This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9hkO7Sqt952hrLizpz1ERxqGX-8.roa File: 9hkO7Sqt952hrLizpz1ERxqGX-8.roa (raw, json) Hash identifier: F1yfOFta+eDcACFiqCEmR6BGrKwivZVEnmhCN1cv5bY= Subject key identifier: F6:19:0E:ED:2A:AD:F7:9D:A1:AC:B8:B3:A7:3D:44:47:1A:86:5F:EF Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B079BD041025D097A1BAAF31BCA624737 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9hkO7Sqt952hrLizpz1ERxqGX-8.roa Signing time: Wed 10 Dec 2025 09:33:30 +0000 ROA not before: Wed 10 Dec 2025 09:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 87.229.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:9b:d0:41:02:5d:09:7a:1b:aa:f3:1b:ca:62:47:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 10 09:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f6190eed2aadf79da1acb8b3a73d44471a865fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5b:38:9c:78:3b:ed:bb:91:6c:ea:57:25:dd: bc:c9:eb:b0:0a:e0:58:11:df:08:6f:6c:03:1a:c3: 78:0c:32:bf:23:0f:15:44:2b:24:30:64:b8:fe:b0: 23:37:38:9f:3b:c6:60:ef:a8:0c:4a:79:f0:57:26: 77:98:70:ad:98:e6:de:d1:7d:78:8b:24:fc:f3:20: 4f:47:1e:dd:6b:b0:d1:5d:56:57:fe:1e:94:27:77: 37:89:e7:cb:a4:40:e0:e0:0f:88:96:f2:2a:09:a2: 97:47:de:12:6f:72:71:4f:57:e1:05:d8:6a:43:cb: 8c:85:82:e6:1e:7e:7a:d3:8e:eb:18:28:91:49:9a: 3c:bc:c6:db:b6:fa:7b:b8:53:ac:31:a1:bd:ba:2a: b4:bb:df:82:29:4f:01:34:07:bc:b8:6c:4f:a3:bd: d6:c3:b0:10:30:c7:bb:88:26:fb:ec:8d:ef:67:47: 9c:57:23:58:02:b9:e4:a2:e2:5a:3a:ec:d4:7b:fd: 0a:77:07:87:a7:fa:d2:01:28:3b:fb:cf:75:05:df: 91:e6:2c:f7:7b:8c:ad:4a:a8:2e:e8:cc:30:7f:34: 57:6c:40:04:d7:ee:d9:ab:b0:70:ca:5b:19:f4:3a: e3:a1:9d:38:e9:11:4d:76:d1:29:21:f6:d3:e5:a7: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:0E:ED:2A:AD:F7:9D:A1:AC:B8:B3:A7:3D:44:47:1A:86:5F:EF X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/9hkO7Sqt952hrLizpz1ERxqGX-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.71.0/24 Signature Algorithm: sha256WithRSAEncryption 96:28:39:d0:81:5c:c8:f6:8a:4d:58:88:0d:be:d9:d4:16:1b: 23:e8:30:62:cc:65:5e:ce:63:d9:90:57:43:78:4d:25:0f:66: 25:11:f0:97:23:92:7c:00:87:56:60:30:2c:f4:b6:03:89:d4: d7:80:97:8a:2a:d0:8c:27:73:74:43:77:85:4e:10:f1:29:2f: 91:c8:42:cb:76:95:fb:88:19:83:dc:75:9d:41:bd:35:2a:5a: fc:fb:30:9f:3a:55:2f:ab:78:73:eb:f0:06:05:c6:bf:b7:a3: b3:35:9f:b7:71:0b:6f:62:5e:aa:58:85:70:35:f4:4b:75:92: 79:f6:82:e7:09:ce:c3:76:b7:fd:b6:63:fb:60:7d:46:a8:53: 27:b0:0b:50:ec:5a:d5:65:5e:bf:72:a4:8c:a9:ce:e4:78:9a: 4a:da:5d:36:f5:88:ee:51:9f:a1:b3:6c:c5:65:75:12:d5:67: ef:2e:0e:22:30:bf:3f:63:5a:36:89:f9:eb:1a:39:53:1c:31: b0:a9:45:92:44:2a:27:1f:1e:06:32:c5:45:8b:08:65:02:56: 20:50:08:13:ef:84:96:3a:59:9c:e0:5f:1f:e3:f2:04:c2:ac: 47:dc:f5:54:04:f1:ec:b6:92:94:73:14:cc:5c:02:4b:4d:49: 0b:9d:05:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHm9BBAl0Jehuq8xvKYkc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjEwMDkzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjE5MGVlZDJhYWRmNzlkYTFhY2I4YjNhNzNkNDQ0NzFhODY1ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fs4nHg77buRbOpXJd28yeuwCuBY Ed8Ib2wDGsN4DDK/Iw8VRCskMGS4/rAjNzifO8Zg76gMSnnwVyZ3mHCtmObe0X14 iyT88yBPRx7da7DRXVZX/h6UJ3c3iefLpEDg4A+IlvIqCaKXR94Sb3JxT1fhBdhq Q8uMhYLmHn56047rGCiRSZo8vMbbtvp7uFOsMaG9uiq0u9+CKU8BNAe8uGxPo73W w7AQMMe7iCb77I3vZ0ecVyNYArnkouJaOuzUe/0KdweHp/rSASg7+891Bd+R5iz3 e4ytSqgu6MwwfzRXbEAE1+7Zq7BwylsZ9DrjoZ046RFNdtEpIfbT5ad6lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYZDu0qrfedoay4s6c9REcahl/vMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvOWhrTzdTcXQ5NTJockxpenB6MUVSeHFHWC04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VHMA0G CSqGSIb3DQEBCwUAA4IBAQCWKDnQgVzI9opNWIgNvtnUFhsj6DBizGVezmPZkFdD eE0lD2YlEfCXI5J8AIdWYDAs9LYDidTXgJeKKtCMJ3N0Q3eFThDxKS+RyELLdpX7 iBmD3HWdQb01Klr8+zCfOlUvq3hz6/AGBca/t6OzNZ+3cQtvYl6qWIVwNfRLdZJ5 9oLnCc7Ddrf9tmP7YH1GqFMnsAtQ7FrVZV6/cqSMqc7keJpK2l029YjuUZ+hs2zF ZXUS1WfvLg4iML8/Y1o2ifnrGjlTHDGwqUWSRConHx4GMsVFiwhlAlYgUAgT74SW Olmc4F8f4/IEwqxH3PVUBPHstpKUcxTMXAJLTUkLnQXd -----END CERTIFICATE-----Generated at Thu Dec 18 20:02:08 2025 by rpki-client