This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NI3tAwqob-RO0-DRxW0hNBtuv6s.roa File: NI3tAwqob-RO0-DRxW0hNBtuv6s.roa (raw, json) Hash identifier: UhsXjHYWFlBrM7ZR9V9+WfMd93Ckv3k8GraEndjxauE= Subject key identifier: 34:8D:ED:03:0A:A8:6F:E4:4E:D3:E0:D1:C5:6D:21:34:1B:6E:BF:AB Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019BC626F1483F3CBC90401F5B0537C19B03 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NI3tAwqob-RO0-DRxW0hNBtuv6s.roa Signing time: Fri 16 Jan 2026 09:33:19 +0000 ROA not before: Fri 16 Jan 2026 09:33:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 87.229.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:26:f1:48:3f:3c:bc:90:40:1f:5b:05:37:c1:9b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 16 09:33:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=348ded030aa86fe44ed3e0d1c56d21341b6ebfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:34:6b:5e:ab:c0:04:ed:d3:4a:04:3b:8d: 60:93:a2:3c:25:f9:dc:8f:56:9e:34:2e:69:69:ee: c3:21:c3:8e:f3:d7:38:e4:cb:91:e9:7b:78:c5:9e: 23:8b:f0:4e:1c:9c:ab:87:5d:68:1a:38:94:c4:a4: 77:8d:ce:d6:f2:43:ac:3d:88:7a:da:70:39:c8:05: 0c:54:2f:69:10:fa:a4:e3:46:84:a7:9e:9d:6d:55: 6d:9a:76:2b:86:67:45:2c:45:53:e0:73:0b:d2:f7: da:4d:b4:a1:5f:94:60:a9:92:81:e6:11:86:1d:32: 43:4a:0b:8a:a3:d2:8b:9c:3c:ff:e2:b1:3c:c2:a9: 79:64:8b:29:93:c5:1e:d5:22:1a:2d:d1:73:ee:a5: eb:8b:f0:73:8e:43:65:8a:bc:f5:0c:21:a1:a5:f4: fc:fb:78:9a:43:7e:30:63:92:6f:6f:d4:ab:26:17: 37:91:52:a3:28:2b:37:cb:7a:44:b6:11:93:cd:ef: b0:10:fd:c4:a5:42:e3:04:66:29:00:8f:cc:2c:fb: fb:33:cf:25:fc:f2:f3:cd:4a:d5:16:7e:b8:17:5d: aa:ba:c2:57:36:cb:e5:d9:7b:1e:61:a1:b7:86:74: 0c:cc:4f:e9:de:b2:30:9c:57:77:93:34:94:b8:13: 02:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8D:ED:03:0A:A8:6F:E4:4E:D3:E0:D1:C5:6D:21:34:1B:6E:BF:AB X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NI3tAwqob-RO0-DRxW0hNBtuv6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.112.0/24 Signature Algorithm: sha256WithRSAEncryption 71:56:30:24:17:02:e5:97:5d:3a:62:7a:6e:0d:f8:a0:80:74: be:a8:6d:1a:7b:5d:77:20:f4:38:e9:9a:be:34:d0:f6:a3:58: db:28:2e:d7:14:4b:e0:89:f1:3c:86:d9:16:d4:29:96:f7:1b: 99:0c:31:b8:d5:8f:22:05:83:08:7b:a3:70:7b:6d:49:5a:28: 5e:ad:57:3b:46:7c:b3:45:ec:e1:cb:2f:fc:fb:81:b2:9b:20: 7e:ac:8b:02:98:cf:e8:95:e4:50:91:eb:cd:f6:4a:5e:89:d5: c9:55:63:ab:0e:22:9b:a0:e0:ff:bc:a0:0f:c0:5c:dc:6d:58: 03:9e:62:26:a9:4a:ae:17:76:34:c8:38:7e:f0:1e:b3:d5:94: 59:59:b6:b4:ae:d0:3e:1e:86:d7:f6:46:91:38:cb:bd:69:1c: 20:55:ee:4e:cd:38:45:2d:65:17:36:2b:53:90:e5:18:53:a1: 36:a5:30:6b:78:e9:40:6f:87:aa:d5:90:dd:85:ac:d9:77:d5: 98:79:62:4c:b2:03:a4:aa:8e:31:eb:d9:8a:01:09:a6:4e:0c: 29:8c:6a:a1:31:3a:1a:6a:6d:51:58:05:a8:ef:62:5d:9b:df: 3e:68:97:e3:73:85:07:d3:29:13:1a:4b:5f:fc:92:ca:2b:31: e4:9b:cb:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGJvFIPzy8kEAfWwU3wZsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTE2MDkzMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDhkZWQwMzBhYTg2ZmU0NGVkM2UwZDFjNTZkMjEzNDFiNmViZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj00a16rwATt00oEO41gk6I8Jfnc j1aeNC5pae7DIcOO89c45MuR6Xt4xZ4ji/BOHJyrh11oGjiUxKR3jc7W8kOsPYh6 2nA5yAUMVC9pEPqk40aEp56dbVVtmnYrhmdFLEVT4HML0vfaTbShX5RgqZKB5hGG HTJDSguKo9KLnDz/4rE8wql5ZIspk8Ue1SIaLdFz7qXri/BzjkNlirz1DCGhpfT8 +3iaQ34wY5Jvb9SrJhc3kVKjKCs3y3pEthGTze+wEP3EpULjBGYpAI/MLPv7M88l /PLzzUrVFn64F12qusJXNsvl2XseYaG3hnQMzE/p3rIwnFd3kzSUuBMC5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSN7QMKqG/kTtPg0cVtITQbbr+rMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTkkzdEF3cW9iLVJPMC1EUnhXMGhOQnR1djZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VwMA0G CSqGSIb3DQEBCwUAA4IBAQBxVjAkFwLll106YnpuDfiggHS+qG0ae113IPQ46Zq+ NND2o1jbKC7XFEvgifE8htkW1CmW9xuZDDG41Y8iBYMIe6Nwe21JWiherVc7Rnyz Rezhyy/8+4GymyB+rIsCmM/oleRQkevN9kpeidXJVWOrDiKboOD/vKAPwFzcbVgD nmImqUquF3Y0yDh+8B6z1ZRZWba0rtA+HobX9kaROMu9aRwgVe5OzThFLWUXNitT kOUYU6E2pTBreOlAb4eq1ZDdhazZd9WYeWJMsgOkqo4x69mKAQmmTgwpjGqhMToa am1RWAWo72Jdm98+aJfjc4UH0ykTGktf/JLKKzHkm8sR -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:41 2026 by rpki-client