This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/912ggk5y8hlaC5Oq1RcqiznaZVo.roa
File: 912ggk5y8hlaC5Oq1RcqiznaZVo.roa (raw, json)
Hash identifier: DjODdr6zI59Yx4ri8xsDh4PbCcxOZi8hGkYTMA91hDs=
Subject key identifier: F7:5D:A0:82:4E:72:F2:19:5A:0B:93:AA:D5:17:2A:8B:39:DA:65:5A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019B7CEE3DFA35AA76940792D22FF0940266
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/912ggk5y8hlaC5Oq1RcqiznaZVo.roa
Signing time: Fri 02 Jan 2026 04:19:06 +0000
ROA not before: Fri 02 Jan 2026 04:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 149.126.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:3d:fa:35:aa:76:94:07:92:d2:2f:f0:94:02:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 04:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f75da0824e72f2195a0b93aad5172a8b39da655a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:43:c6:9b:41:77:58:5b:3b:9c:0b:38:3a:
b8:fb:01:5d:71:44:29:d2:70:c7:d1:70:d2:df:12:
bb:60:55:26:ab:09:e5:8a:6a:ec:71:db:6a:48:af:
79:9a:e2:7e:11:8c:a2:9c:63:d9:a2:2d:8f:01:8b:
99:93:10:2b:9c:90:dd:7f:d4:4a:e2:c5:1c:8f:e7:
ef:8b:59:90:b2:07:97:51:57:da:d3:ac:da:62:e3:
72:f5:3b:de:14:b4:36:49:21:b5:5c:40:f3:28:76:
f8:00:2d:32:bf:a2:2f:58:79:02:db:9b:4d:48:c5:
53:47:f0:7f:cf:39:7d:51:18:92:05:33:fe:26:89:
45:c8:a2:e8:11:20:3f:dc:b7:a4:f4:5c:00:fe:86:
8f:02:ad:02:55:c8:09:90:eb:7e:0e:9a:b6:f6:7d:
b8:62:36:17:a2:5d:02:06:8c:e1:bf:cd:a7:63:2d:
07:7f:ed:1a:b8:d5:59:51:08:03:47:a1:b8:41:03:
83:5d:5a:2a:d8:7c:c7:e3:76:1b:89:5f:6f:ad:36:
c9:2f:37:4b:79:1d:10:a9:76:51:17:f3:9d:a2:f4:
d6:02:23:37:f9:93:df:0e:b4:51:ac:66:8c:63:cc:
29:a7:c1:0e:82:c3:3c:14:90:ab:c1:56:f5:39:54:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:A0:82:4E:72:F2:19:5A:0B:93:AA:D5:17:2A:8B:39:DA:65:5A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/912ggk5y8hlaC5Oq1RcqiznaZVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:98:ac:73:f5:a1:fe:2f:82:19:61:6b:fe:98:58:9e:e1:b6:
99:c3:9b:20:3e:96:02:3f:cd:95:41:a6:01:13:b9:ea:50:a7:
50:11:5b:18:e0:c2:e7:ff:81:2a:6a:84:05:b0:fd:fa:f4:da:
ba:a6:87:1d:35:b4:9f:01:60:76:77:99:72:c8:61:05:db:9b:
b2:dc:e7:fd:d0:87:bf:64:95:77:54:9a:db:2f:da:b1:19:a9:
11:0e:94:40:95:91:43:cb:a6:eb:84:57:b9:aa:fd:3a:21:fd:
6d:ae:40:81:d2:3c:98:d9:6c:cf:ef:cd:12:fd:64:62:42:ec:
4a:39:f1:d2:59:c5:97:30:80:25:10:20:f8:68:95:f1:4c:14:
f6:50:bd:b3:a4:7b:8f:41:6d:cd:3f:da:92:4e:e9:c1:40:17:
ee:8c:6d:93:8f:05:0d:63:3e:30:da:ce:75:81:01:64:40:0e:
46:90:5b:99:5c:d7:ad:bd:a7:c9:15:9b:36:8a:08:36:0c:b5:
43:9f:cb:a3:bb:18:69:8c:3a:ec:8d:8e:64:c2:26:75:63:40:
a9:a0:66:0a:1d:6f:21:e1:1d:e8:d5:a0:d6:57:9d:71:f7:c1:
1d:76:c7:71:cb:f2:47:0d:6d:5d:c2:08:54:e8:b4:9f:2c:94:
e2:b5:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:09:25 2026 by rpki-client