This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RQEua2Gy1pPvKPza-rVtmvZcZlo.roa File: RQEua2Gy1pPvKPza-rVtmvZcZlo.roa (raw, json) Hash identifier: +4SEbYdzSQpt4GCGar7wdkfKFxZ4S7H1WmhgdZH4mVw= Subject key identifier: 45:01:2E:6B:61:B2:D6:93:EF:28:FC:DA:FA:B5:6D:9A:F6:5C:66:5A Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B20E753E07F46710ED6AD09A675A0DE17 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RQEua2Gy1pPvKPza-rVtmvZcZlo.roa Signing time: Mon 15 Dec 2025 07:26:29 +0000 ROA not before: Mon 15 Dec 2025 07:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 79.172.193.0/24 maxlen: 24 79.172.200.0/23 maxlen: 24 79.172.250.0/23 maxlen: 24 87.229.8.0/22 maxlen: 22 87.229.11.0/24 maxlen: 24 87.229.12.0/24 maxlen: 24 87.229.23.0/24 maxlen: 24 87.229.37.0/24 maxlen: 24 87.229.80.0/23 maxlen: 24 87.229.81.0/24 maxlen: 24 87.229.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:e7:53:e0:7f:46:71:0e:d6:ad:09:a6:75:a0:de:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 15 07:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45012e6b61b2d693ef28fcdafab56d9af65c665a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:7b:9d:09:fb:22:4b:f2:cc:99:e6:e5:d0: 21:71:5e:22:74:96:96:2f:65:1d:be:6f:1f:3c:dd: 0a:4a:f9:9a:ed:2c:bb:8f:e2:8e:f6:47:df:a8:0c: f8:5a:e4:78:05:93:eb:1f:65:d6:bd:07:55:58:e1: 59:fd:10:a4:de:87:fa:ef:f0:5d:0a:24:89:b0:07: 77:46:25:47:94:75:0c:23:bf:a7:44:78:8d:8a:14: d3:b9:90:9c:8b:0e:1c:e0:2d:dd:c0:8f:8e:8c:6a: 0e:51:cb:13:9c:a0:40:9d:29:1a:da:c3:41:08:8f: 1b:b4:45:eb:f7:6a:7c:55:d1:6c:a1:f0:ca:3c:f5: ba:57:21:2a:44:bb:ef:4b:25:62:d2:75:74:7c:bb: 4f:1a:1b:5e:6e:11:ef:66:27:72:1e:04:2b:da:e9: fb:62:f4:c8:81:7a:67:d0:b9:f5:8a:b1:5e:77:13: 1a:6f:80:31:14:32:2f:53:1b:27:24:d0:6e:b7:1d: d5:ca:08:5e:fa:75:01:89:f1:cf:38:66:8d:02:ec: 76:f8:05:d7:01:dc:52:78:57:61:41:31:94:a8:ac: f6:94:ba:bd:78:6c:b3:bb:44:82:8c:05:eb:54:cd: 87:c5:58:ca:28:fe:1c:7f:ec:66:23:38:a3:d9:17: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:01:2E:6B:61:B2:D6:93:EF:28:FC:DA:FA:B5:6D:9A:F6:5C:66:5A X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RQEua2Gy1pPvKPza-rVtmvZcZlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.193.0/24 79.172.200.0/23 79.172.250.0/23 87.229.8.0-87.229.12.255 87.229.23.0/24 87.229.37.0/24 87.229.80.0/23 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 80:78:1f:2e:c3:6e:f3:3a:af:49:0f:fe:ee:3b:f7:6b:76:68: 00:32:3c:4b:09:0c:bd:35:63:c0:96:a4:1f:6c:32:8a:b1:b4: 2c:3a:63:f1:b8:aa:b4:51:3a:78:95:bc:d5:ab:cf:a2:3e:34: d7:bc:ca:a9:8b:1a:bf:03:fa:a3:2f:ae:46:06:07:bf:81:90: 76:97:c3:6d:73:7b:06:45:4b:ce:c2:03:e8:dd:93:e6:99:25: dd:0c:cb:d1:2c:b9:56:e7:52:38:7c:72:ee:09:e7:35:78:ac: 47:7e:2c:67:46:75:13:ea:91:ce:39:67:bf:a7:9a:f4:77:50: 3a:2c:5f:65:aa:c8:cd:d3:6c:17:46:6b:08:90:ac:3a:8b:83: 0f:83:c3:26:97:cb:92:8c:cb:48:4e:7e:b5:9d:7c:d6:30:14: a6:05:73:18:6d:5f:1a:87:eb:c3:aa:60:cc:71:94:9a:b8:5d: 4d:78:1a:24:71:af:87:9e:77:22:9c:0d:e4:e2:ac:25:7a:af: b8:8b:c9:d3:7b:ba:eb:4f:de:fb:47:bd:f3:fa:36:12:09:80: d4:ff:a3:ec:17:38:41:09:2e:84:72:2a:fc:9d:b2:da:3e:fb: 9e:a7:b8:ce:ac:07:b9:cb:74:1f:0f:98:1a:9b:e1:93:e8:13: 4a:90:18:3d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZsg51Pgf0ZxDtatCaZ1oN4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjE1MDcyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTAxMmU2YjYxYjJkNjkzZWYyOGZjZGFmYWI1NmQ5YWY2NWM2NjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjd7nQn7IkvyzJnm5dAhcV4idJaW L2Udvm8fPN0KSvma7Sy7j+KO9kffqAz4WuR4BZPrH2XWvQdVWOFZ/RCk3of67/Bd CiSJsAd3RiVHlHUMI7+nRHiNihTTuZCciw4c4C3dwI+OjGoOUcsTnKBAnSka2sNB CI8btEXr92p8VdFsofDKPPW6VyEqRLvvSyVi0nV0fLtPGhtebhHvZidyHgQr2un7 YvTIgXpn0Ln1irFedxMab4AxFDIvUxsnJNButx3Vyghe+nUBifHPOGaNAux2+AXX AdxSeFdhQTGUqKz2lLq9eGyzu0SCjAXrVM2HxVjKKP4cf+xmIzij2RfX+QIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFEUBLmthstaT7yj82vq1bZr2XGZaMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvUlFFdWEyR3kxcFB2S1B6YS1yVnRtdlpjWmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAT6zBAwQB T6zIAwQBT6z6MAwDBANX5QgDBABX5QwDBABX5RcDBABX5SUDBAFX5VADBAFX5Xww DQYJKoZIhvcNAQELBQADggEBAIB4Hy7DbvM6r0kP/u4792t2aAAyPEsJDL01Y8CW pB9sMoqxtCw6Y/G4qrRROniVvNWrz6I+NNe8yqmLGr8D+qMvrkYGB7+BkHaXw21z ewZFS87CA+jdk+aZJd0My9EsuVbnUjh8cu4J5zV4rEd+LGdGdRPqkc45Z7+nmvR3 UDosX2WqyM3TbBdGawiQrDqLgw+DwyaXy5KMy0hOfrWdfNYwFKYFcxhtXxqH68Oq YMxxlJq4XU14GiRxr4eedyKcDeTirCV6r7iLydN7uutP3vtHvfP6NhIJgNT/o+wX OEEJLoRyKvydsto++56nuM6sB7nLdB8PmBqb4ZPoE0qQGD0= -----END CERTIFICATE-----Generated at Mon Dec 15 17:22:01 2025 by rpki-client