This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/lrp4Z6U7a9eQ3qIgOjcc7WxuOjI.roa File: lrp4Z6U7a9eQ3qIgOjcc7WxuOjI.roa (raw, json) Hash identifier: 3KAj/CN7bgTVO2cUXe0+raznm43Y4v9Nk5w/kIL6WgI= Subject key identifier: 96:BA:78:67:A5:3B:6B:D7:90:DE:A2:20:3A:37:1C:ED:6C:6E:3A:32 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE59E80F095CFA44073271436792F3 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/lrp4Z6U7a9eQ3qIgOjcc7WxuOjI.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47629 IP address blocks: 87.229.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:59:e8:0f:09:5c:fa:44:07:32:71:43:67:92:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=96ba7867a53b6bd790dea2203a371ced6c6e3a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:74:eb:13:af:57:0e:be:ac:8b:47:77:de: ff:16:7e:7b:84:63:63:74:7e:fb:6a:45:8f:a8:ff: 63:d7:8e:f1:15:48:97:df:91:aa:61:89:f3:67:04: 48:8b:14:5f:21:86:98:fb:84:01:3b:36:36:9d:3f: 13:30:e8:53:21:5c:0e:67:c0:67:55:93:fd:71:0c: 0c:08:7f:fb:48:59:69:cb:c7:06:d0:88:76:f8:a8: 4b:29:ca:2f:01:ea:45:5c:b7:40:4d:10:5f:87:a9: 55:f7:95:a8:9e:5e:70:ce:a7:28:72:72:f8:64:cc: 9c:87:b9:8b:9a:1c:d8:1c:9e:f8:37:be:54:ea:2f: fd:4d:d6:0a:9f:7e:9c:35:d7:82:b2:ab:79:a9:d4: ce:a2:b7:67:1e:b0:4e:36:62:4d:71:60:79:8c:75: a7:a5:a8:70:34:ca:7b:82:e1:5e:77:8c:e3:ad:bf: d1:8b:46:27:70:4d:01:86:57:83:f8:87:a3:f1:59: 1a:7b:0c:de:41:1f:58:34:5d:c8:b4:6a:61:3d:76: 98:92:68:73:c9:ba:17:73:4a:10:a0:b6:a4:1d:ba: bc:b9:24:5f:64:28:1b:95:94:91:f4:eb:9b:ff:ff: 97:12:57:e8:d4:5f:74:7f:43:fc:bf:ee:2a:7c:95: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:78:67:A5:3B:6B:D7:90:DE:A2:20:3A:37:1C:ED:6C:6E:3A:32 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/lrp4Z6U7a9eQ3qIgOjcc7WxuOjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.70.0/24 Signature Algorithm: sha256WithRSAEncryption 42:d1:dd:7c:74:4d:39:41:54:83:06:a1:4d:b6:21:32:2d:ac: ce:45:e3:96:22:b9:5a:0e:f6:11:be:55:a9:6d:67:f0:be:1f: 14:d7:c4:8a:4b:c2:2c:5d:6f:99:36:c3:7f:30:1d:90:14:cd: 88:4b:51:5e:f1:fb:9f:c3:55:6f:a6:85:8b:22:0a:12:8e:60: 39:70:df:6e:e7:e4:7c:c8:35:72:28:50:a6:a5:11:24:15:cd: 47:4d:0b:bb:ec:a9:d3:8e:94:f9:21:3b:64:d3:7b:dc:04:36: 1b:e4:34:3f:88:f9:78:ee:6b:c8:32:25:b4:eb:26:7f:9a:91: f1:6a:f1:e7:27:24:1d:2e:bc:c1:07:2c:68:6a:6a:f5:82:f2: 72:0c:9e:89:f9:4b:d9:df:13:9b:f0:66:75:64:bd:9d:c8:96: 9d:84:f8:91:9d:2f:2b:05:ec:34:5f:46:69:e7:15:57:72:63: e3:29:09:78:fd:5f:83:2d:90:13:ac:69:1c:22:03:cf:33:84: 00:0e:82:81:5b:e3:95:d3:a8:f6:05:2c:2e:67:54:f5:8e:b5: 5e:9b:12:cc:0f:04:b6:23:be:09:dc:0e:28:7e:a1:15:d8:2d: 7e:96:43:89:21:dc:05:d6:70:c6:34:51:de:46:ee:dc:e8:89: c1:01:87:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lnoDwlc+kQHMnFDZ5LzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmJhNzg2N2E1M2I2YmQ3OTBkZWEyMjAzYTM3MWNlZDZjNmUzYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35106xOvVw6+rItHd97/Fn57hGNj dH77akWPqP9j147xFUiX35GqYYnzZwRIixRfIYaY+4QBOzY2nT8TMOhTIVwOZ8Bn VZP9cQwMCH/7SFlpy8cG0Ih2+KhLKcovAepFXLdATRBfh6lV95Wonl5wzqcocnL4 ZMych7mLmhzYHJ74N75U6i/9TdYKn36cNdeCsqt5qdTOordnHrBONmJNcWB5jHWn pahwNMp7guFed4zjrb/Ri0YncE0BhleD+Iej8VkaewzeQR9YNF3ItGphPXaYkmhz yboXc0oQoLakHbq8uSRfZCgblZSR9Oub//+XElfo1F90f0P8v+4qfJWQFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJa6eGelO2vXkN6iIDo3HO1sbjoyMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvbHJwNFo2VTdhOWVRM3FJZ09qY2M3V3h1T2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VGMA0G CSqGSIb3DQEBCwUAA4IBAQBC0d18dE05QVSDBqFNtiEyLazOReOWIrlaDvYRvlWp bWfwvh8U18SKS8IsXW+ZNsN/MB2QFM2IS1Fe8fufw1VvpoWLIgoSjmA5cN9u5+R8 yDVyKFCmpREkFc1HTQu77KnTjpT5ITtk03vcBDYb5DQ/iPl47mvIMiW06yZ/mpHx avHnJyQdLrzBByxoamr1gvJyDJ6J+UvZ3xOb8GZ1ZL2dyJadhPiRnS8rBew0X0Zp 5xVXcmPjKQl4/V+DLZATrGkcIgPPM4QADoKBW+OV06j2BSwuZ1T1jrVemxLMDwS2 I74J3A4ofqEV2C1+lkOJIdwF1nDGNFHeRu7c6InBAYdz -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:32 2026 by rpki-client