This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/26y3-FCIjKPuULGuAbdkN8udFTE.roa File: 26y3-FCIjKPuULGuAbdkN8udFTE.roa (raw, json) Hash identifier: 3xGJRZGv4+67a/QQcXMMfIKq4kUi6sQ1GWf2ofA+Ul0= Subject key identifier: DB:AC:B7:F8:50:88:8C:A3:EE:50:B1:AE:01:B7:64:37:CB:9D:15:31 Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Certificate serial: 019B79EC375640E67AE3E90A78035A340C22 Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/26y3-FCIjKPuULGuAbdkN8udFTE.roa Signing time: Thu 01 Jan 2026 14:18:02 +0000 ROA not before: Thu 01 Jan 2026 14:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20940 IP address blocks: 78.135.122.0/24 maxlen: 24 78.135.124.0/23 maxlen: 23 78.135.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:37:56:40:e6:7a:e3:e9:0a:78:03:5a:34:0c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbacb7f850888ca3ee50b1ae01b76437cb9d1531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:03:5e:4d:76:27:8f:28:c1:72:71:89:47: 06:7e:30:2a:f3:b2:2b:51:b6:a0:58:b4:95:0b:c4: 3c:a0:ca:e6:70:01:29:6e:6b:03:cf:d4:7d:bf:03: aa:13:47:41:fb:5e:16:40:6e:9c:cd:2c:81:45:19: b5:c3:bf:85:3b:52:1d:69:04:63:a8:2e:fa:c8:1e: a1:c8:35:a1:af:53:77:b4:ff:0d:07:23:8e:6f:a1: f0:94:32:c3:20:c5:aa:66:75:d2:9f:85:e2:1e:16: 82:27:d2:aa:77:cc:3a:8d:83:6e:f6:b4:c7:f9:5b: e7:57:36:dd:84:19:38:2a:1c:d3:f5:86:f3:72:82: 68:76:28:16:a0:5f:44:f3:4e:3e:da:06:2a:1d:ea: 93:d0:e3:ef:de:55:66:53:01:a7:57:e1:c7:7b:fb: 32:82:83:c1:cc:9e:e0:a2:61:7e:b5:44:52:43:df: 97:f1:0f:41:20:e8:d3:2c:3a:76:92:03:2f:52:39: ff:79:14:e2:58:ce:e2:e0:c1:e2:8a:d6:35:3d:ef: 68:9b:38:e7:cd:4f:ce:90:c4:de:cd:bc:7d:e5:9f: e7:26:64:bf:d1:16:66:9c:21:98:29:ad:8e:01:25: 34:33:64:f9:04:ac:d1:c6:5c:6b:92:de:5e:f3:c4: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AC:B7:F8:50:88:8C:A3:EE:50:B1:AE:01:B7:64:37:CB:9D:15:31 X509v3 Authority Key Identifier: keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/26y3-FCIjKPuULGuAbdkN8udFTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.122.0/24 78.135.124.0/22 Signature Algorithm: sha256WithRSAEncryption 92:61:7c:5b:74:b2:03:90:be:62:27:21:57:16:7c:d3:88:23: 2b:f5:43:2b:77:ba:10:00:3d:f7:16:eb:4a:68:67:e0:16:89: d4:25:95:57:d5:36:10:90:0e:25:c8:37:75:e7:42:42:12:81: d9:a3:21:8f:d3:35:67:22:1a:50:01:37:6a:3c:39:6b:8e:cb: 5a:39:43:08:1b:8c:cc:ca:fa:04:00:6c:c5:62:d7:fb:80:33: 18:a8:d1:5d:ba:64:c2:fe:52:15:7d:dc:69:ae:c1:bc:9b:54: d8:77:96:81:a4:cb:0f:81:40:79:ab:06:f5:c5:e3:70:99:46: 97:57:ba:a0:ac:f7:d0:a9:f1:66:e8:19:c1:49:d9:7a:21:53: ed:2c:ca:29:f8:af:72:9b:c5:1b:e5:86:58:fd:0b:3a:cd:e9: 51:09:8b:3e:ad:86:96:ef:6f:cc:bc:a0:ff:d1:dd:3e:62:27: 65:7a:dc:08:e3:86:5a:21:7c:a7:54:b2:13:40:9e:be:2f:7a: 1c:11:7f:27:58:8c:b2:3e:56:33:36:a0:5c:ad:26:1c:5c:f1: e3:58:e8:eb:93:a9:77:cf:f2:44:f8:53:31:e0:8c:3e:67:fe: 31:e0:58:4e:f7:e7:b6:1b:ca:83:9d:a3:40:82:7c:14:86:a0: 3d:b6:15:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57DdWQOZ64+kKeANaNAwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzNmYTY4NDI5NzNlZGY2MmQ1NzliNGVmZWMyZmE2NGZk YmY4YzgwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmFjYjdmODUwODg4Y2EzZWU1MGIxYWUwMWI3NjQzN2NiOWQxNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLkDXk12J48owXJxiUcGfjAq87Ir UbagWLSVC8Q8oMrmcAEpbmsDz9R9vwOqE0dB+14WQG6czSyBRRm1w7+FO1IdaQRj qC76yB6hyDWhr1N3tP8NByOOb6HwlDLDIMWqZnXSn4XiHhaCJ9Kqd8w6jYNu9rTH +VvnVzbdhBk4KhzT9YbzcoJodigWoF9E804+2gYqHeqT0OPv3lVmUwGnV+HHe/sy goPBzJ7gomF+tURSQ9+X8Q9BIOjTLDp2kgMvUjn/eRTiWM7i4MHiitY1Pe9omzjn zU/OkMTezbx95Z/nJmS/0RZmnCGYKa2OASU0M2T5BKzRxlxrkt5e88So+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNust/hQiIyj7lCxrgG3ZDfLnRUxMB8GA1UdIwQY MBaAFFZz+mhClz7fYtV5tO/sL6ZP2/jIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTkt ODk4OTk2Yzg2MWRmLzEvMjZ5My1GQ0lqS1B1VUxHdUFiZGtOOHVkRlRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTktODk4OTk2Yzg2MWRm LzEvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATod6AwQC Tod8MA0GCSqGSIb3DQEBCwUAA4IBAQCSYXxbdLIDkL5iJyFXFnzTiCMr9UMrd7oQ AD33FutKaGfgFonUJZVX1TYQkA4lyDd150JCEoHZoyGP0zVnIhpQATdqPDlrjsta OUMIG4zMyvoEAGzFYtf7gDMYqNFdumTC/lIVfdxprsG8m1TYd5aBpMsPgUB5qwb1 xeNwmUaXV7qgrPfQqfFm6BnBSdl6IVPtLMop+K9ym8Ub5YZY/Qs6zelRCYs+rYaW 72/MvKD/0d0+YidletwI44ZaIXynVLITQJ6+L3ocEX8nWIyyPlYzNqBcrSYcXPHj WOjrk6l3z/JE+FMx4Iw+Z/4x4FhO9+e2G8qDnaNAgnwUhqA9thVi -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:36 2026 by rpki-client