This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9f7Yff6yNTvtu8-Qei8fXktRGUQ.roa File: 9f7Yff6yNTvtu8-Qei8fXktRGUQ.roa (raw, json) Hash identifier: Eg4vr+F4rafvG0UUesc8mpo4uo3lxBN40jfkCrGVgiU= Subject key identifier: F5:FE:D8:7D:FE:B2:35:3B:ED:BB:CF:90:7A:2F:1F:5E:4B:51:19:44 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A24FD33B57423A0F3F05FE6667FD41 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9f7Yff6yNTvtu8-Qei8fXktRGUQ.roa Signing time: Thu 01 Jan 2026 08:17:41 +0000 ROA not before: Thu 01 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 212.134.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4f:d3:3b:57:42:3a:0f:3f:05:fe:66:67:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5fed87dfeb2353bedbbcf907a2f1f5e4b511944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:07:67:fb:c2:5b:e7:d2:ca:89:c6:3d:af: 42:49:1b:ad:06:10:10:b1:21:c2:fd:8b:d7:89:e9: d4:8d:e0:e9:a7:75:68:c9:84:3b:22:ad:27:cf:9e: 5f:2f:a9:cc:eb:6c:ba:d2:a4:89:20:7e:76:51:cc: 69:28:02:26:75:e5:93:26:de:b9:cc:1f:53:74:f7: c4:99:d3:07:2a:46:92:f2:89:a5:58:64:97:d6:45: 7d:b8:d9:f2:d7:29:8e:40:ed:52:2a:b0:09:74:93: 21:fd:9e:60:3c:9d:56:bd:88:fb:04:00:eb:d8:db: 78:0e:ef:85:ad:76:8f:86:e6:98:42:74:92:34:0b: 3c:93:7b:a7:57:be:c5:4c:21:4a:29:6d:38:6d:29: 94:7f:e5:4f:c2:ca:c5:ea:63:e9:db:24:a8:27:e9: 19:62:9b:91:ac:13:10:09:b2:12:e7:4f:11:c2:f2: d9:9f:7c:fa:ac:37:48:12:80:46:37:7a:0d:64:09: 5b:4f:ac:ef:4d:95:b9:ee:a0:14:04:80:8a:c3:7e: 48:35:1d:e4:c1:25:47:01:60:6c:7a:0f:71:df:90: 0e:74:10:f8:0f:c5:17:a1:a5:43:0c:4a:dd:d3:c5: 3b:42:e4:4d:1d:be:65:76:bd:f7:f1:6f:84:87:59: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FE:D8:7D:FE:B2:35:3B:ED:BB:CF:90:7A:2F:1F:5E:4B:51:19:44 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9f7Yff6yNTvtu8-Qei8fXktRGUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.26.0/24 Signature Algorithm: sha256WithRSAEncryption 41:27:41:32:a8:be:b6:04:c9:78:24:31:43:5b:a2:aa:86:8b: 6a:e6:18:ba:54:19:95:13:62:70:c6:e8:d2:e2:f1:27:31:54: ab:c1:22:e8:0a:d1:f9:45:a5:90:c5:f4:d3:e8:6b:98:d1:13: 73:1a:30:d4:a4:fa:3d:90:b0:6c:f3:e1:95:f2:1d:0c:98:4a: c8:1b:76:e5:91:09:36:9e:81:99:17:55:71:70:77:34:f2:5a: c5:54:5e:8d:e7:7c:20:53:b9:ba:7e:b8:3c:c4:30:24:10:6e: b1:8d:9a:81:f1:9f:1d:2e:ae:d9:19:8e:e2:e8:56:b8:93:20: b1:a0:2b:6a:65:75:af:e5:b2:34:64:83:73:fe:fe:1b:55:71: 51:c6:a4:cf:92:e5:be:1e:fd:45:b0:2c:ca:4f:c3:70:6b:c1: 9c:b9:e7:b9:75:33:8f:64:c2:5b:da:d9:0c:de:8f:e9:69:a8: b0:97:71:90:90:84:cb:c2:3d:20:71:ba:df:a1:f6:b5:fc:15: 35:73:04:6e:e3:a0:a7:3f:f4:0a:46:c6:48:65:98:c1:5a:af: ce:41:04:4a:33:e3:56:d2:04:db:92:fc:01:f5:6f:68:6e:4a: 0c:46:ba:d8:2e:67:11:17:49:2e:22:1b:a2:3d:01:e8:3b:62: 5e:11:19:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ok/TO1dCOg8/Bf5mZ/1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWZlZDg3ZGZlYjIzNTNiZWRiYmNmOTA3YTJmMWY1ZTRiNTExOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3IHZ/vCW+fSyonGPa9CSRutBhAQ sSHC/YvXienUjeDpp3VoyYQ7Iq0nz55fL6nM62y60qSJIH52UcxpKAImdeWTJt65 zB9TdPfEmdMHKkaS8omlWGSX1kV9uNny1ymOQO1SKrAJdJMh/Z5gPJ1WvYj7BADr 2Nt4Du+FrXaPhuaYQnSSNAs8k3unV77FTCFKKW04bSmUf+VPwsrF6mPp2ySoJ+kZ YpuRrBMQCbIS508RwvLZn3z6rDdIEoBGN3oNZAlbT6zvTZW57qAUBICKw35INR3k wSVHAWBseg9x35AOdBD4D8UXoaVDDErd08U7QuRNHb5ldr338W+Eh1l/lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPX+2H3+sjU77bvPkHovH15LURlEMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOWY3WWZmNnlOVHZ0dTgtUWVpOGZYa3RSR1VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IYaMA0G CSqGSIb3DQEBCwUAA4IBAQBBJ0EyqL62BMl4JDFDW6Kqhotq5hi6VBmVE2JwxujS 4vEnMVSrwSLoCtH5RaWQxfTT6GuY0RNzGjDUpPo9kLBs8+GV8h0MmErIG3blkQk2 noGZF1VxcHc08lrFVF6N53wgU7m6frg8xDAkEG6xjZqB8Z8dLq7ZGY7i6Fa4kyCx oCtqZXWv5bI0ZINz/v4bVXFRxqTPkuW+Hv1FsCzKT8Nwa8Gcuee5dTOPZMJb2tkM 3o/paaiwl3GQkITLwj0gcbrfofa1/BU1cwRu46CnP/QKRsZIZZjBWq/OQQRKM+NW 0gTbkvwB9W9obkoMRrrYLmcRF0kuIhuiPQHoO2JeERkB -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:13 2026 by rpki-client