This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zyiRuICGk-Q-0dH-7YgFXrP6ZfI.roa File: zyiRuICGk-Q-0dH-7YgFXrP6ZfI.roa (raw, json) Hash identifier: Gf/mPOLV9obi/V3Uz5vByl5Pgg1PF823qv2mENJw1g4= Subject key identifier: CF:28:91:B8:80:86:93:E4:3E:D1:D1:FE:ED:88:05:5E:B3:FA:65:F2 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE71961A378947EAC69B4167541DE1 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zyiRuICGk-Q-0dH-7YgFXrP6ZfI.roa Signing time: Fri 02 Jan 2026 04:19:20 +0000 ROA not before: Fri 02 Jan 2026 04:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216138 IP address blocks: 87.229.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:71:96:1a:37:89:47:ea:c6:9b:41:67:54:1d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf2891b8808693e43ed1d1feed88055eb3fa65f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:67:2f:8f:2d:7d:16:1b:2a:75:19:e4:a9: d9:a5:65:43:39:c2:77:78:8e:e0:fe:3c:27:2f:d8: a2:2f:fc:70:7e:28:18:9d:60:46:6e:c1:1b:f9:93: 5e:ee:ea:7c:f2:f4:cb:eb:00:30:15:f5:9f:41:5a: f5:02:95:fe:f1:28:54:d8:d3:5c:97:fb:41:e1:72: d1:81:68:a7:2b:06:e5:40:0d:4a:9c:d0:78:1e:e5: 47:03:0f:d2:d5:0d:74:33:fa:f7:2c:70:ce:b2:21: 32:dd:56:02:fd:98:f8:01:55:0b:c5:2b:77:42:bd: 64:a6:1f:f8:ad:1a:da:fc:fe:ce:41:21:e9:fb:49: 49:52:2e:42:5a:72:f4:98:b3:df:a9:e6:96:8a:f4: bd:d0:8a:33:2b:21:c1:ba:04:41:d9:60:82:6c:e0: e2:d0:f5:0b:d5:2c:1c:bc:d6:a5:5c:91:e5:17:db: 02:a7:1e:80:3e:ef:9d:32:d6:da:95:af:9f:5e:8f: f8:78:48:b6:f5:11:5f:91:11:bd:89:b8:e3:61:17: 13:5e:54:8d:89:29:ec:f5:d4:bf:7e:77:94:8c:fb: 17:9e:f3:af:55:87:32:aa:a6:3b:6e:df:d1:8a:95: ba:74:4d:45:e0:b2:81:7b:6b:a6:61:bd:15:6c:50: 3e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:28:91:B8:80:86:93:E4:3E:D1:D1:FE:ED:88:05:5E:B3:FA:65:F2 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zyiRuICGk-Q-0dH-7YgFXrP6ZfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.71.0/24 Signature Algorithm: sha256WithRSAEncryption 21:f2:a8:f3:73:7e:9a:34:c5:41:ea:08:19:d7:8b:5f:39:e6: 6c:a0:6c:9a:ea:56:9a:c9:ff:08:b8:4b:e4:94:e7:5c:cc:6a: 18:1e:c2:46:dd:55:40:2d:02:d9:88:32:87:d5:f7:58:0a:71: 97:a0:45:6d:01:91:f2:19:a0:37:35:63:13:4d:42:72:93:6e: 10:d4:5c:2c:6f:d8:b0:a5:69:ae:3a:db:ff:4c:6c:9b:03:ba: 0f:96:a8:16:69:2a:2d:93:ea:de:5c:60:f3:f0:8b:b2:4e:2a: 11:2c:3c:ed:fa:b7:32:86:c1:55:6d:56:d3:33:e9:3a:43:8e: 07:55:fe:a3:a2:ae:84:0b:73:4c:86:5a:e8:7a:3d:77:8f:1c: 06:5d:68:49:2a:83:36:d3:0e:68:e0:61:d4:69:b9:e2:e9:d3: 5c:d3:45:3c:3b:1b:1e:91:f2:14:d5:62:09:bd:bc:b7:77:69: c9:76:25:84:61:c6:9c:9c:58:fc:7c:12:67:e1:e8:1d:c3:83: 8a:cd:14:27:f1:2c:bf:07:3d:27:32:92:03:3d:c6:5e:5a:4e: c4:6c:3a:30:d2:e4:a8:7a:40:5b:ab:c4:ca:a8:e6:ea:a6:43: 87:0a:f1:15:c8:da:dc:e0:69:56:17:8f:9d:57:89:00:f1:41: dd:eb:cf:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87nGWGjeJR+rGm0FnVB3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjI4OTFiODgwODY5M2U0M2VkMWQxZmVlZDg4MDU1ZWIzZmE2NWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHVnL48tfRYbKnUZ5KnZpWVDOcJ3 eI7g/jwnL9iiL/xwfigYnWBGbsEb+ZNe7up88vTL6wAwFfWfQVr1ApX+8ShU2NNc l/tB4XLRgWinKwblQA1KnNB4HuVHAw/S1Q10M/r3LHDOsiEy3VYC/Zj4AVULxSt3 Qr1kph/4rRra/P7OQSHp+0lJUi5CWnL0mLPfqeaWivS90IozKyHBugRB2WCCbODi 0PUL1SwcvNalXJHlF9sCpx6APu+dMtbala+fXo/4eEi29RFfkRG9ibjjYRcTXlSN iSns9dS/fneUjPsXnvOvVYcyqqY7bt/RipW6dE1F4LKBe2umYb0VbFA+AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8okbiAhpPkPtHR/u2IBV6z+mXyMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvenlpUnVJQ0drLVEtMGRILTdZZ0ZYclA2WmZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VHMA0G CSqGSIb3DQEBCwUAA4IBAQAh8qjzc36aNMVB6ggZ14tfOeZsoGya6laayf8IuEvk lOdczGoYHsJG3VVALQLZiDKH1fdYCnGXoEVtAZHyGaA3NWMTTUJyk24Q1Fwsb9iw pWmuOtv/TGybA7oPlqgWaSotk+reXGDz8IuyTioRLDzt+rcyhsFVbVbTM+k6Q44H Vf6joq6EC3NMhlroej13jxwGXWhJKoM20w5o4GHUabni6dNc00U8OxsekfIU1WIJ vby3d2nJdiWEYcacnFj8fBJn4egdw4OKzRQn8Sy/Bz0nMpIDPcZeWk7EbDow0uSo ekBbq8TKqObqpkOHCvEVyNrc4GlWF4+dV4kA8UHd68/u -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:25 2026 by rpki-client