This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7LBaGt_m_YYPI5U0A4hVqJDDZCQ.roa File: 7LBaGt_m_YYPI5U0A4hVqJDDZCQ.roa (raw, json) Hash identifier: qhq5Ew4srdM+Yzn2a2dqehxZwAYARdkbk6nx4tdvCK8= Subject key identifier: EC:B0:5A:1A:DF:E6:FD:86:0F:23:95:34:03:88:55:A8:90:C3:64:24 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE5E457D8B06ED2DFC53BA55584C8A Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7LBaGt_m_YYPI5U0A4hVqJDDZCQ.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60291 IP address blocks: 87.229.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5e:45:7d:8b:06:ed:2d:fc:53:ba:55:58:4c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecb05a1adfe6fd860f239534038855a890c36424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:42:0f:96:16:f4:38:1f:77:15:69:03:fa: 2c:91:45:07:c0:2b:aa:22:b7:ed:fe:13:a4:9e:1e: 34:8b:f0:93:93:a8:3b:04:6f:34:4b:29:cc:46:76: 42:98:9f:34:8f:1a:b4:29:5e:4c:2c:b1:d0:0e:f2: a5:0c:bc:7f:ec:1e:f3:3c:df:dc:50:6f:d9:74:54: 5b:bb:a2:b4:41:7b:5c:96:71:64:d5:3c:13:f2:4d: f1:73:09:33:94:36:e1:86:14:a6:41:ec:f7:92:6f: 29:2b:18:a1:27:56:df:83:12:13:84:6c:08:67:36: e6:d0:b0:e0:59:07:fa:8c:d6:dc:30:38:93:1a:ff: dd:cf:57:85:74:74:18:ba:f5:c9:ed:df:85:70:b9: 03:9b:8d:ff:74:bc:2b:6e:9f:e1:4f:fa:64:8f:99: 1e:07:ec:a9:3e:54:19:ae:a2:70:11:a0:04:d3:cb: 6a:99:fb:e6:97:94:34:62:7f:2f:7e:74:31:d9:1f: 1c:5c:bc:79:ec:ee:74:97:31:19:fb:26:e1:1b:4a: 90:b5:1a:7e:dc:29:f7:e4:f9:b1:e2:fb:c5:83:a7: 31:b6:4d:d1:b5:21:b0:cb:8d:07:f7:0a:7b:d1:aa: a3:d7:48:de:4e:07:b8:5e:8a:b2:11:a2:7e:6d:40: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B0:5A:1A:DF:E6:FD:86:0F:23:95:34:03:88:55:A8:90:C3:64:24 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7LBaGt_m_YYPI5U0A4hVqJDDZCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.57.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5c:ae:c1:36:3f:09:03:a7:00:c1:f9:11:fc:23:38:66:e4: 83:48:9d:f1:df:de:ac:87:54:86:13:94:65:b6:6d:32:ec:1c: 13:b1:34:3e:91:6e:b1:76:17:53:0b:5e:db:3f:cb:92:14:d6: ba:c4:7c:03:5f:1c:15:89:b4:a0:c4:ed:a5:72:8f:be:3a:a4: 75:9a:f2:c8:76:52:2a:6d:38:27:2a:a7:bb:d7:e6:7f:2f:2a: f1:0d:6b:82:eb:78:bb:03:f3:70:4c:32:79:49:a9:32:33:11: 84:58:e8:26:aa:d8:4d:36:a2:59:1e:97:c0:30:9e:ca:77:81: 9a:27:dd:08:e6:47:0c:3a:e2:0e:87:31:92:b4:68:21:20:63: 7c:ea:d6:4a:cd:bf:b6:0c:82:31:8b:63:aa:74:e2:b2:2d:2d: f7:9a:08:d0:1a:a6:e4:74:64:98:89:32:ab:a2:b0:0b:46:c9: 54:18:17:8b:82:58:8e:96:01:f1:6d:72:38:4c:48:c7:24:f7: c0:28:a9:c1:3a:61:4f:48:21:62:10:8d:a1:32:9c:6d:3b:85: fe:ca:e7:7b:5e:fc:0a:50:18:7e:19:ce:ce:fc:38:1e:a9:86: 21:1a:cf:28:6b:5f:3c:7e:ea:ba:e0:a4:ad:4a:8d:fa:22:4a: 6b:ec:e1:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87l5FfYsG7S38U7pVWEyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2IwNWExYWRmZTZmZDg2MGYyMzk1MzQwMzg4NTVhODkwYzM2NDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc1CD5YW9DgfdxVpA/oskUUHwCuq Irft/hOknh40i/CTk6g7BG80SynMRnZCmJ80jxq0KV5MLLHQDvKlDLx/7B7zPN/c UG/ZdFRbu6K0QXtclnFk1TwT8k3xcwkzlDbhhhSmQez3km8pKxihJ1bfgxIThGwI Zzbm0LDgWQf6jNbcMDiTGv/dz1eFdHQYuvXJ7d+FcLkDm43/dLwrbp/hT/pkj5ke B+ypPlQZrqJwEaAE08tqmfvml5Q0Yn8vfnQx2R8cXLx57O50lzEZ+ybhG0qQtRp+ 3Cn35Pmx4vvFg6cxtk3RtSGwy40H9wp70aqj10jeTge4XoqyEaJ+bUDXQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOywWhrf5v2GDyOVNAOIVaiQw2QkMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvN0xCYUd0X21fWVlQSTVVMEE0aFZxSkREWkNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+U5MA0G CSqGSIb3DQEBCwUAA4IBAQAcXK7BNj8JA6cAwfkR/CM4ZuSDSJ3x396sh1SGE5Rl tm0y7BwTsTQ+kW6xdhdTC17bP8uSFNa6xHwDXxwVibSgxO2lco++OqR1mvLIdlIq bTgnKqe71+Z/LyrxDWuC63i7A/NwTDJ5SakyMxGEWOgmqthNNqJZHpfAMJ7Kd4Ga J90I5kcMOuIOhzGStGghIGN86tZKzb+2DIIxi2OqdOKyLS33mgjQGqbkdGSYiTKr orALRslUGBeLgliOlgHxbXI4TEjHJPfAKKnBOmFPSCFiEI2hMpxtO4X+yud7XvwK UBh+Gc7O/DgeqYYhGs8oa188fuq64KStSo36Ikpr7OGj -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:35 2026 by rpki-client