This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/U206TDUtfxvh6qLbLES3jGtba0A.roa File: U206TDUtfxvh6qLbLES3jGtba0A.roa (raw, json) Hash identifier: 8SME55aDcDfDATyg1mF/oNjhcsLkE1CVQZbk5rosJp4= Subject key identifier: 53:6D:3A:4C:35:2D:7F:1B:E1:EA:A2:DB:2C:44:B7:8C:6B:5B:6B:40 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A90B5628F24A8132EEEFF8E02C4738650 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/U206TDUtfxvh6qLbLES3jGtba0A.roa Signing time: Mon 17 Nov 2025 07:26:37 +0000 ROA not before: Mon 17 Nov 2025 07:26:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 79.172.228.0/24 maxlen: 24 87.229.112.0/24 maxlen: 24 87.229.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:b5:62:8f:24:a8:13:2e:ee:ff:8e:02:c4:73:86:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 17 07:26:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=536d3a4c352d7f1be1eaa2db2c44b78c6b5b6b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:e3:24:2d:61:d2:5e:0a:9c:4a:93:93:d3: ff:c7:88:99:7b:7b:ac:ae:fd:5f:d5:57:81:71:8b: 91:f8:99:91:45:28:f6:2d:f7:20:85:da:41:9b:3b: f9:64:26:e7:7c:48:f6:2b:32:56:e7:ec:50:49:75: 8f:6f:59:7c:46:b2:08:32:75:d5:89:35:96:6e:dd: 6c:e0:5c:22:9c:64:6d:3c:9a:da:1b:86:7e:94:a7: 55:d1:8e:c5:29:c2:7c:6f:61:13:10:a7:4e:09:c2: 6e:6c:f1:74:e2:75:78:99:3f:85:aa:9e:d5:71:58: 87:08:81:bf:30:f3:80:20:e7:44:92:7e:45:ca:b8: 87:ac:af:36:d4:48:88:c1:d2:f6:ad:ec:2a:26:0c: e0:c0:91:f0:3e:03:80:f1:f0:d9:59:21:8f:e0:b7: e9:27:d3:60:e5:ac:8e:7f:38:65:d7:57:4a:13:f4: 42:4a:cc:fd:8d:0a:66:c7:08:e7:ce:1d:d9:6d:85: e6:cf:d9:c7:3d:65:5a:43:95:93:ac:2f:3e:a7:f9: 89:12:b3:fa:43:6f:19:47:70:28:a6:17:24:98:b1: f0:5b:de:b5:3d:e8:19:a6:ef:df:f4:7a:f7:60:b2: 89:97:7a:5b:fd:73:1a:ca:f2:5b:36:0f:43:ab:6d: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6D:3A:4C:35:2D:7F:1B:E1:EA:A2:DB:2C:44:B7:8C:6B:5B:6B:40 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/U206TDUtfxvh6qLbLES3jGtba0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.228.0/24 87.229.112.0/24 87.229.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:55:cf:73:84:38:64:47:7d:d2:37:96:b2:9f:05:7c:5a:17: 17:34:69:db:8d:4d:aa:e7:3c:f8:01:f3:4a:ee:1a:68:95:b7: ec:81:d0:ab:8c:3d:de:80:4d:15:1a:62:77:76:17:40:d5:64: ff:e2:c1:31:81:1f:8a:fb:dc:61:d5:46:c9:d9:12:9e:0e:02: ea:c9:d7:c5:f8:b7:38:45:be:12:18:bf:2d:64:67:f3:3e:57: 03:10:70:3e:cb:7e:8d:87:09:c7:38:47:3c:1c:46:22:9e:02: 53:4f:7b:b9:01:c9:36:da:15:2b:07:ff:13:1d:71:31:f9:02: 08:c8:f8:9d:9e:d5:b4:52:b4:8f:4b:02:2c:b0:52:64:cd:75: fc:37:0a:4e:e8:e5:b3:43:2f:cf:75:ce:01:e5:0c:7d:12:2e: a2:ce:34:90:83:d9:2a:ea:a1:4e:b7:ed:e6:c5:08:06:54:c6: a2:d2:5e:c0:94:77:54:2e:ab:f2:5f:cc:03:d8:34:4f:c8:47: b4:b7:10:e7:f8:1d:11:5e:76:80:9d:f9:a1:67:b1:26:70:73: e1:ef:93:c1:d0:50:88:a7:d1:fa:85:22:77:39:4c:47:7d:a4: cd:e2:b5:a0:af:68:f9:f4:a6:fc:1c:40:a2:f4:f0:48:bf:0e: 32:c8:f5:ab -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqQtWKPJKgTLu7/jgLEc4ZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTE3MDcyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzZkM2E0YzM1MmQ3ZjFiZTFlYWEyZGIyYzQ0Yjc4YzZiNWI2YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZjjJC1h0l4KnEqTk9P/x4iZe3us rv1f1VeBcYuR+JmRRSj2LfcghdpBmzv5ZCbnfEj2KzJW5+xQSXWPb1l8RrIIMnXV iTWWbt1s4FwinGRtPJraG4Z+lKdV0Y7FKcJ8b2ETEKdOCcJubPF04nV4mT+Fqp7V cViHCIG/MPOAIOdEkn5FyriHrK821EiIwdL2rewqJgzgwJHwPgOA8fDZWSGP4Lfp J9Ng5ayOfzhl11dKE/RCSsz9jQpmxwjnzh3ZbYXmz9nHPWVaQ5WTrC8+p/mJErP6 Q28ZR3AophckmLHwW961PegZpu/f9Hr3YLKJl3pb/XMayvJbNg9Dq22BvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFNtOkw1LX8b4eqi2yxEt4xrW2tAMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvVTIwNlREVXRmeHZoNnFMYkxFUzNqR3RiYTBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT6zkAwQA V+VwAwQAV+V8MA0GCSqGSIb3DQEBCwUAA4IBAQCMVc9zhDhkR33SN5aynwV8WhcX NGnbjU2q5zz4AfNK7hpolbfsgdCrjD3egE0VGmJ3dhdA1WT/4sExgR+K+9xh1UbJ 2RKeDgLqydfF+Lc4Rb4SGL8tZGfzPlcDEHA+y36NhwnHOEc8HEYingJTT3u5Ack2 2hUrB/8THXEx+QIIyPidntW0UrSPSwIssFJkzXX8NwpO6OWzQy/Pdc4B5Qx9Ei6i zjSQg9kq6qFOt+3mxQgGVMai0l7AlHdULqvyX8wD2DRPyEe0txDn+B0RXnaAnfmh Z7EmcHPh75PB0FCIp9H6hSJ3OUxHfaTN4rWgr2j59Kb8HECi9PBIvw4yyPWr -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:56 2025 by rpki-client