq1/yY2x Zg0vR6wPYa5tjRfsmI3nWTzEFJ7Nh/gwe095yrK1rTiH -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:42 2026 by rpki-client