This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sYpCWYEGHBpPol8xs5yUhVl8QI0.roa
File: sYpCWYEGHBpPol8xs5yUhVl8QI0.roa (raw, json)
Hash identifier: W4JWhEpgOclBlVstX4fS+F/OWeHUKAV9srk4Q1R7yOg=
Subject key identifier: B1:8A:42:59:81:06:1C:1A:4F:A2:5F:31:B3:9C:94:85:59:7C:40:8D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019BB13E6372526403A002F5E4C252C03CD7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sYpCWYEGHBpPol8xs5yUhVl8QI0.roa
Signing time: Mon 12 Jan 2026 08:06:54 +0000
ROA not before: Mon 12 Jan 2026 08:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 984
IP address blocks: 87.229.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b1:3e:63:72:52:64:03:a0:02:f5:e4:c2:52:c0:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 12 08:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b18a425981061c1a4fa25f31b39c9485597c408d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:d5:1e:fc:d1:ab:93:c8:97:a8:81:b6:f8:
49:4a:b1:ad:44:fb:02:69:61:47:dc:8c:fc:9a:58:
c6:30:cf:20:e8:bc:09:42:24:0a:a5:c0:3c:3a:bb:
67:dd:0a:c4:16:52:66:5a:d5:98:88:9a:24:d3:1d:
42:ae:92:28:70:5a:69:78:1b:87:a9:63:ff:da:66:
b5:86:b1:da:2b:fb:ad:b4:d2:0a:ab:5d:fc:76:31:
73:a9:d1:46:70:90:89:20:5e:f5:0e:56:ee:5c:a2:
d9:08:51:7a:f0:57:85:53:c0:f9:1e:39:3d:f7:8e:
3d:99:7e:43:dd:e2:de:10:11:29:6f:a3:6a:1e:31:
fe:aa:f9:70:b8:40:1a:14:d6:47:2b:52:10:e6:f0:
5b:69:96:2a:05:9f:50:99:cb:3b:3b:fc:ab:79:3e:
63:c8:37:ee:fa:8e:49:90:19:a2:0e:23:4b:d2:25:
04:58:dd:74:59:61:ee:9c:ea:aa:74:08:a7:a9:90:
92:90:fc:1f:ce:e7:b4:b2:29:0e:60:4c:68:d3:64:
44:f5:64:91:80:d5:7a:17:ae:60:a4:e3:8b:be:b5:
52:07:aa:ec:ca:95:8c:78:34:90:3d:a7:6b:48:b0:
80:e2:53:9e:e3:33:c0:77:f8:45:68:d9:9c:4e:3e:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8A:42:59:81:06:1C:1A:4F:A2:5F:31:B3:9C:94:85:59:7C:40:8D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sYpCWYEGHBpPol8xs5yUhVl8QI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:81:29:c1:ac:be:74:b0:c0:b5:de:b5:42:f8:ff:a0:e1:38:
15:83:24:18:80:7f:a1:64:b5:4d:99:e9:0b:c4:e7:0b:3e:c2:
ee:f7:c1:2b:73:7c:81:4a:2e:ef:f6:28:b7:d9:9d:8c:01:19:
17:bc:3b:a5:30:6f:29:6f:0e:b6:fc:3e:86:0b:62:f2:81:d9:
ef:11:8e:52:aa:b0:eb:89:e1:22:19:83:2b:e3:1f:c8:b6:80:
2c:12:ca:59:a5:dc:67:87:bf:9f:5c:8b:82:7a:68:fd:09:07:
ed:4c:0c:e1:4a:ae:e0:6c:7d:58:10:eb:ed:01:c0:a8:0a:9a:
0d:80:74:05:d6:97:b8:70:73:54:3b:92:08:fc:db:56:ca:df:
e2:0b:c9:94:9e:68:aa:d7:ba:e8:db:b9:7a:4f:99:75:08:66:
0b:05:19:f4:60:fd:71:c1:fd:6c:d1:a1:11:9f:e0:f5:f4:d9:
49:4b:80:bc:0c:3f:3d:ec:8d:d9:fb:c3:2a:ce:2e:eb:17:7c:
69:2c:eb:4a:b9:de:09:de:28:5d:20:00:a6:f5:ab:f1:39:bf:
26:1b:43:c7:70:ab:a8:9b:56:1f:90:6b:61:b2:66:77:ae:50:
cb:52:96:a0:04:8a:56:43:7a:c0:35:90:c9:f0:91:2b:a2:6b:
eb:af:c7:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZuxPmNyUmQDoAL15MJSwDzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwMTEyMDgwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMThhNDI1OTgxMDYxYzFhNGZhMjVmMzFiMzljOTQ4NTU5N2M0MDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwDVHvzRq5PIl6iBtvhJSrGtRPsC
aWFH3Iz8mljGMM8g6LwJQiQKpcA8Ortn3QrEFlJmWtWYiJok0x1CrpIocFppeBuH
qWP/2ma1hrHaK/uttNIKq138djFzqdFGcJCJIF71DlbuXKLZCFF68FeFU8D5Hjk9
9449mX5D3eLeEBEpb6NqHjH+qvlwuEAaFNZHK1IQ5vBbaZYqBZ9Qmcs7O/yreT5j
yDfu+o5JkBmiDiNL0iUEWN10WWHunOqqdAinqZCSkPwfzue0sikOYExo02RE9WSR
gNV6F65gpOOLvrVSB6rsypWMeDSQPadrSLCA4lOe4zPAd/hFaNmcTj7kAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGKQlmBBhwaT6JfMbOclIVZfECNMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvc1lwQ1dZRUdIQnBQb2w4eHM1eVVoVmw4UUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UoMA0G
CSqGSIb3DQEBCwUAA4IBAQBbgSnBrL50sMC13rVC+P+g4TgVgyQYgH+hZLVNmekL
xOcLPsLu98Erc3yBSi7v9ii32Z2MARkXvDulMG8pbw62/D6GC2LygdnvEY5SqrDr
ieEiGYMr4x/ItoAsEspZpdxnh7+fXIuCemj9CQftTAzhSq7gbH1YEOvtAcCoCpoN
gHQF1pe4cHNUO5II/NtWyt/iC8mUnmiq17ro27l6T5l1CGYLBRn0YP1xwf1s0aER
n+D19NlJS4C8DD897I3Z+8Mqzi7rF3xpLOtKud4J3ihdIACm9avxOb8mG0PHcKuo
m1YfkGthsmZ3rlDLUpagBIpWQ3rANZDJ8JEromvrr8ff
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:28:06 2026 by rpki-client