This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LIl6FOmN-_RBQERTka1cKJmGEUk.roa File: LIl6FOmN-_RBQERTka1cKJmGEUk.roa (raw, json) Hash identifier: 8AWFTd7wPJUgJxiNWY7EcmJkKJCUKrDEKT0gEjcBa+8= Subject key identifier: 2C:89:7A:14:E9:8D:FB:F4:41:40:44:53:91:AD:5C:28:99:86:11:49 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B6940769267C3804C660E9343A373D635 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LIl6FOmN-_RBQERTka1cKJmGEUk.roa Signing time: Mon 29 Dec 2025 08:36:30 +0000 ROA not before: Mon 29 Dec 2025 08:36:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203057 IP address blocks: 79.172.242.0/24 maxlen: 24 87.229.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:40:76:92:67:c3:80:4c:66:0e:93:43:a3:73:d6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 29 08:36:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c897a14e98dfbf44140445391ad5c2899861149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b2:af:40:3d:61:dc:6c:34:8e:91:56:44:77: 9d:ff:70:5e:ea:8b:0c:eb:8e:21:36:00:7f:b2:e7: 6e:84:74:05:15:8e:21:11:a8:e3:c4:a9:c9:17:c8: 60:af:c2:7f:6a:b7:dc:c3:8e:2b:2e:56:fb:d2:94: f7:d2:16:9d:95:a7:33:b3:a5:12:9f:13:ce:82:8c: 86:83:7d:6b:2f:8d:93:d9:7e:14:f9:31:3b:17:2a: 96:91:f1:e3:e2:70:f0:b2:a1:f9:47:54:fb:a2:04: 76:39:49:41:0a:4e:0b:2d:5f:00:4b:7c:e8:b4:00: 73:37:c3:58:83:91:4f:fe:84:00:61:f2:88:3a:2b: 87:e1:ab:3a:9c:91:b5:2e:14:24:80:9f:45:2a:ab: 96:f7:b1:f7:ac:d4:b7:87:b3:a2:45:04:af:ef:3f: 5e:26:fb:8d:24:86:65:83:c8:6e:26:2d:ae:fd:27: 0e:cc:8f:95:4c:12:4f:da:29:76:3a:12:db:dd:85: d4:3a:a1:35:8e:aa:25:59:f9:3a:be:3f:1d:7a:bb: d9:d2:f2:f7:08:af:23:e2:8c:56:14:ba:c2:ff:8b: 88:89:7b:32:0b:56:2b:15:ea:7a:00:4a:c5:31:cd: 73:93:37:a1:91:ad:6b:f3:d0:9d:c2:cc:b5:bb:6e: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:89:7A:14:E9:8D:FB:F4:41:40:44:53:91:AD:5C:28:99:86:11:49 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LIl6FOmN-_RBQERTka1cKJmGEUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.242.0/24 87.229.81.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c3:72:0a:fb:62:9c:ba:d6:eb:9e:49:bb:13:67:b4:bb:79: 9c:27:52:ed:9a:ae:0d:df:84:43:6b:d7:9e:e3:16:64:b8:da: df:d7:2b:39:c9:cc:92:1d:5e:5f:6a:20:20:74:e7:6e:0e:59: 29:f3:bb:91:57:59:df:05:58:d3:fd:c5:41:51:7c:46:f4:9b: e8:5e:ca:d7:33:d8:7f:08:b7:6b:3f:f1:a9:4d:c1:da:9c:95: 5b:84:27:1e:ac:78:a3:0e:56:14:d8:51:d1:7f:b4:35:f3:e3: 3a:8b:68:d6:78:72:2c:52:61:6f:62:2a:36:4c:2b:80:7d:7a: 12:71:83:7d:f2:12:e9:78:b0:3b:8e:aa:3e:71:71:c1:6a:63: a5:6c:73:3e:6d:4c:df:9c:e6:79:1e:78:85:f2:7a:40:2f:ac: 85:e6:20:b6:fa:f9:41:69:4c:17:d4:80:14:39:23:d4:76:5e: 28:cd:7b:97:ba:b0:c0:15:82:47:c3:3c:e1:39:fb:fa:13:88: b5:b1:82:a0:fb:ec:c6:48:b5:32:e1:fa:3b:08:13:34:b3:25: 81:16:98:eb:ce:90:78:27:85:23:9d:f0:4e:88:bc:18:2a:a8: 9d:bd:cb:82:1d:13:d8:e7:8e:15:74:46:e6:98:19:17:2a:10: 92:4c:be:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtpQHaSZ8OATGYOk0Ojc9Y1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjI5MDgzNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzg5N2ExNGU5OGRmYmY0NDE0MDQ0NTM5MWFkNWMyODk5ODYxMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bKvQD1h3Gw0jpFWRHed/3Be6osM 644hNgB/suduhHQFFY4hEajjxKnJF8hgr8J/arfcw44rLlb70pT30hadlaczs6US nxPOgoyGg31rL42T2X4U+TE7FyqWkfHj4nDwsqH5R1T7ogR2OUlBCk4LLV8AS3zo tABzN8NYg5FP/oQAYfKIOiuH4as6nJG1LhQkgJ9FKquW97H3rNS3h7OiRQSv7z9e JvuNJIZlg8huJi2u/ScOzI+VTBJP2il2OhLb3YXUOqE1jqolWfk6vj8dervZ0vL3 CK8j4oxWFLrC/4uIiXsyC1YrFep6AErFMc1zkzehka1r89Cdwsy1u26HVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCyJehTpjfv0QUBEU5GtXCiZhhFJMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTElsNkZPbU4tX1JCUUVSVGthMWNLSm1HRVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6zyAwQA V+VRMA0GCSqGSIb3DQEBCwUAA4IBAQB+w3IK+2Kcutbrnkm7E2e0u3mcJ1Ltmq4N 34RDa9ee4xZkuNrf1ys5ycySHV5faiAgdOduDlkp87uRV1nfBVjT/cVBUXxG9Jvo XsrXM9h/CLdrP/GpTcHanJVbhCcerHijDlYU2FHRf7Q18+M6i2jWeHIsUmFvYio2 TCuAfXoScYN98hLpeLA7jqo+cXHBamOlbHM+bUzfnOZ5HniF8npAL6yF5iC2+vlB aUwX1IAUOSPUdl4ozXuXurDAFYJHwzzhOfv6E4i1sYKg++zGSLUy4fo7CBM0syWB FpjrzpB4J4UjnfBOiLwYKqidvcuCHRPY544VdEbmmBkXKhCSTL4J -----END CERTIFICATE-----Generated at Wed Dec 31 09:39:48 2025 by rpki-client