This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0R-ZOMiLZlnFgYof4hKkBZSlBdQ.roa File: 0R-ZOMiLZlnFgYof4hKkBZSlBdQ.roa (raw, json) Hash identifier: wpGJWg4pSMvLWoWZsBcBxjL7B4HaOWCdE9WplEqDCVk= Subject key identifier: D1:1F:99:38:C8:8B:66:59:C5:81:8A:1F:E2:12:A4:05:94:A5:05:D4 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019AD984C57E8FE9CA7B6E4983A740CA185B Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0R-ZOMiLZlnFgYof4hKkBZSlBdQ.roa Signing time: Mon 01 Dec 2025 10:45:48 +0000 ROA not before: Mon 01 Dec 2025 10:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 79.172.200.0/23 maxlen: 24 79.172.201.0/24 maxlen: 24 79.172.219.0/24 maxlen: 24 79.172.250.0/23 maxlen: 24 87.229.8.0/22 maxlen: 22 87.229.80.0/23 maxlen: 24 87.229.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:84:c5:7e:8f:e9:ca:7b:6e:49:83:a7:40:ca:18:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 1 10:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d11f9938c88b6659c5818a1fe212a40594a505d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7d:4a:72:2e:6b:88:f2:3e:4e:4f:a3:d9:9b: 6e:07:e6:6e:9c:6b:ad:b7:07:71:a5:fd:03:10:9a: 0f:1a:51:7b:e5:bf:1b:14:3b:1f:ae:db:b6:16:49: 6d:e7:b7:98:a2:25:05:19:08:bc:22:d5:16:fc:0c: cc:bb:7a:6b:91:48:89:4c:87:84:80:75:ba:be:98: c4:13:c3:66:7c:d2:a5:d7:00:91:cf:81:8d:4d:e5: c7:51:56:71:66:bc:74:89:a5:60:0b:13:4e:93:28: 56:fd:35:0d:89:fb:74:08:fe:2d:52:30:ea:4f:e3: 4a:40:f9:45:81:50:3f:4a:82:2a:14:2a:60:8f:d5: 09:3e:49:a6:72:23:21:04:aa:b3:f3:f1:24:23:3a: 25:6e:ee:22:1d:5d:8d:1a:f3:25:fc:c1:87:93:7c: c5:65:92:58:36:b2:0a:00:8e:f2:b3:64:9e:e9:ed: cf:62:d5:7f:13:43:57:dd:04:01:c9:31:45:83:c6: 79:2c:12:6f:29:a9:00:54:22:63:9a:df:22:f6:95: 50:39:bb:c6:86:eb:77:3a:be:4f:93:90:8f:17:fa: f0:7f:44:5a:86:d5:3c:2a:e2:f5:df:ea:a8:e3:e1: 36:5f:a1:0e:19:5c:a4:cf:c6:cb:1f:1d:b3:77:fd: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:99:38:C8:8B:66:59:C5:81:8A:1F:E2:12:A4:05:94:A5:05:D4 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0R-ZOMiLZlnFgYof4hKkBZSlBdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.200.0/23 79.172.219.0/24 79.172.250.0/23 87.229.8.0/22 87.229.80.0/23 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:c5:25:ed:84:5e:1b:35:c6:63:5f:07:25:0e:4e:5e:f5:7f: 99:6c:b1:a0:2c:b9:bc:7d:a6:e2:a7:91:f4:4e:ea:ef:98:6b: 60:44:d3:74:a8:a9:51:7d:9d:50:0b:82:d8:4f:ba:a0:e2:7c: 03:cf:06:75:3f:7d:7c:65:09:8c:9d:85:d4:a9:10:ce:eb:4e: 12:7f:55:c0:e9:44:21:12:7b:84:0b:5f:44:1e:6c:97:36:53: d8:4a:c8:c6:56:b5:bd:83:05:50:4f:9b:6a:c3:ea:8d:94:4c: 45:64:91:b0:bb:1d:b9:a6:da:a1:f2:37:46:55:2b:b0:f0:cd: 31:07:c0:9f:2f:7f:dd:be:e7:a7:ea:ba:55:01:48:e5:e8:ca: 64:34:87:ab:73:22:c4:49:47:e9:f4:e1:25:a9:9a:7d:fa:23: fd:93:89:94:3c:f4:1d:4e:e5:8b:7a:a1:1f:2f:8c:05:66:83: d9:70:3a:48:ce:d5:27:34:5a:ff:e6:4f:8f:d3:2c:26:4a:43: c9:48:4f:92:91:0a:c3:2c:03:4f:97:aa:5f:83:71:dd:66:5e: e3:d9:77:9f:64:af:60:56:7b:e9:ba:80:24:2b:8c:e3:cc:f7: 3f:b1:ce:33:f0:61:10:0b:a7:25:ed:86:47:19:0e:d2:f0:a0: 45:a8:96:d4 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrZhMV+j+nKe25Jg6dAyhhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjAxMTA0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTFmOTkzOGM4OGI2NjU5YzU4MThhMWZlMjEyYTQwNTk0YTUwNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX1Kci5riPI+Tk+j2ZtuB+ZunGut twdxpf0DEJoPGlF75b8bFDsfrtu2Fklt57eYoiUFGQi8ItUW/AzMu3prkUiJTIeE gHW6vpjEE8NmfNKl1wCRz4GNTeXHUVZxZrx0iaVgCxNOkyhW/TUNift0CP4tUjDq T+NKQPlFgVA/SoIqFCpgj9UJPkmmciMhBKqz8/EkIzolbu4iHV2NGvMl/MGHk3zF ZZJYNrIKAI7ys2Se6e3PYtV/E0NX3QQByTFFg8Z5LBJvKakAVCJjmt8i9pVQObvG hut3Or5Pk5CPF/rwf0RahtU8KuL13+qo4+E2X6EOGVykz8bLHx2zd/1mCwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNEfmTjIi2ZZxYGKH+ISpAWUpQXUMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvMFItWk9NaUxabG5GZ1lvZjRoS2tCWlNsQmRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBT6zIAwQA T6zbAwQBT6z6AwQCV+UIAwQBV+VQAwQBV+V8MA0GCSqGSIb3DQEBCwUAA4IBAQB9 xSXthF4bNcZjXwclDk5e9X+ZbLGgLLm8fabip5H0TurvmGtgRNN0qKlRfZ1QC4LY T7qg4nwDzwZ1P318ZQmMnYXUqRDO604Sf1XA6UQhEnuEC19EHmyXNlPYSsjGVrW9 gwVQT5tqw+qNlExFZJGwux25ptqh8jdGVSuw8M0xB8CfL3/dvuen6rpVAUjl6Mpk NIercyLESUfp9OElqZp9+iP9k4mUPPQdTuWLeqEfL4wFZoPZcDpIztUnNFr/5k+P 0ywmSkPJSE+SkQrDLANPl6pfg3HdZl7j2XefZK9gVnvpuoAkK4zjzPc/sc4z8GEQ C6cl7YZHGQ7S8KBFqJbU -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:25 2025 by rpki-client