This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3OzH3CQa0lWyYUjU2EIMCdJaSFM.roa File: 3OzH3CQa0lWyYUjU2EIMCdJaSFM.roa (raw, json) Hash identifier: 2pq6eFTIL+qXohE9hYe8nHn/79tDOQSNe44AhDZhNps= Subject key identifier: DC:EC:C7:DC:24:1A:D2:55:B2:61:48:D4:D8:42:0C:09:D2:5A:48:53 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE61E09AD57C37F1D19DF7FA9ADDA2 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3OzH3CQa0lWyYUjU2EIMCdJaSFM.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150770 IP address blocks: 87.229.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:61:e0:9a:d5:7c:37:f1:d1:9d:f7:fa:9a:dd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcecc7dc241ad255b26148d4d8420c09d25a4853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:9f:33:02:0d:d6:75:af:32:c3:0c:3d:23: 47:ac:43:57:d3:fd:7e:4c:79:5a:2d:41:37:4e:09: 2e:0c:43:50:29:9a:b1:4a:6b:95:cf:01:ab:7d:f5: e9:42:1d:70:dc:62:ce:85:8c:bd:07:bb:a5:3b:ce: 57:cc:ba:7f:c8:58:f3:72:36:9c:4b:18:22:dc:72: a0:7b:ba:de:95:24:fe:d5:25:64:5e:19:60:b0:6a: 33:76:9a:02:d4:30:f7:9c:06:fc:18:96:9d:ac:ad: 2f:21:f5:7e:42:04:12:42:f7:3c:a9:bd:2c:7a:d6: 97:46:0f:ec:cb:3f:33:bd:8f:d1:ce:85:7d:2d:68: 1f:73:b2:07:f1:e1:19:d2:d0:62:8e:9b:57:fd:c0: be:22:dd:28:6e:0a:a7:64:43:d4:2d:43:6d:59:39: 22:6b:90:e5:fa:e4:de:ec:b2:32:17:24:ed:7b:20: 9f:15:88:45:88:bb:40:95:46:a0:49:0a:7e:0b:80: fa:d0:ec:e2:f6:0d:b2:b4:ad:17:9f:cb:1a:27:0d: dc:2c:09:93:67:b4:dc:4c:87:74:84:a0:e6:4b:fe: 08:f2:4e:4d:58:f6:47:07:1b:d1:d8:4f:0b:7b:ba: e0:34:5d:d8:b4:32:58:75:d0:1c:af:be:0a:3c:55: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EC:C7:DC:24:1A:D2:55:B2:61:48:D4:D8:42:0C:09:D2:5A:48:53 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3OzH3CQa0lWyYUjU2EIMCdJaSFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.92.0/24 Signature Algorithm: sha256WithRSAEncryption 92:e5:02:7f:f1:a5:6f:21:7c:52:00:dd:db:cb:a9:42:ca:7f: 55:d9:e1:21:cf:71:6d:ef:e2:5f:17:72:35:33:ae:e5:4d:d6: 84:66:d1:64:fb:39:d9:a4:da:80:04:ec:ad:97:5b:bc:d2:fe: 40:38:3b:39:ad:5a:83:6c:25:c7:2f:93:8b:4e:ab:24:df:ea: 59:d2:52:7c:e6:ec:c4:3a:cd:53:ae:2d:5e:3f:0e:a0:39:5f: aa:77:cb:85:85:f0:8c:8e:87:cf:16:17:0d:58:45:82:a8:5a: fc:ff:62:d3:65:aa:c6:b7:ee:90:fd:8f:4f:04:3d:e6:06:44: a2:64:2a:93:0b:c0:a3:84:7a:80:2c:b8:fb:30:5a:d1:b6:a9: be:af:f8:1c:71:9c:5a:84:2c:ab:e6:ac:61:17:c2:7b:ff:c0: b2:bd:ad:ae:b3:eb:14:e9:d1:b9:b1:e6:4e:75:75:27:56:92: 47:61:0c:32:29:49:7c:10:08:0b:aa:2a:0c:aa:78:92:65:b4: 2b:42:f2:b5:46:be:7d:78:8e:76:f7:5b:89:66:b4:0b:46:05: 1d:39:bd:5d:a5:0b:cb:cd:5a:2a:f8:d5:72:13:ce:aa:0e:b7: 1b:d8:8e:8a:e2:63:87:c8:dc:bc:5f:9b:66:73:87:c6:12:6b: 18:95:7b:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mHgmtV8N/HRnff6mt2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2VjYzdkYzI0MWFkMjU1YjI2MTQ4ZDRkODQyMGMwOWQyNWE0ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj6fMwIN1nWvMsMMPSNHrENX0/1+ THlaLUE3TgkuDENQKZqxSmuVzwGrffXpQh1w3GLOhYy9B7ulO85XzLp/yFjzcjac Sxgi3HKge7relST+1SVkXhlgsGozdpoC1DD3nAb8GJadrK0vIfV+QgQSQvc8qb0s etaXRg/syz8zvY/RzoV9LWgfc7IH8eEZ0tBijptX/cC+It0obgqnZEPULUNtWTki a5Dl+uTe7LIyFyTteyCfFYhFiLtAlUagSQp+C4D60Ozi9g2ytK0Xn8saJw3cLAmT Z7TcTId0hKDmS/4I8k5NWPZHBxvR2E8Le7rgNF3YtDJYddAcr74KPFUrXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzsx9wkGtJVsmFI1NhCDAnSWkhTMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvM096SDNDUWEwbFd5WVVqVTJFSU1DZEphU0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VcMA0G CSqGSIb3DQEBCwUAA4IBAQCS5QJ/8aVvIXxSAN3by6lCyn9V2eEhz3Ft7+JfF3I1 M67lTdaEZtFk+znZpNqABOytl1u80v5AODs5rVqDbCXHL5OLTqsk3+pZ0lJ85uzE Os1Tri1ePw6gOV+qd8uFhfCMjofPFhcNWEWCqFr8/2LTZarGt+6Q/Y9PBD3mBkSi ZCqTC8CjhHqALLj7MFrRtqm+r/gccZxahCyr5qxhF8J7/8Cyva2us+sU6dG5seZO dXUnVpJHYQwyKUl8EAgLqioMqniSZbQrQvK1Rr59eI5291uJZrQLRgUdOb1dpQvL zVoq+NVyE86qDrcb2I6K4mOHyNy8X5tmc4fGEmsYlXu1 -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:53 2026 by rpki-client