This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dUo6RX2Mw89qKVay6uBSm9VV480.roa File: dUo6RX2Mw89qKVay6uBSm9VV480.roa (raw, json) Hash identifier: s651ulobCNYKGCMptZodhYT+f8Lx3Ca/OpFm/zQG8s4= Subject key identifier: 75:4A:3A:45:7D:8C:C3:CF:6A:29:56:B2:EA:E0:52:9B:D5:55:E3:CD Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A915DD8145EC3318CE4A0811D95343FF2 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dUo6RX2Mw89qKVay6uBSm9VV480.roa Signing time: Mon 17 Nov 2025 10:30:37 +0000 ROA not before: Mon 17 Nov 2025 10:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201814 IP address blocks: 87.229.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:5d:d8:14:5e:c3:31:8c:e4:a0:81:1d:95:34:3f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 17 10:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=754a3a457d8cc3cf6a2956b2eae0529bd555e3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:ce:b0:93:80:a4:0c:19:a4:c2:2b:c6:71: c1:cb:5e:11:f0:32:1e:d7:75:a3:e6:47:54:42:ed: 56:ee:6c:5d:14:64:48:46:f6:16:42:36:18:1e:cf: d6:cc:59:91:76:ea:60:9b:6e:a8:c4:2d:ce:fc:99: 06:b7:9f:43:aa:4f:3d:ec:97:8d:8e:60:22:78:fe: 98:40:88:8e:d5:f9:e5:2b:81:79:3e:e2:0f:37:33: 48:2f:e6:01:ea:9c:15:90:cc:a8:27:07:a8:a1:34: 77:1c:67:b5:4f:0a:25:14:b3:74:b1:d9:52:8a:61: d2:43:a9:fc:69:40:85:19:11:a9:72:e4:c8:03:ec: 37:fc:cb:15:ba:0e:22:c2:80:70:c1:57:07:f5:b0: c4:c9:4b:c6:13:ac:b3:30:45:7d:d8:95:18:cf:64: d0:d7:e8:e4:a7:0a:b8:13:1d:59:5b:bc:ac:b5:f9: 86:a0:f8:7a:14:a9:4a:a9:f4:b0:af:60:e8:85:e1: 5d:cd:b3:cd:0c:a6:72:d1:0d:96:6b:9b:b8:eb:6a: de:c7:5e:2d:f7:3a:cf:3f:15:f6:9c:d7:a9:03:9c: 42:92:fd:d7:0d:6a:ac:67:81:03:94:d6:61:2a:a9: fb:32:b5:79:e0:71:ac:3e:b4:1d:35:23:0e:6a:33: 46:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4A:3A:45:7D:8C:C3:CF:6A:29:56:B2:EA:E0:52:9B:D5:55:E3:CD X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dUo6RX2Mw89qKVay6uBSm9VV480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.50.0/24 Signature Algorithm: sha256WithRSAEncryption 12:95:f0:ad:0c:26:d3:12:26:e9:f0:1a:d6:20:7d:8a:73:b8: c7:0c:5b:00:1b:d3:aa:06:be:b3:23:80:b5:a8:be:b8:67:b2: f6:53:ef:e8:a8:77:49:9f:7c:81:51:7f:00:20:ce:4f:7a:ae: dd:37:ee:4c:f5:ce:52:db:80:7d:5c:0a:62:25:7d:a7:c4:32: e0:4f:f3:db:fe:4f:d8:4f:d3:81:de:d4:b5:d1:2b:50:94:a5: 2f:b6:8d:cc:68:3f:01:fc:ae:0b:a8:bd:13:02:61:d9:2f:a5: 17:ef:d4:cc:ef:55:93:6b:e9:ed:2c:fd:d0:e6:b6:7c:12:83: 63:5e:ac:69:d7:39:28:f8:77:d5:bb:35:6b:05:28:fb:b7:69: f0:03:ad:77:c9:e6:2a:65:09:5c:ba:9d:fb:d1:12:20:e4:fb: a5:56:b4:7b:1d:1c:6c:0a:3c:ae:65:e2:51:e2:68:33:d6:27: a0:39:8a:e9:50:ed:c3:ee:f7:6a:e5:e8:74:0f:d8:bb:98:75: 95:08:4f:e7:3e:28:a9:c1:99:66:32:47:2b:e3:d9:a9:6a:58: 5c:70:e1:a0:93:44:aa:93:ed:3f:74:78:8e:8d:58:fe:a3:f7: 82:c9:aa:da:84:60:74:90:5c:c1:28:a6:ca:18:b5:5d:80:cb: 6e:8d:9f:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRXdgUXsMxjOSggR2VND/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTE3MTAzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTRhM2E0NTdkOGNjM2NmNmEyOTU2YjJlYWUwNTI5YmQ1NTVlM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvjOsJOApAwZpMIrxnHBy14R8DIe 13Wj5kdUQu1W7mxdFGRIRvYWQjYYHs/WzFmRdupgm26oxC3O/JkGt59Dqk897JeN jmAieP6YQIiO1fnlK4F5PuIPNzNIL+YB6pwVkMyoJweooTR3HGe1TwolFLN0sdlS imHSQ6n8aUCFGRGpcuTIA+w3/MsVug4iwoBwwVcH9bDEyUvGE6yzMEV92JUYz2TQ 1+jkpwq4Ex1ZW7ystfmGoPh6FKlKqfSwr2DoheFdzbPNDKZy0Q2Wa5u462rex14t 9zrPPxX2nNepA5xCkv3XDWqsZ4EDlNZhKqn7MrV54HGsPrQdNSMOajNGFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVKOkV9jMPPailWsurgUpvVVePNMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvZFVvNlJYMk13ODlxS1ZheTZ1QlNtOVZWNDgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UyMA0G CSqGSIb3DQEBCwUAA4IBAQASlfCtDCbTEibp8BrWIH2Kc7jHDFsAG9OqBr6zI4C1 qL64Z7L2U+/oqHdJn3yBUX8AIM5Peq7dN+5M9c5S24B9XApiJX2nxDLgT/Pb/k/Y T9OB3tS10StQlKUvto3MaD8B/K4LqL0TAmHZL6UX79TM71WTa+ntLP3Q5rZ8EoNj Xqxp1zko+HfVuzVrBSj7t2nwA613yeYqZQlcup370RIg5PulVrR7HRxsCjyuZeJR 4mgz1iegOYrpUO3D7vdq5eh0D9i7mHWVCE/nPiipwZlmMkcr49mpalhccOGgk0Sq k+0/dHiOjVj+o/eCyarahGB0kFzBKKbKGLVdgMtujZ+C -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:06 2025 by rpki-client