This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hk59spvLRFT6zC8pNH_lwOYRBnI.roa
File: hk59spvLRFT6zC8pNH_lwOYRBnI.roa (raw, json)
Hash identifier: 3Yf0wMrdyEqdvws8MWHjs4yAtkYMn77+IuUN9xLUVxA=
Subject key identifier: 86:4E:7D:B2:9B:CB:44:54:FA:CC:2F:29:34:7F:E5:C0:E6:11:06:72
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019B2B9259FF889EFD0EA031EB9B020453AF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hk59spvLRFT6zC8pNH_lwOYRBnI.roa
Signing time: Wed 17 Dec 2025 09:09:30 +0000
ROA not before: Wed 17 Dec 2025 09:09:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 87.229.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:92:59:ff:88:9e:fd:0e:a0:31:eb:9b:02:04:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Dec 17 09:09:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=864e7db29bcb4454facc2f29347fe5c0e6110672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:20:3e:1c:53:b9:3c:92:2f:39:ef:aa:1d:
65:2b:6a:f7:fa:56:55:cc:ce:e2:ed:a5:03:a1:27:
8b:ad:20:5d:8a:7b:1f:87:cb:05:8b:08:50:14:94:
36:06:09:0b:43:54:c4:75:d6:52:48:8c:5d:5b:d9:
3c:ab:de:c3:7c:ce:2a:0e:76:b7:7f:d4:a5:61:7d:
83:9f:04:9f:af:c6:2a:03:1a:59:aa:43:ff:21:86:
5d:f5:85:7c:62:d0:43:89:f3:65:03:db:74:e6:63:
83:61:1c:43:a1:03:39:fd:4d:67:26:22:50:97:8c:
e8:70:8d:d4:a6:57:6d:19:23:44:46:44:c2:e2:a8:
f6:42:21:3e:2c:8d:4b:14:1f:d2:e5:3b:4c:c3:60:
4b:bd:3c:61:19:4c:e5:a0:db:33:57:fd:fb:2b:37:
0a:a3:a6:57:03:24:72:34:cd:d5:0a:5d:cf:cf:61:
55:61:f6:96:d6:50:0b:a9:20:2c:aa:8c:ce:b4:31:
a5:21:dd:32:27:17:04:50:67:7b:59:2a:f7:84:a6:
fc:0f:de:9e:f8:9c:7c:57:51:94:01:12:fd:53:50:
dd:f7:1c:32:d2:49:5c:72:0f:b8:da:75:1e:1c:bc:
ba:d0:34:5c:48:1d:3e:8c:b7:30:a0:15:40:67:58:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:7D:B2:9B:CB:44:54:FA:CC:2F:29:34:7F:E5:C0:E6:11:06:72
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hk59spvLRFT6zC8pNH_lwOYRBnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:99:7e:3b:6c:26:6f:68:fe:24:56:d2:44:af:a5:45:be:5a:
57:e2:c8:b3:a5:95:8e:d5:62:99:85:94:fe:4f:31:b3:0d:26:
b0:c6:14:15:85:7b:1a:28:2f:18:25:4b:4d:de:3b:5a:2b:8c:
91:16:30:9b:0e:60:14:65:9c:1c:91:73:bb:da:8f:c5:82:32:
9e:e7:ac:96:0e:06:4d:c8:0b:ee:d1:33:b7:b3:eb:a0:a8:a1:
65:fc:75:a9:d4:56:55:fb:89:3d:75:12:d6:2b:a2:a1:e8:c7:
5a:b8:f5:d2:31:a1:ab:fc:5e:e7:d2:64:1b:34:14:44:fa:61:
22:09:1d:1f:4f:a0:1b:dd:6e:6a:61:0a:c1:79:86:c8:c5:09:
26:81:64:19:43:56:16:ca:b2:a5:03:e7:b6:89:ee:4d:db:61:
1a:b0:a6:2e:af:5d:57:54:44:af:28:cb:57:87:59:1d:ca:c9:
0a:53:c3:47:81:0e:4f:05:cf:fd:d8:e4:d8:56:57:92:8b:d1:
dd:05:e3:71:3b:6c:51:6d:f8:1d:18:1c:8a:8a:b3:9d:8d:49:
05:3b:1a:7c:3c:51:02:5c:12:1c:e1:e6:54:a9:48:61:07:a2:
49:72:f5:c9:fd:71:46:c0:9b:6d:e8:57:60:74:aa:99:b0:e4:
2e:72:ab:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:01:19 2025 by rpki-client