This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/26tifeDJOokQX2xBf_3Nq0FjNP0.roa File: 26tifeDJOokQX2xBf_3Nq0FjNP0.roa (raw, json) Hash identifier: 9C1lRs6FbIMhNzNJlmiz4jKcDXBY2F5bdab09+tRw4k= Subject key identifier: DB:AB:62:7D:E0:C9:3A:89:10:5F:6C:41:7F:FD:CD:AB:41:63:34:FD Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Certificate serial: 019B7AC8A99948E20ADC1925B02AC4915606 Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/26tifeDJOokQX2xBf_3Nq0FjNP0.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215395 IP address blocks: 195.78.153.0/24 maxlen: 24 195.78.154.0/24 maxlen: 24 195.78.155.0/24 maxlen: 24 195.78.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a9:99:48:e2:0a:dc:19:25:b0:2a:c4:91:56:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbab627de0c93a89105f6c417ffdcdab416334fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:55:27:1a:36:39:b8:21:43:1d:db:bb:1c: 42:66:b5:29:3d:c7:b4:cd:60:fa:b0:49:d9:b1:9e: 8d:6a:71:9a:50:17:2d:0d:8a:0c:6c:30:dd:34:be: ed:5e:22:d1:b3:df:4f:6e:de:de:12:35:1c:50:f6: b5:d4:f6:ea:79:58:b8:44:29:44:39:c5:0f:d4:83: c0:f9:b8:65:7a:07:09:d9:c2:54:e8:55:1e:65:29: 6e:2e:13:b7:23:45:2a:67:77:9c:14:0a:dc:73:d0: ca:91:e3:5e:08:b0:8d:91:a8:f8:91:e1:dd:a7:b0: a5:a9:7c:c7:9e:56:72:ff:7f:e7:6e:50:84:7f:97: d0:49:c0:e6:24:da:58:2e:1c:a3:c5:3b:af:a0:c8: b0:06:98:4a:b4:2b:74:6c:93:8b:e2:34:14:6c:f2: 1e:97:4c:64:d3:ec:3d:84:38:21:04:01:5e:86:c8: 83:b6:df:27:81:28:2a:94:96:12:26:31:66:41:b4: 05:e9:21:06:6b:43:08:e0:0c:db:61:07:72:57:2d: 45:0d:41:ec:d6:32:80:19:2f:09:24:b7:5a:55:47: e1:ce:4e:55:9a:93:7c:44:8c:12:21:d3:e8:fb:59: c7:c5:5f:d0:75:bb:87:9d:02:ec:db:99:a5:e3:26: e0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AB:62:7D:E0:C9:3A:89:10:5F:6C:41:7F:FD:CD:AB:41:63:34:FD X509v3 Authority Key Identifier: keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/26tifeDJOokQX2xBf_3Nq0FjNP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.153.0-195.78.156.255 Signature Algorithm: sha256WithRSAEncryption af:04:7b:b0:ea:f3:c1:c2:db:c4:10:e1:f4:7e:a5:7c:d5:89: 09:e0:ef:5b:35:03:d8:0f:06:e0:d5:c2:cf:26:db:dc:b2:3b: 9e:6c:30:6e:76:d0:ca:84:47:85:6d:46:a7:7c:89:2f:73:96: ba:65:cc:6d:7b:9c:dc:12:9a:c9:53:d4:f5:da:45:c2:0a:c0: d7:ce:09:6d:4f:79:ab:14:d8:10:e2:d3:e2:35:35:8a:a7:92: ea:86:43:6f:72:6b:64:0b:d9:b0:4a:5b:28:f3:d6:ba:bb:59: 83:c9:79:e9:46:66:4d:b4:b3:89:3e:07:6a:a5:d2:00:fd:84: 89:46:21:f5:67:aa:2e:e0:03:01:8d:86:8b:8a:89:84:1b:2b: 5c:a7:b3:38:62:73:d8:fb:62:f2:6c:8f:28:97:5d:bf:59:69: d3:d2:b1:6f:4d:96:b1:7a:b8:47:fb:0e:47:59:95:7b:48:4b: 4f:65:03:13:b9:18:a8:6f:4f:09:e8:dd:04:cc:05:1c:17:cf: fb:28:f1:aa:f6:8d:3e:df:c5:2e:c9:ed:5b:92:93:79:83:7f: 4c:62:e4:a4:a9:eb:cf:3c:88:e5:34:77:8f:f7:b6:38:79:27: e5:f3:d2:4a:a0:61:b1:6f:f5:bb:15:26:5b:e3:f3:33:c9:ac: c3:a1:19:15 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6yKmZSOIK3BklsCrEkVYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw YzZjMzIwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmFiNjI3ZGUwYzkzYTg5MTA1ZjZjNDE3ZmZkY2RhYjQxNjMzNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6RVJxo2ObghQx3buxxCZrUpPce0 zWD6sEnZsZ6NanGaUBctDYoMbDDdNL7tXiLRs99Pbt7eEjUcUPa11PbqeVi4RClE OcUP1IPA+bhlegcJ2cJU6FUeZSluLhO3I0UqZ3ecFArcc9DKkeNeCLCNkaj4keHd p7ClqXzHnlZy/3/nblCEf5fQScDmJNpYLhyjxTuvoMiwBphKtCt0bJOL4jQUbPIe l0xk0+w9hDghBAFehsiDtt8ngSgqlJYSJjFmQbQF6SEGa0MI4AzbYQdyVy1FDUHs 1jKAGS8JJLdaVUfhzk5VmpN8RIwSIdPo+1nHxV/QdbuHnQLs25ml4ybg/wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNurYn3gyTqJEF9sQX/9zatBYzT9MB8GA1UdIwQY MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct NjFlNTRjZmMyYWJjLzEvMjZ0aWZlREpPb2tRWDJ4QmZfM05xMEZqTlAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDTpkD BADDTpwwDQYJKoZIhvcNAQELBQADggEBAK8Ee7Dq88HC28QQ4fR+pXzViQng71s1 A9gPBuDVws8m29yyO55sMG520MqER4VtRqd8iS9zlrplzG17nNwSmslT1PXaRcIK wNfOCW1PeasU2BDi0+I1NYqnkuqGQ29ya2QL2bBKWyjz1rq7WYPJeelGZk20s4k+ B2ql0gD9hIlGIfVnqi7gAwGNhouKiYQbK1ynszhic9j7YvJsjyiXXb9ZadPSsW9N lrF6uEf7DkdZlXtIS09lAxO5GKhvTwno3QTMBRwXz/so8ar2jT7fxS7J7VuSk3mD f0xi5KSp6888iOU0d4/3tjh5J+Xz0kqgYbFv9bsVJlvj8zPJrMOhGRU= -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:11 2026 by rpki-client