This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rFJA7yntJLzF9YaBkyh2M7HZBio.roa File: rFJA7yntJLzF9YaBkyh2M7HZBio.roa (raw, json) Hash identifier: 3JcJUBlEsTwqlQeSkY5aRhzRrMhYSDryspFPu6gkp3o= Subject key identifier: AC:52:40:EF:29:ED:24:BC:C5:F5:86:81:93:28:76:33:B1:D9:06:2A Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A9CF8BA5720524D0425D6EC54B579A0C9 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rFJA7yntJLzF9YaBkyh2M7HZBio.roa Signing time: Wed 19 Nov 2025 16:35:37 +0000 ROA not before: Wed 19 Nov 2025 16:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199058 IP address blocks: 87.229.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:f8:ba:57:20:52:4d:04:25:d6:ec:54:b5:79:a0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 19 16:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ac5240ef29ed24bcc5f5868193287633b1d9062a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:5b:a9:85:77:48:c9:5f:ce:8f:ee:c5:62: 8d:2a:27:3c:e3:0e:80:aa:9b:0d:47:2e:cf:dd:be: 6b:e6:fd:31:b1:97:33:1c:88:9f:1a:a5:5f:9e:76: 1b:e4:0b:55:96:a6:e9:41:5d:ac:8c:43:ac:6f:20: cd:04:19:14:c2:66:92:26:e2:02:5c:fb:15:fd:be: c4:55:2b:e9:21:ad:d5:8d:8b:3c:a8:40:59:a8:03: 51:c3:75:72:5b:26:75:51:3c:5b:dd:ae:9b:de:18: d0:1f:d7:ad:c9:00:47:1b:93:dc:ce:a5:cf:b2:ed: e4:63:95:f3:39:cf:1a:f3:85:91:57:29:1a:f5:d1: 94:f5:d7:ce:80:e4:65:96:70:fa:be:6f:22:36:25: 62:60:17:fa:0d:88:d7:e0:b6:4b:5d:10:e3:51:b3: 07:57:20:b4:3d:70:34:8f:7b:ac:28:33:f9:6a:e5: e9:be:a0:24:4e:57:75:0a:09:0f:0f:87:5f:dc:d3: 7b:de:11:1b:5d:cf:e8:5f:a5:c9:b4:72:ee:33:3c: 44:13:f5:59:19:42:81:0b:89:6d:c3:a8:51:66:48: ff:b5:37:98:ef:e8:a8:54:91:79:7e:50:55:da:3f: c8:d9:f4:8a:3d:39:bc:dd:c6:ca:fa:f0:f7:55:db: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:52:40:EF:29:ED:24:BC:C5:F5:86:81:93:28:76:33:B1:D9:06:2A X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rFJA7yntJLzF9YaBkyh2M7HZBio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.34.0/24 Signature Algorithm: sha256WithRSAEncryption 64:12:2a:2d:9b:de:49:16:fc:61:5d:8c:fe:d6:75:56:f3:f9: 4f:71:b6:64:01:b5:21:a0:9f:1a:90:ff:61:b5:2a:13:08:05: 3a:aa:16:4a:74:58:1e:27:2e:c8:6b:32:47:27:6a:ef:09:40: b1:f7:97:e0:d2:2d:31:85:bc:a6:1d:d0:28:e6:69:4d:fd:06: 40:ac:51:8d:f2:c4:4e:55:27:8d:cb:41:a3:40:f3:72:43:37: 3d:50:d2:8d:0a:59:ad:b6:96:08:59:84:63:cb:c0:fd:22:ae: 44:85:8e:6e:bc:96:c7:01:31:e2:41:26:4e:45:42:e7:e0:b7: 4c:4c:f4:7c:40:b3:91:24:b9:35:26:4a:b2:5a:05:0b:ab:3b: 30:50:d5:fb:e1:25:63:c7:bf:9a:44:fa:70:ed:8b:86:9e:c1: 82:0a:9b:6e:d1:74:85:c9:f1:ba:68:e0:a8:3e:53:6a:d2:9b: 4e:ba:68:b7:3a:d6:90:d8:79:64:d8:fa:df:cf:8c:5a:7c:ee: 61:b5:e5:30:3d:55:ee:08:3b:22:15:12:67:57:d1:fa:5d:56: 9e:f2:e7:79:1a:0b:82:fc:42:52:84:b9:7b:da:e3:95:d9:a8: f6:00:f6:77:92:2d:a5:1f:37:ff:1e:7a:cf:24:f3:1f:7b:3c: 8f:9d:e5:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqc+LpXIFJNBCXW7FS1eaDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTE5MTYzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzUyNDBlZjI5ZWQyNGJjYzVmNTg2ODE5MzI4NzYzM2IxZDkwNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwZbqYV3SMlfzo/uxWKNKic84w6A qpsNRy7P3b5r5v0xsZczHIifGqVfnnYb5AtVlqbpQV2sjEOsbyDNBBkUwmaSJuIC XPsV/b7EVSvpIa3VjYs8qEBZqANRw3VyWyZ1UTxb3a6b3hjQH9etyQBHG5PczqXP su3kY5XzOc8a84WRVyka9dGU9dfOgORllnD6vm8iNiViYBf6DYjX4LZLXRDjUbMH VyC0PXA0j3usKDP5auXpvqAkTld1CgkPD4df3NN73hEbXc/oX6XJtHLuMzxEE/VZ GUKBC4ltw6hRZkj/tTeY7+ioVJF5flBV2j/I2fSKPTm83cbK+vD3VduWfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxSQO8p7SS8xfWGgZModjOx2QYqMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvckZKQTd5bnRKTHpGOVlhQmt5aDJNN0haQmlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UiMA0G CSqGSIb3DQEBCwUAA4IBAQBkEiotm95JFvxhXYz+1nVW8/lPcbZkAbUhoJ8akP9h tSoTCAU6qhZKdFgeJy7IazJHJ2rvCUCx95fg0i0xhbymHdAo5mlN/QZArFGN8sRO VSeNy0GjQPNyQzc9UNKNClmttpYIWYRjy8D9Iq5EhY5uvJbHATHiQSZORULn4LdM TPR8QLORJLk1JkqyWgULqzswUNX74SVjx7+aRPpw7YuGnsGCCptu0XSFyfG6aOCo PlNq0ptOumi3OtaQ2Hlk2Prfz4xafO5hteUwPVXuCDsiFRJnV9H6XVae8ud5GguC /EJShLl72uOV2aj2APZ3ki2lHzf/HnrPJPMfezyPneWm -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:31 2025 by rpki-client