This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/n5tXTURu-EWq9IIeeu3OWmMNhmg.roa File: n5tXTURu-EWq9IIeeu3OWmMNhmg.roa (raw, json) Hash identifier: SZ4JDTlK8pTrscOsDdXpXC+EHWCy9bu/dyoL3M901ms= Subject key identifier: 9F:9B:57:4D:44:6E:F8:45:AA:F4:82:1E:7A:ED:CE:5A:63:0D:86:68 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A97BE3B2930C27E691D5F51F04BCCC976 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/n5tXTURu-EWq9IIeeu3OWmMNhmg.roa Signing time: Tue 18 Nov 2025 16:13:37 +0000 ROA not before: Tue 18 Nov 2025 16:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41075 IP address blocks: 79.172.194.0/23 maxlen: 23 79.172.197.0/24 maxlen: 24 87.229.7.0/24 maxlen: 24 87.229.24.0/24 maxlen: 24 87.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:be:3b:29:30:c2:7e:69:1d:5f:51:f0:4b:cc:c9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 18 16:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f9b574d446ef845aaf4821e7aedce5a630d8668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:db:c9:11:29:de:d5:8b:f4:59:4f:bc:3d: 92:47:81:e5:a6:aa:40:95:2f:c8:97:98:f9:b3:ea: 94:7c:d3:99:27:36:81:b8:31:a7:1a:5b:95:36:35: d9:ad:74:06:21:39:d1:11:57:55:86:ef:4e:9c:eb: 2f:b7:f7:cc:b6:13:ad:11:f9:f5:fd:56:c5:7f:e0: 99:05:a3:c5:ff:0b:ec:32:f2:6e:b0:98:2c:dc:cb: ff:da:f0:fa:fc:ae:ea:89:54:56:53:3d:d1:a6:bc: fe:f1:78:b8:cb:c9:10:2c:70:04:b0:13:fb:f4:b8: eb:b4:1a:58:aa:83:e6:c7:c9:03:21:42:28:78:35: 33:92:63:37:08:dd:a9:8c:20:ce:9b:d7:d7:dc:98: ff:da:bc:db:7c:64:db:dc:1f:30:9c:09:35:3f:cc: 84:cb:38:ea:87:9d:8a:57:1f:65:7a:1e:51:d5:e8: 55:32:9c:67:fc:4a:49:6a:8d:f4:5c:fd:74:9f:2a: 9b:f0:54:07:23:24:5d:0c:d1:c4:7f:b4:04:85:7a: 8a:2a:d4:c6:64:be:79:a3:b8:54:f5:59:6c:73:69: b2:5f:68:41:d3:97:8a:25:46:af:96:83:1b:f8:4f: b8:24:68:02:06:2e:01:77:bd:6f:c5:55:d5:18:a1: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:57:4D:44:6E:F8:45:AA:F4:82:1E:7A:ED:CE:5A:63:0D:86:68 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/n5tXTURu-EWq9IIeeu3OWmMNhmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.194.0/23 79.172.197.0/24 87.229.7.0/24 87.229.24.0/24 87.229.111.0/24 Signature Algorithm: sha256WithRSAEncryption 01:e5:ba:f3:a4:0a:6a:60:d5:87:a7:1a:2b:e5:12:95:5f:29: f0:17:76:3d:3a:ff:11:68:d7:4f:92:3b:f5:7a:f9:ac:a5:7d: 44:c3:27:99:1d:6a:a2:ae:b9:c4:03:42:a9:f2:c7:25:d0:05: ad:3f:c9:f6:7b:78:3d:75:15:82:5e:f5:d8:b6:1f:ab:da:a4: b9:7e:08:be:5e:d2:61:ec:2b:c1:60:b2:f2:d0:8c:2b:53:84: 99:66:36:8a:e1:0e:84:33:ec:3b:09:9c:ee:b0:76:0e:80:4e: e1:63:c3:9c:fa:ff:8e:a6:c5:e8:3a:db:19:25:7a:c9:c8:ad: 8d:c2:19:69:4a:cb:ce:ac:97:69:e5:50:ef:f6:6b:51:47:24: 67:c0:6f:bb:b9:d6:62:d0:11:fc:24:4e:8f:88:a2:91:ed:75: f8:02:3c:67:a4:3d:95:c1:36:ca:77:64:9f:2e:10:9e:ce:c0: a4:9d:6c:be:87:ac:cf:21:10:15:6b:58:3e:1e:b3:de:30:68: 9a:28:ba:ba:d2:ea:4a:ff:b7:4a:a2:d2:51:1f:34:70:f3:f6: 40:0a:51:bf:94:82:01:8f:e4:27:f8:41:22:d3:fd:27:79:f8: 90:5e:4c:df:aa:ea:43:3e:22:77:5b:d9:90:7d:30:47:f5:c0: 6f:8c:39:09 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqXvjspMMJ+aR1fUfBLzMl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTE4MTYxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjliNTc0ZDQ0NmVmODQ1YWFmNDgyMWU3YWVkY2U1YTYzMGQ4NjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zTbyREp3tWL9FlPvD2SR4HlpqpA lS/Il5j5s+qUfNOZJzaBuDGnGluVNjXZrXQGITnREVdVhu9OnOsvt/fMthOtEfn1 /VbFf+CZBaPF/wvsMvJusJgs3Mv/2vD6/K7qiVRWUz3Rprz+8Xi4y8kQLHAEsBP7 9LjrtBpYqoPmx8kDIUIoeDUzkmM3CN2pjCDOm9fX3Jj/2rzbfGTb3B8wnAk1P8yE yzjqh52KVx9leh5R1ehVMpxn/EpJao30XP10nyqb8FQHIyRdDNHEf7QEhXqKKtTG ZL55o7hU9Vlsc2myX2hB05eKJUavloMb+E+4JGgCBi4Bd71vxVXVGKHOhwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJ+bV01EbvhFqvSCHnrtzlpjDYZoMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvbjV0WFRVUnUtRVdxOUlJZWV1M09XbU1OaG1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBT6zCAwQA T6zFAwQAV+UHAwQAV+UYAwQAV+VvMA0GCSqGSIb3DQEBCwUAA4IBAQAB5brzpApq YNWHpxor5RKVXynwF3Y9Ov8RaNdPkjv1evmspX1EwyeZHWqirrnEA0Kp8scl0AWt P8n2e3g9dRWCXvXYth+r2qS5fgi+XtJh7CvBYLLy0IwrU4SZZjaK4Q6EM+w7CZzu sHYOgE7hY8Oc+v+OpsXoOtsZJXrJyK2NwhlpSsvOrJdp5VDv9mtRRyRnwG+7udZi 0BH8JE6PiKKR7XX4AjxnpD2VwTbKd2SfLhCezsCknWy+h6zPIRAVa1g+HrPeMGia KLq60upK/7dKotJRHzRw8/ZAClG/lIIBj+Qn+EEi0/0nefiQXkzfqupDPiJ3W9mQ fTBH9cBvjDkJ -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:34 2025 by rpki-client