This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IAfi0_NJ2yZPZKn7UUr5GNG4q9k.roa File: IAfi0_NJ2yZPZKn7UUr5GNG4q9k.roa (raw, json) Hash identifier: QD9tB4GtfbGY9JNdGxL50dMqjRf941BREwKBPXOzKQw= Subject key identifier: 20:07:E2:D3:F3:49:DB:26:4F:64:A9:FB:51:4A:F9:18:D1:B8:AB:D9 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6D2FE48537B7ADF5C56FB9BBB441 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IAfi0_NJ2yZPZKn7UUr5GNG4q9k.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213980 IP address blocks: 87.229.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6d:2f:e4:85:37:b7:ad:f5:c5:6f:b9:bb:b4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2007e2d3f349db264f64a9fb514af918d1b8abd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:fe:ca:45:31:97:2e:07:05:d6:1b:90:a9: 3f:25:07:0d:00:07:53:9b:9f:b6:e7:96:1d:93:b2: a7:e9:f1:d7:24:d5:1e:74:13:ad:08:b1:25:fc:2d: 72:b3:77:0f:3c:9d:7d:c4:4d:1b:ef:66:4d:e5:9b: b7:76:ce:7b:8c:90:14:fe:74:56:44:28:d7:c0:6d: 6c:33:78:bc:b4:08:84:21:0a:b6:0e:4a:d4:32:81: 9a:f0:4a:d5:96:4e:10:70:15:45:7c:cc:6b:1f:78: 9d:7f:64:b0:6b:46:d7:ed:93:b9:78:3d:89:0f:2a: 20:43:66:2d:45:da:5b:7f:e9:91:99:fb:41:d7:8c: 2f:05:84:4c:81:dc:9c:de:2d:20:96:fe:2a:68:cf: 63:24:65:33:6d:6c:6f:a7:1b:86:75:54:d4:c1:b8: 90:fb:6e:3c:bf:c3:01:15:43:3f:b2:95:6a:f9:ee: 74:13:11:64:9a:6c:d6:0f:b9:13:22:56:a1:cb:8a: 1c:08:14:9c:cf:0f:db:1a:8e:d7:dd:e9:71:8f:26: 4f:6a:56:71:d7:d4:50:11:11:af:41:68:a1:6e:29: b9:be:fb:60:43:63:22:15:4d:73:2c:ec:4e:55:f1: b5:43:91:9f:68:1c:2b:10:2d:88:7f:58:20:17:90: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:E2:D3:F3:49:DB:26:4F:64:A9:FB:51:4A:F9:18:D1:B8:AB:D9 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IAfi0_NJ2yZPZKn7UUr5GNG4q9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.41.0/24 Signature Algorithm: sha256WithRSAEncryption 13:7b:22:0b:98:68:7d:c4:91:c0:89:6b:1c:1c:c3:00:74:2a: 05:99:b5:4a:21:b9:11:cd:ea:bd:71:61:e0:be:c9:75:51:74: 0b:11:50:6b:3a:77:b0:c2:bf:6b:57:4c:12:8f:ff:ce:1e:46: 64:83:41:0d:2e:34:00:47:ee:01:0a:4f:95:6c:f6:f2:ad:73: 75:d5:51:9e:86:33:df:cf:d2:62:fc:81:d1:2d:f8:05:cb:44: e4:13:1d:e4:cd:ec:d9:af:b8:1c:72:84:b4:13:6b:37:d4:11: dc:a0:a5:2a:d8:1a:91:9b:b7:eb:85:1c:37:1e:78:c8:8c:a7: a5:bc:b6:19:95:2d:02:cb:4c:9c:45:5d:69:26:9f:3a:54:c5: a7:7d:ff:04:95:49:85:37:2d:12:a5:0c:b3:c9:83:2c:0d:02: f3:b9:ef:95:e8:99:96:ca:ad:e1:7c:16:89:74:70:0a:57:69: 2a:7b:d3:b6:72:34:05:f2:97:8a:0b:b6:9d:07:4c:12:6d:13: b2:5f:45:da:d4:41:d2:6c:8d:f0:0d:3d:df:d6:dd:5e:e8:f8: 34:f4:2f:73:14:47:34:6b:77:f1:29:d3:67:5c:f6:c6:c6:89: 35:8f:5f:9d:59:98:22:38:75:96:e5:99:7d:9c:3b:2e:79:65: 3e:4c:32:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87m0v5IU3t631xW+5u7RBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDA3ZTJkM2YzNDlkYjI2NGY2NGE5ZmI1MTRhZjkxOGQxYjhhYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/P+ykUxly4HBdYbkKk/JQcNAAdT m5+255Ydk7Kn6fHXJNUedBOtCLEl/C1ys3cPPJ19xE0b72ZN5Zu3ds57jJAU/nRW RCjXwG1sM3i8tAiEIQq2DkrUMoGa8ErVlk4QcBVFfMxrH3idf2Swa0bX7ZO5eD2J DyogQ2YtRdpbf+mRmftB14wvBYRMgdyc3i0glv4qaM9jJGUzbWxvpxuGdVTUwbiQ +248v8MBFUM/spVq+e50ExFkmmzWD7kTIlahy4ocCBSczw/bGo7X3elxjyZPalZx 19RQERGvQWihbim5vvtgQ2MiFU1zLOxOVfG1Q5GfaBwrEC2If1ggF5AB5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAH4tPzSdsmT2Sp+1FK+RjRuKvZMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvSUFmaTBfTkoyeVpQWktuN1VVcjVHTkc0cTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UpMA0G CSqGSIb3DQEBCwUAA4IBAQATeyILmGh9xJHAiWscHMMAdCoFmbVKIbkRzeq9cWHg vsl1UXQLEVBrOnewwr9rV0wSj//OHkZkg0ENLjQAR+4BCk+VbPbyrXN11VGehjPf z9Ji/IHRLfgFy0TkEx3kzezZr7gccoS0E2s31BHcoKUq2BqRm7frhRw3HnjIjKel vLYZlS0Cy0ycRV1pJp86VMWnff8ElUmFNy0SpQyzyYMsDQLzue+V6JmWyq3hfBaJ dHAKV2kqe9O2cjQF8peKC7adB0wSbROyX0Xa1EHSbI3wDT3f1t1e6Pg09C9zFEc0 a3fxKdNnXPbGxok1j1+dWZgiOHWW5Zl9nDsueWU+TDIc -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:59 2026 by rpki-client