This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9GyWDaM5B_cz7CW0_wR7pvAUc9o.roa File: 9GyWDaM5B_cz7CW0_wR7pvAUc9o.roa (raw, json) Hash identifier: PTuubOE/QgguGJl11s3AV1MCbQAhQNguSlCsSi/DpJU= Subject key identifier: F4:6C:96:0D:A3:39:07:F7:33:EC:25:B4:FF:04:7B:A6:F0:14:73:DA Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A530A6B8C23940219E9C7F76D55665BA8 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9GyWDaM5B_cz7CW0_wR7pvAUc9o.roa Signing time: Wed 05 Nov 2025 08:03:03 +0000 ROA not before: Wed 05 Nov 2025 08:03:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 87.229.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:0a:6b:8c:23:94:02:19:e9:c7:f7:6d:55:66:5b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 5 08:03:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f46c960da33907f733ec25b4ff047ba6f01473da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:1d:29:18:37:9f:be:61:ef:23:5f:2a:7d: e3:57:1d:a5:6e:56:d8:08:9f:4e:a5:fe:f8:c7:20: 45:16:b7:37:04:72:12:7f:04:43:79:ad:bd:0d:e6: d9:3a:d1:00:27:47:7b:97:26:c6:13:9a:e8:c7:c3: 52:10:24:f9:c7:08:64:55:29:4e:bd:4f:48:7b:d8: ed:21:4b:04:97:72:d7:d3:e3:0b:3d:b1:3f:05:83: c9:38:37:17:17:fc:20:b0:32:29:74:28:ec:94:38: 72:b2:7e:ad:39:18:eb:01:40:b1:b3:61:88:7f:46: a6:de:8e:6c:b9:d3:5b:cc:34:86:7a:d1:f5:4b:5a: b4:ee:1c:20:db:bb:04:0b:27:9e:bf:64:ef:d9:66: 1b:64:46:36:bf:0a:fe:57:62:d4:95:48:60:86:a7: 47:4d:c2:f2:99:31:ff:f7:04:28:60:26:d6:22:79: 16:61:6a:23:9d:53:71:15:fa:27:5c:52:a0:fc:1f: ae:af:48:ff:6a:81:24:57:38:77:39:f0:75:dd:a3: a2:25:74:da:78:cd:67:08:c6:94:c3:58:6c:eb:70: 69:ce:7e:fa:6a:fd:28:8e:81:0b:75:26:62:42:b1: 18:36:37:b8:20:64:2b:66:eb:a1:3c:71:c4:6e:07: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6C:96:0D:A3:39:07:F7:33:EC:25:B4:FF:04:7B:A6:F0:14:73:DA X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9GyWDaM5B_cz7CW0_wR7pvAUc9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.110.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:15:1c:39:f4:be:e6:e0:7a:7a:bf:60:ba:b2:ff:0d:d3:6c: 63:62:37:fa:c9:a2:6a:5f:2f:c4:d6:ae:18:21:9f:cf:51:a8: c9:26:9c:d0:27:7f:d2:5e:cd:8a:ce:be:85:56:a0:c4:f9:fa: b5:4b:e3:c7:d1:8f:d4:c9:74:55:7b:89:06:22:db:b6:48:35: 1a:47:3e:9c:e6:f4:a5:9a:ae:b4:5a:d7:50:55:0d:b7:75:0a: c8:ee:55:16:9d:39:d9:01:52:50:51:52:af:9e:b2:b9:bf:73: 8a:d8:60:88:04:be:1e:92:8a:1b:40:88:7f:c5:a4:13:a6:c6: 94:53:77:99:1a:5f:aa:70:ba:c1:08:13:96:14:94:a6:52:31: f4:98:40:2a:e7:1b:e1:e9:0e:c0:b2:bb:cd:1c:f2:75:37:63: 8e:a8:58:50:86:06:45:32:e5:9b:01:22:d8:1b:1a:f3:70:94: d9:82:38:6e:ba:f0:bf:17:b1:7b:07:aa:99:c2:5d:18:2b:5f: 84:3a:0d:8b:14:56:af:25:18:52:af:53:42:63:30:f0:01:ce: 47:bd:7e:13:19:22:0a:b1:58:9c:28:04:f5:29:d9:5e:17:4e: e7:c9:f3:03:46:29:82:5b:25:93:40:f0:a0:ba:fd:62:2c:9e: 2a:c3:f1:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTCmuMI5QCGenH921VZluoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTA1MDgwMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDZjOTYwZGEzMzkwN2Y3MzNlYzI1YjRmZjA0N2JhNmYwMTQ3M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmwdKRg3n75h7yNfKn3jVx2lblbY CJ9Opf74xyBFFrc3BHISfwRDea29DebZOtEAJ0d7lybGE5rox8NSECT5xwhkVSlO vU9Ie9jtIUsEl3LX0+MLPbE/BYPJODcXF/wgsDIpdCjslDhysn6tORjrAUCxs2GI f0am3o5sudNbzDSGetH1S1q07hwg27sECyeev2Tv2WYbZEY2vwr+V2LUlUhghqdH TcLymTH/9wQoYCbWInkWYWojnVNxFfonXFKg/B+ur0j/aoEkVzh3OfB13aOiJXTa eM1nCMaUw1hs63Bpzn76av0ojoELdSZiQrEYNje4IGQrZuuhPHHEbgedTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPRslg2jOQf3M+wltP8Ee6bwFHPaMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvOUd5V0RhTTVCX2N6N0NXMF93UjdwdkFVYzlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VuMA0G CSqGSIb3DQEBCwUAA4IBAQAuFRw59L7m4Hp6v2C6sv8N02xjYjf6yaJqXy/E1q4Y IZ/PUajJJpzQJ3/SXs2Kzr6FVqDE+fq1S+PH0Y/UyXRVe4kGItu2SDUaRz6c5vSl mq60WtdQVQ23dQrI7lUWnTnZAVJQUVKvnrK5v3OK2GCIBL4ekoobQIh/xaQTpsaU U3eZGl+qcLrBCBOWFJSmUjH0mEAq5xvh6Q7AsrvNHPJ1N2OOqFhQhgZFMuWbASLY GxrzcJTZgjhuuvC/F7F7B6qZwl0YK1+EOg2LFFavJRhSr1NCYzDwAc5HvX4TGSIK sVicKAT1KdleF07nyfMDRimCWyWTQPCguv1iLJ4qw/Fx -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:49 2025 by rpki-client