This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/u26fRlT_magCXskBSsLbW-Zc4HE.roa File: u26fRlT_magCXskBSsLbW-Zc4HE.roa (raw, json) Hash identifier: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo= Subject key identifier: BB:6E:9F:46:54:FF:99:A8:02:5E:C9:01:4A:C2:DB:5B:E6:5C:E0:71 Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486 Certificate serial: 019B77C685CB1B04AEA9B9633C2000457F58 Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/u26fRlT_magCXskBSsLbW-Zc4HE.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51167 IP address blocks: 91.239.43.0/24 maxlen: 24 195.191.65.0/24 maxlen: 24 213.109.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:cb:1b:04:ae:a9:b9:63:3c:20:00:45:7f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb6e9f4654ff99a8025ec9014ac2db5be65ce071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:ff:9e:23:e2:b3:9d:1b:91:5e:63:ff:35: 11:04:90:f4:84:65:ca:8c:7f:01:82:cb:87:be:f4: 88:8d:2e:d1:64:62:87:d5:1d:a9:03:18:ec:e4:83: 81:59:6d:c5:aa:c2:4a:5e:2c:6a:58:68:07:a4:9e: b0:87:a8:86:b0:51:95:3b:03:77:e4:0f:29:0c:1f: a9:af:38:29:cf:11:84:a6:c8:9e:6d:9c:6a:c5:fc: 22:33:c8:91:c9:0c:0a:44:d3:a3:c4:cd:79:09:f4: ff:37:a2:92:1b:7a:db:75:d5:e9:63:a9:9e:e2:0b: f6:30:df:41:21:7c:9e:e3:7c:5d:f6:75:5a:92:49: 52:35:cf:ba:13:8d:96:34:ff:07:de:09:6e:ca:07: 71:e9:d8:15:99:37:25:5d:b8:1e:b9:01:a6:6e:d2: cd:73:c1:dc:14:57:35:0d:38:5a:e5:70:49:d9:56: c5:8b:62:3b:1a:06:80:2c:5e:a2:b3:a2:11:3b:df: 97:9a:08:62:3e:6a:e2:fa:49:d3:09:c0:37:22:4c: 22:9c:b0:e9:4a:71:ed:7f:55:d0:b4:ce:1a:c6:ad: 79:4d:16:1d:5a:f6:a8:93:a5:b8:8e:26:51:c9:a8: 3f:39:f8:1f:39:b7:da:a2:f5:08:66:de:e6:b8:8d: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6E:9F:46:54:FF:99:A8:02:5E:C9:01:4A:C2:DB:5B:E6:5C:E0:71 X509v3 Authority Key Identifier: keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/u26fRlT_magCXskBSsLbW-Zc4HE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.43.0/24 195.191.65.0/24 213.109.76.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:af:c6:10:41:d0:8e:37:1c:65:4a:d4:4a:0a:bc:c9:ad:67: 8e:7a:7b:d8:1f:e0:f2:65:e9:43:ff:a9:1b:bc:f3:d9:fd:0c: f8:52:d2:f3:b9:83:6f:1d:d1:ac:b5:54:7d:c7:b6:bb:f4:6d: da:f5:9e:3e:9d:38:5c:49:79:a2:a8:7b:a5:46:1b:1e:f3:fb: b0:a6:44:09:5a:f4:ce:a8:bf:8f:22:ca:4c:42:62:99:17:45: 21:f1:40:78:02:57:5e:0c:81:74:76:96:0d:1b:d6:ab:0e:99: 0a:5e:90:e7:89:2a:3e:65:e2:b4:61:2f:99:b2:ee:69:26:3c: d7:0f:b6:02:eb:0e:33:61:dc:4d:a1:f7:32:4f:60:6e:2f:e0: c4:7a:30:ee:1c:d9:31:8c:d0:e7:e9:e0:41:d2:42:61:01:91: b6:89:8a:0a:bb:9f:11:6c:05:c7:49:c3:26:86:d3:f7:a7:e3: 7b:fc:55:ef:f1:59:06:d1:6c:81:a8:5d:b9:ba:8f:90:42:d0: fa:90:27:af:4c:c8:a2:78:0a:93:e5:17:2e:a8:82:6d:7d:f9: 2c:97:2c:15:46:49:8a:eb:a2:0c:63:fa:09:72:20:26:88:03: 59:fc:5c:fe:8a:37:44:46:72:f5:0d:84:f1:d7:96:37:4b:74: cc:07:b0:57 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xoXLGwSuqbljPCAARX9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz NjY0ODYwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjZlOWY0NjU0ZmY5OWE4MDI1ZWM5MDE0YWMyZGI1YmU2NWNlMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoef/niPis50bkV5j/zURBJD0hGXK jH8BgsuHvvSIjS7RZGKH1R2pAxjs5IOBWW3FqsJKXixqWGgHpJ6wh6iGsFGVOwN3 5A8pDB+przgpzxGEpsiebZxqxfwiM8iRyQwKRNOjxM15CfT/N6KSG3rbddXpY6me 4gv2MN9BIXye43xd9nVakklSNc+6E42WNP8H3gluygdx6dgVmTclXbgeuQGmbtLN c8HcFFc1DTha5XBJ2VbFi2I7GgaALF6is6IRO9+XmghiPmri+knTCcA3IkwinLDp SnHtf1XQtM4axq15TRYdWvaok6W4jiZRyag/OfgfObfaovUIZt7muI2AiwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLtun0ZU/5moAl7JAUrC21vmXOBxMB8GA1UdIwQY MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt ZTkyZWNlNGQzY2IzLzEvdTI2ZlJsVF9tYWdDWHNrQlNzTGJXLVpjNEhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+8rAwQA w79BAwQB1W1MMA0GCSqGSIb3DQEBCwUAA4IBAQA6r8YQQdCONxxlStRKCrzJrWeO envYH+DyZelD/6kbvPPZ/Qz4UtLzuYNvHdGstVR9x7a79G3a9Z4+nThcSXmiqHul Rhse8/uwpkQJWvTOqL+PIspMQmKZF0Uh8UB4AldeDIF0dpYNG9arDpkKXpDniSo+ ZeK0YS+Zsu5pJjzXD7YC6w4zYdxNofcyT2BuL+DEejDuHNkxjNDn6eBB0kJhAZG2 iYoKu58RbAXHScMmhtP3p+N7/FXv8VkG0WyBqF25uo+QQtD6kCevTMiieAqT5Rcu qIJtffkslywVRkmK66IMY/oJciAmiANZ/Fz+ijdERnL1DYTx15Y3S3TMB7BX -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:05 2026 by rpki-client