This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gjDPxKRg0dDIXSWs9rglDlwQNAs.roa File: gjDPxKRg0dDIXSWs9rglDlwQNAs.roa (raw, json) Hash identifier: 58g55HwRMil0Ub9G6BdKzbhJtahpD1r3BOUL4Z74wRU= Subject key identifier: 82:30:CF:C4:A4:60:D1:D0:C8:5D:25:AC:F6:B8:25:0E:5C:10:34:0B Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A813BE66F83BEE7A9D55BFA03B6E93128 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gjDPxKRg0dDIXSWs9rglDlwQNAs.roa Signing time: Fri 14 Nov 2025 07:19:37 +0000 ROA not before: Fri 14 Nov 2025 07:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 87.229.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:3b:e6:6f:83:be:e7:a9:d5:5b:fa:03:b6:e9:31:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 14 07:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8230cfc4a460d1d0c85d25acf6b8250e5c10340b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:2a:33:f8:f7:8c:ac:db:48:b0:6a:35:f5: bd:0a:75:b9:a8:1b:58:c5:17:c3:b2:c1:3a:8b:04: 61:44:36:92:9a:05:51:5c:20:3a:91:9e:9b:62:ca: 74:b7:09:f9:79:af:27:ee:e0:38:b4:87:42:2d:2f: 6b:1d:2d:15:4d:e6:db:df:91:7b:ba:b4:e9:96:75: 8d:17:1e:de:fe:d9:ef:c0:4d:40:e9:f7:76:6a:35: 1f:fe:2b:72:76:36:fa:58:3f:00:1a:3e:cf:23:6a: 53:a8:dd:82:08:c6:fb:97:0b:5e:f6:e9:0e:8a:9c: 74:57:f0:18:54:9d:9e:b7:9b:8e:01:26:7a:9a:00: d5:cb:6d:40:b2:be:7b:5a:59:ef:d1:31:99:c0:26: 56:a0:96:a8:42:25:ce:6b:27:70:73:79:a4:cf:33: 83:cf:07:33:61:e2:79:69:66:27:51:dc:24:69:86: 16:5c:8a:03:5e:bf:cd:7f:60:99:52:5b:59:68:aa: e1:58:7a:33:86:18:8e:92:61:98:f8:57:4c:c0:5c: 7e:c4:2b:f8:47:4c:5b:43:c2:d7:21:8a:ad:57:a0: 17:52:58:89:6d:49:11:d2:87:1a:cf:3d:30:d3:cc: c2:3b:a0:57:39:de:5d:83:42:1f:29:c5:de:8c:36: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:30:CF:C4:A4:60:D1:D0:C8:5D:25:AC:F6:B8:25:0E:5C:10:34:0B X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gjDPxKRg0dDIXSWs9rglDlwQNAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.48.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:b3:b0:45:e7:c4:51:41:9e:ba:87:df:a3:fe:64:be:99:38: a4:ab:96:c5:49:81:f8:cd:57:4f:09:d6:39:90:f6:fe:1c:da: 88:05:97:6a:66:ec:a8:05:1a:50:40:6f:a3:ce:67:92:76:5c: 73:ac:94:d8:d0:a4:50:31:3f:25:a9:8b:de:e7:53:a7:01:eb: 48:55:12:89:84:db:73:cf:a1:c8:29:6a:7b:eb:c8:00:3f:f9: 62:eb:7c:b4:c7:29:ea:c6:43:02:ea:12:7b:b2:53:b0:5c:bf: 8f:57:7f:77:e5:d1:d1:41:8f:df:39:80:e5:65:32:9f:14:60: e6:31:97:4d:81:90:ad:e6:fb:3c:8b:9c:76:76:35:86:6e:5a: 27:27:9f:02:ce:85:1a:7b:73:c7:51:31:52:f5:fb:a2:c8:ce: 88:00:ae:68:a8:7c:98:27:40:d7:5f:bf:30:96:c8:5b:d1:6e: 0b:92:3d:67:2b:74:c4:81:fa:0c:44:9e:9e:b4:82:21:a1:c1: 79:47:e3:83:24:a7:68:81:8b:f6:e4:17:9a:12:e2:06:20:7b: 57:50:58:b3:b2:79:b4:96:cf:5f:65:bb:1e:30:15:e0:0a:bf: 55:b5:4b:58:77:2d:5f:a7:d5:1b:6e:d1:84:4a:0f:5a:2c:67: 0b:79:53:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBO+Zvg77nqdVb+gO26TEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTE0MDcxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjMwY2ZjNGE0NjBkMWQwYzg1ZDI1YWNmNmI4MjUwZTVjMTAzNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGAqM/j3jKzbSLBqNfW9CnW5qBtY xRfDssE6iwRhRDaSmgVRXCA6kZ6bYsp0twn5ea8n7uA4tIdCLS9rHS0VTebb35F7 urTplnWNFx7e/tnvwE1A6fd2ajUf/itydjb6WD8AGj7PI2pTqN2CCMb7lwte9ukO ipx0V/AYVJ2et5uOASZ6mgDVy21Asr57Wlnv0TGZwCZWoJaoQiXOaydwc3mkzzOD zwczYeJ5aWYnUdwkaYYWXIoDXr/Nf2CZUltZaKrhWHozhhiOkmGY+FdMwFx+xCv4 R0xbQ8LXIYqtV6AXUliJbUkR0ocazz0w08zCO6BXOd5dg0IfKcXejDYj6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIIwz8SkYNHQyF0lrPa4JQ5cEDQLMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvZ2pEUHhLUmcwZERJWFNXczlyZ2xEbHdRTkFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UwMA0G CSqGSIb3DQEBCwUAA4IBAQAas7BF58RRQZ66h9+j/mS+mTikq5bFSYH4zVdPCdY5 kPb+HNqIBZdqZuyoBRpQQG+jzmeSdlxzrJTY0KRQMT8lqYve51OnAetIVRKJhNtz z6HIKWp768gAP/li63y0xynqxkMC6hJ7slOwXL+PV3935dHRQY/fOYDlZTKfFGDm MZdNgZCt5vs8i5x2djWGblonJ58CzoUae3PHUTFS9fuiyM6IAK5oqHyYJ0DXX78w lshb0W4Lkj1nK3TEgfoMRJ6etIIhocF5R+ODJKdogYv25BeaEuIGIHtXUFizsnm0 ls9fZbseMBXgCr9VtUtYdy1fp9UbbtGESg9aLGcLeVN2 -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:14 2025 by rpki-client