This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LQIsFjE5wOJyqHw20ePdYf4FWM4.roa File: LQIsFjE5wOJyqHw20ePdYf4FWM4.roa (raw, json) Hash identifier: Dj2smhITkA7ftaalKsWSSSZ0oXQ6dCV5d1LtWvC0yxs= Subject key identifier: 2D:02:2C:16:31:39:C0:E2:72:A8:7C:36:D1:E3:DD:61:FE:05:58:CE Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B079E8E458E6FFF60F1F9CA9377EDB78D Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LQIsFjE5wOJyqHw20ePdYf4FWM4.roa Signing time: Wed 10 Dec 2025 09:36:30 +0000 ROA not before: Wed 10 Dec 2025 09:36:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 87.229.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:9e:8e:45:8e:6f:ff:60:f1:f9:ca:93:77:ed:b7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 10 09:36:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d022c163139c0e272a87c36d1e3dd61fe0558ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:47:24:17:84:c3:57:c1:7c:72:4d:c5:d2: f1:e2:0f:9d:2f:df:5f:30:e6:07:f5:49:79:dc:b4: 76:a5:ae:56:e0:74:33:32:8a:3c:e5:d0:3c:de:8a: 2c:62:b6:b2:0f:5f:06:60:fc:1f:16:f8:83:14:74: c0:a3:e1:be:9d:e1:77:72:b6:cc:9f:7d:93:2d:35: 1b:0e:4a:7a:7b:57:d4:f4:e3:14:55:2d:d4:7a:ce: 4c:98:eb:f3:4c:e5:49:6e:f5:fe:91:cb:ec:80:12: e5:77:fb:26:c6:2d:0d:78:a1:46:6e:8c:39:7a:69: a1:77:22:ff:fd:fe:d7:a6:9b:57:57:8a:23:c6:6c: 8a:34:54:99:93:db:9c:18:f0:bc:ed:dd:aa:4e:4d: 5f:b7:a7:0a:4e:7d:a8:07:1b:07:11:81:39:2c:26: 80:f8:65:52:37:d9:06:fe:c9:68:6a:50:be:a7:44: e7:fd:c4:49:38:88:6a:e1:c8:28:fe:68:c6:9e:08: 16:39:28:84:35:25:07:93:83:ad:8e:4e:b7:fd:5b: 98:5f:49:a9:0d:d1:32:da:01:60:79:58:d9:52:fd: e7:80:32:98:c0:56:f2:88:96:06:13:fe:cb:11:1b: 45:59:3e:cc:79:19:e6:40:39:fb:2c:94:72:ca:78: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:02:2C:16:31:39:C0:E2:72:A8:7C:36:D1:E3:DD:61:FE:05:58:CE X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LQIsFjE5wOJyqHw20ePdYf4FWM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.71.0/24 Signature Algorithm: sha256WithRSAEncryption 21:a8:24:70:c9:58:72:6d:24:48:d4:45:d2:07:30:7c:53:f9: a7:17:2a:47:7c:67:11:0e:73:cb:58:6f:5a:ad:9f:db:e1:9e: 49:71:96:9d:a4:e4:e6:d8:9b:39:c5:36:d6:3a:09:67:99:35: ad:b1:b2:26:bf:01:c6:c8:30:89:c2:84:57:61:fc:8c:6c:da: 32:92:c2:4f:9b:37:65:3f:eb:f7:32:09:91:64:30:09:4a:46: ff:39:46:3f:1d:ea:0a:99:85:53:01:70:0b:ea:54:86:bf:3e: bd:06:28:3a:cb:6c:8a:d5:fe:09:9a:1b:9d:49:a2:36:a9:3b: c1:d9:c1:19:0e:8a:52:89:65:b1:85:8f:2a:5e:ae:ef:7d:d7: 44:d2:9a:cc:e0:4a:57:be:fa:a7:80:bf:4d:db:f9:e6:55:f2: 60:09:e0:95:a0:5e:13:10:3d:5a:a5:33:29:2b:31:ed:e4:2c: 37:11:f1:0b:e1:7c:23:15:ab:59:0d:f3:cc:81:d9:f7:4d:80: a5:c2:7a:d9:40:ff:67:9b:01:a6:28:23:47:2b:42:26:6c:91: bb:f3:79:aa:58:90:67:21:bf:f9:dc:c1:61:7b:2f:65:13:d3: f3:0e:d2:77:94:7c:26:f2:d7:5d:26:ec:e6:0a:c8:a2:14:f1: 7d:e2:3c:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHno5Fjm//YPH5ypN37beNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjEwMDkzNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDAyMmMxNjMxMzljMGUyNzJhODdjMzZkMWUzZGQ2MWZlMDU1OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0upHJBeEw1fBfHJNxdLx4g+dL99f MOYH9Ul53LR2pa5W4HQzMoo85dA83oosYrayD18GYPwfFviDFHTAo+G+neF3crbM n32TLTUbDkp6e1fU9OMUVS3Ues5MmOvzTOVJbvX+kcvsgBLld/smxi0NeKFGbow5 emmhdyL//f7XpptXV4ojxmyKNFSZk9ucGPC87d2qTk1ft6cKTn2oBxsHEYE5LCaA +GVSN9kG/sloalC+p0Tn/cRJOIhq4cgo/mjGnggWOSiENSUHk4Otjk63/VuYX0mp DdEy2gFgeVjZUv3ngDKYwFbyiJYGE/7LERtFWT7MeRnmQDn7LJRyynhIEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0CLBYxOcDicqh8NtHj3WH+BVjOMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTFFJc0ZqRTV3T0p5cUh3MjBlUGRZZjRGV000LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VHMA0G CSqGSIb3DQEBCwUAA4IBAQAhqCRwyVhybSRI1EXSBzB8U/mnFypHfGcRDnPLWG9a rZ/b4Z5JcZadpOTm2Js5xTbWOglnmTWtsbImvwHGyDCJwoRXYfyMbNoyksJPmzdl P+v3MgmRZDAJSkb/OUY/HeoKmYVTAXAL6lSGvz69Big6y2yK1f4JmhudSaI2qTvB 2cEZDopSiWWxhY8qXq7vfddE0prM4EpXvvqngL9N2/nmVfJgCeCVoF4TED1apTMp KzHt5Cw3EfEL4XwjFatZDfPMgdn3TYClwnrZQP9nmwGmKCNHK0ImbJG783mqWJBn Ib/53MFhey9lE9PzDtJ3lHwm8tddJuzmCsiiFPF94jxG -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:22 2025 by rpki-client