This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/AVN42ZJraVPAZTNPG7MhRqwy5d4.roa File: AVN42ZJraVPAZTNPG7MhRqwy5d4.roa (raw, json) Hash identifier: lTeGjTUoAtOcXMtc/BSmeJmgTpdkN9+nNs9ypynv6iw= Subject key identifier: 01:53:78:D9:92:6B:69:53:C0:65:33:4F:1B:B3:21:46:AC:32:E5:DE Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE595785C0FFCC685E5AFB3599859E Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/AVN42ZJraVPAZTNPG7MhRqwy5d4.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47325 IP address blocks: 87.229.6.0/24 maxlen: 24 87.229.115.0/24 maxlen: 24 87.229.127.0/24 maxlen: 24 95.138.193.0/24 maxlen: 24 217.113.49.0/24 maxlen: 24 2a02:730:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:59:57:85:c0:ff:cc:68:5e:5a:fb:35:99:85:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=015378d9926b6953c065334f1bb32146ac32e5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:14:37:cb:24:d4:a1:12:e0:61:26:e3:34: d8:bd:52:3c:05:f6:a9:6b:39:a8:09:0d:0a:23:66: 44:33:d7:e3:59:1f:69:9d:07:bc:54:68:6c:1a:f6: bb:a8:16:04:39:0c:fe:a4:d1:f5:c0:74:43:68:8e: 5f:06:bd:0e:60:4e:0d:d0:46:05:bf:53:47:ee:83: 15:92:a9:18:5c:20:41:cc:8b:a3:d2:86:b4:4a:f9: 66:21:d4:c1:b7:60:e3:da:19:56:bf:a7:fd:f8:51: 4b:29:82:c9:24:f6:51:79:85:ed:a2:a2:fc:46:c9: 68:bd:4d:d5:3c:61:35:09:c1:4d:fa:f1:01:45:eb: 9c:ba:0e:94:03:5e:71:6f:f1:6c:07:15:9c:a3:17: 34:d6:f8:a1:ae:1a:a3:bc:4c:b5:1e:b9:66:25:b9: 85:5e:e0:90:61:4f:4e:a7:95:a8:c0:5a:e8:83:0e: 3e:ee:17:4d:c5:45:93:2a:23:5c:8b:d2:f6:49:09: e6:ab:f9:2c:cb:6c:f9:d2:98:a3:7d:bd:5c:55:42: f0:e1:fe:f2:dd:29:0f:8d:db:42:0b:2b:98:d0:d0: a4:9a:49:ee:93:50:0e:6a:f0:43:43:1c:b8:c9:ae: 07:83:87:ae:1d:cb:05:c0:f7:69:5e:54:68:17:8d: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:53:78:D9:92:6B:69:53:C0:65:33:4F:1B:B3:21:46:AC:32:E5:DE X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/AVN42ZJraVPAZTNPG7MhRqwy5d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.6.0/24 87.229.115.0/24 87.229.127.0/24 95.138.193.0/24 217.113.49.0/24 IPv6: 2a02:730:7000::/48 Signature Algorithm: sha256WithRSAEncryption 8e:ce:64:54:6e:7e:75:d3:31:d4:1b:bf:1a:6f:51:7d:6c:7b: 93:18:1e:e6:83:ae:38:53:7b:2b:b6:51:fe:e5:a8:c9:8c:40: 0f:38:ac:05:54:ca:44:54:ec:da:15:68:fe:d9:a7:da:fc:8b: 17:55:c8:ee:0c:44:34:b8:28:57:f6:a9:ad:1b:1e:79:af:31: c1:f1:5c:74:42:f2:8c:bc:15:59:a6:1a:eb:3c:b3:0c:41:1c: 85:3a:74:46:95:45:59:10:63:38:d1:31:26:3e:ca:b3:0f:6d: 30:c4:1b:8f:87:b5:b7:52:a8:34:5d:92:3e:a7:ed:26:bf:da: c1:60:1a:fb:b1:ab:27:d9:4a:f8:86:68:26:67:17:b3:01:cb: 36:ca:48:32:e2:a1:8f:b5:05:f6:09:48:83:41:bb:8e:31:45: b5:a5:c6:ba:c3:4b:12:d5:66:06:b0:3d:2b:28:29:c9:6e:7b: cc:da:55:d1:83:3f:b3:b7:2b:cf:8e:b3:27:9b:2a:70:57:3e: e7:92:0c:73:a8:a5:ea:ec:94:64:d2:f8:f1:5a:9d:57:14:4b: a0:6b:14:30:a7:aa:8d:fe:a1:73:1d:97:97:19:77:cb:6e:3e: 7c:42:e3:54:cb:f3:79:eb:2a:62:d3:d8:d5:58:94:4c:54:23: f7:93:0a:fc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt87llXhcD/zGheWvs1mYWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTUzNzhkOTkyNmI2OTUzYzA2NTMzNGYxYmIzMjE0NmFjMzJlNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEsUN8sk1KES4GEm4zTYvVI8Bfap azmoCQ0KI2ZEM9fjWR9pnQe8VGhsGva7qBYEOQz+pNH1wHRDaI5fBr0OYE4N0EYF v1NH7oMVkqkYXCBBzIuj0oa0SvlmIdTBt2Dj2hlWv6f9+FFLKYLJJPZReYXtoqL8 RslovU3VPGE1CcFN+vEBReucug6UA15xb/FsBxWcoxc01vihrhqjvEy1HrlmJbmF XuCQYU9Op5WowFrogw4+7hdNxUWTKiNci9L2SQnmq/ksy2z50pijfb1cVULw4f7y 3SkPjdtCCyuY0NCkmknuk1AOavBDQxy4ya4Hg4euHcsFwPdpXlRoF41N5wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFAFTeNmSa2lTwGUzTxuzIUasMuXeMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvQVZONDJaSnJhVlBBWlROUEc3TWhScXd5NWQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQAV+UGAwQA V+VzAwQAV+V/AwQAX4rBAwQA2XExMA8EAgACMAkDBwAqAgcwcAAwDQYJKoZIhvcN AQELBQADggEBAI7OZFRufnXTMdQbvxpvUX1se5MYHuaDrjhTeyu2Uf7lqMmMQA84 rAVUykRU7NoVaP7Zp9r8ixdVyO4MRDS4KFf2qa0bHnmvMcHxXHRC8oy8FVmmGus8 swxBHIU6dEaVRVkQYzjRMSY+yrMPbTDEG4+HtbdSqDRdkj6n7Sa/2sFgGvuxqyfZ SviGaCZnF7MByzbKSDLioY+1BfYJSINBu44xRbWlxrrDSxLVZgawPSsoKclue8za VdGDP7O3K8+OsyebKnBXPueSDHOoperslGTS+PFanVcUS6BrFDCnqo3+oXMdl5cZ d8tuPnxC41TL83nrKmLT2NVYlExUI/eTCvw= -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:28 2026 by rpki-client