This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/RRfH67NRANb78QCHIsNktj2AM8M.roa File: RRfH67NRANb78QCHIsNktj2AM8M.roa (raw, json) Hash identifier: Kvb0sz/yAiVAWW/vkTFZtCm8iDPULJVC9JDaAm74c0I= Subject key identifier: 45:17:C7:EB:B3:51:00:D6:FB:F1:00:87:22:C3:64:B6:3D:80:33:C3 Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18 Certificate serial: 019B783438EC108F7F53909E98C574267CB1 Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/RRfH67NRANb78QCHIsNktj2AM8M.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 195.26.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:38:ec:10:8f:7f:53:90:9e:98:c5:74:26:7c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4517c7ebb35100d6fbf1008722c364b63d8033c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:79:aa:a5:ce:a3:93:03:09:19:73:cb:16: 5d:77:1b:3c:33:c6:05:0f:1a:05:53:d2:c1:7f:30: 50:3f:0a:cd:fe:59:56:73:79:8b:36:0b:fa:ae:83: c5:5a:f2:51:8e:d6:c4:3b:a5:23:67:f4:3a:86:67: a0:d7:a2:74:a7:99:88:40:c6:2b:7d:25:cc:ec:95: 95:aa:3a:ca:b6:53:47:a8:3d:e1:ea:ae:97:e3:70: 7e:6a:88:2e:9b:51:c9:a5:68:a4:f7:1b:a4:d6:69: 1a:36:dc:35:8d:bf:a7:eb:d0:60:60:40:92:61:be: 00:c5:c9:15:73:82:72:10:52:37:62:72:6e:59:02: 7b:ea:dc:0c:6e:7b:4a:5a:78:a4:80:5e:bc:8d:ed: e6:87:d0:6b:f6:44:e9:5e:5d:54:35:1b:77:36:5d: 69:fc:bc:fd:d5:dc:3b:2c:98:11:ca:77:30:9d:77: 7a:cf:dd:1d:31:61:f4:69:8e:de:0c:47:f8:7e:d0: 7c:e3:a2:54:f4:31:6d:57:71:8e:53:98:02:6e:c2: 2b:b8:71:c8:81:98:0c:5c:4c:49:77:38:46:f8:1d: 23:5b:d0:b9:d0:86:72:ff:01:a0:94:83:c4:8e:dc: da:ea:9c:0a:11:64:db:d8:28:18:fa:5c:77:bf:8d: 8a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:17:C7:EB:B3:51:00:D6:FB:F1:00:87:22:C3:64:B6:3D:80:33:C3 X509v3 Authority Key Identifier: keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/RRfH67NRANb78QCHIsNktj2AM8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.26.26.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ce:8e:6f:40:26:86:2a:aa:cc:ef:ea:ce:b4:76:5f:0a:5d: 0a:8d:e3:a1:ce:c1:7e:fc:34:1d:30:e3:c0:bf:38:0d:ad:f0: 46:48:e4:bd:2b:8d:db:88:3b:57:d0:c2:00:4e:42:ff:fb:6e: 5b:76:ee:aa:4a:ba:b8:1d:c2:72:8c:d4:c6:a1:78:d3:8f:4f: 9d:f6:35:66:9d:da:27:b3:dd:c3:6c:5f:f3:da:d0:31:90:33: e8:f6:a2:4f:5f:61:62:fb:25:32:a6:ee:31:82:33:16:bd:81: 9d:53:d9:62:c3:c3:70:e0:7b:4f:35:e0:ec:4a:43:44:eb:4a: b0:c9:1d:f5:fa:32:54:7d:3f:ef:4e:3a:75:da:ea:3a:f9:5c: ac:35:26:84:45:2f:89:fa:bd:17:2f:66:8c:7e:82:91:6f:d2: 0a:d1:fc:f4:a3:0a:2b:7f:8c:9d:81:a5:3c:5e:48:e3:8c:46: 99:12:97:d7:ae:54:ed:d1:53:eb:39:fb:e0:3e:97:48:8c:a8: ad:fa:7f:bc:b5:01:fb:6d:62:a3:f7:28:da:ba:22:7c:05:f3: c1:21:78:2e:d8:fa:56:45:3d:f5:57:bd:b7:6e:49:53:92:ca: 6a:61:f2:74:07:67:b5:70:c7:ac:95:8d:ab:55:6a:b2:c7:66: 27:9e:4c:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDjsEI9/U5CemMV0JnyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYWQzZGM0MGFjZDE4NTJmYzc0YWNkZDM3ZDhmMDdiYmIw MjVkMTgwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTE3YzdlYmIzNTEwMGQ2ZmJmMTAwODcyMmMzNjRiNjNkODAzM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0p5qqXOo5MDCRlzyxZddxs8M8YF DxoFU9LBfzBQPwrN/llWc3mLNgv6roPFWvJRjtbEO6UjZ/Q6hmeg16J0p5mIQMYr fSXM7JWVqjrKtlNHqD3h6q6X43B+aogum1HJpWik9xuk1mkaNtw1jb+n69BgYECS Yb4AxckVc4JyEFI3YnJuWQJ76twMbntKWnikgF68je3mh9Br9kTpXl1UNRt3Nl1p /Lz91dw7LJgRyncwnXd6z90dMWH0aY7eDEf4ftB846JU9DFtV3GOU5gCbsIruHHI gZgMXExJdzhG+B0jW9C50IZy/wGglIPEjtza6pwKEWTb2CgY+lx3v42KRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUXx+uzUQDW+/EAhyLDZLY9gDPDMB8GA1UdIwQY MBaAFIKtPcQKzRhS/HSs3TfY8Hu7Al0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yMTdiNzMtMDU2Mi00NzZlLThkODMt ODQ5YzVjODhkYmZjLzEvUlJmSDY3TlJBTmI3OFFDSElzTmt0ajJBTThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yMTdiNzMtMDU2Mi00NzZlLThkODMtODQ5YzVjODhkYmZj LzEvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxoaMA0G CSqGSIb3DQEBCwUAA4IBAQCXzo5vQCaGKqrM7+rOtHZfCl0KjeOhzsF+/DQdMOPA vzgNrfBGSOS9K43biDtX0MIATkL/+25bdu6qSrq4HcJyjNTGoXjTj0+d9jVmndon s93DbF/z2tAxkDPo9qJPX2Fi+yUypu4xgjMWvYGdU9liw8Nw4HtPNeDsSkNE60qw yR31+jJUfT/vTjp12uo6+VysNSaERS+J+r0XL2aMfoKRb9IK0fz0oworf4ydgaU8 XkjjjEaZEpfXrlTt0VPrOfvgPpdIjKit+n+8tQH7bWKj9yjauiJ8BfPBIXgu2PpW RT31V723bklTkspqYfJ0B2e1cMeslY2rVWqyx2Ynnkwb -----END CERTIFICATE-----Generated at Wed Jan 7 17:16:19 2026 by rpki-client