This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Wt2eBLj-6YhZg2lNZAemsHlYw3w.roa File: Wt2eBLj-6YhZg2lNZAemsHlYw3w.roa (raw, json) Hash identifier: 3/sSQop4LDs3u9M9wojHwzNeb+tuiQlwqLBGm9os+NI= Subject key identifier: 5A:DD:9E:04:B8:FE:E9:88:59:83:69:4D:64:07:A6:B0:79:58:C3:7C Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019BC627DA9997908752F37F93E94523FC14 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Wt2eBLj-6YhZg2lNZAemsHlYw3w.roa Signing time: Fri 16 Jan 2026 09:34:19 +0000 ROA not before: Fri 16 Jan 2026 09:34:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 87.229.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:27:da:99:97:90:87:52:f3:7f:93:e9:45:23:fc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 16 09:34:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5add9e04b8fee9885983694d6407a6b07958c37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:83:14:f5:c1:ce:7d:49:c6:49:59:a4:4b: 7f:29:dc:43:ce:35:b2:b4:bf:23:cb:65:ea:95:88: c2:e5:97:3a:97:53:9c:89:65:6e:a6:40:d9:56:a6: 84:33:1b:37:50:02:6f:a5:10:2f:66:1a:12:f3:71: 8d:bb:d7:88:79:e7:c7:33:18:de:08:e2:bc:64:5c: fe:9f:85:0b:f1:ed:93:28:e6:4f:96:73:1c:85:78: 14:9b:d9:4d:85:fa:44:7a:69:db:91:16:38:5d:78: e1:14:25:0d:b2:c8:ef:ea:b6:4f:d2:42:79:b0:e8: a5:ff:fd:46:29:28:2d:1d:12:09:ab:75:a3:c0:c3: 09:a3:73:62:cb:ce:a2:fb:37:3b:14:60:e2:98:f3: 13:f2:42:75:ae:02:a9:3f:c9:53:0d:a3:2f:2e:99: 4c:07:ea:a4:70:00:97:eb:2c:44:fd:67:b0:de:6d: 22:a6:ef:7c:11:b9:0b:d1:db:5f:5b:8e:c4:7b:c2: 86:ce:ba:b3:7b:19:0a:c6:1c:82:8f:0c:f7:2a:c4: 87:97:63:24:47:f8:32:f4:a4:12:90:12:21:77:e5: 7a:90:db:6c:71:2d:b8:df:e2:de:fb:13:6d:77:00: 7b:ea:d2:b6:3c:e8:60:30:9e:0d:63:fd:45:02:54: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DD:9E:04:B8:FE:E9:88:59:83:69:4D:64:07:A6:B0:79:58:C3:7C X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Wt2eBLj-6YhZg2lNZAemsHlYw3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.40.0/24 Signature Algorithm: sha256WithRSAEncryption 75:53:5c:f5:e8:d2:31:3f:5e:13:aa:7a:1e:00:cb:28:f8:f6: 7e:29:e9:f5:15:8c:42:75:2c:8e:58:5b:4d:db:65:01:e4:a7: 81:08:30:90:bf:80:65:49:a6:e4:a6:1e:9a:a8:95:51:16:84: 07:68:e9:f7:d2:23:20:fc:02:f3:ae:a6:ee:3c:d9:25:0e:59: 3a:0d:ad:09:96:2a:97:dc:f7:e7:ec:5f:c5:6c:3d:79:a4:cf: 97:cf:21:e0:2e:be:f5:67:75:6f:01:a5:9f:a8:c8:e6:f2:e1: 6e:24:d0:fc:8e:04:66:99:43:4f:1a:be:eb:27:2e:ed:a0:b1: 37:99:41:12:d2:af:23:72:6d:da:c3:09:b6:81:0f:3f:08:a8: 9d:ae:29:07:bf:ba:9a:bd:60:e9:39:66:79:6d:c8:bb:96:56: 86:81:33:99:d6:49:e3:47:07:22:d4:25:c5:cd:df:96:bf:5b: 89:36:cb:27:54:a3:5c:4f:15:bd:a1:12:df:0f:b2:0f:14:68: 10:6e:1f:5b:dd:32:6c:39:b9:bb:8b:52:e6:87:01:54:8f:c8: a5:b3:8d:4d:b1:b2:d0:65:12:e5:57:3d:ca:55:c8:91:82:f1: 9d:fc:ae:4e:49:fd:62:54:f7:eb:ba:4d:0d:95:a5:cf:ac:8a: 09:95:45:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGJ9qZl5CHUvN/k+lFI/wUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTE2MDkzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWRkOWUwNGI4ZmVlOTg4NTk4MzY5NGQ2NDA3YTZiMDc5NThjMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bqDFPXBzn1JxklZpEt/KdxDzjWy tL8jy2XqlYjC5Zc6l1OciWVupkDZVqaEMxs3UAJvpRAvZhoS83GNu9eIeefHMxje COK8ZFz+n4UL8e2TKOZPlnMchXgUm9lNhfpEemnbkRY4XXjhFCUNssjv6rZP0kJ5 sOil//1GKSgtHRIJq3WjwMMJo3Niy86i+zc7FGDimPMT8kJ1rgKpP8lTDaMvLplM B+qkcACX6yxE/Wew3m0ipu98EbkL0dtfW47Ee8KGzrqzexkKxhyCjwz3KsSHl2Mk R/gy9KQSkBIhd+V6kNtscS243+Le+xNtdwB76tK2POhgMJ4NY/1FAlT6qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrdngS4/umIWYNpTWQHprB5WMN8MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvV3QyZUJMai02WWhaZzJsTlpBZW1zSGxZdzN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UoMA0G CSqGSIb3DQEBCwUAA4IBAQB1U1z16NIxP14TqnoeAMso+PZ+Ken1FYxCdSyOWFtN 22UB5KeBCDCQv4BlSabkph6aqJVRFoQHaOn30iMg/ALzrqbuPNklDlk6Da0JliqX 3Pfn7F/FbD15pM+XzyHgLr71Z3VvAaWfqMjm8uFuJND8jgRmmUNPGr7rJy7toLE3 mUES0q8jcm3awwm2gQ8/CKidrikHv7qavWDpOWZ5bci7llaGgTOZ1knjRwci1CXF zd+Wv1uJNssnVKNcTxW9oRLfD7IPFGgQbh9b3TJsObm7i1LmhwFUj8ils41NsbLQ ZRLlVz3KVciRgvGd/K5OSf1iVPfruk0NlaXPrIoJlUWW -----END CERTIFICATE-----Generated at Mon Jan 19 05:22:59 2026 by rpki-client