This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/AH26kSMHALdMjY18ZcT8tq9G66U.roa File: AH26kSMHALdMjY18ZcT8tq9G66U.roa (raw, json) Hash identifier: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo= Subject key identifier: 00:7D:BA:91:23:07:00:B7:4C:8D:8D:7C:65:C4:FC:B6:AF:46:EB:A5 Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Certificate serial: 019B7A5A0DE089AC787244A6DCD104C143EA Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/AH26kSMHALdMjY18ZcT8tq9G66U.roa Signing time: Thu 01 Jan 2026 16:18:00 +0000 ROA not before: Thu 01 Jan 2026 16:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 195.88.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0d:e0:89:ac:78:72:44:a6:dc:d1:04:c1:43:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=007dba91230700b74c8d8d7c65c4fcb6af46eba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:f5:26:06:26:b9:60:d9:6b:be:e8:9f:de: a8:38:52:21:56:45:9c:bc:67:17:1d:c6:c9:42:5b: 5d:28:12:dc:ea:2c:22:ab:d9:32:1f:61:a6:2b:84: 4c:33:79:6e:f9:ec:59:0b:eb:a2:65:eb:c9:3f:c3: 76:c8:bf:89:1b:cf:68:3a:e8:cf:fb:41:19:a4:ee: f7:0a:09:d9:34:85:bd:f2:cd:e7:1e:fb:c9:cc:4e: 0b:33:32:80:0d:2a:5c:7b:88:50:0b:a3:b6:34:d8: cd:b7:4f:e9:ce:2b:31:8b:07:9b:77:f8:62:10:25: 47:2d:5b:72:e0:f1:2a:c1:e7:5f:d8:90:05:d9:f6: 70:ab:12:13:9f:17:3a:72:29:92:60:48:74:f6:6e: f8:a1:d0:c1:29:be:a6:90:67:03:a6:17:46:b1:ef: 7c:36:34:6d:cf:20:59:21:8f:c1:77:dc:b5:e5:f3: e8:95:5d:5d:a3:e8:f6:72:21:96:c9:31:8f:6e:91: 23:63:dd:33:c3:be:2e:40:68:59:21:6d:41:43:0e: da:bf:5c:40:8c:29:37:0c:07:6c:24:d5:f1:70:13: 08:0c:c8:1f:2a:5c:44:83:c4:26:50:a3:e3:96:1f: 30:5d:fe:4f:0f:e5:86:b2:75:0d:09:2a:3c:f4:aa: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:BA:91:23:07:00:B7:4C:8D:8D:7C:65:C4:FC:B6:AF:46:EB:A5 X509v3 Authority Key Identifier: keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/AH26kSMHALdMjY18ZcT8tq9G66U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:a7:7d:b0:0b:e6:89:8d:53:f7:a9:15:3a:3a:3c:a0:39:32: 9b:a7:1f:89:b3:5e:3f:29:b9:14:dd:d1:59:be:2e:68:69:70: 98:d8:d7:1f:f5:8e:be:30:98:e0:e2:31:10:80:5b:34:65:23: dc:ab:a1:91:26:c9:66:b0:b3:e4:57:a4:d1:c1:97:f4:cf:be: 80:bb:03:8a:1a:55:57:06:c7:db:b4:7c:1c:10:f8:45:a1:25: 81:58:b0:c6:e6:61:b3:7d:43:ff:fc:63:c4:6e:9e:aa:31:78: c7:74:f2:f4:3e:88:9d:25:83:97:ea:6f:a9:f8:30:0d:9e:48: 85:1b:64:04:01:4b:fe:20:3c:59:8f:85:e8:ab:62:92:8b:e2: 89:5e:0c:aa:f0:27:20:2e:80:0d:24:3b:65:b1:fa:14:a5:37: f7:79:18:ae:b7:db:65:fb:09:b2:2b:3f:de:d8:3c:c2:5c:6f: 93:45:69:1b:53:e1:b0:f8:9f:26:19:24:cf:5c:33:3a:6a:ae: c3:fd:fa:36:55:15:af:21:81:65:a8:a3:47:b1:40:d6:83:f5: f7:2e:ba:5f:18:ae:a7:c6:57:c5:2b:ee:48:b0:fc:61:cd:2c: d7:2e:e7:8b:af:6a:d7:4d:b7:a1:b6:03:3c:54:35:7b:69:df: 47:9c:cc:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wg3giax4ckSm3NEEwUPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmEwOGE3NDM4YTQ5NTg5ZDYzNGY4OGEwOWU5Mzk0MWY4 MTA3ZjYwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDdkYmE5MTIzMDcwMGI3NGM4ZDhkN2M2NWM0ZmNiNmFmNDZlYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPP1JgYmuWDZa77on96oOFIhVkWc vGcXHcbJQltdKBLc6iwiq9kyH2GmK4RMM3lu+exZC+uiZevJP8N2yL+JG89oOujP +0EZpO73CgnZNIW98s3nHvvJzE4LMzKADSpce4hQC6O2NNjNt0/pzisxiwebd/hi ECVHLVty4PEqwedf2JAF2fZwqxITnxc6cimSYEh09m74odDBKb6mkGcDphdGse98 NjRtzyBZIY/Bd9y15fPolV1do+j2ciGWyTGPbpEjY90zw74uQGhZIW1BQw7av1xA jCk3DAdsJNXxcBMIDMgfKlxEg8QmUKPjlh8wXf5PD+WGsnUNCSo89Ko8HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAB9upEjBwC3TI2NfGXE/LavRuulMB8GA1UdIwQY MBaAFC0qCKdDiklYnWNPiKCek5QfgQf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUt MjZjNjdjZDAxMjhjLzEvQUgyNmtTTUhBTGRNalkxOFpjVDh0cTlHNjZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUtMjZjNjdjZDAxMjhj LzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1gVMA0G CSqGSIb3DQEBCwUAA4IBAQAtp32wC+aJjVP3qRU6OjygOTKbpx+Js14/KbkU3dFZ vi5oaXCY2Ncf9Y6+MJjg4jEQgFs0ZSPcq6GRJslmsLPkV6TRwZf0z76AuwOKGlVX BsfbtHwcEPhFoSWBWLDG5mGzfUP//GPEbp6qMXjHdPL0PoidJYOX6m+p+DANnkiF G2QEAUv+IDxZj4Xoq2KSi+KJXgyq8CcgLoANJDtlsfoUpTf3eRiut9tl+wmyKz/e 2DzCXG+TRWkbU+Gw+J8mGSTPXDM6aq7D/fo2VRWvIYFlqKNHsUDWg/X3LrpfGK6n xlfFK+5IsPxhzSzXLueLr2rXTbehtgM8VDV7ad9HnMye -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:35 2026 by rpki-client