This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/z1S1Iyff6u6IjQBpbNT6cs_pMy4.roa File: z1S1Iyff6u6IjQBpbNT6cs_pMy4.roa (raw, json) Hash identifier: YZW230yytdanLzRoM4lwKL5HoNc+e/nsAUuZ51WTbAM= Subject key identifier: CF:54:B5:23:27:DF:EA:EE:88:8D:00:69:6C:D4:FA:72:CF:E9:33:2E Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A90B7373DF8F447EE19E4A43C35C6D9BF Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/z1S1Iyff6u6IjQBpbNT6cs_pMy4.roa Signing time: Mon 17 Nov 2025 07:28:37 +0000 ROA not before: Mon 17 Nov 2025 07:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137517 IP address blocks: 87.229.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:b7:37:3d:f8:f4:47:ee:19:e4:a4:3c:35:c6:d9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 17 07:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf54b52327dfeaee888d00696cd4fa72cfe9332e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:87:28:1c:03:03:45:bb:4d:21:84:d7:c4: ae:d8:34:f2:4e:13:72:33:18:84:d2:a1:78:f3:f9: e1:b0:9d:18:de:79:79:aa:9a:39:ae:e7:fc:72:9a: b4:0b:7c:45:95:c1:22:c4:00:5d:f0:b9:da:8d:81: 14:14:84:95:d8:6d:cf:54:12:45:b1:e7:82:2a:fe: af:55:e2:4d:6c:16:98:13:20:6a:92:8c:9b:c8:b8: 22:12:8a:12:73:5b:d5:85:6d:41:f3:3a:a8:90:17: 76:3f:37:07:ae:89:d0:98:6c:3f:b8:a5:66:e8:4f: 4a:ab:8e:ff:4b:46:e0:1b:29:26:9b:23:dc:b7:b1: 9d:46:31:7c:8b:d8:35:77:d6:63:1b:94:96:40:29: 62:4e:9c:ec:ca:60:2e:a7:d0:97:83:28:19:bd:d3: 99:84:46:32:e8:c9:9b:0d:ba:04:d8:e2:67:4c:3f: bd:ae:5a:82:a3:80:fe:6e:b7:5e:58:e5:f1:61:fd: 00:e6:45:a0:a6:16:80:aa:d7:df:61:45:87:ba:ef: 5e:cc:0a:11:47:f7:59:9b:a2:db:d6:08:4d:5f:a2: 9b:b0:ed:3c:b5:49:65:c5:37:82:74:6c:0a:70:ef: 1b:a8:44:87:f3:42:bc:48:4d:53:ba:f3:a7:2d:40: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:54:B5:23:27:DF:EA:EE:88:8D:00:69:6C:D4:FA:72:CF:E9:33:2E X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/z1S1Iyff6u6IjQBpbNT6cs_pMy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.81.0/24 Signature Algorithm: sha256WithRSAEncryption 00:16:da:a8:93:8a:15:86:4e:7b:ce:70:2c:ea:60:04:16:5d: f9:c1:ed:6e:91:85:c2:df:65:fd:a9:1c:75:1b:c3:66:05:43: 9e:3d:13:18:8b:96:80:c0:ed:78:b3:46:04:c0:d5:79:9e:27: 0d:c0:f7:d1:b8:3e:e4:24:3e:a6:04:9c:f8:56:40:59:1e:3b: a5:db:d1:dc:af:11:04:46:22:fc:19:fc:f6:14:6c:cd:ab:84: f3:4b:47:5c:4f:c2:65:5c:64:42:03:b0:c0:38:f3:0d:12:93: be:d0:f5:b4:2d:fc:09:ba:ba:e4:cc:be:3c:b7:7a:32:75:28: 6e:50:b8:5b:05:a2:a2:96:e1:01:fc:bf:43:cf:49:0e:34:59: a0:1e:83:89:81:a8:28:ef:bf:ea:ca:96:13:de:62:e4:82:d0: fd:a2:12:40:18:51:46:b3:87:a3:f4:65:a1:dd:66:c9:f8:8f: ec:b9:6f:55:0a:b8:35:72:09:a1:4f:3c:5a:b6:7c:bd:ea:a6: 85:fb:58:e9:9f:c6:7b:10:f3:0d:70:7b:3b:90:9d:c3:bf:6e: 1f:d2:ba:f4:c1:f6:62:91:5c:76:a4:f8:c2:68:7d:69:77:21: 9a:c7:ce:4b:b6:04:5c:49:21:17:ff:2f:a6:e7:d3:e8:cb:f5: 32:7b:5f:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqQtzc9+PRH7hnkpDw1xtm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTE3MDcyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjU0YjUyMzI3ZGZlYWVlODg4ZDAwNjk2Y2Q0ZmE3MmNmZTkzMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQqHKBwDA0W7TSGE18Su2DTyThNy MxiE0qF48/nhsJ0Y3nl5qpo5ruf8cpq0C3xFlcEixABd8LnajYEUFISV2G3PVBJF seeCKv6vVeJNbBaYEyBqkoybyLgiEooSc1vVhW1B8zqokBd2PzcHronQmGw/uKVm 6E9Kq47/S0bgGykmmyPct7GdRjF8i9g1d9ZjG5SWQCliTpzsymAup9CXgygZvdOZ hEYy6MmbDboE2OJnTD+9rlqCo4D+brdeWOXxYf0A5kWgphaAqtffYUWHuu9ezAoR R/dZm6Lb1ghNX6KbsO08tUllxTeCdGwKcO8bqESH80K8SE1TuvOnLUDvWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM9UtSMn3+ruiI0AaWzU+nLP6TMuMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvejFTMUl5ZmY2dTZJalFCcGJOVDZjc19wTXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VRMA0G CSqGSIb3DQEBCwUAA4IBAQAAFtqok4oVhk57znAs6mAEFl35we1ukYXC32X9qRx1 G8NmBUOePRMYi5aAwO14s0YEwNV5nicNwPfRuD7kJD6mBJz4VkBZHjul29HcrxEE RiL8Gfz2FGzNq4TzS0dcT8JlXGRCA7DAOPMNEpO+0PW0LfwJurrkzL48t3oydShu ULhbBaKiluEB/L9Dz0kONFmgHoOJgago77/qypYT3mLkgtD9ohJAGFFGs4ej9GWh 3WbJ+I/suW9VCrg1cgmhTzxatny96qaF+1jpn8Z7EPMNcHs7kJ3Dv24f0rr0wfZi kVx2pPjCaH1pdyGax85LtgRcSSEX/y+m59Poy/Uye1+r -----END CERTIFICATE-----Generated at Fri Dec 5 15:39:02 2025 by rpki-client