This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jkagu8gj4hQ4eLPps3MIsjjd-xo.roa
File: jkagu8gj4hQ4eLPps3MIsjjd-xo.roa (raw, json)
Hash identifier: AKTeg39JpIOPmIdjNtdccFGHoigN74RYRS/UiOT26zE=
Subject key identifier: 8E:46:A0:BB:C8:23:E2:14:38:78:B3:E9:B3:73:08:B2:38:DD:FB:1A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019B1386573020BABDF1E99ACFB841827BBB
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jkagu8gj4hQ4eLPps3MIsjjd-xo.roa
Signing time: Fri 12 Dec 2025 17:05:29 +0000
ROA not before: Fri 12 Dec 2025 17:05:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 79.172.192.0/24 maxlen: 24
87.229.8.0/24 maxlen: 24
87.229.51.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:13:86:57:30:20:ba:bd:f1:e9:9a:cf:b8:41:82:7b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Dec 12 17:05:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e46a0bbc823e2143878b3e9b37308b238ddfb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:28:51:94:66:16:91:55:bd:75:30:c3:54:
dd:b4:4f:52:01:81:85:a1:69:5a:25:b1:c0:c5:2c:
37:1b:d7:c9:a7:4e:24:f4:76:c7:de:21:34:85:53:
d7:01:a8:0b:06:81:7c:30:56:ae:ee:8a:ee:8d:a6:
d1:89:85:aa:24:63:27:cc:bc:5f:1a:72:d7:3b:71:
5b:cf:47:6e:33:cf:e4:2d:2e:bc:6c:7b:d0:c8:6c:
ad:c8:32:aa:28:66:28:46:a9:e7:92:d5:6f:9c:1f:
5f:de:0b:98:0d:95:ee:96:01:83:bb:23:07:cb:f5:
0b:a7:29:5c:a0:ce:ad:ae:dc:08:6f:09:23:42:9b:
ff:26:ee:54:1a:5e:ca:83:06:14:6f:67:01:0a:b0:
ba:1c:93:a1:0e:cd:05:e7:ff:e0:4d:eb:79:27:05:
4c:4e:97:7a:86:fb:14:d4:c8:16:66:0b:46:55:69:
cb:97:b7:d3:a1:25:c8:cb:28:cc:35:a5:b6:4b:40:
81:47:b9:70:cb:4a:35:01:d0:9a:8a:f2:4a:de:48:
d6:26:ca:34:b5:66:70:65:df:3a:e2:70:42:72:26:
90:76:e4:5a:4e:89:1d:a5:b2:a7:65:f7:bb:48:27:
94:df:0e:aa:95:09:b8:a9:c3:ff:a1:35:5a:b9:cf:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:A0:BB:C8:23:E2:14:38:78:B3:E9:B3:73:08:B2:38:DD:FB:1A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jkagu8gj4hQ4eLPps3MIsjjd-xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
87.229.8.0/24
87.229.51.0/24
87.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e1:0b:f5:63:29:92:7f:e7:1b:09:07:fb:e6:36:32:26:a5:
3e:88:d5:09:7c:12:53:36:02:25:4b:45:9e:c7:24:b2:22:de:
23:12:e4:8f:c0:46:b9:09:5c:90:c2:79:de:b3:e2:bb:67:0e:
cf:97:d1:54:d0:1c:f4:f4:7c:1e:bf:f8:1d:99:f5:85:09:f1:
46:13:5e:62:d3:a9:d9:29:6b:a5:82:26:c6:a5:07:80:dd:1a:
55:ab:f5:e9:d9:8b:3d:1d:54:b8:ab:ef:e2:1d:c6:c0:f4:ee:
c7:4b:d4:0c:2d:6c:46:7c:b1:c0:be:d2:f2:ec:c1:11:e5:4c:
9f:f0:e0:b1:aa:04:0a:c0:3f:b9:85:43:3d:5e:6e:83:61:65:
6b:3f:0e:65:65:c3:cf:32:c5:34:7b:49:a2:ca:f9:ae:7c:6b:
f6:ad:47:99:8f:6a:8b:aa:0e:cf:4c:f4:75:f9:90:7e:dc:39:
4d:cc:2b:64:f0:1e:fd:b8:db:18:7e:7e:76:76:aa:04:76:3c:
bf:cb:ed:d5:23:c0:bc:47:d8:4c:78:d8:3e:de:3c:91:1c:bf:
64:e3:74:a9:11:1b:2e:42:32:9e:9e:a7:97:c0:4b:48:30:dd:
22:04:77:95:38:47:1e:bd:c7:7c:ae:c8:95:fb:4e:c3:10:3c:
91:3b:80:18
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZsThlcwILq98emaz7hBgnu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUxMjEyMTcwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTQ2YTBiYmM4MjNlMjE0Mzg3OGIzZTliMzczMDhiMjM4ZGRmYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6UoUZRmFpFVvXUww1TdtE9SAYGF
oWlaJbHAxSw3G9fJp04k9HbH3iE0hVPXAagLBoF8MFau7orujabRiYWqJGMnzLxf
GnLXO3Fbz0duM8/kLS68bHvQyGytyDKqKGYoRqnnktVvnB9f3guYDZXulgGDuyMH
y/ULpylcoM6trtwIbwkjQpv/Ju5UGl7KgwYUb2cBCrC6HJOhDs0F5//gTet5JwVM
Tpd6hvsU1MgWZgtGVWnLl7fToSXIyyjMNaW2S0CBR7lwy0o1AdCaivJK3kjWJso0
tWZwZd864nBCciaQduRaTokdpbKnZfe7SCeU3w6qlQm4qcP/oTVauc/M9QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFI5GoLvII+IUOHiz6bNzCLI43fsaMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvamthZ3U4Z2o0aFE0ZUxQcHMzTUlzampkLXhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT6zAAwQA
V+UIAwQAV+UzAwQAV+VAMA0GCSqGSIb3DQEBCwUAA4IBAQCY4Qv1YymSf+cbCQf7
5jYyJqU+iNUJfBJTNgIlS0WexySyIt4jEuSPwEa5CVyQwnnes+K7Zw7Pl9FU0Bz0
9Hwev/gdmfWFCfFGE15i06nZKWulgibGpQeA3RpVq/Xp2Ys9HVS4q+/iHcbA9O7H
S9QMLWxGfLHAvtLy7MER5Uyf8OCxqgQKwD+5hUM9Xm6DYWVrPw5lZcPPMsU0e0mi
yvmufGv2rUeZj2qLqg7PTPR1+ZB+3DlNzCtk8B79uNsYfn52dqoEdjy/y+3VI8C8
R9hMeNg+3jyRHL9k43SpERsuQjKenqeXwEtIMN0iBHeVOEcevcd8rsiV+07DEDyR
O4AY
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:40:05 2025 by rpki-client