This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ShzvJTgg0PEFmroYDQzGMr-ZawI.roa File: ShzvJTgg0PEFmroYDQzGMr-ZawI.roa (raw, json) Hash identifier: zOVLwVkiNcFVXzMcLN7fw13NmECYrmnF2vl6RY6HwD8= Subject key identifier: 4A:1C:EF:25:38:20:D0:F1:05:9A:BA:18:0D:0C:C6:32:BF:99:6B:02 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE681D2A03D17FC67068DBE7618F4B Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ShzvJTgg0PEFmroYDQzGMr-ZawI.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205840 IP address blocks: 87.229.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:68:1d:2a:03:d1:7f:c6:70:68:db:e7:61:8f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a1cef253820d0f1059aba180d0cc632bf996b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:8e:e6:88:bd:66:5b:00:d1:10:13:54:87: ac:a2:10:02:30:20:14:67:9c:cb:91:68:74:ae:b8: 49:d0:ba:3d:f9:88:82:d3:00:96:6e:95:54:b3:89: 16:51:5a:e6:e0:5f:55:93:3e:fc:2b:5c:c7:ea:7d: c7:39:33:90:c7:72:00:ee:61:31:0c:0f:2c:fd:72: b5:ff:e0:ad:45:16:10:11:6b:de:bc:e5:17:e6:96: 49:42:62:2e:ba:61:11:19:fc:34:bc:9b:aa:2f:13: 63:3d:0e:c3:58:3b:23:bb:6b:2d:b5:06:0c:18:05: b8:77:2a:e7:fc:8b:27:ad:dd:8b:6b:0b:28:a8:d4: 99:83:cd:64:f8:50:29:6b:77:c0:90:80:24:04:cb: d9:de:61:58:d5:c7:4a:aa:56:07:34:49:f7:f5:9b: cf:53:17:1f:69:df:c6:cf:fd:3e:05:fc:cc:5e:b0: 7c:8f:2d:37:d7:3a:1e:51:9e:20:32:aa:ff:98:39: 0d:22:29:5a:9b:78:3f:af:11:df:c2:8d:09:27:1d: 04:0e:4c:fa:c7:9a:b3:32:fe:5b:a0:a6:93:8d:c4: 03:65:1e:f2:40:31:4b:15:69:a5:42:f8:6c:c0:74: c1:69:d9:bf:88:af:35:ab:ae:fc:79:b7:11:e7:ae: 75:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1C:EF:25:38:20:D0:F1:05:9A:BA:18:0D:0C:C6:32:BF:99:6B:02 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ShzvJTgg0PEFmroYDQzGMr-ZawI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.80.0/24 Signature Algorithm: sha256WithRSAEncryption 73:8d:79:f8:58:70:28:33:cb:df:37:18:96:3a:7e:b7:f0:93: 8d:8b:77:30:ee:92:ec:f6:7e:d7:7d:24:88:3d:38:0d:87:3d: 4d:3c:09:b5:9a:2f:35:13:d6:b0:fa:04:81:d6:bd:d2:eb:18: b5:e6:bf:bc:e6:51:56:5c:1b:23:4c:a5:6a:4a:5c:eb:47:ae: 11:d6:b4:e1:68:12:7d:4e:bd:cf:e0:a8:af:41:2b:1d:68:16: b7:ac:27:b9:95:86:49:bf:e6:47:a9:05:20:eb:be:67:2b:eb: a3:10:58:ae:66:1b:b4:e1:c7:3d:ba:f0:69:b8:f3:4b:48:80: e8:53:27:1a:58:96:77:a8:cb:d2:9a:5a:e6:11:7e:c1:89:f8: 43:23:e7:1c:3c:6d:cf:8a:7d:ee:cb:94:e3:d5:5c:10:ed:1d: 63:3d:1f:9c:75:a6:06:be:82:b5:c0:b2:2d:de:28:3f:32:54: f1:85:6c:3a:b3:61:3c:c5:c1:7a:df:58:0b:ee:3a:b7:f1:45: 1e:7e:b0:84:26:17:ad:dc:69:4c:fc:1e:72:3a:17:f2:47:77: 86:53:37:bc:01:11:ca:9b:e5:d3:18:c3:82:5b:b1:5c:1c:d0: 72:77:77:fb:26:6a:ca:1d:5a:a3:9d:54:14:00:16:81:64:9a: 4b:a2:c5:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mgdKgPRf8ZwaNvnYY9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTFjZWYyNTM4MjBkMGYxMDU5YWJhMTgwZDBjYzYzMmJmOTk2YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlROO5oi9ZlsA0RATVIesohACMCAU Z5zLkWh0rrhJ0Lo9+YiC0wCWbpVUs4kWUVrm4F9Vkz78K1zH6n3HOTOQx3IA7mEx DA8s/XK1/+CtRRYQEWvevOUX5pZJQmIuumERGfw0vJuqLxNjPQ7DWDsju2sttQYM GAW4dyrn/Isnrd2LawsoqNSZg81k+FApa3fAkIAkBMvZ3mFY1cdKqlYHNEn39ZvP Uxcfad/Gz/0+BfzMXrB8jy031zoeUZ4gMqr/mDkNIilam3g/rxHfwo0JJx0EDkz6 x5qzMv5boKaTjcQDZR7yQDFLFWmlQvhswHTBadm/iK81q678ebcR5651iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEoc7yU4INDxBZq6GA0MxjK/mWsCMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvU2h6dkpUZ2cwUEVGbXJvWURRekdNci1aYXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VQMA0G CSqGSIb3DQEBCwUAA4IBAQBzjXn4WHAoM8vfNxiWOn638JONi3cw7pLs9n7XfSSI PTgNhz1NPAm1mi81E9aw+gSB1r3S6xi15r+85lFWXBsjTKVqSlzrR64R1rThaBJ9 Tr3P4KivQSsdaBa3rCe5lYZJv+ZHqQUg675nK+ujEFiuZhu04cc9uvBpuPNLSIDo UycaWJZ3qMvSmlrmEX7BifhDI+ccPG3Pin3uy5Tj1VwQ7R1jPR+cdaYGvoK1wLIt 3ig/MlTxhWw6s2E8xcF631gL7jq38UUefrCEJhet3GlM/B5yOhfyR3eGUze8ARHK m+XTGMOCW7FcHNByd3f7JmrKHVqjnVQUABaBZJpLosUC -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:05 2026 by rpki-client