This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/j2ZRtM03JEzI35ksudNWRvj_xhA.roa File: j2ZRtM03JEzI35ksudNWRvj_xhA.roa (raw, json) Hash identifier: wj0i1h1yF9JBcwVeAVBalRxkRekGuGE8XYYCyBtaEVY= Subject key identifier: 8F:66:51:B4:CD:37:24:4C:C8:DF:99:2C:B9:D3:56:46:F8:FF:C6:10 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE4C9FE6C63873917A1725361ADF27 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/j2ZRtM03JEzI35ksudNWRvj_xhA.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 79.172.192.0/24 maxlen: 24 87.229.8.0/24 maxlen: 24 87.229.51.0/24 maxlen: 24 87.229.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4c:9f:e6:c6:38:73:91:7a:17:25:36:1a:df:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f6651b4cd37244cc8df992cb9d35646f8ffc610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:0d:6b:3c:f2:26:f4:f6:a8:af:c7:d2:5a: a1:a1:f1:94:98:4d:00:7e:7e:3a:b7:34:7d:ea:cc: 32:bd:af:24:9e:5f:d2:8b:c6:32:a0:4c:ee:22:a4: 87:0d:f0:50:1c:af:b3:81:f4:b8:84:09:2d:64:57: 1d:8c:2e:b8:86:b6:6f:91:15:9d:db:c7:42:48:73: f8:63:07:40:ec:1b:93:9d:2d:0e:1e:c2:09:69:dd: 26:a8:c7:9e:f8:08:3e:75:cb:4e:ff:be:1e:fc:67: 32:61:00:cf:63:a7:0c:73:69:a8:0d:ba:04:ed:c4: 4b:6f:ab:a6:fd:98:af:ff:9f:ae:70:04:7d:5f:ab: ba:23:77:b6:fd:67:24:72:7e:8f:a6:20:4d:82:04: ee:a8:a5:c1:49:7b:1d:7a:1f:68:85:68:f7:d4:cb: 76:f6:dc:9f:30:4b:e9:44:34:93:c1:5a:51:b8:ba: fe:20:a5:c3:23:b9:28:bd:29:90:16:04:85:5e:15: d5:5f:ff:27:82:65:1b:c1:09:d9:b0:35:f9:5a:02: 23:62:c5:2c:63:b8:48:93:dd:2b:83:a7:60:1d:7f: 0f:5d:d6:ed:a6:ee:01:57:d9:bf:c4:79:fd:66:d7: 47:e2:fb:98:82:38:d6:e7:24:39:a3:b5:28:92:e0: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:66:51:B4:CD:37:24:4C:C8:DF:99:2C:B9:D3:56:46:F8:FF:C6:10 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/j2ZRtM03JEzI35ksudNWRvj_xhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.192.0/24 87.229.8.0/24 87.229.51.0/24 87.229.64.0/24 Signature Algorithm: sha256WithRSAEncryption 01:62:ca:9a:47:6c:5a:2e:5d:11:bb:da:a1:85:b7:01:5d:9f: c2:96:89:03:56:6e:22:77:d1:3a:5d:90:05:ff:ca:f9:e9:06: 39:fc:db:65:e1:eb:c7:9a:aa:40:17:fe:5d:ae:b1:20:05:2d: 76:8b:a0:c1:32:fb:fd:af:1c:04:3d:b8:1f:70:e9:17:c0:11: a5:ce:72:bb:d0:59:fb:56:21:5c:b3:1d:3a:a5:38:3c:7c:a6: f0:4c:fd:74:b5:10:e9:45:52:8d:07:99:5e:e8:10:c6:a4:89: 87:3a:7a:eb:04:34:70:f0:ef:61:a1:b6:08:1d:3d:b3:17:69: d7:d2:2f:a8:d2:de:99:74:cd:31:c0:0a:85:58:8a:05:c0:c2: fe:69:ba:1b:b2:cb:8d:7f:c5:63:ce:b6:2e:67:e6:cc:29:81: b7:7b:ed:30:78:37:83:5f:d1:9e:3a:f7:49:93:f9:e5:7e:53: 97:91:30:b2:f1:bc:d6:47:fa:28:33:33:6e:6c:c0:fa:f3:4d: 91:72:36:7a:9c:8c:c1:e9:66:42:94:da:a8:0f:5a:40:d3:7c: 26:ac:7e:3f:19:ef:97:c2:d3:16:e9:5b:42:a9:12:fc:00:00: 49:39:70:76:26:31:d9:40:5a:01:b7:9d:a5:bd:f1:81:52:88: e1:c7:5c:84 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87kyf5sY4c5F6FyU2Gt8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjY2NTFiNGNkMzcyNDRjYzhkZjk5MmNiOWQzNTY0NmY4ZmZjNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyQNazzyJvT2qK/H0lqhofGUmE0A fn46tzR96swyva8knl/Si8YyoEzuIqSHDfBQHK+zgfS4hAktZFcdjC64hrZvkRWd 28dCSHP4YwdA7BuTnS0OHsIJad0mqMee+Ag+dctO/74e/GcyYQDPY6cMc2moDboE 7cRLb6um/Ziv/5+ucAR9X6u6I3e2/Wckcn6PpiBNggTuqKXBSXsdeh9ohWj31Mt2 9tyfMEvpRDSTwVpRuLr+IKXDI7kovSmQFgSFXhXVX/8ngmUbwQnZsDX5WgIjYsUs Y7hIk90rg6dgHX8PXdbtpu4BV9m/xHn9ZtdH4vuYgjjW5yQ5o7UokuD3eQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI9mUbTNNyRMyN+ZLLnTVkb4/8YQMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvajJaUnRNMDNKRXpJMzVrc3VkTldSdmpfeGhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT6zAAwQA V+UIAwQAV+UzAwQAV+VAMA0GCSqGSIb3DQEBCwUAA4IBAQABYsqaR2xaLl0Ru9qh hbcBXZ/ClokDVm4id9E6XZAF/8r56QY5/Ntl4evHmqpAF/5drrEgBS12i6DBMvv9 rxwEPbgfcOkXwBGlznK70Fn7ViFcsx06pTg8fKbwTP10tRDpRVKNB5le6BDGpImH OnrrBDRw8O9hobYIHT2zF2nX0i+o0t6ZdM0xwAqFWIoFwML+abobssuNf8VjzrYu Z+bMKYG3e+0weDeDX9GeOvdJk/nlflOXkTCy8bzWR/ooMzNubMD6802RcjZ6nIzB 6WZClNqoD1pA03wmrH4/Ge+XwtMW6VtCqRL8AABJOXB2JjHZQFoBt52lvfGBUojh x1yE -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:22 2026 by rpki-client