This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hdoTHqwZ3Y5_vQnFtzZSygxF6ds.roa File: hdoTHqwZ3Y5_vQnFtzZSygxF6ds.roa (raw, json) Hash identifier: fhyXogFtx3wr7wSj8Uu0ORsNbhz14fHbrHfRIA6UbJE= Subject key identifier: 85:DA:13:1E:AC:19:DD:8E:7F:BD:09:C5:B7:36:52:CA:0C:45:E9:DB Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A5309816FB2DAC3BB84AC764238B3295E Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hdoTHqwZ3Y5_vQnFtzZSygxF6ds.roa Signing time: Wed 05 Nov 2025 08:02:03 +0000 ROA not before: Wed 05 Nov 2025 08:02:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 87.229.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:09:81:6f:b2:da:c3:bb:84:ac:76:42:38:b3:29:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 5 08:02:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=85da131eac19dd8e7fbd09c5b73652ca0c45e9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:e9:e5:77:c2:47:11:93:1a:b7:9b:11:21: 88:0d:d2:e2:23:2c:84:c8:fd:d9:28:ce:70:8d:e2: 50:e2:56:bb:5f:0b:c0:0a:ce:56:1b:a4:2a:2b:6c: eb:54:4d:46:3f:20:36:a2:6e:8c:1d:fb:85:66:e9: be:36:0b:7a:a7:a0:ae:3d:a8:d8:1d:57:2e:93:3f: 2d:72:86:72:0c:82:88:c7:44:12:50:4e:8e:69:d9: c8:c1:34:fd:45:1e:d2:d9:ed:33:70:a8:f7:58:84: 56:65:a8:09:86:b8:cc:98:07:86:27:c6:f3:67:cd: fa:59:53:4b:2d:5f:f3:84:8a:0b:d6:29:ec:44:51: 2e:06:57:db:e2:e8:7d:75:37:76:32:b0:f0:a5:cc: c9:43:bf:2e:bb:de:3c:4e:61:24:6a:d8:9e:9e:92: 38:43:08:a6:e9:74:2f:e1:7c:27:e5:f6:5f:a1:4a: 7e:06:8f:cf:9f:1a:86:0e:6d:c2:a3:98:25:c2:4f: 36:e6:a4:c6:0a:c9:67:30:67:d2:74:1f:c2:e6:65: 31:79:c6:c7:d6:02:cd:42:f9:e2:19:7b:ae:81:d8: 28:75:3c:37:2c:a8:56:1c:d8:e9:30:fc:10:41:98: 91:37:06:c7:20:45:db:23:4b:7c:c8:5c:c8:3f:a5: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:13:1E:AC:19:DD:8E:7F:BD:09:C5:B7:36:52:CA:0C:45:E9:DB X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hdoTHqwZ3Y5_vQnFtzZSygxF6ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.110.0/24 Signature Algorithm: sha256WithRSAEncryption 61:85:7c:21:8c:39:63:c2:fe:e2:12:f6:9d:14:72:14:70:2b: 9b:3a:47:05:5a:4d:e0:6d:8c:5f:df:74:86:88:71:2c:b6:9e: dd:57:52:71:3a:68:aa:e5:06:ec:14:ff:d4:9d:15:6a:86:1a: b8:04:ba:4b:7b:d8:b2:90:22:fc:25:4e:d4:a5:42:4a:2f:4a: fc:ad:91:03:70:85:78:68:63:06:17:3d:6f:35:40:87:74:ad: db:33:0e:d7:d2:08:d7:15:5b:88:cc:8a:69:4d:fa:d1:4e:d8: 15:85:a8:b6:5c:ce:db:50:a6:37:8e:2b:ee:c9:11:d1:4a:21: e2:8c:25:f8:26:67:14:20:96:76:7a:30:7b:dd:87:c3:0e:c5: c8:32:29:41:63:79:39:25:68:ae:c9:4d:3e:63:1b:b9:6d:cd: d0:c9:bf:2c:70:2f:b2:6b:95:4b:1d:3a:7e:8e:4b:fe:06:31: b9:33:4c:71:51:5d:ff:60:64:40:b9:ea:b2:de:2e:7f:e4:fb: fe:f5:62:0d:bd:c1:ff:c2:bb:7f:af:2b:23:ed:33:70:4e:00: 87:dc:8b:28:88:83:73:7e:42:b4:c5:68:33:11:fc:0b:a9:87: 7e:15:7c:15:30:99:df:17:79:ea:fe:30:b1:85:d4:2f:4a:04: a0:70:8a:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTCYFvstrDu4SsdkI4syleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTA1MDgwMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWRhMTMxZWFjMTlkZDhlN2ZiZDA5YzViNzM2NTJjYTBjNDVlOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF7p5XfCRxGTGrebESGIDdLiIyyE yP3ZKM5wjeJQ4la7XwvACs5WG6QqK2zrVE1GPyA2om6MHfuFZum+Ngt6p6CuPajY HVcukz8tcoZyDIKIx0QSUE6OadnIwTT9RR7S2e0zcKj3WIRWZagJhrjMmAeGJ8bz Z836WVNLLV/zhIoL1insRFEuBlfb4uh9dTd2MrDwpczJQ78uu948TmEkatienpI4 Qwim6XQv4Xwn5fZfoUp+Bo/PnxqGDm3Co5glwk825qTGCslnMGfSdB/C5mUxecbH 1gLNQvniGXuugdgodTw3LKhWHNjpMPwQQZiRNwbHIEXbI0t8yFzIP6U6QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXaEx6sGd2Of70Jxbc2UsoMRenbMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvaGRvVEhxd1ozWTVfdlFuRnR6WlN5Z3hGNmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VuMA0G CSqGSIb3DQEBCwUAA4IBAQBhhXwhjDljwv7iEvadFHIUcCubOkcFWk3gbYxf33SG iHEstp7dV1JxOmiq5QbsFP/UnRVqhhq4BLpLe9iykCL8JU7UpUJKL0r8rZEDcIV4 aGMGFz1vNUCHdK3bMw7X0gjXFVuIzIppTfrRTtgVhai2XM7bUKY3jivuyRHRSiHi jCX4JmcUIJZ2ejB73YfDDsXIMilBY3k5JWiuyU0+Yxu5bc3Qyb8scC+ya5VLHTp+ jkv+BjG5M0xxUV3/YGRAueqy3i5/5Pv+9WINvcH/wrt/rysj7TNwTgCH3IsoiINz fkK0xWgzEfwLqYd+FXwVMJnfF3nq/jCxhdQvSgSgcIow -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:44 2025 by rpki-client