This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ztL9ZkKGJn4lSeMLl4NHu5fEgkc.roa File: ztL9ZkKGJn4lSeMLl4NHu5fEgkc.roa (raw, json) Hash identifier: TUuEouZ+Jm1h+GzZ78GgmzmE217pKhSE7lrrBXlvo9I= Subject key identifier: CE:D2:FD:66:42:86:26:7E:25:49:E3:0B:97:83:47:BB:97:C4:82:47 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE71622433B8F5CCD250B8628E891F Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ztL9ZkKGJn4lSeMLl4NHu5fEgkc.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215904 IP address blocks: 87.229.84.0/23 maxlen: 23 178.238.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:71:62:24:33:b8:f5:cc:d2:50:b8:62:8e:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ced2fd664286267e2549e30b978347bb97c48247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:45:ac:be:db:d9:37:df:5f:57:80:5c:2b: 23:a5:82:f5:27:8d:78:fd:bf:5f:be:62:6c:de:be: fe:64:29:02:41:e2:ee:50:4f:84:63:5f:d4:3d:fc: 44:ba:0d:98:c9:cb:e9:08:00:05:27:58:2d:f5:de: bb:5e:fe:27:b1:8e:2e:2a:03:ca:97:f8:10:09:f1: 13:ce:97:04:5d:fc:da:07:ac:62:fd:ab:4b:94:ab: 41:8d:1c:4b:d5:33:cb:d5:9e:d6:1e:59:fa:6b:2f: 5e:06:30:1a:65:e3:50:56:5c:f7:11:75:1c:30:38: e7:da:1f:74:6f:e2:a7:10:79:c8:77:27:55:ec:4b: 32:41:cb:e3:a0:76:66:d7:99:73:11:ae:4b:03:28: 3c:16:95:4e:a2:15:46:15:41:29:dd:41:87:83:85: 0e:ff:68:41:b3:2f:cb:45:b1:4f:59:eb:10:37:73: cf:ab:08:2e:77:ca:47:7b:03:01:ee:10:c9:1b:67: 0f:09:20:77:b0:1a:af:36:73:36:d4:48:e6:1a:ef: 4b:49:dc:b7:40:09:1e:3d:89:21:d7:66:5e:a0:e6: d3:a3:5c:fb:c2:d0:9b:f7:9e:be:a1:c6:50:33:47: 94:73:d7:dc:d2:18:eb:89:55:7f:36:a6:d0:ee:4a: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:FD:66:42:86:26:7E:25:49:E3:0B:97:83:47:BB:97:C4:82:47 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ztL9ZkKGJn4lSeMLl4NHu5fEgkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.84.0/23 178.238.212.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:68:2a:10:de:5a:99:66:f8:98:48:a0:30:35:9c:32:a3:fc: 6a:c7:1c:74:1a:03:5d:b6:bc:86:88:6b:de:74:56:4f:19:ba: 7e:88:95:70:ce:e5:ce:c3:80:cb:03:ec:f5:b2:bc:a6:5d:a8: 9b:9e:c8:30:f8:37:cf:94:c7:4b:6e:6d:43:3e:78:25:7f:74: 54:03:ca:11:ea:5a:fa:bd:13:d0:56:15:20:47:76:4b:e4:ec: 11:e7:97:9e:c7:22:55:b7:21:5b:1b:df:c2:89:ea:d5:16:80: 62:1b:f9:aa:51:8e:00:b4:6c:c7:c0:bc:1e:48:96:cb:bf:8b: 99:98:47:85:dd:09:ab:cd:b1:71:99:88:0f:a7:0b:69:f1:ba: 8d:cf:c0:2b:b6:63:34:62:cf:47:08:6e:46:f7:74:cd:99:8a: 85:f6:9d:62:3f:cd:9c:52:b9:2d:0d:74:f6:df:51:c6:fa:8d: 02:c0:9a:13:b1:36:2d:14:da:a5:97:27:33:88:a1:18:aa:97: 77:a7:f2:cb:86:53:3d:f8:bc:ec:37:19:95:08:68:1e:e1:56: fa:28:6f:ca:2c:28:cc:27:5f:9d:86:1c:77:48:22:d2:cf:70: b3:f6:83:70:f6:06:05:2f:f6:f3:30:c5:83:ce:82:d7:f0:a2: 07:d8:5e:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87nFiJDO49czSULhijokfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWQyZmQ2NjQyODYyNjdlMjU0OWUzMGI5NzgzNDdiYjk3YzQ4MjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBhFrL7b2TffX1eAXCsjpYL1J414 /b9fvmJs3r7+ZCkCQeLuUE+EY1/UPfxEug2YycvpCAAFJ1gt9d67Xv4nsY4uKgPK l/gQCfETzpcEXfzaB6xi/atLlKtBjRxL1TPL1Z7WHln6ay9eBjAaZeNQVlz3EXUc MDjn2h90b+KnEHnIdydV7EsyQcvjoHZm15lzEa5LAyg8FpVOohVGFUEp3UGHg4UO /2hBsy/LRbFPWesQN3PPqwgud8pHewMB7hDJG2cPCSB3sBqvNnM21EjmGu9LSdy3 QAkePYkh12ZeoObTo1z7wtCb956+ocZQM0eUc9fc0hjriVV/NqbQ7ko8oQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM7S/WZChiZ+JUnjC5eDR7uXxIJHMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvenRMOVprS0dKbjRsU2VNTGw0Tkh1NWZFZ2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV+VUAwQA su7UMA0GCSqGSIb3DQEBCwUAA4IBAQAraCoQ3lqZZviYSKAwNZwyo/xqxxx0GgNd tryGiGvedFZPGbp+iJVwzuXOw4DLA+z1srymXaibnsgw+DfPlMdLbm1DPnglf3RU A8oR6lr6vRPQVhUgR3ZL5OwR55eexyJVtyFbG9/CierVFoBiG/mqUY4AtGzHwLwe SJbLv4uZmEeF3QmrzbFxmYgPpwtp8bqNz8ArtmM0Ys9HCG5G93TNmYqF9p1iP82c UrktDXT231HG+o0CwJoTsTYtFNqllycziKEYqpd3p/LLhlM9+LzsNxmVCGge4Vb6 KG/KLCjMJ1+dhhx3SCLSz3Cz9oNw9gYFL/bzMMWDzoLX8KIH2F7Z -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:31 2026 by rpki-client