This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TvOSQnjZqSHHGUCFZJsb-Zd40_o.roa File: TvOSQnjZqSHHGUCFZJsb-Zd40_o.roa (raw, json) Hash identifier: U5bNti3HaskSEFBCo2CjXG/waDqNn4uQkyU55vIiUmE= Subject key identifier: 4E:F3:92:42:78:D9:A9:21:C7:19:40:85:64:9B:1B:F9:97:78:D3:FA Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B1E600E1B776C24AAD72E7CCB567556FD Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TvOSQnjZqSHHGUCFZJsb-Zd40_o.roa Signing time: Sun 14 Dec 2025 19:39:29 +0000 ROA not before: Sun 14 Dec 2025 19:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 79.172.242.0/24 maxlen: 24 87.229.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:60:0e:1b:77:6c:24:aa:d7:2e:7c:cb:56:75:56:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 14 19:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ef3924278d9a921c7194085649b1bf99778d3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:0e:a5:4b:00:3e:43:d3:97:3e:00:23:63: c2:70:b6:47:a0:bb:90:b7:db:f2:d8:0f:40:78:60: 10:55:a5:b5:51:74:64:31:10:99:53:c8:a7:ef:f0: 61:be:db:f3:88:3b:70:1b:4c:1f:d6:ff:8f:10:84: cd:c8:95:b2:df:09:79:e9:2d:14:fb:fa:cb:23:d8: c4:86:09:3d:f7:c6:16:dd:57:ce:9f:5f:56:27:a9: a8:73:ec:d2:f7:c2:c1:8e:57:e3:7e:9b:06:3f:72: 2d:82:7f:72:81:a6:ab:d5:39:6b:68:db:32:48:14: 29:b2:0a:3e:72:91:5d:aa:93:30:35:fe:db:1e:55: 67:ea:26:81:d7:6a:ee:1f:41:6c:e7:29:a8:49:76: 0c:40:06:55:d5:8d:ca:1f:b7:30:74:d0:3b:49:5d: 3c:57:09:68:00:8a:d4:66:05:a5:e0:c0:7a:76:cb: 5e:d9:a9:7b:a1:27:b4:96:2b:6c:d4:6a:ed:12:38: 5a:fa:c8:a4:30:8a:b6:56:7f:a1:1d:bc:ff:9d:b8: d1:38:c9:a8:c9:e1:02:de:76:24:5d:ee:67:c5:4c: d4:1e:64:3d:64:ba:61:22:41:af:a4:a3:3a:a6:0a: cd:10:a2:27:7e:3f:cc:16:16:93:2a:b6:6c:bf:71: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F3:92:42:78:D9:A9:21:C7:19:40:85:64:9B:1B:F9:97:78:D3:FA X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TvOSQnjZqSHHGUCFZJsb-Zd40_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.242.0/24 87.229.35.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:5e:f8:94:ea:89:0b:0b:2b:51:d0:3c:7b:e6:cc:6e:9e:46: 5d:79:05:4e:cb:6a:98:3e:01:10:55:e7:03:50:b1:2e:fc:fc: fc:06:15:73:33:24:f0:f3:ff:95:31:69:b7:01:6b:56:02:3a: 06:1c:20:52:ae:3b:dc:a7:1b:16:93:9c:30:e4:1f:98:e7:0f: bf:31:e1:b0:f2:ae:94:a5:fd:6b:9c:de:63:f6:ff:dd:9d:44: f7:c6:55:6e:39:be:c8:8b:eb:89:ed:2f:d0:54:5f:05:90:92: 64:bb:46:0e:2c:f5:80:68:f3:17:10:df:da:f1:42:51:74:24: b4:35:c2:7b:64:32:c5:d4:dd:28:1b:cb:49:cb:b0:02:83:cb: 1c:f3:0f:5c:29:da:74:10:13:f8:dd:5b:26:72:a6:62:b9:e2: 67:fc:42:99:c8:8c:ca:92:7b:a8:49:c8:92:9b:89:ba:7d:bf: 54:c7:b9:95:98:04:65:75:3f:8f:81:65:a3:39:62:81:01:73: 00:c9:21:81:f3:2f:7d:9a:af:5a:56:94:d7:78:c7:59:7b:9a: e9:af:ee:e3:df:1e:ed:f9:ae:ea:e3:1c:87:87:5e:2c:56:6f: df:65:4f:d4:f9:b5:b6:df:3b:82:4a:85:83:73:df:25:b3:94: 8d:a5:b8:fd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZseYA4bd2wkqtcufMtWdVb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjE0MTkzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWYzOTI0Mjc4ZDlhOTIxYzcxOTQwODU2NDliMWJmOTk3NzhkM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/4OpUsAPkPTlz4AI2PCcLZHoLuQ t9vy2A9AeGAQVaW1UXRkMRCZU8in7/BhvtvziDtwG0wf1v+PEITNyJWy3wl56S0U +/rLI9jEhgk998YW3VfOn19WJ6moc+zS98LBjlfjfpsGP3Itgn9ygaar1TlraNsy SBQpsgo+cpFdqpMwNf7bHlVn6iaB12ruH0Fs5ymoSXYMQAZV1Y3KH7cwdNA7SV08 VwloAIrUZgWl4MB6dste2al7oSe0lits1GrtEjha+sikMIq2Vn+hHbz/nbjROMmo yeEC3nYkXe5nxUzUHmQ9ZLphIkGvpKM6pgrNEKInfj/MFhaTKrZsv3GuaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE7zkkJ42akhxxlAhWSbG/mXeNP6MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvVHZPU1FualpxU0hIR1VDRlpKc2ItWmQ0MF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6zyAwQA V+UjMA0GCSqGSIb3DQEBCwUAA4IBAQBtXviU6okLCytR0Dx75sxunkZdeQVOy2qY PgEQVecDULEu/Pz8BhVzMyTw8/+VMWm3AWtWAjoGHCBSrjvcpxsWk5ww5B+Y5w+/ MeGw8q6Upf1rnN5j9v/dnUT3xlVuOb7Ii+uJ7S/QVF8FkJJku0YOLPWAaPMXEN/a 8UJRdCS0NcJ7ZDLF1N0oG8tJy7ACg8sc8w9cKdp0EBP43VsmcqZiueJn/EKZyIzK knuoSciSm4m6fb9Ux7mVmARldT+PgWWjOWKBAXMAySGB8y99mq9aVpTXeMdZe5rp r+7j3x7t+a7q4xyHh14sVm/fZU/U+bW23zuCSoWDc98ls5SNpbj9 -----END CERTIFICATE-----Generated at Fri Dec 19 10:34:40 2025 by rpki-client