This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jVBGNAsRLJmOcQ0frsx8UoPhL18.roa File: jVBGNAsRLJmOcQ0frsx8UoPhL18.roa (raw, json) Hash identifier: oIAMAZ7GbPviFShUOhs2CW7cvblwVgrF1JgMZ//1WXo= Subject key identifier: 8D:50:46:34:0B:11:2C:99:8E:71:0D:1F:AE:CC:7C:52:83:E1:2F:5F Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019BBC84817B7A6E8C720A33B7F889947A4F Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jVBGNAsRLJmOcQ0frsx8UoPhL18.roa Signing time: Wed 14 Jan 2026 12:39:19 +0000 ROA not before: Wed 14 Jan 2026 12:39:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 79.172.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:84:81:7b:7a:6e:8c:72:0a:33:b7:f8:89:94:7a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 14 12:39:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d5046340b112c998e710d1faecc7c5283e12f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e3:20:16:3a:1e:84:42:8e:b3:6c:55:0a:5a: eb:53:dd:88:3f:4b:12:87:31:bc:38:f8:f8:8c:c5: c1:0d:f5:1f:5c:e8:d1:91:e2:30:4c:6c:b9:77:27: a7:46:4a:e8:84:3c:43:d0:8f:3c:a2:82:e1:5e:91: 35:f9:22:b1:16:cd:ed:57:a7:d8:a2:cb:ac:66:b6: b2:d2:8f:99:1c:46:07:83:f9:b1:b3:cc:c3:3b:d9: d3:d3:ad:e9:49:0d:d3:b4:d6:36:c8:bd:5b:7b:9c: 57:b4:d8:2e:ee:98:31:67:36:8c:2a:9d:e6:d5:41: 0a:8b:21:ab:93:79:ff:51:c6:27:4b:01:69:9b:e5: da:6e:d6:ec:44:5b:ba:75:62:05:78:aa:98:a7:95: c5:51:4d:6e:f4:e4:dc:df:ab:39:30:c5:cb:59:fb: 63:3b:03:65:91:aa:a3:97:41:15:66:fb:6f:a7:e8: ea:33:50:bd:f0:17:0d:76:4b:e2:06:af:ef:4f:82: 16:88:20:da:f3:d7:bf:50:ce:57:47:41:0e:8b:d4: c1:1f:5c:de:0a:87:63:ef:63:8a:34:7b:fb:31:6e: 95:93:ad:e6:ae:8c:23:6a:31:fe:c9:bb:20:72:38: 76:2c:58:fc:97:27:7e:d4:2a:76:66:4b:05:5d:ba: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:46:34:0B:11:2C:99:8E:71:0D:1F:AE:CC:7C:52:83:E1:2F:5F X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jVBGNAsRLJmOcQ0frsx8UoPhL18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.242.0/24 Signature Algorithm: sha256WithRSAEncryption 66:3f:63:40:f9:6b:43:99:a3:f1:e6:59:8f:08:0f:a2:2f:9d: 28:bb:1c:47:8f:5b:a5:f4:78:53:28:c2:82:c0:aa:8a:86:5d: 6c:c3:91:56:98:2d:8f:59:d2:27:31:f8:95:16:3d:39:1c:c6: 11:01:8f:c5:ec:68:e7:7a:9c:79:27:92:38:d3:41:aa:91:81: e6:eb:41:f4:2c:14:d4:e4:20:d0:fd:60:58:b2:eb:98:53:85: 6e:f1:89:3d:a6:31:3b:5c:24:7a:08:06:7f:e9:3c:95:88:8d: f3:b1:03:9e:4d:4f:39:67:a5:4a:d8:53:15:5f:15:c6:81:2d: 44:c9:51:68:35:76:0e:97:96:b1:cc:b6:ec:28:05:7e:6e:13: 14:69:5e:58:a5:44:80:02:b7:b6:7b:86:e3:16:1b:de:63:0e: 9e:8d:57:ca:41:64:e2:1e:83:72:46:56:e2:b7:45:f4:fa:7e: 41:fe:87:54:a7:db:ef:ef:68:f7:39:01:b9:cd:82:ae:0f:ee: 86:df:e9:1a:c3:5e:9a:37:44:4c:34:aa:ce:40:58:0a:c2:46: 98:9a:a9:af:de:59:90:e9:2b:41:d8:05:54:a9:a9:bc:74:a2: a9:24:90:b9:a5:b7:5c:8b:7d:2e:a5:76:e4:86:56:0a:57:0f: 99:e2:0a:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu8hIF7em6Mcgozt/iJlHpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTE0MTIzOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDUwNDYzNDBiMTEyYzk5OGU3MTBkMWZhZWNjN2M1MjgzZTEyZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+MgFjoehEKOs2xVClrrU92IP0sS hzG8OPj4jMXBDfUfXOjRkeIwTGy5dyenRkrohDxD0I88ooLhXpE1+SKxFs3tV6fY osusZray0o+ZHEYHg/mxs8zDO9nT063pSQ3TtNY2yL1be5xXtNgu7pgxZzaMKp3m 1UEKiyGrk3n/UcYnSwFpm+XabtbsRFu6dWIFeKqYp5XFUU1u9OTc36s5MMXLWftj OwNlkaqjl0EVZvtvp+jqM1C98BcNdkviBq/vT4IWiCDa89e/UM5XR0EOi9TBH1ze Codj72OKNHv7MW6Vk63mrowjajH+ybsgcjh2LFj8lyd+1Cp2ZksFXbp49wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI1QRjQLESyZjnENH67MfFKD4S9fMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvalZCR05Bc1JMSm1PY1EwZnJzeDhVb1BoTDE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6zyMA0G CSqGSIb3DQEBCwUAA4IBAQBmP2NA+WtDmaPx5lmPCA+iL50ouxxHj1ul9HhTKMKC wKqKhl1sw5FWmC2PWdInMfiVFj05HMYRAY/F7Gjnepx5J5I400GqkYHm60H0LBTU 5CDQ/WBYsuuYU4Vu8Yk9pjE7XCR6CAZ/6TyViI3zsQOeTU85Z6VK2FMVXxXGgS1E yVFoNXYOl5axzLbsKAV+bhMUaV5YpUSAAre2e4bjFhveYw6ejVfKQWTiHoNyRlbi t0X0+n5B/odUp9vv72j3OQG5zYKuD+6G3+kaw16aN0RMNKrOQFgKwkaYmqmv3lmQ 6StB2AVUqam8dKKpJJC5pbdci30upXbkhlYKVw+Z4gpM -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:22 2026 by rpki-client