This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/XD7uuC6NUKDza7PfKtc_jHz7EnA.roa File: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (raw, json) Hash identifier: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4= Subject key identifier: 5C:3E:EE:B8:2E:8D:50:A0:F3:6B:B3:DF:2A:D7:3F:8C:7C:FB:12:70 Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Certificate serial: 019B76EB211560D4414C11C1573969AC91EC Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/XD7uuC6NUKDza7PfKtc_jHz7EnA.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57395 IP address blocks: 194.26.16.0/24 maxlen: 24 2a11:9400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:21:15:60:d4:41:4c:11:c1:57:39:69:ac:91:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c3eeeb82e8d50a0f36bb3df2ad73f8c7cfb1270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:a0:13:5b:09:58:cd:0d:04:8a:1d:22:a8: 10:ab:10:13:56:94:91:d2:ec:4f:61:b4:3f:a2:a3: 6e:38:10:00:65:4e:bd:7d:d5:89:d1:dc:9a:80:6d: f8:ec:73:3d:fa:a7:77:de:07:65:71:71:b7:51:33: 56:80:1a:bd:83:92:4a:1e:6e:80:ff:6e:ec:85:3d: 09:c1:27:68:fd:f3:81:cc:5c:37:fb:7a:b0:f6:34: 8c:46:16:7d:41:a8:66:6a:1e:e3:b2:0d:02:85:ad: 7d:b5:52:79:94:09:b2:21:12:f6:4c:15:ab:bc:14: f1:46:a1:32:5a:e0:78:fe:55:35:fa:fd:c1:62:40: 73:60:d6:c9:3b:c0:49:1d:16:c2:aa:e8:be:de:60: 3f:21:95:8f:88:9d:57:a1:f5:06:7e:81:a8:39:cb: 98:6a:9c:25:8a:f1:bb:e8:8e:48:43:be:13:6a:05: 70:8c:d0:30:9a:00:cb:79:ce:32:45:75:9b:94:3b: ee:18:06:8b:8d:3e:63:bd:4d:34:09:cc:45:91:b6: 96:c2:8e:c6:b0:22:a0:19:fb:bf:1d:16:12:83:f1: 1d:17:7b:81:fa:6f:01:c4:f8:81:46:37:ee:38:75: 9b:21:9c:46:17:83:6b:1f:73:fa:96:09:2f:e5:40: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3E:EE:B8:2E:8D:50:A0:F3:6B:B3:DF:2A:D7:3F:8C:7C:FB:12:70 X509v3 Authority Key Identifier: keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/XD7uuC6NUKDza7PfKtc_jHz7EnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.16.0/24 IPv6: 2a11:9400::/32 Signature Algorithm: sha256WithRSAEncryption 51:4c:65:96:43:6e:c0:1c:9d:51:9c:ed:c5:86:26:09:4d:94: 5d:ea:bf:83:f3:b6:be:3a:ff:b5:01:0e:52:fa:db:f3:2b:c4: c4:2d:ae:9f:84:d2:81:40:19:04:03:11:41:bf:54:e7:5f:82: 8d:18:bd:0a:ba:db:c3:2d:ae:dd:29:7f:2f:e1:6e:35:56:e8: 77:72:aa:fc:74:34:a8:7e:a6:36:6e:86:ce:03:10:7f:bf:4c: c7:ca:22:7b:18:43:78:38:cd:36:fa:a7:cc:c6:e9:a7:53:48: 49:fb:b3:a0:9c:91:46:0d:63:d2:cc:d0:5b:67:37:8c:d2:3e: e6:2a:f7:6b:1f:38:fe:f8:22:72:e7:34:17:c0:be:df:57:25: 4d:d6:8e:18:a6:a2:eb:9b:ff:e8:e9:3b:da:95:13:8a:18:62: 4e:9e:85:14:9d:d3:6a:e0:50:8d:11:5c:a5:6d:bb:11:4c:e8: da:2d:66:1c:04:13:a5:24:94:16:8c:76:8e:13:38:88:4d:b9: bd:12:31:5d:5d:d2:e2:68:af:a1:84:5e:e0:18:f7:55:92:b7: 8e:a1:07:fd:97:11:8e:3d:03:df:bb:cd:74:ff:95:3e:c5:89: 2e:af:a1:6d:2b:82:f6:f4:c4:df:0d:4a:7e:db:a8:d6:3f:4b: 5e:ae:ab:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26yEVYNRBTBHBVzlprJHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz YWM2NjkwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzNlZWViODJlOGQ1MGEwZjM2YmIzZGYyYWQ3M2Y4YzdjZmIxMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWCgE1sJWM0NBIodIqgQqxATVpSR 0uxPYbQ/oqNuOBAAZU69fdWJ0dyagG347HM9+qd33gdlcXG3UTNWgBq9g5JKHm6A /27shT0JwSdo/fOBzFw3+3qw9jSMRhZ9Qahmah7jsg0Cha19tVJ5lAmyIRL2TBWr vBTxRqEyWuB4/lU1+v3BYkBzYNbJO8BJHRbCqui+3mA/IZWPiJ1XofUGfoGoOcuY apwlivG76I5IQ74TagVwjNAwmgDLec4yRXWblDvuGAaLjT5jvU00CcxFkbaWwo7G sCKgGfu/HRYSg/EdF3uB+m8BxPiBRjfuOHWbIZxGF4NrH3P6lgkv5UAp2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFw+7rgujVCg82uz3yrXP4x8+xJwMB8GA1UdIwQY MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt ZGY0NTA1NGRkOTM0LzEvWEQ3dXVDNk5VS0R6YTdQZkt0Y19qSHo3RW5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0 LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwhoQMA0E AgACMAcDBQAqEZQAMA0GCSqGSIb3DQEBCwUAA4IBAQBRTGWWQ27AHJ1RnO3FhiYJ TZRd6r+D87a+Ov+1AQ5S+tvzK8TELa6fhNKBQBkEAxFBv1TnX4KNGL0KutvDLa7d KX8v4W41Vuh3cqr8dDSofqY2bobOAxB/v0zHyiJ7GEN4OM02+qfMxumnU0hJ+7Og nJFGDWPSzNBbZzeM0j7mKvdrHzj++CJy5zQXwL7fVyVN1o4YpqLrm//o6TvalROK GGJOnoUUndNq4FCNEVylbbsRTOjaLWYcBBOlJJQWjHaOEziITbm9EjFdXdLiaK+h hF7gGPdVkreOoQf9lxGOPQPfu810/5U+xYkur6FtK4L29MTfDUp+26jWP0terqs/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:27 2026 by rpki-client