This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/z54N9N1dEvTqfPVqVpApdshMuHY.roa File: z54N9N1dEvTqfPVqVpApdshMuHY.roa (raw, json) Hash identifier: Zyw362fESYdyKwnZQHCWiqZEc8uxlCxtNIClvViKp6E= Subject key identifier: CF:9E:0D:F4:DD:5D:12:F4:EA:7C:F5:6A:56:90:29:76:C8:4C:B8:76 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019AE8317EEA52EBFE2BCAE2CE57AA9910DB Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/z54N9N1dEvTqfPVqVpApdshMuHY.roa Signing time: Thu 04 Dec 2025 07:09:09 +0000 ROA not before: Thu 04 Dec 2025 07:09:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47169 IP address blocks: 84.21.4.0/24 maxlen: 24 87.229.16.0/22 maxlen: 22 87.229.38.0/24 maxlen: 24 87.229.39.0/24 maxlen: 24 87.229.42.0/23 maxlen: 24 87.229.106.0/24 maxlen: 24 87.229.107.0/24 maxlen: 24 213.181.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:31:7e:ea:52:eb:fe:2b:ca:e2:ce:57:aa:99:10:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 4 07:09:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf9e0df4dd5d12f4ea7cf56a56902976c84cb876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:28:8a:37:3a:47:98:83:97:e9:7d:d4:52: c5:2b:67:bb:5e:1a:c1:78:57:38:00:6b:b5:48:3e: 6d:42:c2:50:7a:d1:b7:7d:64:d8:87:e9:79:a5:c5: 2b:ce:e0:cb:9b:01:cf:19:c2:bd:aa:83:e8:fb:b5: 0d:51:20:26:3b:62:ae:28:e4:f3:97:4e:00:82:42: cb:1c:dc:2c:01:ce:94:a5:51:e7:a9:b1:92:25:a2: b0:5e:d1:7f:10:3a:4b:f7:eb:b9:f1:5a:61:18:51: 93:e7:79:f9:ca:d3:08:fa:f1:b8:a9:c0:81:9c:fe: a5:52:77:ef:95:91:04:91:d4:46:f6:1d:58:3f:2e: ad:59:b7:44:47:18:79:8c:a8:8a:2d:e9:f0:09:26: b1:5e:31:bc:ef:3f:91:4b:3c:b5:55:dc:da:81:62: 9b:37:58:14:a5:42:7f:3f:5c:0e:a3:e6:9e:3d:9f: d6:a1:9c:b6:a7:39:b3:cd:84:0e:2e:6e:42:e6:70: 72:ff:1f:68:be:11:e6:0a:f6:94:48:fe:48:1d:6d: 80:5c:05:76:5d:af:95:3a:aa:a3:1b:8f:ee:4d:f3: 0f:27:9e:3e:50:9a:c2:3d:03:30:12:d8:d5:0a:f2: b0:69:20:58:10:16:40:e6:e4:66:49:e9:da:3e:ee: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:0D:F4:DD:5D:12:F4:EA:7C:F5:6A:56:90:29:76:C8:4C:B8:76 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/z54N9N1dEvTqfPVqVpApdshMuHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.4.0/24 87.229.16.0/22 87.229.38.0/23 87.229.42.0/23 87.229.106.0/23 213.181.212.0/24 Signature Algorithm: sha256WithRSAEncryption 07:5b:22:eb:9e:55:09:a2:0b:74:bf:12:c3:70:03:87:b5:40: 33:3b:45:cb:26:7f:07:df:e2:6d:73:e5:17:17:cf:53:fc:f0: bc:1a:18:bb:86:10:ee:7a:84:57:18:f5:a2:cc:ff:aa:9e:98: cc:76:79:3a:9a:95:bf:76:42:19:ec:98:60:58:db:3e:fa:d6: 66:b6:b2:31:9b:3b:cd:24:46:7d:a7:5e:0e:cd:f8:01:70:e7: 20:77:7c:d0:8a:bf:8a:52:cd:99:5f:06:e3:b4:e5:7f:a0:cd: d2:77:61:f9:0b:33:85:9d:80:18:fc:99:c9:8d:9d:f2:82:9d: 75:92:a1:5f:94:67:07:83:92:a9:34:25:ee:e1:a7:56:37:e0: 02:2d:c8:61:bc:3d:94:e9:3e:80:f3:34:e4:e1:89:16:a3:e3: bf:f1:32:ca:1c:8e:71:5c:b0:32:91:dc:f9:61:46:7b:10:82: 63:49:67:5c:28:1d:ba:f7:20:27:8a:df:03:b7:c2:89:d1:94: 96:d9:33:ef:b3:bf:40:af:0c:7f:d7:a1:9e:50:44:bd:76:ff: 0e:45:55:27:b5:25:66:a6:fb:e5:71:5b:84:7c:4a:da:91:4b: 0e:51:f6:32:aa:f2:ea:33:30:fa:9b:d6:9c:ac:0f:8d:d7:5d: 97:a8:c6:59 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZroMX7qUuv+K8rizleqmRDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjA0MDcwOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjllMGRmNGRkNWQxMmY0ZWE3Y2Y1NmE1NjkwMjk3NmM4NGNiODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/Moijc6R5iDl+l91FLFK2e7XhrB eFc4AGu1SD5tQsJQetG3fWTYh+l5pcUrzuDLmwHPGcK9qoPo+7UNUSAmO2KuKOTz l04AgkLLHNwsAc6UpVHnqbGSJaKwXtF/EDpL9+u58VphGFGT53n5ytMI+vG4qcCB nP6lUnfvlZEEkdRG9h1YPy6tWbdERxh5jKiKLenwCSaxXjG87z+RSzy1VdzagWKb N1gUpUJ/P1wOo+aePZ/WoZy2pzmzzYQOLm5C5nBy/x9ovhHmCvaUSP5IHW2AXAV2 Xa+VOqqjG4/uTfMPJ54+UJrCPQMwEtjVCvKwaSBYEBZA5uRmSenaPu5IHQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFM+eDfTdXRL06nz1alaQKXbITLh2MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvejU0TjlOMWRFdlRxZlBWcVZwQXBkc2hNdUhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVBUEAwQC V+UQAwQBV+UmAwQBV+UqAwQBV+VqAwQA1bXUMA0GCSqGSIb3DQEBCwUAA4IBAQAH WyLrnlUJogt0vxLDcAOHtUAzO0XLJn8H3+Jtc+UXF89T/PC8Ghi7hhDueoRXGPWi zP+qnpjMdnk6mpW/dkIZ7JhgWNs++tZmtrIxmzvNJEZ9p14OzfgBcOcgd3zQir+K Us2ZXwbjtOV/oM3Sd2H5CzOFnYAY/JnJjZ3ygp11kqFflGcHg5KpNCXu4adWN+AC LchhvD2U6T6A8zTk4YkWo+O/8TLKHI5xXLAykdz5YUZ7EIJjSWdcKB269yAnit8D t8KJ0ZSW2TPvs79Arwx/16GeUES9dv8ORVUntSVmpvvlcVuEfErakUsOUfYyqvLq MzD6m9acrA+N112XqMZZ -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:16 2025 by rpki-client