This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/t-21Djsf8AaYm5PQk-9j--P3868.roa File: t-21Djsf8AaYm5PQk-9j--P3868.roa (raw, json) Hash identifier: T+imbZIr9nR1mxOIg4UJYABZcBc2fodzG1ExGns/7Sw= Subject key identifier: B7:ED:B5:0E:3B:1F:F0:06:98:9B:93:D0:93:EF:63:FB:E3:F7:F3:AF Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019AD97277084626B972237F2BF0DF5D1812 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/t-21Djsf8AaYm5PQk-9j--P3868.roa Signing time: Mon 01 Dec 2025 10:25:48 +0000 ROA not before: Mon 01 Dec 2025 10:25:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 79.172.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:72:77:08:46:26:b9:72:23:7f:2b:f0:df:5d:18:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 1 10:25:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b7edb50e3b1ff006989b93d093ef63fbe3f7f3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:6e:f8:6e:9a:01:28:2d:cd:dd:da:ee:37: f6:a9:de:74:a8:80:c9:ae:0e:f4:ca:80:12:14:12: 94:f8:12:fd:f3:d2:0b:a9:c4:b1:c9:fe:18:f7:59: 46:d9:d5:8b:44:62:8b:e7:b6:26:7d:54:ae:0a:9f: b7:8c:97:af:d3:92:54:37:24:72:da:c9:1b:ec:ee: 71:60:ed:4c:fd:ef:2f:23:22:0c:f7:8a:4e:0e:e5: f0:37:c4:d8:a3:ee:ad:5d:7c:c4:88:28:03:36:0c: 72:55:e1:ee:80:65:87:14:2d:35:5e:3e:c7:5a:2d: 0d:3a:56:47:f5:9f:17:03:84:21:b4:f2:6a:2c:7d: 93:56:7c:e8:80:1a:64:9b:00:f1:cc:c6:7a:58:28: a8:09:71:e7:0c:0e:ca:8d:45:58:89:13:87:ed:19: 7c:b4:bb:78:69:85:fa:59:e3:c3:15:eb:d3:13:75: 55:65:73:ac:91:56:5d:e8:12:87:8e:0f:0e:6d:a7: 9a:36:22:ab:8e:e4:f7:58:88:28:91:ce:b6:11:e6: e4:d5:e1:db:94:c3:58:da:0f:d9:31:e0:73:69:c7: 6c:61:a3:b2:58:c7:b6:fa:e1:93:3a:08:fd:3e:d3: 3a:14:36:30:b2:6f:44:4f:82:50:1c:39:26:04:7c: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:B5:0E:3B:1F:F0:06:98:9B:93:D0:93:EF:63:FB:E3:F7:F3:AF X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/t-21Djsf8AaYm5PQk-9j--P3868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.242.0/24 Signature Algorithm: sha256WithRSAEncryption 28:b6:5e:05:cd:20:9e:a3:fc:0d:25:6e:d8:79:d9:41:4d:a4: 73:0d:3d:c9:6a:9c:65:65:63:48:8c:76:c7:40:9e:5a:df:3a: d3:b4:79:fd:2c:fd:fd:f6:d3:0a:84:97:22:33:2f:4c:14:70: 3f:2f:61:10:fe:0e:ec:70:b8:4f:c0:20:76:7b:06:52:c4:0a: cc:9a:2f:44:ba:31:9f:2c:bd:3f:f4:d2:25:e9:ab:31:98:a3: ea:bf:1c:dc:f6:31:ec:53:49:d7:9b:9f:ca:99:84:25:ed:f4: da:ce:0d:f6:97:4c:a9:75:74:61:b9:ff:58:de:fd:ce:58:01: cf:7f:0b:77:8b:e2:b4:26:ba:27:ab:b6:73:7d:d2:b8:e2:fa: e6:f4:0f:9f:24:c1:a5:59:43:53:36:8e:81:dd:f3:07:86:9b: 7b:c2:e8:8c:a8:e7:08:f7:1a:d3:8d:3d:f4:18:9f:7b:27:51: 82:63:b8:66:6f:3f:a9:58:0b:69:3b:58:c1:0f:20:b3:24:a9: 3c:a3:72:2f:6f:e1:4f:5c:cf:f8:b0:6b:76:76:28:39:45:0d: e5:cf:92:d2:96:49:fc:8c:11:a0:63:86:c1:6d:27:fe:70:87: 30:92:6e:dc:61:29:df:7d:e8:df:12:5c:c3:2b:a7:c4:6b:b8: 43:1d:59:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZcncIRia5ciN/K/DfXRgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjAxMTAyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2VkYjUwZTNiMWZmMDA2OTg5YjkzZDA5M2VmNjNmYmUzZjdmM2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmRu+G6aASgtzd3a7jf2qd50qIDJ rg70yoASFBKU+BL989ILqcSxyf4Y91lG2dWLRGKL57YmfVSuCp+3jJev05JUNyRy 2skb7O5xYO1M/e8vIyIM94pODuXwN8TYo+6tXXzEiCgDNgxyVeHugGWHFC01Xj7H Wi0NOlZH9Z8XA4QhtPJqLH2TVnzogBpkmwDxzMZ6WCioCXHnDA7KjUVYiROH7Rl8 tLt4aYX6WePDFevTE3VVZXOskVZd6BKHjg8ObaeaNiKrjuT3WIgokc62Eebk1eHb lMNY2g/ZMeBzacdsYaOyWMe2+uGTOgj9PtM6FDYwsm9ET4JQHDkmBHydcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfttQ47H/AGmJuT0JPvY/vj9/OvMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvdC0yMURqc2Y4QWFZbTVQUWstOWotLVAzODY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zyMA0G CSqGSIb3DQEBCwUAA4IBAQAotl4FzSCeo/wNJW7YedlBTaRzDT3JapxlZWNIjHbH QJ5a3zrTtHn9LP399tMKhJciMy9MFHA/L2EQ/g7scLhPwCB2ewZSxArMmi9EujGf LL0/9NIl6asxmKPqvxzc9jHsU0nXm5/KmYQl7fTazg32l0ypdXRhuf9Y3v3OWAHP fwt3i+K0Jronq7ZzfdK44vrm9A+fJMGlWUNTNo6B3fMHhpt7wuiMqOcI9xrTjT30 GJ97J1GCY7hmbz+pWAtpO1jBDyCzJKk8o3Ivb+FPXM/4sGt2dig5RQ3lz5LSlkn8 jBGgY4bBbSf+cIcwkm7cYSnffejfElzDK6fEa7hDHVmq -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:10 2025 by rpki-client