This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aq5eKQXj3By3NvNQuwGYLiezg9I.roa File: aq5eKQXj3By3NvNQuwGYLiezg9I.roa (raw, json) Hash identifier: 3R1+zO+vWE81CP0UYQd75P8LAttGXkea/7oVzxSXb4s= Subject key identifier: 6A:AE:5E:29:05:E3:DC:1C:B7:36:F3:50:BB:01:98:2E:27:B3:83:D2 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6CB5D7B7CDBBB5CF92BE6D285441 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aq5eKQXj3By3NvNQuwGYLiezg9I.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212150 IP address blocks: 87.229.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6c:b5:d7:b7:cd:bb:b5:cf:92:be:6d:28:54:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aae5e2905e3dc1cb736f350bb01982e27b383d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:85:fd:5b:5a:2e:38:f7:9a:45:2b:70:7b: 75:06:66:9a:73:cb:fc:e7:f1:60:96:9e:26:55:19: da:08:46:2f:ff:6a:26:4c:8d:b1:7c:a7:85:36:84: ed:c5:e3:ae:34:0f:84:11:cd:12:ac:86:e0:74:b8: 8f:ce:79:ec:a7:3c:54:a8:13:17:4b:10:61:06:c0: 77:03:e6:de:4d:27:b0:b9:e2:75:79:ea:4d:f1:29: 17:05:12:ab:3f:f4:1d:5d:7e:3a:04:25:3b:39:fe: 9e:1d:43:99:42:7e:3e:d3:2b:af:3e:d0:87:06:84: 0c:a0:65:9d:59:89:b3:d1:71:0c:0e:63:df:15:34: 51:89:2f:86:35:00:cd:ea:10:dc:3a:24:10:7e:55: 86:64:95:82:ea:a0:2c:03:81:2e:d3:26:e4:da:a3: 34:48:3d:65:6d:0d:ff:0d:ca:c1:15:79:f3:36:c2: 0b:a5:ae:73:f9:41:63:30:bd:2b:1b:20:51:40:c2: 27:9f:94:55:6c:7e:3e:06:40:e1:57:6b:a5:a0:0d: 40:91:96:25:58:ba:20:85:3a:eb:43:33:36:58:db: 83:09:43:d2:b1:28:0f:15:28:2c:42:3d:68:7c:fe: 15:07:37:85:4a:fb:9d:f1:80:35:8f:89:b8:93:81: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AE:5E:29:05:E3:DC:1C:B7:36:F3:50:BB:01:98:2E:27:B3:83:D2 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/aq5eKQXj3By3NvNQuwGYLiezg9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.36.0/24 Signature Algorithm: sha256WithRSAEncryption 57:fb:82:49:b7:d4:38:45:40:94:6b:12:e3:39:48:8e:0d:87: fd:21:b7:41:33:cd:71:dc:ec:f1:fb:94:5c:65:5c:66:c2:93: 90:a1:00:9d:ff:70:97:1c:5b:f5:3f:d6:e7:2f:49:41:e7:ad: 3d:9a:44:d3:19:02:0d:8e:13:de:61:c8:b3:4c:7b:d5:00:7c: 99:25:fb:8c:d2:a9:f7:e5:a2:8f:e6:29:79:cd:20:2f:f5:4a: fb:e4:1d:93:30:e8:1c:6c:d5:3a:5e:6d:a1:d3:ee:31:a5:d0: d4:39:d1:62:bf:12:5d:90:c1:81:20:f9:fc:28:5d:26:c4:4e: ed:59:3e:41:97:99:eb:c1:1b:ea:43:ed:63:3a:47:0c:8b:74: 3e:ef:34:5d:de:82:4f:bb:5d:81:6a:44:50:cb:10:6b:e8:19: df:58:aa:77:cb:58:54:a2:24:e8:35:f8:99:e5:03:76:08:b7: 3c:f4:62:0b:00:ca:71:31:3c:02:31:f0:33:db:10:2e:43:41: 70:39:32:bf:8c:36:a8:a5:0e:c1:5d:85:1a:be:a1:f1:9b:5b: 22:88:f2:05:11:13:66:c8:06:94:ab:32:c8:e2:63:51:36:fd: 2b:d1:1c:32:21:f9:c2:a5:3c:d2:b9:8f:e5:81:2f:14:bb:c2: a3:30:82:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87my117fNu7XPkr5tKFRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWFlNWUyOTA1ZTNkYzFjYjczNmYzNTBiYjAxOTgyZTI3YjM4M2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7WF/VtaLjj3mkUrcHt1Bmaac8v8 5/Fglp4mVRnaCEYv/2omTI2xfKeFNoTtxeOuNA+EEc0SrIbgdLiPznnspzxUqBMX SxBhBsB3A+beTSewueJ1eepN8SkXBRKrP/QdXX46BCU7Of6eHUOZQn4+0yuvPtCH BoQMoGWdWYmz0XEMDmPfFTRRiS+GNQDN6hDcOiQQflWGZJWC6qAsA4Eu0ybk2qM0 SD1lbQ3/DcrBFXnzNsILpa5z+UFjML0rGyBRQMInn5RVbH4+BkDhV2uloA1AkZYl WLoghTrrQzM2WNuDCUPSsSgPFSgsQj1ofP4VBzeFSvud8YA1j4m4k4GEjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGquXikF49wctzbzULsBmC4ns4PSMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvYXE1ZUtRWGozQnkzTnZOUXV3R1lMaWV6ZzlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UkMA0G CSqGSIb3DQEBCwUAA4IBAQBX+4JJt9Q4RUCUaxLjOUiODYf9IbdBM81x3Ozx+5Rc ZVxmwpOQoQCd/3CXHFv1P9bnL0lB5609mkTTGQINjhPeYcizTHvVAHyZJfuM0qn3 5aKP5il5zSAv9Ur75B2TMOgcbNU6Xm2h0+4xpdDUOdFivxJdkMGBIPn8KF0mxE7t WT5Bl5nrwRvqQ+1jOkcMi3Q+7zRd3oJPu12BakRQyxBr6BnfWKp3y1hUoiToNfiZ 5QN2CLc89GILAMpxMTwCMfAz2xAuQ0FwOTK/jDaopQ7BXYUavqHxm1siiPIFERNm yAaUqzLI4mNRNv0r0RwyIfnCpTzSuY/lgS8Uu8KjMIKg -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:50 2026 by rpki-client