This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OkA_imDtySYsduRFrym6_4UBCoY.roa File: OkA_imDtySYsduRFrym6_4UBCoY.roa (raw, json) Hash identifier: ajAZh8U9W3AmP34YH4VL4K77QcX0EKFWrZ8BUbms864= Subject key identifier: 3A:40:3F:8A:60:ED:C9:26:2C:76:E4:45:AF:29:BA:FF:85:01:0A:86 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B6940760237E1B708BAF0A629B30B5478 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OkA_imDtySYsduRFrym6_4UBCoY.roa Signing time: Mon 29 Dec 2025 08:36:30 +0000 ROA not before: Mon 29 Dec 2025 08:36:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 79.172.193.0/24 maxlen: 24 79.172.200.0/23 maxlen: 24 79.172.250.0/23 maxlen: 24 87.229.8.0/22 maxlen: 22 87.229.11.0/24 maxlen: 24 87.229.12.0/24 maxlen: 24 87.229.37.0/24 maxlen: 24 87.229.80.0/23 maxlen: 24 87.229.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:40:76:02:37:e1:b7:08:ba:f0:a6:29:b3:0b:54:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 29 08:36:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a403f8a60edc9262c76e445af29baff85010a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:de:4a:3c:27:bb:40:6f:af:0d:29:3b:11: bb:7f:63:ab:7d:38:f0:9c:93:1c:e8:65:d3:14:2a: a3:dc:52:7c:a9:2b:fb:56:51:9c:97:79:07:22:3d: b0:24:d2:74:7c:24:f5:54:15:01:f3:1d:8c:99:d6: 4f:05:67:2a:5f:4b:6c:63:b2:72:3a:79:99:1b:eb: 00:2a:70:66:9f:38:18:fc:80:87:45:e4:65:ef:42: 4c:5a:b4:c1:7a:58:40:68:89:e0:52:a7:54:2b:7d: 4f:5e:fa:0d:cc:97:d4:2e:a4:bc:69:b7:45:b5:3f: 64:eb:4f:bc:aa:57:bd:1d:13:25:a4:bf:8c:68:9d: d5:13:f1:8a:81:c8:a8:94:6c:0a:60:d6:46:5c:87: 2d:2a:13:3f:85:92:3f:37:49:c6:b5:13:93:b4:ca: fd:80:88:f4:12:f8:08:40:6b:f5:f2:8b:26:74:45: 82:bb:ae:19:6d:6f:d8:dd:a7:4c:b4:50:92:10:74: 79:9f:14:e1:79:a9:44:f0:41:f6:99:37:4f:5a:c4: a6:89:62:24:06:aa:8d:97:ee:3d:41:8e:a8:b3:ce: 42:b4:13:3f:3f:89:2b:ec:c0:8e:ba:a2:c0:b2:3e: b1:1f:56:f9:d7:36:15:a1:77:ad:63:0e:80:cf:03: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:3F:8A:60:ED:C9:26:2C:76:E4:45:AF:29:BA:FF:85:01:0A:86 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OkA_imDtySYsduRFrym6_4UBCoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.193.0/24 79.172.200.0/23 79.172.250.0/23 87.229.8.0-87.229.12.255 87.229.37.0/24 87.229.80.0/23 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 69:38:7c:2e:49:dd:30:49:11:a9:a2:65:13:09:26:6b:65:23: 39:65:bf:6b:7c:1c:cc:1e:58:a1:8d:65:41:4e:38:6e:29:7e: bd:3d:20:f1:35:6c:33:c6:eb:14:38:c8:5a:e6:19:3e:55:71: 63:6e:a1:e6:d9:b2:81:ae:0c:b3:3c:80:5b:ef:5a:00:58:d8: 21:b2:fb:75:b7:7d:ab:3e:8c:70:f0:ac:9c:ae:ae:be:65:8a: d9:ce:22:0d:47:66:99:68:27:66:a4:24:c6:1e:37:76:e1:8f: 82:22:0d:30:73:7c:b2:05:54:ff:30:f3:9c:42:64:a9:56:d7: 05:f8:be:3c:62:76:4b:c0:bb:2c:32:9b:c7:e1:38:bf:5b:14: 5c:a2:1a:f5:a8:0e:bf:8c:ae:7f:31:65:89:4c:39:5f:af:6f: ee:bd:78:ac:dd:11:bb:ba:eb:2a:6f:3f:71:d5:ed:79:25:14: f7:99:76:22:3e:fd:6d:4e:5e:eb:d8:66:58:00:69:6e:aa:dc: 9e:a6:cc:06:27:c7:83:13:79:4e:e2:a7:de:e9:5a:c1:1d:e5: ce:10:5f:1c:dd:79:e9:83:3b:f3:9c:65:d7:07:57:dc:1f:84: ac:8e:4d:40:68:13:de:ea:08:29:8b:c0:ad:d8:72:59:17:71: 39:1a:ef:13 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZtpQHYCN+G3CLrwpimzC1R4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjI5MDgzNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTQwM2Y4YTYwZWRjOTI2MmM3NmU0NDVhZjI5YmFmZjg1MDEwYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyHeSjwnu0Bvrw0pOxG7f2OrfTjw nJMc6GXTFCqj3FJ8qSv7VlGcl3kHIj2wJNJ0fCT1VBUB8x2MmdZPBWcqX0tsY7Jy OnmZG+sAKnBmnzgY/ICHReRl70JMWrTBelhAaIngUqdUK31PXvoNzJfULqS8abdF tT9k60+8qle9HRMlpL+MaJ3VE/GKgciolGwKYNZGXIctKhM/hZI/N0nGtROTtMr9 gIj0EvgIQGv18osmdEWCu64ZbW/Y3adMtFCSEHR5nxThealE8EH2mTdPWsSmiWIk BqqNl+49QY6os85CtBM/P4kr7MCOuqLAsj6xH1b51zYVoXetYw6AzwNV9QIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFDpAP4pg7ckmLHbkRa8puv+FAQqGMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvT2tBX2ltRHR5U1lzZHVSRnJ5bTZfNFVCQ29ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAT6zBAwQB T6zIAwQBT6z6MAwDBANX5QgDBABX5QwDBABX5SUDBAFX5VADBAFX5XwwDQYJKoZI hvcNAQELBQADggEBAGk4fC5J3TBJEamiZRMJJmtlIzllv2t8HMweWKGNZUFOOG4p fr09IPE1bDPG6xQ4yFrmGT5VcWNuoebZsoGuDLM8gFvvWgBY2CGy+3W3fas+jHDw rJyurr5litnOIg1HZploJ2akJMYeN3bhj4IiDTBzfLIFVP8w85xCZKlW1wX4vjxi dkvAuywym8fhOL9bFFyiGvWoDr+Mrn8xZYlMOV+vb+69eKzdEbu66ypvP3HV7Xkl FPeZdiI+/W1OXuvYZlgAaW6q3J6mzAYnx4MTeU7ip97pWsEd5c4QXxzdeemDO/Oc ZdcHV9wfhKyOTUBoE97qCCmLwK3YclkXcTka7xM= -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:24 2025 by rpki-client