This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zQ7wC9t6Pw7En21yXH0KUMJi0-E.roa File: zQ7wC9t6Pw7En21yXH0KUMJi0-E.roa (raw, json) Hash identifier: fa0A/DEAT4tP3yH9SiYeipp6+pAi7rk0uE8oRt/B5U4= Subject key identifier: CD:0E:F0:0B:DB:7A:3F:0E:C4:9F:6D:72:5C:7D:0A:50:C2:62:D3:E1 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE5647FD14B7289649EB3CF2196262 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zQ7wC9t6Pw7En21yXH0KUMJi0-E.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42964 IP address blocks: 79.172.206.0/24 maxlen: 24 79.172.215.0/24 maxlen: 24 79.172.217.0/24 maxlen: 24 79.172.237.0/24 maxlen: 24 87.229.98.0/23 maxlen: 23 87.229.102.0/24 maxlen: 24 178.238.223.0/24 maxlen: 24 213.181.222.0/24 maxlen: 24 217.144.61.0/24 maxlen: 24 2a02:730:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:47:fd:14:b7:28:96:49:eb:3c:f2:19:62:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd0ef00bdb7a3f0ec49f6d725c7d0a50c262d3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:e3:cc:0d:4f:96:01:dd:01:9f:59:2c:5c: 8b:cf:49:8f:50:3d:40:2d:11:3e:c3:f6:d3:db:20: d7:ca:5c:80:ac:96:fa:cc:3e:72:d5:f2:63:bb:02: 80:22:1d:95:06:8d:f6:9b:8e:07:67:85:8d:20:38: e6:ad:17:3b:d3:fa:8b:4c:ce:47:8b:6a:db:11:da: ab:ae:01:c4:7b:db:17:74:f5:58:ef:9b:d5:9b:58: d7:73:37:b2:36:16:33:0b:61:c2:eb:05:3c:27:c5: 97:8b:26:50:01:64:ce:4b:f1:3d:3b:ab:1c:c6:58: 87:f9:a5:39:66:24:b0:57:97:83:56:b6:42:e6:a1: 4b:3c:ef:4c:9d:a2:fd:75:a2:3c:20:09:ed:fe:e5: b8:06:27:79:ac:15:06:91:7f:dd:e8:99:76:b6:a0: 50:20:e3:80:8f:4e:ed:e8:03:89:4f:ad:52:fe:71: 12:89:02:98:b6:49:87:e1:a3:d6:63:a4:27:93:f8: 90:0e:8b:27:24:4f:79:14:f7:d6:a2:a3:aa:23:31: a9:69:c1:6b:3b:c4:0b:ec:5c:60:d0:20:28:cf:8d: f5:c7:85:ac:9c:08:ec:4b:23:ba:12:74:9f:ea:db: 66:27:6c:8d:a1:44:98:be:37:39:bc:ec:4a:5f:69: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0E:F0:0B:DB:7A:3F:0E:C4:9F:6D:72:5C:7D:0A:50:C2:62:D3:E1 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zQ7wC9t6Pw7En21yXH0KUMJi0-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.206.0/24 79.172.215.0/24 79.172.217.0/24 79.172.237.0/24 87.229.98.0/23 87.229.102.0/24 178.238.223.0/24 213.181.222.0/24 217.144.61.0/24 IPv6: 2a02:730:1::/48 Signature Algorithm: sha256WithRSAEncryption 4a:3c:f6:e9:cb:d8:bf:79:f4:ba:53:48:1a:71:12:4a:63:f1: be:5a:81:7e:fe:cd:92:bd:3c:3e:75:ed:2c:d1:ab:9a:da:6a: fc:04:49:bb:80:f8:32:fa:40:bd:c8:b6:aa:2c:78:ec:58:1f: 56:c4:91:21:51:e1:68:be:50:b9:80:18:77:a5:9d:40:47:88: 47:db:39:08:0f:aa:7b:1f:5b:70:84:2e:90:09:bc:22:f1:28: a3:23:ba:d6:38:48:88:27:f3:76:59:1d:a8:c1:03:38:6c:12: f5:3d:fc:4b:8a:2c:00:30:2e:74:c0:d1:4d:e8:07:54:be:dd: c5:36:d2:11:0e:4f:7f:98:6b:3b:d5:f6:19:79:31:53:97:e8: c2:9a:a8:ca:e5:1f:49:d4:fb:d5:13:70:73:bd:b7:28:85:ed: 0b:be:05:d5:fa:69:8a:64:a1:a8:3e:f4:91:58:95:c0:fb:38: 99:77:33:e6:a4:2e:a4:59:df:34:06:10:56:75:64:e9:a8:87: bb:59:b2:35:19:8a:fb:4c:d0:aa:55:60:6b:b7:f3:9d:73:19: ba:39:db:03:06:3f:67:74:03:a4:d3:2d:5a:f9:d2:22:57:76: 8f:94:5b:d0:ae:46:ed:36:c6:a1:c2:67:02:80:6b:70:87:54: 2f:da:bf:18 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt87lZH/RS3KJZJ6zzyGWJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDBlZjAwYmRiN2EzZjBlYzQ5ZjZkNzI1YzdkMGE1MGMyNjJkM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnHjzA1PlgHdAZ9ZLFyLz0mPUD1A LRE+w/bT2yDXylyArJb6zD5y1fJjuwKAIh2VBo32m44HZ4WNIDjmrRc70/qLTM5H i2rbEdqrrgHEe9sXdPVY75vVm1jXczeyNhYzC2HC6wU8J8WXiyZQAWTOS/E9O6sc xliH+aU5ZiSwV5eDVrZC5qFLPO9MnaL9daI8IAnt/uW4Bid5rBUGkX/d6Jl2tqBQ IOOAj07t6AOJT61S/nESiQKYtkmH4aPWY6Qnk/iQDosnJE95FPfWoqOqIzGpacFr O8QL7Fxg0CAoz431x4WsnAjsSyO6EnSf6ttmJ2yNoUSYvjc5vOxKX2kRtwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM0O8Avbej8OxJ9tclx9ClDCYtPhMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvelE3d0M5dDZQdzdFbjIxeVhIMEtVTUppMC1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQAT6zOAwQA T6zXAwQAT6zZAwQAT6ztAwQBV+ViAwQAV+VmAwQAsu7fAwQA1bXeAwQA2ZA9MA8E AgACMAkDBwAqAgcwAAEwDQYJKoZIhvcNAQELBQADggEBAEo89unL2L959LpTSBpx Ekpj8b5agX7+zZK9PD517SzRq5raavwESbuA+DL6QL3ItqoseOxYH1bEkSFR4Wi+ ULmAGHelnUBHiEfbOQgPqnsfW3CELpAJvCLxKKMjutY4SIgn83ZZHajBAzhsEvU9 /EuKLAAwLnTA0U3oB1S+3cU20hEOT3+YazvV9hl5MVOX6MKaqMrlH0nU+9UTcHO9 tyiF7Qu+BdX6aYpkoag+9JFYlcD7OJl3M+akLqRZ3zQGEFZ1ZOmoh7tZsjUZivtM 0KpVYGu3851zGbo52wMGP2d0A6TTLVr50iJXdo+UW9CuRu02xqHCZwKAa3CHVC/a vxg= -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:35 2026 by rpki-client