This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rKl_PtOPjgzXWVQ4flf9jBU8-EM.roa File: rKl_PtOPjgzXWVQ4flf9jBU8-EM.roa (raw, json) Hash identifier: AAKOP/4TYp/pZ4rqbS34U6AldjiwJ3Xrz5eDkw//b+g= Subject key identifier: AC:A9:7F:3E:D3:8F:8E:0C:D7:59:54:38:7E:57:FD:8C:15:3C:F8:43 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019BE101CDF1F46AB1F38AC292DEB5BEDDC3 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rKl_PtOPjgzXWVQ4flf9jBU8-EM.roa Signing time: Wed 21 Jan 2026 14:42:30 +0000 ROA not before: Wed 21 Jan 2026 14:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 79.172.200.0/23 maxlen: 24 79.172.250.0/23 maxlen: 24 87.229.8.0/22 maxlen: 22 87.229.11.0/24 maxlen: 24 87.229.37.0/24 maxlen: 24 87.229.80.0/23 maxlen: 24 87.229.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:01:cd:f1:f4:6a:b1:f3:8a:c2:92:de:b5:be:dd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 21 14:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca97f3ed38f8e0cd75954387e57fd8c153cf843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:78:9e:4d:bc:a0:8e:58:fd:c5:23:9b:90: ac:a4:d4:71:98:89:c3:ce:18:52:8c:36:fa:7c:70: fc:cf:02:9c:50:15:76:ec:9e:c6:31:aa:84:a0:2f: 0f:6b:e0:7e:f7:92:da:88:85:e1:00:36:e0:15:01: 84:e4:12:89:b8:43:a0:af:c4:08:fa:75:8d:32:41: 1a:0e:18:77:33:05:bd:4c:38:72:bb:0a:e7:a0:b1: 6d:a4:09:ce:7d:0d:d1:27:de:9e:65:37:18:09:f9: 72:b7:14:34:8e:9f:9a:02:ef:42:ad:70:12:eb:78: 24:da:19:f3:bc:ad:74:2f:98:c2:ad:be:78:28:32: f8:4e:62:bf:90:aa:ff:db:2e:81:20:0c:de:fa:11: 23:7e:6d:43:6d:b1:45:7b:41:87:eb:3e:3f:39:c8: 4d:45:fe:75:f1:87:7b:15:45:bf:0b:24:ab:46:9c: 9c:a7:70:fe:c9:74:89:5b:5a:c6:3e:cd:15:62:5d: 27:a0:3b:6e:97:92:fc:24:bc:df:cc:7e:c6:f6:66: 83:37:02:fd:70:50:ec:05:b1:8b:e4:80:64:19:fc: cc:a1:67:3b:f7:4b:73:a1:e0:b1:4e:42:18:b9:0e: 43:7c:d4:69:e8:18:03:3a:d9:24:7d:d9:3c:df:c2: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:7F:3E:D3:8F:8E:0C:D7:59:54:38:7E:57:FD:8C:15:3C:F8:43 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rKl_PtOPjgzXWVQ4flf9jBU8-EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.200.0/23 79.172.250.0/23 87.229.8.0/22 87.229.37.0/24 87.229.80.0/23 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 87:88:26:04:93:2b:b7:ed:4b:ad:33:3a:3b:31:40:4b:8d:5a: fb:01:ca:4c:46:d5:64:74:6e:22:81:f5:ec:0a:23:6f:c2:92: 03:7d:ba:8f:e4:d7:94:1b:17:fd:b0:0c:99:56:90:8d:d3:19: 33:20:87:41:4a:2e:0e:7b:a3:55:44:e8:99:5d:18:e0:e1:e4: 17:ea:81:54:95:bb:a8:e7:45:a1:d0:71:b0:0f:b1:f4:3a:80: 88:69:67:4c:39:0a:e2:87:d9:0d:95:89:f7:d8:a8:a7:5c:9d: 26:31:00:e5:c1:73:47:94:13:f5:08:6b:b7:c5:bf:46:5c:4f: 2b:47:85:3d:d7:49:88:54:55:74:dd:78:77:d4:e7:dc:dc:9d: dd:ad:09:e1:fa:75:34:34:8f:9a:c6:a5:7f:85:0a:34:b4:fe: ea:44:d3:a0:61:02:ca:90:24:b8:cd:11:af:4c:a8:13:cc:92: 14:90:fc:5c:23:ec:0e:55:4c:52:de:01:70:a2:15:5f:5c:8a: c9:4a:16:b1:52:5d:03:66:27:48:c1:24:6d:9d:19:bd:bc:e5: d7:ce:0c:ff:bc:3d:e3:72:43:99:82:e2:03:81:1e:29:4b:92: 29:aa:51:01:98:1a:24:60:b5:0e:b7:95:e6:e1:70:6a:a8:1c: 26:e7:db:93 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZvhAc3x9Gqx84rCkt61vt3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTIxMTQ0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E5N2YzZWQzOGY4ZTBjZDc1OTU0Mzg3ZTU3ZmQ4YzE1M2NmODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHB4nk28oI5Y/cUjm5CspNRxmInD zhhSjDb6fHD8zwKcUBV27J7GMaqEoC8Pa+B+95LaiIXhADbgFQGE5BKJuEOgr8QI +nWNMkEaDhh3MwW9TDhyuwrnoLFtpAnOfQ3RJ96eZTcYCflytxQ0jp+aAu9CrXAS 63gk2hnzvK10L5jCrb54KDL4TmK/kKr/2y6BIAze+hEjfm1DbbFFe0GH6z4/OchN Rf518Yd7FUW/CySrRpycp3D+yXSJW1rGPs0VYl0noDtul5L8JLzfzH7G9maDNwL9 cFDsBbGL5IBkGfzMoWc790tzoeCxTkIYuQ5DfNRp6BgDOtkkfdk838IXZQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKypfz7Tj44M11lUOH5X/YwVPPhDMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvcktsX1B0T1BqZ3pYV1ZRNGZsZjlqQlU4LUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBT6zIAwQB T6z6AwQCV+UIAwQAV+UlAwQBV+VQAwQBV+V8MA0GCSqGSIb3DQEBCwUAA4IBAQCH iCYEkyu37UutMzo7MUBLjVr7AcpMRtVkdG4igfXsCiNvwpIDfbqP5NeUGxf9sAyZ VpCN0xkzIIdBSi4Oe6NVROiZXRjg4eQX6oFUlbuo50Wh0HGwD7H0OoCIaWdMOQri h9kNlYn32KinXJ0mMQDlwXNHlBP1CGu3xb9GXE8rR4U910mIVFV03Xh31Ofc3J3d rQnh+nU0NI+axqV/hQo0tP7qRNOgYQLKkCS4zRGvTKgTzJIUkPxcI+wOVUxS3gFw ohVfXIrJShaxUl0DZidIwSRtnRm9vOXXzgz/vD3jckOZguIDgR4pS5IpqlEBmBok YLUOt5Xm4XBqqBwm59uT -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:56 2026 by rpki-client