This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/Di79UbTmbpFxSYwbXsMn-pZLrV8.roa File: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (raw, json) Hash identifier: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08= Subject key identifier: 0E:2E:FD:51:B4:E6:6E:91:71:49:8C:1B:5E:C3:27:FA:96:4B:AD:5F Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Certificate serial: 019B7F13D030F576E42B5D974FA8A8B6414B Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/Di79UbTmbpFxSYwbXsMn-pZLrV8.roa Signing time: Fri 02 Jan 2026 14:19:23 +0000 ROA not before: Fri 02 Jan 2026 14:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17802 IP address blocks: 87.236.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d0:30:f5:76:e4:2b:5d:97:4f:a8:a8:b6:41:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Validity Not Before: Jan 2 14:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e2efd51b4e66e9171498c1b5ec327fa964bad5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:54:8e:99:58:29:02:00:20:08:c8:72:b8: 84:ff:2e:47:48:c2:78:3d:55:24:b9:76:91:ed:0c: 4e:56:44:45:0e:de:c6:0d:f5:2f:17:0f:e4:bf:26: 4a:bf:e6:60:96:8c:51:75:dc:83:aa:99:35:0f:f7: 82:ee:3b:b7:68:6d:05:35:b8:86:9f:be:86:96:1b: 81:c9:c4:6f:cf:46:14:bf:17:04:d1:b3:16:13:57: b9:2f:1f:f8:c6:10:e2:f1:00:c0:69:fd:3b:02:2a: 4e:ad:3a:4a:df:92:a2:d3:3c:74:f0:91:d4:d9:e6: ad:29:4d:f8:1a:83:c6:76:3e:40:a8:10:6b:ed:e9: 3c:93:f5:d5:a2:18:6d:c7:b4:63:52:6f:11:20:80: 08:ba:99:e6:13:d3:47:d4:2a:a1:58:93:5e:82:ee: 09:c8:5f:d3:05:ab:4d:dd:f3:f9:dd:94:5e:14:8c: e7:2a:cf:01:d7:b4:62:4c:32:fd:19:72:7a:8b:cb: e2:ef:92:fb:f4:38:d2:41:e6:e7:06:d1:1d:16:2f: 40:67:d6:d4:78:81:8f:3a:e6:d9:28:77:09:1b:dc: ae:93:a8:82:40:b8:d3:a7:7f:95:19:71:34:b5:eb: 05:f3:94:84:6b:16:5f:5f:51:58:34:79:4a:14:29: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:FD:51:B4:E6:6E:91:71:49:8C:1B:5E:C3:27:FA:96:4B:AD:5F X509v3 Authority Key Identifier: keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/Di79UbTmbpFxSYwbXsMn-pZLrV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.67.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:43:53:46:02:f2:13:d2:2a:dc:b8:63:36:bb:7a:a5:02:53: 4a:02:d3:fb:3f:37:01:fd:40:cb:6c:be:da:08:e3:00:62:18: b8:b1:29:2c:97:ea:0e:14:a7:0d:96:70:ea:3f:db:da:93:17: 86:09:26:3a:a7:a8:a7:47:ce:1e:86:74:05:73:5e:f0:35:1c: b5:19:5c:bf:07:f1:0e:a0:06:1e:03:1c:95:32:2f:e3:ec:2f: 80:8e:72:95:91:ac:a9:07:f4:a5:60:27:15:b7:82:c7:2e:3a: af:f8:ca:4d:1c:24:4b:d6:05:fa:fd:56:d7:63:48:39:d1:4c: d5:36:7f:85:3e:d3:e5:d5:04:01:5b:69:af:d2:ef:bf:1d:df: 08:aa:44:d0:ad:74:9d:6d:db:c9:5f:3b:41:bc:ef:0f:0c:79: 29:b4:ba:70:57:c2:42:65:85:36:df:67:bd:1a:5b:d5:f2:f3: 56:31:a1:16:cd:7c:7d:fc:1a:c4:20:66:dd:00:d7:2b:5b:ef: 3c:2b:cd:b1:97:00:8d:9a:39:ab:53:de:28:6e:a2:d9:b4:48: ef:88:5b:30:8a:62:bc:db:3b:61:3e:c1:eb:ff:e3:18:ab:5b: 69:f3:ba:c3:23:ce:33:97:2b:6b:de:06:da:b4:3c:9e:47:79: b3:d6:14:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E9Aw9XbkK12XT6iotkFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0 YmExYzkwHhcNMjYwMTAyMTQxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTJlZmQ1MWI0ZTY2ZTkxNzE0OThjMWI1ZWMzMjdmYTk2NGJhZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WlUjplYKQIAIAjIcriE/y5HSMJ4 PVUkuXaR7QxOVkRFDt7GDfUvFw/kvyZKv+ZgloxRddyDqpk1D/eC7ju3aG0FNbiG n76GlhuBycRvz0YUvxcE0bMWE1e5Lx/4xhDi8QDAaf07AipOrTpK35Ki0zx08JHU 2eatKU34GoPGdj5AqBBr7ek8k/XVohhtx7RjUm8RIIAIupnmE9NH1CqhWJNegu4J yF/TBatN3fP53ZReFIznKs8B17RiTDL9GXJ6i8vi75L79DjSQebnBtEdFi9AZ9bU eIGPOubZKHcJG9yuk6iCQLjTp3+VGXE0tesF85SEaxZfX1FYNHlKFCm4BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4u/VG05m6RcUmMG17DJ/qWS61fMB8GA1UdIwQY MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt Zjc0MmYzOTVhYWY5LzEvRGk3OVViVG1icEZ4U1l3YlhzTW4tcFpMclY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5 LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+xDMA0G CSqGSIb3DQEBCwUAA4IBAQCeQ1NGAvIT0ircuGM2u3qlAlNKAtP7PzcB/UDLbL7a COMAYhi4sSksl+oOFKcNlnDqP9vakxeGCSY6p6inR84ehnQFc17wNRy1GVy/B/EO oAYeAxyVMi/j7C+AjnKVkaypB/SlYCcVt4LHLjqv+MpNHCRL1gX6/VbXY0g50UzV Nn+FPtPl1QQBW2mv0u+/Hd8IqkTQrXSdbdvJXztBvO8PDHkptLpwV8JCZYU232e9 GlvV8vNWMaEWzXx9/BrEIGbdANcrW+88K82xlwCNmjmrU94obqLZtEjviFswimK8 2zthPsHr/+MYq1tp87rDI84zlytr3gbatDyeR3mz1hTe -----END CERTIFICATE-----Generated at Fri Jan 2 18:07:21 2026 by rpki-client