This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H3ptM_k3R5aYTxPxeCjqyUgzblg.roa File: H3ptM_k3R5aYTxPxeCjqyUgzblg.roa (raw, json) Hash identifier: EGRpYtZuM1SY/cyp++hTgyk7Y5sLIQoQ3mxXGb962bw= Subject key identifier: 1F:7A:6D:33:F9:37:47:96:98:4F:13:F1:78:28:EA:C9:48:33:6E:58 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE4EEAA94C883F61167B093F69BAA5 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H3ptM_k3R5aYTxPxeCjqyUgzblg.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 79.172.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4e:ea:a9:4c:88:3f:61:16:7b:09:3f:69:ba:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f7a6d33f9374796984f13f17828eac948336e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:b7:9c:e0:87:6f:d5:64:fd:a4:09:a8:96: 1a:06:37:0d:aa:42:98:94:e5:41:b4:f0:07:89:11: 8f:e7:ac:f1:f6:7b:ee:eb:18:73:21:55:38:e0:a7: d2:7d:f5:75:42:4c:a7:d7:b5:a6:e7:d9:e6:57:7d: 61:d0:06:f6:d9:b5:3f:cb:a6:b0:ed:96:b7:69:b3: d7:e8:51:e3:17:0f:70:1e:e8:4e:38:93:cc:11:dd: 77:57:9b:6f:15:ca:94:5b:8c:43:1b:ae:9f:41:ed: c8:06:bf:25:9b:4f:3d:f0:e8:30:d3:64:ff:c9:c5: a0:a0:ce:ce:4d:73:90:cc:b4:eb:86:ed:2b:90:27: d5:86:b3:ae:6b:c7:ab:24:b2:12:84:51:e0:fc:9c: 74:61:85:0b:e7:5d:82:92:85:73:f6:23:26:b9:8e: e5:a5:f2:cd:18:33:31:f2:5c:57:2e:ad:67:5e:a5: 74:c8:a9:37:8d:44:f6:a3:83:6e:95:d7:a1:cc:ac: 5d:31:63:c4:b7:52:8e:ab:6a:ff:50:76:f8:bf:7c: 60:69:2a:b6:6d:4b:44:2e:47:75:81:be:e0:74:b7: f8:3f:bf:38:f4:83:fb:c1:df:ec:68:37:c4:1a:10: 0e:15:c5:17:62:7d:96:bf:de:0d:46:8f:ab:e3:7b: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7A:6D:33:F9:37:47:96:98:4F:13:F1:78:28:EA:C9:48:33:6E:58 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/H3ptM_k3R5aYTxPxeCjqyUgzblg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.214.0/24 Signature Algorithm: sha256WithRSAEncryption 44:68:c7:87:9a:84:29:50:53:02:c4:63:ba:e7:35:72:db:e5: 10:0d:f6:fb:06:af:09:48:29:78:5d:10:13:4d:89:5e:15:12: f3:cc:9a:7a:c9:6e:fb:1b:1c:37:f3:68:45:55:24:23:af:c2: 69:f3:f7:3e:3e:cb:30:ee:13:0c:a8:0d:b9:ac:2f:e4:70:5d: d1:7c:03:75:d6:c7:72:5a:29:1f:d8:19:90:d5:9a:58:d9:fc: af:79:03:65:ce:99:da:6a:08:3f:c8:16:e8:01:e8:8d:0a:3a: bd:66:54:71:16:d3:9f:a5:42:18:26:94:1d:c6:b2:6f:9e:66: a3:94:11:c0:90:f6:e1:4f:ec:2d:64:9e:74:c1:d9:a5:bb:b6: d3:d7:a0:3a:0d:07:2e:cb:09:62:1a:4e:81:53:06:7c:f5:1e: 1b:8e:07:e0:74:a1:be:2f:35:81:e9:1e:7f:07:c5:9b:dd:ed: 15:af:2a:e5:7b:53:04:e6:5c:62:9b:fa:ef:32:9b:11:b8:68: dc:25:fe:67:1c:61:da:6c:e4:4d:de:d9:1a:26:34:dd:e6:4f: c1:c0:1d:34:94:e1:9d:68:25:54:b7:6c:b1:60:1f:5a:d9:09: 73:b2:33:37:84:e0:97:7e:6c:51:ef:31:66:cb:c7:57:33:59: 18:07:99:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87k7qqUyIP2EWewk/abqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjdhNmQzM2Y5Mzc0Nzk2OTg0ZjEzZjE3ODI4ZWFjOTQ4MzM2ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzq3nOCHb9Vk/aQJqJYaBjcNqkKY lOVBtPAHiRGP56zx9nvu6xhzIVU44KfSffV1Qkyn17Wm59nmV31h0Ab22bU/y6aw 7Za3abPX6FHjFw9wHuhOOJPMEd13V5tvFcqUW4xDG66fQe3IBr8lm0898Ogw02T/ ycWgoM7OTXOQzLTrhu0rkCfVhrOua8erJLIShFHg/Jx0YYUL512CkoVz9iMmuY7l pfLNGDMx8lxXLq1nXqV0yKk3jUT2o4NuldehzKxdMWPEt1KOq2r/UHb4v3xgaSq2 bUtELkd1gb7gdLf4P7849IP7wd/saDfEGhAOFcUXYn2Wv94NRo+r43vM7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB96bTP5N0eWmE8T8Xgo6slIM25YMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvSDNwdE1fazNSNWFZVHhQeGVDanF5VWd6YmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zWMA0G CSqGSIb3DQEBCwUAA4IBAQBEaMeHmoQpUFMCxGO65zVy2+UQDfb7Bq8JSCl4XRAT TYleFRLzzJp6yW77Gxw382hFVSQjr8Jp8/c+Pssw7hMMqA25rC/kcF3RfAN11sdy Wikf2BmQ1ZpY2fyveQNlzpnaagg/yBboAeiNCjq9ZlRxFtOfpUIYJpQdxrJvnmaj lBHAkPbhT+wtZJ50wdmlu7bT16A6DQcuywliGk6BUwZ89R4bjgfgdKG+LzWB6R5/ B8Wb3e0Vryrle1ME5lxim/rvMpsRuGjcJf5nHGHabORN3tkaJjTd5k/BwB00lOGd aCVUt2yxYB9a2QlzsjM3hOCXfmxR7zFmy8dXM1kYB5kS -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:06 2026 by rpki-client