This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NVaIaZX8owvdAIUSBifAwrFXFR4.roa File: NVaIaZX8owvdAIUSBifAwrFXFR4.roa (raw, json) Hash identifier: Qkwd9V6mfqAI86FliGuellx6td8FLO3MXhQyyETHw7E= Subject key identifier: 35:56:88:69:95:FC:A3:0B:DD:00:85:12:06:27:C0:C2:B1:57:15:1E Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE64BC66FCB1F1575338DD3FFE2597 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NVaIaZX8owvdAIUSBifAwrFXFR4.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 87.229.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:64:bc:66:fc:b1:f1:57:53:38:dd:3f:fe:25:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3556886995fca30bdd0085120627c0c2b157151e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:49:b3:44:39:a3:ab:2e:5e:38:fd:d7:ed: 7a:31:be:a4:48:28:d2:3e:93:e4:fb:67:2c:12:01: 8c:1e:2b:c4:39:81:25:20:a0:9a:20:d1:48:a7:f2: 64:e4:a0:17:89:24:3e:98:4a:ad:aa:12:02:7d:75: 8a:9a:7b:e3:c2:b8:97:8f:72:c1:88:e4:da:03:31: d9:3d:93:30:ec:75:7f:6a:d8:f0:e3:e5:a7:54:a3: 66:1f:0d:73:c1:cf:ca:71:c2:ca:68:6d:1a:22:b6: 10:ec:39:e2:35:bc:dc:de:2e:63:69:30:6c:f5:89: f5:e5:fd:39:e4:0a:49:49:4c:ba:c8:d1:fd:0b:2c: 8b:d4:ed:bb:30:c4:80:c9:06:9a:f0:58:e4:fb:ae: a5:5e:ff:9e:1a:8c:07:30:b2:16:5d:a6:03:3a:8f: 7c:c2:89:6b:3a:1a:d2:8e:95:97:6d:ed:f6:b9:b9: f1:60:95:90:01:49:1b:fc:72:d8:43:0e:28:7e:2e: 43:93:36:7f:21:51:ff:44:2b:4e:73:2b:5d:9b:e1: 27:b2:3a:2f:9c:9d:04:f7:73:ef:d5:b5:8a:b0:01: ee:29:bf:dd:ef:cc:63:a0:5b:07:ee:14:5e:85:b9: 97:22:10:ea:90:af:28:6c:59:cf:02:04:04:8b:58: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:56:88:69:95:FC:A3:0B:DD:00:85:12:06:27:C0:C2:B1:57:15:1E X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NVaIaZX8owvdAIUSBifAwrFXFR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.50.0/24 Signature Algorithm: sha256WithRSAEncryption 02:df:44:b1:a8:9c:e3:5b:c0:6f:28:44:34:2f:77:92:60:92: 30:73:58:f7:ab:ec:28:37:14:2c:ef:64:84:5e:f0:ca:ad:38: f1:d1:84:62:ef:50:3f:2b:80:17:36:c3:89:11:4e:5a:ce:9a: aa:2c:a3:34:95:b1:84:3e:67:d9:c2:67:74:51:50:2f:d0:8d: 92:1c:c3:c2:e6:c9:1a:bc:b7:70:1c:a6:9d:d9:07:75:75:01: af:e4:10:09:57:1a:28:4a:e8:fe:f2:ae:8f:75:26:51:74:f5: 90:ab:47:2a:a8:01:5a:45:98:71:31:48:7d:bc:5d:c1:a5:48: 4f:7d:db:e3:29:0f:0f:38:e4:04:8c:61:2f:21:7e:5f:1b:e9: 41:f9:00:a7:93:16:56:82:58:0d:84:c4:45:36:51:f6:c4:04: 97:4c:85:b2:b9:af:65:4e:da:e6:94:ea:68:12:80:21:7f:67: 5e:50:ea:75:af:60:c5:5b:9b:fb:45:ae:1f:16:4c:97:72:86: 02:7b:3c:7d:64:30:90:d4:36:74:60:6b:55:e9:ca:81:6a:18: 48:ae:b7:cf:85:3c:69:81:33:6d:da:f9:d2:22:cb:1a:85:c2: 9d:29:f3:b6:b9:84:d5:de:b1:e3:2a:5e:9d:23:4b:8f:3a:ff: 59:cd:94:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mS8Zvyx8VdTON0//iWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTU2ODg2OTk1ZmNhMzBiZGQwMDg1MTIwNjI3YzBjMmIxNTcxNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nBJs0Q5o6suXjj91+16Mb6kSCjS PpPk+2csEgGMHivEOYElIKCaINFIp/Jk5KAXiSQ+mEqtqhICfXWKmnvjwriXj3LB iOTaAzHZPZMw7HV/atjw4+WnVKNmHw1zwc/KccLKaG0aIrYQ7DniNbzc3i5jaTBs 9Yn15f055ApJSUy6yNH9CyyL1O27MMSAyQaa8Fjk+66lXv+eGowHMLIWXaYDOo98 wolrOhrSjpWXbe32ubnxYJWQAUkb/HLYQw4ofi5DkzZ/IVH/RCtOcytdm+Ensjov nJ0E93Pv1bWKsAHuKb/d78xjoFsH7hRehbmXIhDqkK8obFnPAgQEi1h04wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVWiGmV/KML3QCFEgYnwMKxVxUeMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTlZhSWFaWDhvd3ZkQUlVU0JpZkF3ckZYRlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UyMA0G CSqGSIb3DQEBCwUAA4IBAQAC30SxqJzjW8BvKEQ0L3eSYJIwc1j3q+woNxQs72SE XvDKrTjx0YRi71A/K4AXNsOJEU5azpqqLKM0lbGEPmfZwmd0UVAv0I2SHMPC5ska vLdwHKad2Qd1dQGv5BAJVxooSuj+8q6PdSZRdPWQq0cqqAFaRZhxMUh9vF3BpUhP fdvjKQ8POOQEjGEvIX5fG+lB+QCnkxZWglgNhMRFNlH2xASXTIWyua9lTtrmlOpo EoAhf2deUOp1r2DFW5v7Ra4fFkyXcoYCezx9ZDCQ1DZ0YGtV6cqBahhIrrfPhTxp gTNt2vnSIssahcKdKfO2uYTV3rHjKl6dI0uPOv9ZzZQ7 -----END CERTIFICATE-----Generated at Fri Jan 23 12:53:06 2026 by rpki-client