This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/b50bfdTRWV7FBMn71kXysA5tG2E.roa File: b50bfdTRWV7FBMn71kXysA5tG2E.roa (raw, json) Hash identifier: O8PX9/ppOkVNPrflZ355wvtBIJ97fJQbVfY7mQnISxM= Subject key identifier: 6F:9D:1B:7D:D4:D1:59:5E:C5:04:C9:FB:D6:45:F2:B0:0E:6D:1B:61 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019AFE0AC50CD0753A62591318559D83E223 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/b50bfdTRWV7FBMn71kXysA5tG2E.roa Signing time: Mon 08 Dec 2025 12:58:29 +0000 ROA not before: Mon 08 Dec 2025 12:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 87.229.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:0a:c5:0c:d0:75:3a:62:59:13:18:55:9d:83:e2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 8 12:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6f9d1b7dd4d1595ec504c9fbd645f2b00e6d1b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:f9:b7:1a:f1:c8:7c:fa:52:25:cb:7d:5e: d8:50:73:39:e6:7a:72:6e:50:85:8d:64:2f:92:a3: 74:b3:2d:7d:fb:84:1c:93:c8:58:f7:b4:f0:07:f9: 46:82:ff:aa:79:46:71:d1:ae:b8:bf:aa:d2:f7:32: ea:ec:d5:f0:17:26:5d:71:95:ab:18:b9:64:43:b3: da:02:db:e4:bb:97:64:4f:bd:75:1f:e7:af:bb:2c: 62:81:ac:49:25:92:c9:60:b3:20:73:d1:b9:3e:c4: b0:37:81:60:21:d7:c1:37:38:58:0c:63:87:6e:9e: b2:47:4c:21:cd:cd:dd:ae:95:8a:c4:d8:17:53:6c: 52:e1:27:07:7b:51:2c:77:2b:58:02:ae:e3:4d:f2: d4:26:93:bd:14:d4:4a:f1:71:59:e5:2c:3e:f8:bf: 7e:43:96:74:dd:70:56:91:7c:b6:f3:c2:e8:9b:33: 59:67:0d:fb:18:84:bc:e6:cb:e5:29:e0:4f:c6:01: 52:21:8f:57:2e:d7:aa:60:8d:f3:c1:2e:3d:52:12: 49:bf:50:e3:49:2f:0b:17:e6:93:67:7b:35:40:2e: bb:91:91:44:c6:d8:d8:0c:3e:7f:2f:09:e9:bf:43: 4d:ff:f2:ea:03:9e:b0:50:43:52:c2:26:db:60:8d: 00:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9D:1B:7D:D4:D1:59:5E:C5:04:C9:FB:D6:45:F2:B0:0E:6D:1B:61 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/b50bfdTRWV7FBMn71kXysA5tG2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.35.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:75:3d:66:d5:89:03:4c:23:ff:fb:ae:bd:a3:6b:7b:bc:ac: c0:2e:bd:65:95:ab:ad:86:84:03:e8:87:27:ce:1b:2b:97:d0: 21:56:f1:65:8d:ba:b0:71:0d:00:65:ad:32:17:2b:35:24:4b: fb:34:32:f4:4e:41:5c:cb:ca:e8:f1:f3:ae:fa:33:d0:f2:70: 94:bf:f5:7f:6c:6e:ea:f8:96:f7:9b:9d:94:8a:1f:6e:b7:8f: 29:b0:e8:38:4b:29:ec:7d:7e:4f:c4:4c:2d:cf:47:4d:bb:1d: 95:8d:87:30:d3:ec:5e:50:6f:5a:e1:71:e4:06:f6:5d:1c:be: 93:67:6d:0e:6f:a7:b3:69:e8:75:6d:33:b3:59:6f:ff:3c:07: 78:41:54:a5:80:fa:9e:f6:b3:d8:57:56:b6:e0:95:92:7a:21: a1:9e:f1:4e:93:fa:d7:bf:0a:9b:ae:b3:d2:e2:00:63:57:49: 7c:3b:0a:1e:53:eb:34:c4:d4:96:d0:ab:3e:c1:0e:9b:38:7e: 5f:81:80:7b:a5:a1:22:19:b4:a9:22:5e:8e:c7:70:a8:9e:a5: 75:b2:20:14:ec:33:c1:80:24:0f:5a:d9:21:cd:63:5c:32:e4: 9c:0f:f5:ff:c5:78:51:23:8d:3a:91:f3:5c:60:99:16:db:3b: 16:63:6f:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr+CsUM0HU6YlkTGFWdg+IjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjA4MTI1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjlkMWI3ZGQ0ZDE1OTVlYzUwNGM5ZmJkNjQ1ZjJiMDBlNmQxYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYr5txrxyHz6UiXLfV7YUHM55npy blCFjWQvkqN0sy19+4Qck8hY97TwB/lGgv+qeUZx0a64v6rS9zLq7NXwFyZdcZWr GLlkQ7PaAtvku5dkT711H+evuyxigaxJJZLJYLMgc9G5PsSwN4FgIdfBNzhYDGOH bp6yR0whzc3drpWKxNgXU2xS4ScHe1EsdytYAq7jTfLUJpO9FNRK8XFZ5Sw++L9+ Q5Z03XBWkXy288LomzNZZw37GIS85svlKeBPxgFSIY9XLteqYI3zwS49UhJJv1Dj SS8LF+aTZ3s1QC67kZFExtjYDD5/Lwnpv0NN//LqA56wUENSwibbYI0ASQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+dG33U0VlexQTJ+9ZF8rAObRthMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvYjUwYmZkVFJXVjdGQk1uNzFrWHlzQTV0RzJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UjMA0G CSqGSIb3DQEBCwUAA4IBAQA+dT1m1YkDTCP/+669o2t7vKzALr1llauthoQD6Icn zhsrl9AhVvFljbqwcQ0AZa0yFys1JEv7NDL0TkFcy8ro8fOu+jPQ8nCUv/V/bG7q +Jb3m52Uih9ut48psOg4SynsfX5PxEwtz0dNux2VjYcw0+xeUG9a4XHkBvZdHL6T Z20Ob6ezaeh1bTOzWW//PAd4QVSlgPqe9rPYV1a24JWSeiGhnvFOk/rXvwqbrrPS 4gBjV0l8OwoeU+s0xNSW0Ks+wQ6bOH5fgYB7paEiGbSpIl6Ox3ConqV1siAU7DPB gCQPWtkhzWNcMuScD/X/xXhRI406kfNcYJkW2zsWY2/Q -----END CERTIFICATE-----Generated at Tue Dec 9 01:18:40 2025 by rpki-client