This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1RH7kQnL8jHff5jQpNtqRbxpFig.roa File: 1RH7kQnL8jHff5jQpNtqRbxpFig.roa (raw, json) Hash identifier: adinKMBYqyU4yJaNNjgbsujThcQAQ6fppMWZ4cjfm6M= Subject key identifier: D5:11:FB:91:09:CB:F2:31:DF:7F:98:D0:A4:DB:6A:45:BC:69:16:28 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE734683B448588510B74D769ECBA1 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1RH7kQnL8jHff5jQpNtqRbxpFig.roa Signing time: Fri 02 Jan 2026 04:19:20 +0000 ROA not before: Fri 02 Jan 2026 04:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401476 IP address blocks: 87.229.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:73:46:83:b4:48:58:85:10:b7:4d:76:9e:cb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d511fb9109cbf231df7f98d0a4db6a45bc691628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:49:e6:41:10:a3:dc:6c:2f:fe:71:b4:53: 84:e2:f6:78:7b:d4:e6:97:a2:7b:bd:31:d0:fa:81: 0f:c6:30:17:30:90:05:32:37:d8:0a:94:a4:f0:7b: 8c:2d:ef:59:24:bd:1b:e1:d2:d5:90:c2:92:5a:83: 67:3c:b7:64:f2:ec:a9:53:c5:af:ca:2d:54:1b:d1: fb:df:1b:56:3d:8d:f8:40:5b:9d:f8:32:0f:9d:eb: 22:a5:c0:41:51:2a:63:df:d0:99:78:d1:b2:ed:fe: 4c:97:29:57:dd:66:6e:6b:aa:2b:72:66:76:12:5f: 07:6a:64:eb:ee:2e:5f:ca:c9:a6:35:bc:12:27:d2: 21:b6:4e:87:56:59:7d:d9:91:42:16:65:cd:59:bc: 29:e9:9a:10:74:70:9b:6e:f2:ca:17:dc:31:b1:f3: a3:88:32:1b:55:73:01:e9:09:3c:9a:3d:da:37:46: c4:d7:32:fb:f6:8d:e7:52:f9:d2:28:d8:d0:14:f5: 6d:73:83:71:a1:ee:1c:d5:c5:a5:15:fa:58:fb:dd: ed:77:e5:5e:14:8f:e0:d8:28:1a:9d:74:dd:bd:f9: 8d:4f:78:26:97:ab:c6:f2:3c:04:78:51:09:11:93: 9e:56:22:1c:93:fd:ad:42:96:48:f5:c8:75:7a:3d: f7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:11:FB:91:09:CB:F2:31:DF:7F:98:D0:A4:DB:6A:45:BC:69:16:28 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1RH7kQnL8jHff5jQpNtqRbxpFig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.79.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:fc:12:ab:28:77:14:b0:93:d2:77:a5:92:a5:ce:2d:85:18: db:ff:9a:85:d1:ef:3a:49:5e:77:c8:30:bc:ac:da:2a:39:db: 53:05:b8:aa:3c:9f:a9:c2:44:a9:fb:da:12:3e:a2:81:48:8a: 8e:df:b7:e8:1c:2a:22:de:98:54:7f:9d:93:95:70:ee:bb:90: 4a:37:37:47:07:f0:c2:74:60:06:46:93:90:a2:1b:6d:b0:9d: 32:ff:81:8b:84:94:90:ae:69:54:f2:26:d3:b2:c6:75:0e:35: a0:80:bb:12:d3:8d:7e:bf:04:94:2f:d9:32:80:7a:5e:9e:74: d4:f7:b8:b4:60:ed:ad:7e:d8:0a:f7:af:fa:b9:96:f2:d2:88: 2a:cb:ed:9d:b4:03:5b:a0:4c:cd:e4:c2:84:46:b6:34:40:4b: 3a:00:44:f6:5e:11:c8:0d:8c:c8:5d:d9:34:a3:26:e0:01:e8: a0:fd:ea:f0:7b:f8:aa:44:0d:a1:56:47:9f:fb:25:55:80:9c: e6:ab:d4:03:f6:1b:a5:6b:7c:a6:1b:89:22:50:6e:82:ae:6a: 4d:92:13:24:d6:e6:7d:ee:ae:0c:9b:b0:49:53:80:04:fc:36: 82:69:3a:cd:90:bd:d2:a9:e5:ef:38:dc:ca:a8:89:82:c8:0a: d8:06:07:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87nNGg7RIWIUQt012nsuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTExZmI5MTA5Y2JmMjMxZGY3Zjk4ZDBhNGRiNmE0NWJjNjkxNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bNJ5kEQo9xsL/5xtFOE4vZ4e9Tm l6J7vTHQ+oEPxjAXMJAFMjfYCpSk8HuMLe9ZJL0b4dLVkMKSWoNnPLdk8uypU8Wv yi1UG9H73xtWPY34QFud+DIPnesipcBBUSpj39CZeNGy7f5MlylX3WZua6orcmZ2 El8HamTr7i5fysmmNbwSJ9Ihtk6HVll92ZFCFmXNWbwp6ZoQdHCbbvLKF9wxsfOj iDIbVXMB6Qk8mj3aN0bE1zL79o3nUvnSKNjQFPVtc4Nxoe4c1cWlFfpY+93td+Ve FI/g2CganXTdvfmNT3gml6vG8jwEeFEJEZOeViIck/2tQpZI9ch1ej33LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUR+5EJy/Ix33+Y0KTbakW8aRYoMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvMVJIN2tRbkw4akhmZjVqUXBOdHFSYnhwRmlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VPMA0G CSqGSIb3DQEBCwUAA4IBAQAb/BKrKHcUsJPSd6WSpc4thRjb/5qF0e86SV53yDC8 rNoqOdtTBbiqPJ+pwkSp+9oSPqKBSIqO37foHCoi3phUf52TlXDuu5BKNzdHB/DC dGAGRpOQohttsJ0y/4GLhJSQrmlU8ibTssZ1DjWggLsS041+vwSUL9kygHpennTU 97i0YO2tftgK96/6uZby0ogqy+2dtANboEzN5MKERrY0QEs6AET2XhHIDYzIXdk0 oybgAeig/erwe/iqRA2hVkef+yVVgJzmq9QD9hula3ymG4kiUG6CrmpNkhMk1uZ9 7q4Mm7BJU4AE/DaCaTrNkL3SqeXvONzKqImCyArYBgdp -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:44 2026 by rpki-client