This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/25C32eL_wnjtegcfMXYPhMJRXg8.roa File: 25C32eL_wnjtegcfMXYPhMJRXg8.roa (raw, json) Hash identifier: r9PeLa4rB8f3IImIAacbgzf1QK/s2mp1AEC9ebJoUDE= Subject key identifier: DB:90:B7:D9:E2:FF:C2:78:ED:7A:07:1F:31:76:0F:84:C2:51:5E:0F Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B943E248263D97158617641596D4E3709 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/25C32eL_wnjtegcfMXYPhMJRXg8.roa Signing time: Tue 06 Jan 2026 16:57:39 +0000 ROA not before: Tue 06 Jan 2026 16:57:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21840 IP address blocks: 79.172.219.0/24 maxlen: 24 87.229.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:3e:24:82:63:d9:71:58:61:76:41:59:6d:4e:37:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 6 16:57:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db90b7d9e2ffc278ed7a071f31760f84c2515e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:a8:b1:78:4b:df:c7:2f:de:c3:d1:52:f6: 60:07:3c:bc:69:d7:e2:0b:fa:34:83:12:ec:fb:f7: 39:7f:67:cb:91:72:b5:48:2d:79:d8:36:6f:5d:a2: 52:f4:9d:7e:25:02:0c:eb:76:84:b0:69:e4:c4:24: ae:04:e0:63:36:2c:76:88:7d:19:c7:fb:f7:6e:4a: c5:fc:3c:b8:b2:cc:62:d1:17:1f:6d:a3:31:9e:94: 5f:7a:08:01:ec:27:1c:e2:66:36:95:03:02:0c:f1: bb:ae:c3:9c:b8:53:b3:a9:9b:40:42:d2:36:d7:75: d9:fa:5e:68:5d:55:fc:74:1f:1b:56:b8:9a:0d:46: 89:6d:69:f4:97:87:cb:29:75:a4:d1:dc:3b:09:1f: 36:c1:a8:da:c9:ea:34:94:3b:fb:2c:ab:16:71:41: 0d:0c:f5:b4:ff:db:78:e9:dd:fa:5e:2b:23:ca:ee: cc:b8:d7:f4:ab:ae:c0:f7:2f:2f:90:23:1e:0f:6b: 34:71:01:05:54:4a:7e:fb:47:9f:f2:be:4f:76:be: 6e:4c:20:fb:db:d6:dd:bf:2d:04:6e:9a:b7:11:c6: b5:d2:24:55:27:70:3e:73:d6:53:c8:27:f7:f6:20: 67:e5:fe:60:c2:07:49:cb:2c:bf:94:ce:9c:75:5a: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:90:B7:D9:E2:FF:C2:78:ED:7A:07:1F:31:76:0F:84:C2:51:5E:0F X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/25C32eL_wnjtegcfMXYPhMJRXg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.219.0/24 87.229.12.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f4:c9:ea:e3:f6:b6:ed:61:4e:51:14:7d:2e:a3:bf:d0:42: 49:2a:9f:a6:15:2f:a8:1f:d3:8f:4d:5f:ae:67:37:50:bd:da: 29:c2:61:12:a8:24:84:74:37:a1:4d:75:10:c1:5f:0a:62:03: 27:7b:4f:e8:09:57:9f:42:de:fc:42:08:07:7c:eb:44:9f:a5: 2a:12:17:af:7c:c2:62:f6:46:75:22:a3:e6:3e:3a:d7:b2:12: 1e:fe:a6:5f:d3:9c:16:3f:cb:60:b4:fd:ce:91:19:da:89:a7: 05:48:96:79:f7:5b:92:07:71:25:68:dd:6c:41:a0:ff:ee:c3: 8f:d0:ec:bb:11:ae:a6:0f:88:eb:85:5e:53:c6:da:ab:94:6f: 41:49:3b:8a:91:54:fd:99:06:86:36:6c:e7:3e:9e:81:45:dd: 68:19:0e:c9:e4:8b:4b:2b:16:e0:39:3c:c3:67:dd:e1:84:84: d8:b6:7c:9d:61:e8:29:c0:d2:07:ba:23:08:3c:80:6c:ef:3c: 1a:10:a2:b7:1e:ae:0b:a4:e8:01:30:61:61:06:74:67:6f:73: b9:5b:9a:20:92:d8:5b:be:3d:23:7d:82:02:98:b1:28:67:83: ea:b8:8a:45:13:0b:99:69:a9:f4:0b:1c:b9:95:c4:ae:54:9b: 1d:a8:3a:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuUPiSCY9lxWGF2QVltTjcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTA2MTY1NzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjkwYjdkOWUyZmZjMjc4ZWQ3YTA3MWYzMTc2MGY4NGMyNTE1ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/CosXhL38cv3sPRUvZgBzy8adfi C/o0gxLs+/c5f2fLkXK1SC152DZvXaJS9J1+JQIM63aEsGnkxCSuBOBjNix2iH0Z x/v3bkrF/Dy4ssxi0RcfbaMxnpRfeggB7Ccc4mY2lQMCDPG7rsOcuFOzqZtAQtI2 13XZ+l5oXVX8dB8bVriaDUaJbWn0l4fLKXWk0dw7CR82wajayeo0lDv7LKsWcUEN DPW0/9t46d36Xisjyu7MuNf0q67A9y8vkCMeD2s0cQEFVEp++0ef8r5Pdr5uTCD7 29bdvy0Ebpq3Eca10iRVJ3A+c9ZTyCf39iBn5f5gwgdJyyy/lM6cdVoGFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNuQt9ni/8J47XoHHzF2D4TCUV4PMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvMjVDMzJlTF93bmp0ZWdjZk1YWVBoTUpSWGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6zbAwQA V+UMMA0GCSqGSIb3DQEBCwUAA4IBAQB19Mnq4/a27WFOURR9LqO/0EJJKp+mFS+o H9OPTV+uZzdQvdopwmESqCSEdDehTXUQwV8KYgMne0/oCVefQt78QggHfOtEn6Uq EhevfMJi9kZ1IqPmPjrXshIe/qZf05wWP8tgtP3OkRnaiacFSJZ591uSB3ElaN1s QaD/7sOP0Oy7Ea6mD4jrhV5TxtqrlG9BSTuKkVT9mQaGNmznPp6BRd1oGQ7J5ItL KxbgOTzDZ93hhITYtnydYegpwNIHuiMIPIBs7zwaEKK3Hq4LpOgBMGFhBnRnb3O5 W5ogkthbvj0jfYICmLEoZ4PquIpFEwuZaan0Cxy5lcSuVJsdqDry -----END CERTIFICATE-----Generated at Tue Jan 20 12:51:34 2026 by rpki-client