This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dUOb-pvBCUSt8THLI0FMQu9uW64.roa File: dUOb-pvBCUSt8THLI0FMQu9uW64.roa (raw, json) Hash identifier: xgOH3UCYWylEG3v1xelsrW7ophaajvgDVDWWjZwuOsw= Subject key identifier: 75:43:9B:FA:9B:C1:09:44:AD:F1:31:CB:23:41:4C:42:EF:6E:5B:AE Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019AC5A01E12369FE9E2A1375269D01CA214 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dUOb-pvBCUSt8THLI0FMQu9uW64.roa Signing time: Thu 27 Nov 2025 14:03:16 +0000 ROA not before: Thu 27 Nov 2025 14:03:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 79.172.242.0/24 maxlen: 24 87.229.12.0/24 maxlen: 24 87.229.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:a0:1e:12:36:9f:e9:e2:a1:37:52:69:d0:1c:a2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 27 14:03:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75439bfa9bc10944adf131cb23414c42ef6e5bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:46:c1:1e:a6:96:e5:19:30:2c:f2:c2:d6:89: 44:a2:c5:e1:95:21:42:c7:7a:34:4e:53:f4:2c:ba: 2b:87:a8:44:a2:31:5e:86:84:f1:e2:7f:ad:46:f5: 55:b5:a8:b4:02:e2:61:d4:14:22:5d:a5:ce:09:4a: 7c:96:b0:f9:fb:f0:48:17:31:6f:22:62:ce:9e:bd: f6:35:b3:06:62:4f:ec:fe:d0:eb:48:e6:d6:c2:14: 9e:7f:f4:5b:f8:7d:fb:56:7b:da:71:01:ba:ce:91: 45:22:92:4b:9f:d7:e2:f1:a6:be:f0:9d:c7:9b:17: 2f:d3:5c:47:c0:bc:87:78:45:74:c1:43:85:c5:ef: 3c:d7:62:a8:28:3e:a5:a9:a3:d9:e4:cc:83:5b:96: e1:6c:f6:82:36:54:4d:62:40:4d:31:c8:8f:6a:f3: 8a:4f:bf:62:11:05:98:b2:dc:85:ac:fc:65:30:fc: 28:d7:f6:7a:07:c0:c7:47:84:3b:4f:ab:af:ab:e2: db:75:a5:da:20:de:5d:31:8c:a0:76:3d:7e:43:36: 3f:17:ee:8a:4c:4e:55:d6:09:36:ae:56:ea:62:56: a3:e2:3d:a5:d6:ca:18:f7:6b:44:a6:8d:5d:7b:d8: 37:67:6e:eb:29:e6:4d:6f:d9:35:50:2b:c3:7d:49: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:9B:FA:9B:C1:09:44:AD:F1:31:CB:23:41:4C:42:EF:6E:5B:AE X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dUOb-pvBCUSt8THLI0FMQu9uW64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.242.0/24 87.229.12.0/24 87.229.35.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b2:2e:b8:2b:c4:d3:27:8b:6d:0a:40:84:17:18:d4:bb:c2: 63:f1:3e:94:b5:1a:7e:72:c5:0e:dd:e4:d4:9c:2c:28:f7:40: 7d:ff:0d:9d:47:b6:b6:96:2c:76:23:6a:5a:49:81:7c:52:c4: 69:c7:37:b0:e2:2a:28:6c:90:92:7f:3e:8f:1d:1c:99:ed:d3: ee:6b:35:d6:df:fc:5b:b6:fb:28:26:29:d6:5d:0b:95:d6:d8: 3b:1c:42:bc:7b:94:d2:bf:0a:8b:8f:4e:dc:75:bd:13:7f:61: 23:2f:45:d7:a3:75:0b:b9:0f:a1:f1:42:be:bf:8a:ff:e5:10: 49:15:b6:f2:10:5e:21:7c:cf:1a:42:91:c8:58:21:20:c0:cb: 05:9a:63:3a:2d:c8:35:48:1e:97:ac:75:4e:bf:a5:1f:6f:2b: df:64:49:ca:14:4a:21:f9:ec:db:0a:75:5c:cd:15:cb:0b:5d: 41:30:5e:07:12:12:48:51:a5:d3:cc:a2:03:b0:91:30:b7:42: dc:13:64:53:5f:89:16:51:01:51:a2:e1:df:ca:2e:02:ad:3b: 57:99:78:5d:bf:a6:c0:63:ec:af:25:50:95:2d:f1:a0:11:d3: c6:e3:19:bc:1c:e6:35:1c:3d:03:77:70:fc:12:cd:42:ad:09: ba:0a:03:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrFoB4SNp/p4qE3UmnQHKIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTI3MTQwMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTQzOWJmYTliYzEwOTQ0YWRmMTMxY2IyMzQxNGM0MmVmNmU1YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kbBHqaW5RkwLPLC1olEosXhlSFC x3o0TlP0LLorh6hEojFehoTx4n+tRvVVtai0AuJh1BQiXaXOCUp8lrD5+/BIFzFv ImLOnr32NbMGYk/s/tDrSObWwhSef/Rb+H37VnvacQG6zpFFIpJLn9fi8aa+8J3H mxcv01xHwLyHeEV0wUOFxe8812KoKD6lqaPZ5MyDW5bhbPaCNlRNYkBNMciPavOK T79iEQWYstyFrPxlMPwo1/Z6B8DHR4Q7T6uvq+LbdaXaIN5dMYygdj1+QzY/F+6K TE5V1gk2rlbqYlaj4j2l1soY92tEpo1de9g3Z27rKeZNb9k1UCvDfUmPrwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHVDm/qbwQlErfExyyNBTELvbluuMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvZFVPYi1wdkJDVVN0OFRITEkwRk1RdTl1VzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT6zyAwQA V+UMAwQAV+UjMA0GCSqGSIb3DQEBCwUAA4IBAQAksi64K8TTJ4ttCkCEFxjUu8Jj 8T6UtRp+csUO3eTUnCwo90B9/w2dR7a2lix2I2paSYF8UsRpxzew4ioobJCSfz6P HRyZ7dPuazXW3/xbtvsoJinWXQuV1tg7HEK8e5TSvwqLj07cdb0Tf2EjL0XXo3UL uQ+h8UK+v4r/5RBJFbbyEF4hfM8aQpHIWCEgwMsFmmM6Lcg1SB6XrHVOv6Ufbyvf ZEnKFEoh+ezbCnVczRXLC11BMF4HEhJIUaXTzKIDsJEwt0LcE2RTX4kWUQFRouHf yi4CrTtXmXhdv6bAY+yvJVCVLfGgEdPG4xm8HOY1HD0Dd3D8Es1CrQm6CgOv -----END CERTIFICATE-----Generated at Tue Dec 9 01:18:42 2025 by rpki-client