This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RbF5D5YXYcFYNlNexMjI-yjwYPI.roa File: RbF5D5YXYcFYNlNexMjI-yjwYPI.roa (raw, json) Hash identifier: E1zh2h+9FOTDLLLYu0Ocs4cKOv6EZB/Gf70Rh+QTzwI= Subject key identifier: 45:B1:79:0F:96:17:61:C1:58:36:53:5E:C4:C8:C8:FB:28:F0:60:F2 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6BBDCC514E05ED341583075918E6 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RbF5D5YXYcFYNlNexMjI-yjwYPI.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211358 IP address blocks: 87.229.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6b:bd:cc:51:4e:05:ed:34:15:83:07:59:18:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b1790f961761c15836535ec4c8c8fb28f060f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:f5:03:7c:1c:ef:4d:55:fc:ff:f1:fe:86: aa:af:5d:79:6b:b6:6f:2d:2b:e8:73:77:f4:1e:ba: 39:4d:44:a5:90:8d:ec:21:94:92:86:07:6d:4a:fb: 69:76:69:0b:23:69:bf:e0:44:f8:3f:44:d8:46:b2: e1:7f:53:4f:1b:9d:bd:7e:2f:76:1a:6a:1b:27:77: ec:00:fb:02:76:70:55:fa:a6:a1:53:48:31:8f:0c: 69:32:fe:38:58:32:b4:e9:68:46:93:df:c5:e6:3e: d9:35:91:c2:0e:49:70:1a:2d:c3:f4:bc:9e:52:21: e4:e2:ff:7f:7b:58:14:62:87:f0:19:56:3c:02:26: c9:4c:0c:d3:22:0c:e6:d6:43:a0:10:28:81:76:e7: e2:a1:63:94:09:0a:7b:af:c0:08:f6:91:0b:8a:e3: cb:cd:77:d6:a8:cc:40:3d:da:29:4c:af:69:2b:ba: 3f:c0:f6:6b:4e:18:e3:cd:1b:b2:fa:4b:f6:4b:af: 56:3c:81:f1:4f:b8:b7:c4:59:39:da:3f:70:e5:7b: 78:19:48:6e:c2:d5:af:7c:a1:5a:c1:1d:7e:3d:66: a7:0c:74:2e:d4:12:7a:c9:85:cb:79:a0:47:16:ca: 1b:bb:11:16:b0:c0:b6:be:3b:6c:63:2e:4c:2e:81: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:79:0F:96:17:61:C1:58:36:53:5E:C4:C8:C8:FB:28:F0:60:F2 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RbF5D5YXYcFYNlNexMjI-yjwYPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.44.0/24 Signature Algorithm: sha256WithRSAEncryption 83:2d:76:68:e9:f4:12:96:ed:8d:07:bd:b3:a3:5c:88:93:de: f0:86:7b:65:3e:9c:1a:78:3a:24:61:dd:09:4e:06:15:81:49: 99:b0:28:01:ee:bc:6b:0e:c8:47:2d:cc:a6:85:eb:7e:35:eb: fb:b1:0c:cb:03:e6:9f:81:0f:1d:89:16:2c:bc:f4:30:94:c5: 7c:ba:c8:1f:ad:af:76:13:b0:1b:be:10:ce:3a:5d:4c:0c:11: 42:db:57:89:91:6b:62:a7:33:54:a4:18:d4:f6:f9:dc:f4:e6: 4f:7a:4f:a6:22:d2:f3:ab:32:33:36:ac:e6:7f:0d:19:48:ca: ec:6a:ba:83:1b:fd:b5:cf:48:92:a4:ed:d4:49:61:90:62:64: b4:92:40:c8:c4:b3:13:73:18:7a:96:9c:c7:48:90:83:99:48: 73:ef:2e:70:d4:08:53:8d:5e:2a:fd:a7:98:bd:5a:60:c1:ad: 66:d9:c8:77:01:f9:bd:40:4a:30:5a:28:24:1d:14:59:53:c9: cb:01:35:9e:7b:42:d6:c5:60:45:4f:0d:b9:cb:5e:09:1b:3a: 40:ff:31:bd:48:a4:36:ec:53:6b:24:15:4d:cd:45:47:81:4a: 45:5a:d2:6a:59:d4:65:b1:5a:dd:82:f0:ca:13:93:e6:81:89: 66:a0:aa:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mu9zFFOBe00FYMHWRjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWIxNzkwZjk2MTc2MWMxNTgzNjUzNWVjNGM4YzhmYjI4ZjA2MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujL1A3wc701V/P/x/oaqr115a7Zv LSvoc3f0Hro5TUSlkI3sIZSShgdtSvtpdmkLI2m/4ET4P0TYRrLhf1NPG529fi92 GmobJ3fsAPsCdnBV+qahU0gxjwxpMv44WDK06WhGk9/F5j7ZNZHCDklwGi3D9Lye UiHk4v9/e1gUYofwGVY8AibJTAzTIgzm1kOgECiBdufioWOUCQp7r8AI9pELiuPL zXfWqMxAPdopTK9pK7o/wPZrThjjzRuy+kv2S69WPIHxT7i3xFk52j9w5Xt4GUhu wtWvfKFawR1+PWanDHQu1BJ6yYXLeaBHFsobuxEWsMC2vjtsYy5MLoG2ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEWxeQ+WF2HBWDZTXsTIyPso8GDyMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvUmJGNUQ1WVhZY0ZZTmxOZXhNakkteWp3WVBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UsMA0G CSqGSIb3DQEBCwUAA4IBAQCDLXZo6fQSlu2NB72zo1yIk97whntlPpwaeDokYd0J TgYVgUmZsCgB7rxrDshHLcymhet+Nev7sQzLA+afgQ8diRYsvPQwlMV8usgfra92 E7AbvhDOOl1MDBFC21eJkWtipzNUpBjU9vnc9OZPek+mItLzqzIzNqzmfw0ZSMrs arqDG/21z0iSpO3USWGQYmS0kkDIxLMTcxh6lpzHSJCDmUhz7y5w1AhTjV4q/aeY vVpgwa1m2ch3Afm9QEowWigkHRRZU8nLATWee0LWxWBFTw25y14JGzpA/zG9SKQ2 7FNrJBVNzUVHgUpFWtJqWdRlsVrdgvDKE5PmgYlmoKqs -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:02 2026 by rpki-client