This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3kTpqOIWVgHDB9soufjoem2opZM.roa File: 3kTpqOIWVgHDB9soufjoem2opZM.roa (raw, json) Hash identifier: buNeDMGB8NMgI/y9dwqcx3G07p9uZtbK18C2hbxLFSY= Subject key identifier: DE:44:E9:A8:E2:16:56:01:C3:07:DB:28:B9:F8:E8:7A:6D:A8:A5:93 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6F5021274E71E8D6C527D8B822E2 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3kTpqOIWVgHDB9soufjoem2opZM.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214677 IP address blocks: 87.229.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6f:50:21:27:4e:71:e8:d6:c5:27:d8:b8:22:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de44e9a8e2165601c307db28b9f8e87a6da8a593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:b5:33:ec:b0:99:35:c2:a2:54:9f:a2:4b: 8d:6d:6e:38:83:22:08:71:e4:65:68:ca:6b:9c:b3: 2d:76:e4:08:b1:a6:70:d6:bb:8a:f0:32:36:fb:28: 38:8b:86:4d:0a:f4:1b:b8:0c:b3:05:72:ab:82:da: a6:d6:9c:ec:e0:74:2c:4e:86:96:36:33:cd:1a:5c: 06:a3:b1:88:ff:1f:84:01:ed:ad:bf:0c:89:0a:4c: 0d:e5:dd:c1:11:f5:f5:ff:5b:5b:ce:c7:6d:c1:fe: 2b:d7:d2:a5:84:c5:dd:49:f3:26:62:39:c2:aa:51: c1:96:d1:8d:9a:73:31:ae:11:54:e1:c5:40:5f:c4: 57:a6:70:05:67:d4:dd:2c:a1:39:82:32:a5:01:6e: 18:b3:d4:97:14:08:92:00:41:15:a5:f0:78:d4:dc: 73:ed:b2:a5:23:fc:a7:48:21:a4:99:a7:e8:13:af: 85:df:23:cf:b1:51:1e:4a:94:98:9e:36:39:86:68: ce:c2:2d:06:31:50:b6:02:30:b5:dc:33:2f:ef:75: 7d:aa:2c:b4:b9:9e:ab:c9:ab:36:04:db:a2:c4:5f: f4:fa:76:a5:20:92:d5:bb:fe:f6:b0:01:d0:a5:16: 69:d8:26:e3:69:4a:de:f7:b3:da:9b:56:26:d7:7e: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:E9:A8:E2:16:56:01:C3:07:DB:28:B9:F8:E8:7A:6D:A8:A5:93 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/3kTpqOIWVgHDB9soufjoem2opZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.95.0/24 Signature Algorithm: sha256WithRSAEncryption 66:c7:79:15:5c:24:fe:e1:10:6d:b7:f2:0d:54:3e:f1:2b:2c: de:c6:27:49:f0:49:5d:57:a1:fd:ef:35:e9:f2:3d:6a:40:19: e5:8f:3f:2a:33:7b:4e:d8:27:c3:f3:cb:29:4a:b5:4b:65:92: da:14:9d:b5:5d:1b:1e:a0:b7:48:54:2a:65:4e:5f:68:e9:79: 53:b4:da:2f:b9:53:5b:b6:60:62:a6:4d:96:0e:ca:be:da:1c: b1:bd:13:44:33:45:6a:04:f9:fa:cb:b3:7c:e4:bc:0d:0e:fc: ea:82:37:fa:5d:d8:da:85:43:1d:71:b1:1b:94:31:98:ec:49: fc:b6:d8:98:33:cf:81:ad:2f:62:38:18:a6:bf:24:b7:87:33: 32:61:af:12:e5:94:f5:73:ff:73:3d:b8:c4:f7:3c:d1:f9:23: ba:3e:c9:7a:21:9c:d0:ed:02:20:54:db:50:a7:46:40:f6:9b: 01:ff:31:17:82:49:cc:71:8b:9a:bb:d4:31:6c:ba:d5:03:19: b1:ea:13:91:7c:0f:d9:5f:47:6e:44:87:e7:db:6f:b8:2f:be: 05:97:73:5d:b9:21:31:78:66:c8:2a:55:8d:d2:53:95:d6:10: a4:ff:04:b0:cf:55:9e:80:34:4e:d2:78:d7:67:07:d8:79:90: b8:7d:f5:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87m9QISdOcejWxSfYuCLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTQ0ZTlhOGUyMTY1NjAxYzMwN2RiMjhiOWY4ZTg3YTZkYThhNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh+1M+ywmTXColSfokuNbW44gyII ceRlaMprnLMtduQIsaZw1ruK8DI2+yg4i4ZNCvQbuAyzBXKrgtqm1pzs4HQsToaW NjPNGlwGo7GI/x+EAe2tvwyJCkwN5d3BEfX1/1tbzsdtwf4r19KlhMXdSfMmYjnC qlHBltGNmnMxrhFU4cVAX8RXpnAFZ9TdLKE5gjKlAW4Ys9SXFAiSAEEVpfB41Nxz 7bKlI/ynSCGkmafoE6+F3yPPsVEeSpSYnjY5hmjOwi0GMVC2AjC13DMv73V9qiy0 uZ6ryas2BNuixF/0+nalIJLVu/72sAHQpRZp2CbjaUre97Pam1Ym135dNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5E6ajiFlYBwwfbKLn46HptqKWTMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvM2tUcHFPSVdWZ0hEQjlzb3Vmam9lbTJvcFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VfMA0G CSqGSIb3DQEBCwUAA4IBAQBmx3kVXCT+4RBtt/INVD7xKyzexidJ8EldV6H97zXp 8j1qQBnljz8qM3tO2CfD88spSrVLZZLaFJ21XRseoLdIVCplTl9o6XlTtNovuVNb tmBipk2WDsq+2hyxvRNEM0VqBPn6y7N85LwNDvzqgjf6XdjahUMdcbEblDGY7En8 ttiYM8+BrS9iOBimvyS3hzMyYa8S5ZT1c/9zPbjE9zzR+SO6Psl6IZzQ7QIgVNtQ p0ZA9psB/zEXgknMcYuau9QxbLrVAxmx6hORfA/ZX0duRIfn22+4L74Fl3NduSEx eGbIKlWN0lOV1hCk/wSwz1WegDRO0njXZwfYeZC4ffUd -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:48 2026 by rpki-client