This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0TzPuI2DcdWXglyIr1-7q0jG3Zk.roa File: 0TzPuI2DcdWXglyIr1-7q0jG3Zk.roa (raw, json) Hash identifier: 4GQ9uOONzsmfiU9BcaMjZq/CHobw++GHSJE5i9GqOiM= Subject key identifier: D1:3C:CF:B8:8D:83:71:D5:97:82:5C:88:AF:5F:BB:AB:48:C6:DD:99 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B079E8EBD0DA7F183D0469D0CC17883B5 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0TzPuI2DcdWXglyIr1-7q0jG3Zk.roa Signing time: Wed 10 Dec 2025 09:36:30 +0000 ROA not before: Wed 10 Dec 2025 09:36:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 87.229.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:9e:8e:bd:0d:a7:f1:83:d0:46:9d:0c:c1:78:83:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 10 09:36:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d13ccfb88d8371d597825c88af5fbbab48c6dd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:ee:8b:64:2d:82:d7:bf:27:96:71:bc:80: 5e:b0:e7:78:e4:5a:d8:fa:8f:ff:63:db:b9:78:7c: 3e:fb:80:4d:b5:4a:61:ad:fc:51:2c:8d:8e:1e:96: dc:54:46:24:47:9a:17:c5:18:0f:66:f6:c6:9a:88: 01:5d:c3:bd:a2:26:44:7f:45:2b:f5:fe:3c:e5:37: 55:91:d9:13:0f:d2:bd:43:cf:a3:16:49:ac:08:56: 8b:9e:a9:df:81:ce:64:e4:6f:58:db:69:74:fc:7e: c5:52:fd:34:74:b6:dc:25:2b:f9:27:1a:43:b0:57: 54:f6:1d:25:62:e2:89:8c:d0:a6:64:f8:b0:8a:d4: 2b:95:74:53:1b:4f:06:1e:e9:52:2a:33:d8:b4:d3: d6:f7:45:24:cf:d9:aa:3a:0d:95:15:8a:81:45:1b: 26:d5:27:a4:09:1a:5a:33:df:03:5d:a1:2d:75:13: de:17:44:14:6f:3f:35:6d:db:5d:09:f5:b3:4f:a9: 72:bf:c5:c8:2b:ab:88:1f:72:99:46:09:3d:98:c8: b3:70:3e:86:29:3b:da:ea:2b:64:e5:db:0b:62:cf: 4d:d8:9b:6c:93:82:b9:24:cb:60:6c:d0:6b:46:16: 3f:67:8a:61:9b:ca:03:49:c2:5e:a7:cc:3d:0b:98: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3C:CF:B8:8D:83:71:D5:97:82:5C:88:AF:5F:BB:AB:48:C6:DD:99 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0TzPuI2DcdWXglyIr1-7q0jG3Zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.71.0/24 Signature Algorithm: sha256WithRSAEncryption 38:51:56:85:9f:84:ff:15:09:69:b2:df:72:1c:10:33:9b:77: bb:98:c5:76:21:02:3c:95:28:d1:da:85:2a:3d:58:fe:eb:1b: df:7a:f1:8b:7f:7b:a8:1e:c9:68:ac:3e:0a:e1:50:44:6a:d9: b3:5b:51:34:d6:97:69:94:3b:a7:59:0b:53:a0:bd:40:16:37: 25:73:cd:b8:f7:46:e6:b3:76:68:98:2a:cb:79:65:6f:85:18: c7:1a:26:5f:62:de:26:3a:56:3f:46:cc:96:03:21:82:59:63: 00:25:48:64:c3:13:c4:e8:2a:ae:13:99:91:75:67:50:2f:97: 69:92:a4:d8:93:db:34:ae:29:c5:75:a5:14:5d:43:e6:54:62: f9:c3:8b:5e:6b:ca:0f:fe:d4:49:ba:b5:66:ac:d8:66:f1:52: 93:87:37:a4:a4:c5:ff:3a:6e:df:9b:a0:22:8e:a8:53:7c:bf: 02:a8:33:71:00:18:6e:0f:0c:bc:0d:96:55:26:36:89:c4:43: 9b:73:18:4b:25:f3:8b:43:a7:4d:a7:8d:2d:db:94:06:d7:71: f6:f2:aa:09:2e:0d:21:34:45:7a:54:07:dc:c2:96:38:55:74: 5c:e5:a6:ca:4b:a7:e4:8e:eb:73:6e:ca:39:00:db:75:97:3a: 10:92:66:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHno69Dafxg9BGnQzBeIO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjEwMDkzNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTNjY2ZiODhkODM3MWQ1OTc4MjVjODhhZjVmYmJhYjQ4YzZkZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn/ui2Qtgte/J5ZxvIBesOd45FrY +o//Y9u5eHw++4BNtUphrfxRLI2OHpbcVEYkR5oXxRgPZvbGmogBXcO9oiZEf0Ur 9f485TdVkdkTD9K9Q8+jFkmsCFaLnqnfgc5k5G9Y22l0/H7FUv00dLbcJSv5JxpD sFdU9h0lYuKJjNCmZPiwitQrlXRTG08GHulSKjPYtNPW90Ukz9mqOg2VFYqBRRsm 1SekCRpaM98DXaEtdRPeF0QUbz81bdtdCfWzT6lyv8XIK6uIH3KZRgk9mMizcD6G KTva6itk5dsLYs9N2Jtsk4K5JMtgbNBrRhY/Z4phm8oDScJep8w9C5hzwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNE8z7iNg3HVl4JciK9fu6tIxt2ZMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvMFR6UHVJMkRjZFdYZ2x5SXIxLTdxMGpHM1prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VHMA0G CSqGSIb3DQEBCwUAA4IBAQA4UVaFn4T/FQlpst9yHBAzm3e7mMV2IQI8lSjR2oUq PVj+6xvfevGLf3uoHslorD4K4VBEatmzW1E01pdplDunWQtToL1AFjclc82490bm s3ZomCrLeWVvhRjHGiZfYt4mOlY/RsyWAyGCWWMAJUhkwxPE6CquE5mRdWdQL5dp kqTYk9s0rinFdaUUXUPmVGL5w4tea8oP/tRJurVmrNhm8VKThzekpMX/Om7fm6Ai jqhTfL8CqDNxABhuDwy8DZZVJjaJxEObcxhLJfOLQ6dNp40t25QG13H28qoJLg0h NEV6VAfcwpY4VXRc5abKS6fkjutzbso5ANt1lzoQkmaj -----END CERTIFICATE-----Generated at Thu Dec 18 20:02:10 2025 by rpki-client