This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/CJdhNSk6l7OOFOPt2AIySYKbKsU.roa File: CJdhNSk6l7OOFOPt2AIySYKbKsU.roa (raw, json) Hash identifier: vBqR6SKDnvjPr0/qmEUuc98Vff//000NQtEJSNOu3zs= Subject key identifier: 08:97:61:35:29:3A:97:B3:8E:14:E3:ED:D8:02:32:49:82:9B:2A:C5 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B20E57F975C13C2D3B02BFFFCC2A8ECE0 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/CJdhNSk6l7OOFOPt2AIySYKbKsU.roa Signing time: Mon 15 Dec 2025 07:24:29 +0000 ROA not before: Mon 15 Dec 2025 07:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21840 IP address blocks: 79.172.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:e5:7f:97:5c:13:c2:d3:b0:2b:ff:fc:c2:a8:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 15 07:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08976135293a97b38e14e3edd8023249829b2ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:61:fe:c0:5c:eb:39:97:80:93:ba:89:95:57: 7a:77:33:c2:0d:95:86:48:18:e5:cc:81:6d:bf:d6: 16:54:c8:3a:db:3a:eb:5a:4e:23:30:ee:95:60:b9: d7:13:f3:b4:b2:a0:f6:70:3e:e9:3e:c3:a7:29:6f: 5f:60:5b:94:6f:2e:20:ee:ca:a3:55:5e:4d:dc:8a: 31:db:74:31:ec:83:4b:db:4a:99:46:12:dd:2a:36: 64:49:8f:12:2d:a0:d3:b8:b3:22:d6:17:de:12:0d: 65:a4:d1:0f:33:9b:81:50:4b:a1:83:23:57:90:5e: 49:bf:06:8c:4b:83:28:17:e7:14:a3:5d:15:a4:6c: f5:7b:9c:17:c8:d3:08:ff:1f:e8:ac:9e:e8:9d:24: e9:a1:3c:47:c1:17:79:ec:c2:02:0a:b9:2c:93:80: 1e:94:99:17:62:5e:9c:cd:08:89:00:2a:07:3a:c1: 23:4b:37:f1:2f:3f:89:4a:39:e3:42:18:5b:73:00: 78:dd:99:bb:9b:1f:e2:a0:8b:a9:52:d6:1d:c1:c2: cf:71:3c:17:50:5b:5b:0a:2f:c7:00:23:78:95:aa: c6:26:3d:03:46:79:41:3c:0b:a1:84:44:96:0b:19: 38:98:fd:c0:0f:2c:0e:27:41:52:44:4b:01:d5:bb: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:97:61:35:29:3A:97:B3:8E:14:E3:ED:D8:02:32:49:82:9B:2A:C5 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/CJdhNSk6l7OOFOPt2AIySYKbKsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.219.0/24 Signature Algorithm: sha256WithRSAEncryption 62:bc:dc:ce:5b:ff:40:68:f3:bd:e4:a1:62:5f:db:e9:af:eb: c8:2f:13:aa:14:83:5f:c2:13:9f:2a:0c:75:32:28:f8:61:53: 33:1a:24:0e:fd:ad:58:41:37:93:aa:d1:dd:37:cd:67:2b:0b: d8:c3:6b:73:f0:ba:a1:36:66:60:e5:90:50:8d:ec:16:0c:7e: be:62:fe:f8:88:73:f9:3a:f7:72:57:bc:dc:54:f3:33:4a:60: 6f:21:4a:dd:bb:90:54:30:d7:db:d0:0d:61:a2:58:45:1d:86: e2:d0:b2:ad:81:0b:f5:1b:18:aa:6b:2a:a3:0a:67:88:7b:4d: 55:d4:49:60:40:0c:3d:4b:20:46:b9:96:14:5d:37:d3:ec:ac: c4:83:73:d8:fa:36:f0:5c:3e:c6:dd:c5:da:04:52:01:a2:f0: a9:60:6c:c8:24:41:e8:a1:f4:91:5c:66:97:7d:87:fe:3c:0a: fa:a8:ac:ad:bd:f9:2f:7f:5f:7b:e6:52:5e:1e:bf:42:13:66: 50:18:cb:7c:5c:d9:6e:4d:9a:c8:cd:55:ae:01:96:70:0b:7f: 48:55:b4:f9:26:d3:69:a7:22:d0:05:9e:f3:30:32:f5:75:53: e8:a3:40:ef:07:f5:8e:8c:af:d6:65:74:c7:61:bb:fd:3c:4d: 1e:a1:38:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsg5X+XXBPC07Ar//zCqOzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjE1MDcyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODk3NjEzNTI5M2E5N2IzOGUxNGUzZWRkODAyMzI0OTgyOWIyYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2H+wFzrOZeAk7qJlVd6dzPCDZWG SBjlzIFtv9YWVMg62zrrWk4jMO6VYLnXE/O0sqD2cD7pPsOnKW9fYFuUby4g7sqj VV5N3Iox23Qx7INL20qZRhLdKjZkSY8SLaDTuLMi1hfeEg1lpNEPM5uBUEuhgyNX kF5JvwaMS4MoF+cUo10VpGz1e5wXyNMI/x/orJ7onSTpoTxHwRd57MICCrksk4Ae lJkXYl6czQiJACoHOsEjSzfxLz+JSjnjQhhbcwB43Zm7mx/ioIupUtYdwcLPcTwX UFtbCi/HACN4larGJj0DRnlBPAuhhESWCxk4mP3ADywOJ0FSREsB1btN3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiXYTUpOpezjhTj7dgCMkmCmyrFMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvQ0pkaE5TazZsN09PRk9QdDJBSXlTWUtiS3NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zbMA0G CSqGSIb3DQEBCwUAA4IBAQBivNzOW/9AaPO95KFiX9vpr+vILxOqFINfwhOfKgx1 Mij4YVMzGiQO/a1YQTeTqtHdN81nKwvYw2tz8LqhNmZg5ZBQjewWDH6+Yv74iHP5 OvdyV7zcVPMzSmBvIUrdu5BUMNfb0A1holhFHYbi0LKtgQv1GxiqayqjCmeIe01V 1ElgQAw9SyBGuZYUXTfT7KzEg3PY+jbwXD7G3cXaBFIBovCpYGzIJEHoofSRXGaX fYf+PAr6qKytvfkvf1975lJeHr9CE2ZQGMt8XNluTZrIzVWuAZZwC39IVbT5JtNp pyLQBZ7zMDL1dVPoo0DvB/WOjK/WZXTHYbv9PE0eoTjX -----END CERTIFICATE-----Generated at Thu Dec 18 20:01:18 2025 by rpki-client