This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/d7TMwS92glTdW3N8KmDukqMRLqU.roa File: d7TMwS92glTdW3N8KmDukqMRLqU.roa (raw, json) Hash identifier: 31LbEXEUnAvolwco3YmcCdR5874EevAvdxtYmb4X9nU= Subject key identifier: 77:B4:CC:C1:2F:76:82:54:DD:5B:73:7C:2A:60:EE:92:A3:11:2E:A5 Certificate issuer: /CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458 Certificate serial: 019BFA4E3E5BCB7B02A9B1E324C956C1F481 Authority key identifier: 26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/d7TMwS92glTdW3N8KmDukqMRLqU.roa Signing time: Mon 26 Jan 2026 12:36:30 +0000 ROA not before: Mon 26 Jan 2026 12:36:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38989 IP address blocks: 195.254.158.0/23 maxlen: 23 195.254.158.0/24 maxlen: 24 195.254.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:4e:3e:5b:cb:7b:02:a9:b1:e3:24:c9:56:c1:f4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458 Validity Not Before: Jan 26 12:36:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77b4ccc12f768254dd5b737c2a60ee92a3112ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:79:bd:6b:54:31:76:db:52:df:d3:00:e8: 80:d5:29:eb:0d:57:bc:7e:f1:1d:e8:6f:d9:cb:2b: 9c:09:08:5c:cc:78:26:56:51:6b:1a:be:93:87:21: 97:32:40:dd:1b:f0:fd:28:65:d8:be:c8:20:a3:03: 74:cf:1f:03:e7:5f:a1:5a:54:9c:f9:9e:9d:34:1b: 7b:18:44:e5:f7:7b:9f:cf:6a:7e:b3:5e:07:80:f8: cd:1b:8f:2e:53:fe:0e:b0:3e:39:34:5e:d6:e6:ed: f5:ca:f9:21:80:f8:c0:d9:af:23:e4:db:22:d3:6e: 33:5e:cb:81:57:44:5c:ba:88:a1:90:64:b3:5b:08: e2:fc:2f:db:7f:a8:cd:1d:67:23:1e:6f:03:ef:74: db:1b:94:11:80:45:d4:83:31:93:53:3e:8c:f3:9b: 44:31:2d:f0:8a:a4:99:90:25:fb:59:53:6e:ef:66: b4:ac:d0:80:9f:8a:b9:8b:35:3f:68:c2:88:3c:9d: b6:2f:04:90:b2:7a:37:a4:3f:d4:c5:37:bc:f0:4c: ee:98:11:17:09:da:ca:4f:1f:9a:1d:d8:76:dc:35: e9:cf:56:b3:8e:44:27:a9:f2:7c:48:1a:4a:5d:51: 82:78:66:7e:e8:4b:6c:f3:ea:66:74:d6:18:b9:5c: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B4:CC:C1:2F:76:82:54:DD:5B:73:7C:2A:60:EE:92:A3:11:2E:A5 X509v3 Authority Key Identifier: keyid:26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/d7TMwS92glTdW3N8KmDukqMRLqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.158.0/23 Signature Algorithm: sha256WithRSAEncryption 61:bf:d8:7c:64:39:97:1b:e8:30:1a:70:f4:14:4e:f7:b4:e5: 76:1f:29:25:80:59:91:1b:9e:06:1b:69:fd:1c:7f:89:92:e7: 6a:bf:2d:c1:e4:24:1d:25:ed:4b:c8:bd:6a:88:11:4c:e7:71: 8b:9a:b9:d9:b4:b0:60:6c:da:a3:d3:fc:60:c9:55:2c:2b:0d: c4:e3:87:86:ab:2d:c4:ac:f9:d2:ab:26:57:9f:f6:c0:f3:6d: 8f:db:b9:31:4b:b3:17:f1:be:06:4f:84:fc:0d:9f:4e:93:c9: f9:1a:e0:cd:3d:54:63:87:24:da:51:2c:f5:43:07:9f:cb:9a: 6f:aa:c3:f3:56:49:e9:cf:87:16:ce:94:a6:ca:cf:fc:b3:31: ef:48:88:70:85:d4:4f:c8:ce:7f:65:30:f9:e1:8f:74:c8:74: e0:23:ae:32:1b:57:70:7f:2e:4b:6c:7f:65:18:03:12:f4:08: cb:f3:af:db:cb:94:67:6e:82:05:ee:47:2e:b7:a2:9a:d4:c8: de:e2:a4:36:10:16:90:36:5b:5d:85:72:7b:8b:a1:5c:8c:77: 8c:b2:22:37:b3:fe:4c:2e:7c:9a:6e:23:b7:54:b4:d5:92:95: 87:6b:04:b4:42:d1:cc:ca:cf:50:f6:46:b7:1a:67:ba:2a:ca: 0e:67:bb:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6Tj5by3sCqbHjJMlWwfSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWMzM2JmN2RmYThiZDkwNjFhYjllNjk3ZjQ5MzE2NGU0 OWM0NTgwHhcNMjYwMTI2MTIzNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2I0Y2NjMTJmNzY4MjU0ZGQ1YjczN2MyYTYwZWU5MmEzMTEyZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAh5vWtUMXbbUt/TAOiA1SnrDVe8 fvEd6G/ZyyucCQhczHgmVlFrGr6ThyGXMkDdG/D9KGXYvsggowN0zx8D51+hWlSc +Z6dNBt7GETl93ufz2p+s14HgPjNG48uU/4OsD45NF7W5u31yvkhgPjA2a8j5Nsi 024zXsuBV0RcuoihkGSzWwji/C/bf6jNHWcjHm8D73TbG5QRgEXUgzGTUz6M85tE MS3wiqSZkCX7WVNu72a0rNCAn4q5izU/aMKIPJ22LwSQsno3pD/UxTe88EzumBEX CdrKTx+aHdh23DXpz1azjkQnqfJ8SBpKXVGCeGZ+6Ets8+pmdNYYuVzjtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHe0zMEvdoJU3VtzfCpg7pKjES6lMB8GA1UdIwQY MBaAFCasM799+ovZBhq55pf0kxZOScRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnF3enYzMzZpOWtHR3JubWxfU1RGazVKeEZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xYTY0ODktOTU5ZC00NGM3LTgxY2Qt NDIwZWI2ZjBiMjg2LzEvZDdUTXdTOTJnbFRkVzNOOEttRHVrcU1STHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xYTY0ODktOTU5ZC00NGM3LTgxY2QtNDIwZWI2ZjBiMjg2 LzEvSnF3enYzMzZpOWtHR3JubWxfU1RGazVKeEZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/6eMA0G CSqGSIb3DQEBCwUAA4IBAQBhv9h8ZDmXG+gwGnD0FE73tOV2HyklgFmRG54GG2n9 HH+Jkudqvy3B5CQdJe1LyL1qiBFM53GLmrnZtLBgbNqj0/xgyVUsKw3E44eGqy3E rPnSqyZXn/bA822P27kxS7MX8b4GT4T8DZ9Ok8n5GuDNPVRjhyTaUSz1Qwefy5pv qsPzVknpz4cWzpSmys/8szHvSIhwhdRPyM5/ZTD54Y90yHTgI64yG1dwfy5LbH9l GAMS9AjL86/by5RnboIF7kcut6Ka1Mje4qQ2EBaQNltdhXJ7i6FcjHeMsiI3s/5M LnyabiO3VLTVkpWHawS0QtHMys9Q9ka3Gme6KsoOZ7uQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:16 2026 by rpki-client