This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F0EnXT91RiyN2-tL9oahY33WeAU.roa File: F0EnXT91RiyN2-tL9oahY33WeAU.roa (raw, json) Hash identifier: 65bpggP9AW5bpOvI8n68w0p3qbzPsrVAAB584f6ktY4= Subject key identifier: 17:41:27:5D:3F:75:46:2C:8D:DB:EB:4B:F6:86:A1:63:7D:D6:78:05 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B129CE2B48E394EC3C9C69BC13B04C28C Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F0EnXT91RiyN2-tL9oahY33WeAU.roa Signing time: Fri 12 Dec 2025 12:50:30 +0000 ROA not before: Fri 12 Dec 2025 12:50:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 79.172.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:9c:e2:b4:8e:39:4e:c3:c9:c6:9b:c1:3b:04:c2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 12 12:50:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1741275d3f75462c8ddbeb4bf686a1637dd67805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:84:c1:00:7c:b6:ef:d1:99:e8:9e:4b:15: 4e:38:e4:11:28:06:50:1b:2d:38:61:24:ba:86:d6: ec:f9:4a:d4:54:3b:a4:be:98:6c:81:82:b1:c2:00: b6:ef:67:31:70:42:d1:34:c4:de:ee:b0:b4:19:ff: 9f:9c:aa:e3:aa:24:c1:02:ce:a5:39:8a:48:e6:16: e2:fa:47:cf:57:07:45:45:54:9a:0c:6e:24:6b:75: 52:63:52:2c:94:6a:84:02:7a:c8:7b:02:9d:ba:88: 83:e6:c1:90:cc:c3:59:e2:e1:33:60:68:b8:26:ac: 27:34:84:6a:8c:0b:26:5e:92:13:9e:e3:4c:c7:54: 98:ae:b0:75:cf:d6:0d:c6:3d:dd:48:b2:29:88:4e: 6d:ee:db:b3:36:f8:70:5c:a9:c9:11:2b:b9:c4:7e: a9:e7:68:2d:b2:f2:06:1f:ba:26:f8:72:6f:01:7c: 2c:74:2f:69:4a:5b:33:af:f3:49:d3:8a:49:82:48: 74:28:70:24:5e:ea:e3:58:96:0c:e4:55:7b:78:54: ec:48:ab:02:5d:5c:88:15:f9:d6:39:97:e5:26:2a: dc:42:95:2a:10:92:22:61:6d:81:3e:59:33:86:e1: 8c:c2:ef:b1:45:bb:68:9e:99:fa:f0:18:32:a1:00: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:41:27:5D:3F:75:46:2C:8D:DB:EB:4B:F6:86:A1:63:7D:D6:78:05 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F0EnXT91RiyN2-tL9oahY33WeAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.204.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:bc:8e:d1:1c:aa:e3:d5:17:fa:a7:ee:49:f6:01:38:9b:51: 29:07:ec:d4:2f:f5:90:dd:9a:e4:79:42:b9:eb:1d:0b:72:38: df:42:cf:c9:c9:6d:ad:de:c5:c9:1d:c6:b9:55:9b:15:1c:3b: 5c:2e:77:77:f8:de:60:90:05:43:e8:c1:6b:52:0f:f8:34:82: 3b:d2:53:20:36:c8:05:a0:16:99:ab:b2:4f:25:84:f6:c8:53: 3c:21:33:2d:82:bb:57:eb:4f:40:e2:db:ff:cb:3a:5c:97:56: 89:9a:4b:5f:90:4a:30:ea:63:62:31:e9:25:29:ae:ac:8d:a3: 19:db:04:e2:05:ae:ea:e1:ad:ae:42:e2:03:19:4c:fe:d6:0a: dd:09:56:c8:70:cb:06:3a:18:0f:c5:e1:23:04:d8:60:56:2b: d2:d2:e9:d5:cb:d7:11:42:f9:7c:47:4e:12:b0:c5:4f:58:99: 11:4b:42:1f:21:d4:92:39:6f:c0:5f:ec:b5:47:c8:84:91:86: 3f:7e:72:4a:d8:80:d9:ae:1d:1f:91:31:d9:57:72:fd:76:72: ea:aa:72:2a:4f:e2:80:dc:4c:cc:bc:a9:3d:23:87:5b:10:29: 9b:ae:57:95:a5:b6:1f:4f:be:00:04:11:93:2b:ae:2f:4a:d7: eb:0b:68:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSnOK0jjlOw8nGm8E7BMKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjEyMTI1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzQxMjc1ZDNmNzU0NjJjOGRkYmViNGJmNjg2YTE2MzdkZDY3ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsumEwQB8tu/RmeieSxVOOOQRKAZQ Gy04YSS6htbs+UrUVDukvphsgYKxwgC272cxcELRNMTe7rC0Gf+fnKrjqiTBAs6l OYpI5hbi+kfPVwdFRVSaDG4ka3VSY1IslGqEAnrIewKduoiD5sGQzMNZ4uEzYGi4 JqwnNIRqjAsmXpITnuNMx1SYrrB1z9YNxj3dSLIpiE5t7tuzNvhwXKnJESu5xH6p 52gtsvIGH7om+HJvAXwsdC9pSlszr/NJ04pJgkh0KHAkXurjWJYM5FV7eFTsSKsC XVyIFfnWOZflJircQpUqEJIiYW2BPlkzhuGMwu+xRbtonpn68BgyoQAeWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdBJ10/dUYsjdvrS/aGoWN91ngFMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvRjBFblhUOTFSaXlOMi10TDlvYWhZMzNXZUFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zMMA0G CSqGSIb3DQEBCwUAA4IBAQAuvI7RHKrj1Rf6p+5J9gE4m1EpB+zUL/WQ3ZrkeUK5 6x0LcjjfQs/JyW2t3sXJHca5VZsVHDtcLnd3+N5gkAVD6MFrUg/4NII70lMgNsgF oBaZq7JPJYT2yFM8ITMtgrtX609A4tv/yzpcl1aJmktfkEow6mNiMeklKa6sjaMZ 2wTiBa7q4a2uQuIDGUz+1grdCVbIcMsGOhgPxeEjBNhgVivS0unVy9cRQvl8R04S sMVPWJkRS0IfIdSSOW/AX+y1R8iEkYY/fnJK2IDZrh0fkTHZV3L9dnLqqnIqT+KA 3EzMvKk9I4dbECmbrleVpbYfT74ABBGTK64vStfrC2io -----END CERTIFICATE-----Generated at Thu Dec 18 20:01:18 2025 by rpki-client