This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uZdMSfAlYB49vopgnhcXdwbDJfQ.roa File: uZdMSfAlYB49vopgnhcXdwbDJfQ.roa (raw, json) Hash identifier: 6mYzqRwi7Qio8x+pbMohoSPv8YGZxy85pNBCwPhxmF4= Subject key identifier: B9:97:4C:49:F0:25:60:1E:3D:BE:8A:60:9E:17:17:77:06:C3:25:F4 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A6814FEF0F14F8C754ADA587128B7CA10 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uZdMSfAlYB49vopgnhcXdwbDJfQ.roa Signing time: Sun 09 Nov 2025 10:06:37 +0000 ROA not before: Sun 09 Nov 2025 10:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 79.172.193.0/24 maxlen: 24 87.229.11.0/24 maxlen: 24 87.229.23.0/24 maxlen: 24 87.229.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:68:14:fe:f0:f1:4f:8c:75:4a:da:58:71:28:b7:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 9 10:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9974c49f025601e3dbe8a609e17177706c325f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:14:21:5e:7f:4c:d5:7e:ff:a4:ce:56:8c:11: ea:1e:94:d6:09:5a:5a:21:fc:29:1d:84:49:b6:14: 6e:46:fe:b4:e0:51:03:3b:c1:db:c1:57:4e:b1:32: e6:57:48:5e:cc:5a:d5:89:ab:3c:80:9f:1b:5f:10: ab:09:6c:cc:ad:d5:6d:bb:40:6d:b5:82:61:c4:63: ab:67:6a:67:9f:ba:4e:a9:97:84:b5:e2:5b:c6:4e: 6b:21:d6:1a:e2:73:70:af:23:f8:1b:4f:d2:8c:d1: 72:63:1e:a6:01:6f:a4:f2:29:db:eb:98:0f:2c:f1: fe:19:43:08:78:bd:bd:96:12:58:28:0a:42:cf:4e: d0:d0:16:e8:6e:7e:d6:ec:24:78:88:34:30:1d:c5: 84:b9:1c:49:f3:82:0c:f8:4a:22:af:c7:39:7c:d6: a9:91:06:58:1f:cd:24:cc:aa:8b:21:c3:2e:b5:24: 40:c8:df:30:fa:3c:09:59:06:1c:5a:ba:d5:ff:3b: 7f:93:77:02:98:47:cf:5e:55:c9:86:ad:a5:8e:1f: be:2e:11:b8:8a:59:3b:7d:dd:58:d1:f4:65:77:08: 7c:a0:f5:b5:41:b7:af:d4:c7:0c:db:7a:55:41:1f: 38:a1:3c:10:7e:31:0b:4e:8d:2e:2d:cd:36:21:6e: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:97:4C:49:F0:25:60:1E:3D:BE:8A:60:9E:17:17:77:06:C3:25:F4 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uZdMSfAlYB49vopgnhcXdwbDJfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.193.0/24 87.229.11.0/24 87.229.23.0/24 87.229.37.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:56:67:3e:02:d1:7d:44:24:a8:10:e0:cd:d1:a6:94:87:2d: c7:74:36:15:09:fe:a5:8d:7a:84:e7:06:b8:a7:e3:58:47:17: 50:ee:f5:08:a3:05:b3:c8:94:d9:c0:2f:da:79:f3:53:db:83: fd:ef:5e:92:5a:47:39:11:c1:d3:c7:1a:2c:35:e6:c1:a2:ca: 01:d8:ee:44:68:c4:66:c5:86:90:12:bd:eb:40:5e:81:f1:e2: 01:16:bf:7c:4d:f4:9a:6b:dc:6c:1b:5c:1d:cc:5e:66:72:2b: fd:d4:c6:b6:18:a2:98:77:ab:e2:2c:a7:9b:0f:da:ec:9d:50: 3b:78:28:82:a4:5f:07:f4:72:d9:3d:80:81:52:c2:1e:72:12: 8e:5f:df:71:c5:de:3d:6f:dc:45:b8:a0:44:d2:71:27:e1:27: 09:51:99:2c:11:57:a9:11:7a:cf:18:e3:ba:c0:b4:bf:86:1b: 17:9c:38:84:1b:a4:e5:9a:a4:e4:13:97:1a:e7:6d:0a:12:87: 03:ce:40:d6:90:dd:b5:7e:f3:06:45:82:e0:97:75:de:05:bf: b6:a7:d3:59:10:e0:00:e9:1d:e1:18:c6:6c:ac:4d:1b:d1:08: 2b:88:34:9e:18:5e:24:06:95:68:12:b2:b9:e8:3d:65:d0:a4: ac:98:5a:43 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpoFP7w8U+MdUraWHEot8oQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTA5MTAwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTk3NGM0OWYwMjU2MDFlM2RiZThhNjA5ZTE3MTc3NzA2YzMyNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohQhXn9M1X7/pM5WjBHqHpTWCVpa IfwpHYRJthRuRv604FEDO8HbwVdOsTLmV0hezFrVias8gJ8bXxCrCWzMrdVtu0Bt tYJhxGOrZ2pnn7pOqZeEteJbxk5rIdYa4nNwryP4G0/SjNFyYx6mAW+k8inb65gP LPH+GUMIeL29lhJYKApCz07Q0Bbobn7W7CR4iDQwHcWEuRxJ84IM+Eoir8c5fNap kQZYH80kzKqLIcMutSRAyN8w+jwJWQYcWrrV/zt/k3cCmEfPXlXJhq2ljh++LhG4 ilk7fd1Y0fRldwh8oPW1Qbev1McM23pVQR84oTwQfjELTo0uLc02IW5MZQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLmXTEnwJWAePb6KYJ4XF3cGwyX0MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvdVpkTVNmQWxZQjQ5dm9wZ25oY1hkd2JESmZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT6zBAwQA V+ULAwQAV+UXAwQAV+UlMA0GCSqGSIb3DQEBCwUAA4IBAQCNVmc+AtF9RCSoEODN 0aaUhy3HdDYVCf6ljXqE5wa4p+NYRxdQ7vUIowWzyJTZwC/aefNT24P9716SWkc5 EcHTxxosNebBosoB2O5EaMRmxYaQEr3rQF6B8eIBFr98TfSaa9xsG1wdzF5mciv9 1Ma2GKKYd6viLKebD9rsnVA7eCiCpF8H9HLZPYCBUsIechKOX99xxd49b9xFuKBE 0nEn4ScJUZksEVepEXrPGOO6wLS/hhsXnDiEG6TlmqTkE5ca520KEocDzkDWkN21 fvMGRYLgl3XeBb+2p9NZEOAA6R3hGMZsrE0b0QgriDSeGF4kBpVoErK56D1l0KSs mFpD -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:30 2025 by rpki-client