This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/t-GB5Ma_UAY4UnNxf0VZTkXm-MQ.roa File: t-GB5Ma_UAY4UnNxf0VZTkXm-MQ.roa (raw, json) Hash identifier: S77vjUZeZIPZvAOank8BcHR0KXLbgZd6sPtm0a+YT4o= Subject key identifier: B7:E1:81:E4:C6:BF:50:06:38:52:73:71:7F:45:59:4E:45:E6:F8:C4 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6268817B768A7FAC5A3A2AE2B6E7 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/t-GB5Ma_UAY4UnNxf0VZTkXm-MQ.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152460 IP address blocks: 87.229.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:62:68:81:7b:76:8a:7f:ac:5a:3a:2a:e2:b6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7e181e4c6bf5006385273717f45594e45e6f8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:38:ae:98:f0:ef:6a:2a:8a:a0:14:3a:bf:ee: f7:d7:91:b1:19:67:e9:9e:c8:48:6b:88:dc:78:ab: 0e:02:9a:dc:38:9f:fe:7a:6c:33:47:41:02:04:ac: 6b:76:7d:2f:91:e3:be:96:5b:1f:77:18:e7:c2:2b: 31:fc:ed:fc:48:66:1b:b0:e5:68:53:74:6e:7d:7f: 5f:e5:d4:e9:0e:b2:c4:41:a5:fd:e9:00:a1:e9:17: 9d:29:39:05:32:dd:3e:36:6c:ad:b5:7c:57:6d:7d: d9:6a:00:26:e1:dc:dd:d6:a5:39:ef:93:46:9e:1f: 08:63:fe:95:a8:33:01:c1:96:69:ae:49:73:30:c5: 76:d2:1c:7c:98:ac:0e:55:f4:f3:a1:38:a9:a4:92: 35:87:26:80:ff:d5:23:bf:4f:12:ac:43:ca:1c:b8: d8:d8:db:01:9c:4b:c2:e4:cc:91:01:45:3e:fd:cb: a0:9f:c8:cb:31:8f:d4:60:25:c2:d0:dc:a0:2a:7d: 2e:ba:fc:19:b6:0d:5b:9f:a0:3b:49:c8:89:41:fe: b6:1e:c1:32:e8:77:7e:12:f3:9e:3e:82:b9:19:d4: 6c:a4:08:6f:c0:bd:b9:96:33:db:78:1f:59:8b:b8: c7:9d:6e:90:99:25:e4:6e:8d:2b:57:78:b2:89:c8: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:81:E4:C6:BF:50:06:38:52:73:71:7F:45:59:4E:45:E6:F8:C4 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/t-GB5Ma_UAY4UnNxf0VZTkXm-MQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.0.0/24 Signature Algorithm: sha256WithRSAEncryption 50:00:89:96:60:44:e6:15:51:fa:ef:9d:41:3a:18:5e:75:5c: 57:bb:13:26:40:ea:00:66:8b:b8:a8:27:f6:9b:11:79:b2:fd: 3d:9c:77:a7:1a:98:98:72:76:e6:e3:34:1c:00:f6:df:e5:9f: d5:19:e2:9b:03:b8:4b:e3:66:dc:a3:df:b0:b3:b1:1f:8e:65: ef:3e:f3:df:26:93:71:9c:fb:b3:0f:d6:8d:e5:a0:e8:e5:8b: ef:d5:1f:78:9b:0d:19:4b:79:27:6f:e9:22:4b:53:44:28:51: 44:e5:93:1e:c6:1f:e3:92:10:ca:f5:f2:40:4a:d4:dc:a7:6e: 17:3e:0b:bd:c4:4d:f7:b9:3a:e7:2f:8b:c0:d6:f2:19:58:da: 46:0d:81:72:0c:8c:54:a7:90:5b:a9:29:eb:61:03:88:01:f2: 7d:9a:bb:e3:d9:d8:ba:9c:b7:ac:6e:c7:6f:dc:ad:3a:d2:2e: cf:75:57:6f:1a:0c:42:3d:1d:8f:41:f1:e6:f7:33:9b:de:30: 20:e4:b0:03:67:5d:22:8a:64:5b:e1:70:46:34:1f:f5:30:db: 25:58:58:96:68:d7:b1:0b:70:e2:82:f0:b6:b7:ce:94:e1:88: fb:2f:57:8b:9f:e4:52:54:e0:8d:73:e2:8f:dc:c4:c8:e4:44: dd:42:bc:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mJogXt2in+sWjoq4rbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2UxODFlNGM2YmY1MDA2Mzg1MjczNzE3ZjQ1NTk0ZTQ1ZTZmOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DiumPDvaiqKoBQ6v+7315GxGWfp nshIa4jceKsOAprcOJ/+emwzR0ECBKxrdn0vkeO+llsfdxjnwisx/O38SGYbsOVo U3RufX9f5dTpDrLEQaX96QCh6RedKTkFMt0+NmyttXxXbX3ZagAm4dzd1qU575NG nh8IY/6VqDMBwZZprklzMMV20hx8mKwOVfTzoTippJI1hyaA/9Ujv08SrEPKHLjY 2NsBnEvC5MyRAUU+/cugn8jLMY/UYCXC0NygKn0uuvwZtg1bn6A7SciJQf62HsEy 6Hd+EvOePoK5GdRspAhvwL25ljPbeB9Zi7jHnW6QmSXkbo0rV3iyicg10wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfhgeTGv1AGOFJzcX9FWU5F5vjEMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvdC1HQjVNYV9VQVk0VW5OeGYwVlpUa1htLU1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UAMA0G CSqGSIb3DQEBCwUAA4IBAQBQAImWYETmFVH6751BOhhedVxXuxMmQOoAZou4qCf2 mxF5sv09nHenGpiYcnbm4zQcAPbf5Z/VGeKbA7hL42bco9+ws7EfjmXvPvPfJpNx nPuzD9aN5aDo5Yvv1R94mw0ZS3knb+kiS1NEKFFE5ZMexh/jkhDK9fJAStTcp24X Pgu9xE33uTrnL4vA1vIZWNpGDYFyDIxUp5BbqSnrYQOIAfJ9mrvj2di6nLesbsdv 3K060i7PdVdvGgxCPR2PQfHm9zOb3jAg5LADZ10iimRb4XBGNB/1MNslWFiWaNex C3DigvC2t86U4Yj7L1eLn+RSVOCNc+KP3MTI5ETdQrwB -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:08 2026 by rpki-client