This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qEt8hvE-TTx6np_tZzHOXiWxmzY.roa File: qEt8hvE-TTx6np_tZzHOXiWxmzY.roa (raw, json) Hash identifier: MlMq/CwsUz2RwWvaJsW0RLw7A1ZBegAtaHrbDqd7+Es= Subject key identifier: A8:4B:7C:86:F1:3E:4D:3C:7A:9E:9F:ED:67:31:CE:5E:25:B1:9B:36 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B2B925944255735BC348399CA251574F4 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qEt8hvE-TTx6np_tZzHOXiWxmzY.roa Signing time: Wed 17 Dec 2025 09:09:30 +0000 ROA not before: Wed 17 Dec 2025 09:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 79.172.193.0/24 maxlen: 24 79.172.200.0/23 maxlen: 24 79.172.250.0/23 maxlen: 24 87.229.8.0/22 maxlen: 22 87.229.11.0/24 maxlen: 24 87.229.12.0/24 maxlen: 24 87.229.37.0/24 maxlen: 24 87.229.80.0/23 maxlen: 24 87.229.81.0/24 maxlen: 24 87.229.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:92:59:44:25:57:35:bc:34:83:99:ca:25:15:74:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 17 09:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a84b7c86f13e4d3c7a9e9fed6731ce5e25b19b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8a:ac:cf:68:70:f6:22:aa:b1:5e:68:1b:48: f8:fe:37:3a:9e:9d:6a:a6:76:49:db:cc:da:03:6f: 62:e7:54:f3:96:48:ae:43:20:9e:55:42:fb:3f:01: 5a:e2:1a:46:ee:9e:05:93:d8:a5:05:07:64:6b:8e: e5:1b:10:ed:2a:a0:f0:0f:65:43:f2:97:55:55:93: 39:6b:44:6e:80:26:01:24:e8:ef:a3:ac:af:b1:3c: 69:c2:21:0b:d6:e4:59:6d:00:d3:5e:fc:fe:e6:1a: 6d:65:23:63:f0:4e:0f:4b:9d:bc:72:e2:43:c5:7b: 86:9a:8f:30:4d:eb:0b:33:22:60:17:0d:0a:c7:5f: 5b:a6:57:6f:2a:2c:f1:a5:e0:4a:49:a0:1a:2e:01: e7:fb:7f:f8:9a:08:04:94:05:bf:e5:1c:1b:56:41: 90:20:60:27:0e:31:33:65:ce:d8:ca:eb:1d:8f:88: 89:d0:59:6f:49:f6:9e:7d:ff:5f:3b:17:ee:52:df: be:b5:31:56:e5:a0:02:f7:3f:17:34:50:e1:8f:f4: 28:dc:1e:b0:5b:c1:d6:01:46:3d:3c:34:14:95:d3: 47:b1:1a:0d:7a:bb:1a:05:d5:ae:d1:6e:8d:21:9c: f3:9d:44:78:b2:31:f5:4e:80:53:b0:26:1a:b4:d3: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4B:7C:86:F1:3E:4D:3C:7A:9E:9F:ED:67:31:CE:5E:25:B1:9B:36 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qEt8hvE-TTx6np_tZzHOXiWxmzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.193.0/24 79.172.200.0/23 79.172.250.0/23 87.229.8.0-87.229.12.255 87.229.37.0/24 87.229.80.0/23 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 79:41:b4:41:93:be:87:db:d7:e4:a7:e3:be:ed:71:e7:b6:45: b9:2d:c8:ac:b6:e5:51:90:8e:48:1a:32:f3:a3:12:10:03:61: 5a:3f:a8:5c:aa:43:18:7a:72:4b:89:6d:f5:15:51:41:7a:e7: 79:69:e7:7b:b6:b2:7c:d1:fd:e5:a9:c9:cd:41:9f:08:ea:af: e0:57:19:f9:49:f8:42:ba:74:84:9a:05:50:fa:cf:27:23:5e: dc:54:85:da:dc:4a:7c:8e:9b:7b:09:27:5a:fe:fe:ca:37:d6: 21:74:34:9d:05:9e:c4:55:ea:9e:6c:e2:08:9f:02:21:73:5c: 29:33:f2:97:42:0c:74:a1:37:98:aa:25:c1:49:78:b5:f9:a5: c2:a6:18:cf:61:f9:0e:cc:2d:ac:56:f8:71:d4:f0:4c:fe:cc: 3d:74:a1:00:b3:66:ef:b4:af:c0:2c:ba:78:16:38:e5:e8:17: fb:cd:86:0f:83:b4:19:36:02:01:40:59:73:4d:14:54:cf:ff: ed:3d:b6:e6:cb:6e:ec:74:51:00:c6:b0:1d:3c:75:72:24:5b: f3:d9:37:ec:6a:21:3b:9b:2b:59:9a:90:3d:3d:5b:61:cf:9f: f9:67:b1:6b:49:ca:2a:c9:42:a7:23:4c:9a:5a:67:21:26:11: 2e:55:85:17 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZsrkllEJVc1vDSDmcolFXT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjE3MDkwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODRiN2M4NmYxM2U0ZDNjN2E5ZTlmZWQ2NzMxY2U1ZTI1YjE5YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54qsz2hw9iKqsV5oG0j4/jc6np1q pnZJ28zaA29i51TzlkiuQyCeVUL7PwFa4hpG7p4Fk9ilBQdka47lGxDtKqDwD2VD 8pdVVZM5a0RugCYBJOjvo6yvsTxpwiEL1uRZbQDTXvz+5hptZSNj8E4PS528cuJD xXuGmo8wTesLMyJgFw0Kx19bpldvKizxpeBKSaAaLgHn+3/4mggElAW/5RwbVkGQ IGAnDjEzZc7Yyusdj4iJ0FlvSfaeff9fOxfuUt++tTFW5aAC9z8XNFDhj/Qo3B6w W8HWAUY9PDQUldNHsRoNersaBdWu0W6NIZzznUR4sjH1ToBTsCYatNPXFwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFKhLfIbxPk08ep6f7Wcxzl4lsZs2MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvcUV0OGh2RS1UVHg2bnBfdFp6SE9YaVd4bXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAT6zBAwQB T6zIAwQBT6z6MAwDBANX5QgDBABX5QwDBABX5SUDBAFX5VADBAFX5XwwDQYJKoZI hvcNAQELBQADggEBAHlBtEGTvofb1+Sn477tcee2RbktyKy25VGQjkgaMvOjEhAD YVo/qFyqQxh6ckuJbfUVUUF653lp53u2snzR/eWpyc1Bnwjqr+BXGflJ+EK6dISa BVD6zycjXtxUhdrcSnyOm3sJJ1r+/so31iF0NJ0FnsRV6p5s4gifAiFzXCkz8pdC DHShN5iqJcFJeLX5pcKmGM9h+Q7MLaxW+HHU8Ez+zD10oQCzZu+0r8AsungWOOXo F/vNhg+DtBk2AgFAWXNNFFTP/+09tubLbux0UQDGsB08dXIkW/PZN+xqITubK1ma kD09W2HPn/lnsWtJyirJQqcjTJpaZyEmES5VhRc= -----END CERTIFICATE-----Generated at Thu Dec 18 20:01:17 2025 by rpki-client