This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/tGZekNCAKl44AH2g8mat8f-ePSU.roa File: tGZekNCAKl44AH2g8mat8f-ePSU.roa (raw, json) Hash identifier: AAiGBv8xBlpnZwK1ltcL0Goyz/lGWj7+SfskdM1oaSQ= Subject key identifier: B4:66:5E:90:D0:80:2A:5E:38:00:7D:A0:F2:66:AD:F1:FF:9E:3D:25 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B3D0534640E53A091A65B78F633D77844 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/tGZekNCAKl44AH2g8mat8f-ePSU.roa Signing time: Sat 20 Dec 2025 18:28:29 +0000 ROA not before: Sat 20 Dec 2025 18:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17497 IP address blocks: 87.229.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:05:34:64:0e:53:a0:91:a6:5b:78:f6:33:d7:78:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 20 18:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4665e90d0802a5e38007da0f266adf1ff9e3d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:74:d8:00:49:5c:87:3e:6c:52:08:c8:ef: 24:06:92:33:3d:80:cd:96:2c:7f:48:ed:a7:37:d3: b1:e8:9b:9a:c2:34:25:1f:65:51:06:ce:28:59:06: c2:45:c6:69:04:84:80:e7:ce:c5:14:8a:7f:c1:ca: 9e:93:67:14:31:69:36:ef:af:de:f6:09:7e:27:eb: 10:1c:f0:b2:04:6f:b7:e7:51:69:0e:f5:cd:ff:d8: e0:bd:45:f7:fe:71:27:de:bd:54:a4:12:b1:88:02: 1b:97:81:c6:9c:bb:95:d3:c1:b5:48:60:f2:d8:a9: f5:cb:81:f7:49:80:7a:1b:07:8a:8e:9e:8c:f5:2a: 99:f3:ea:01:4e:a1:ee:97:c9:09:e0:b3:d4:52:78: 60:4d:b5:ef:aa:73:d3:38:ba:84:da:72:31:74:2e: 53:12:ef:21:f8:be:2d:4d:55:8a:0d:19:05:ab:89: 92:cb:51:cd:50:55:4c:59:57:2d:eb:db:f1:f0:79: 23:eb:2e:cb:d8:7a:b5:02:81:0e:15:25:2b:e2:88: 1a:fe:ab:2d:40:e5:1f:2b:cc:dd:a8:37:c9:e3:08: ac:b8:77:93:a6:35:5c:11:3f:56:41:05:5e:51:8e: 73:14:35:19:c7:ce:f3:c9:ca:30:39:29:7f:94:1a: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:66:5E:90:D0:80:2A:5E:38:00:7D:A0:F2:66:AD:F1:FF:9E:3D:25 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/tGZekNCAKl44AH2g8mat8f-ePSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.124.0/24 Signature Algorithm: sha256WithRSAEncryption 44:c0:3d:7f:51:2f:ab:43:af:96:97:32:22:8a:57:92:ba:10: e2:4f:80:12:c6:29:be:5f:ba:67:e6:8c:71:b2:7f:8f:e4:e2: ea:8c:e9:a8:fe:22:87:89:42:14:c8:3e:80:37:a9:d1:89:da: 43:87:39:17:fd:b5:5f:ca:b6:6a:e7:9f:ec:c2:7d:f3:40:d6: f3:5b:94:73:2b:43:78:be:e9:b3:1f:cb:1d:89:c0:f8:5b:4e: 29:38:8f:17:04:91:41:9c:e9:a1:bb:53:31:1c:79:ec:f2:4b: f6:cd:3c:c8:fc:af:3a:30:98:79:d1:ec:ea:0e:6e:52:24:e0: 7d:93:96:b8:d2:98:30:33:aa:9b:ff:e4:a2:6d:e9:a7:e0:b8: 7d:79:04:1c:99:9b:30:67:94:5a:cc:73:5d:3b:21:51:a9:b3: a5:dc:99:76:8d:71:1c:9c:c5:fe:22:60:5d:10:82:86:e4:43: 3c:a2:0c:92:b4:3d:c4:39:5d:b6:fa:ee:0f:be:12:8e:00:6d: 34:fd:5c:67:a2:6d:fa:2e:3c:77:7d:38:87:1d:b5:ad:94:ec: 66:e8:b6:ea:dd:d7:df:2f:e1:26:fc:a6:9e:a5:be:3e:08:52: b0:37:5e:2d:61:41:61:a3:d9:82:c8:4a:0a:0e:8e:09:e7:b9: d2:dc:80:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs9BTRkDlOgkaZbePYz13hEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjIwMTgyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDY2NWU5MGQwODAyYTVlMzgwMDdkYTBmMjY2YWRmMWZmOWUzZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KJ02ABJXIc+bFIIyO8kBpIzPYDN lix/SO2nN9Ox6JuawjQlH2VRBs4oWQbCRcZpBISA587FFIp/wcqek2cUMWk276/e 9gl+J+sQHPCyBG+351FpDvXN/9jgvUX3/nEn3r1UpBKxiAIbl4HGnLuV08G1SGDy 2Kn1y4H3SYB6GweKjp6M9SqZ8+oBTqHul8kJ4LPUUnhgTbXvqnPTOLqE2nIxdC5T Eu8h+L4tTVWKDRkFq4mSy1HNUFVMWVct69vx8Hkj6y7L2Hq1AoEOFSUr4oga/qst QOUfK8zdqDfJ4wisuHeTpjVcET9WQQVeUY5zFDUZx87zycowOSl/lBql0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRmXpDQgCpeOAB9oPJmrfH/nj0lMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvdEdaZWtOQ0FLbDQ0QUgyZzhtYXQ4Zi1lUFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+V8MA0G CSqGSIb3DQEBCwUAA4IBAQBEwD1/US+rQ6+WlzIiileSuhDiT4ASxim+X7pn5oxx sn+P5OLqjOmo/iKHiUIUyD6AN6nRidpDhzkX/bVfyrZq55/swn3zQNbzW5RzK0N4 vumzH8sdicD4W04pOI8XBJFBnOmhu1MxHHns8kv2zTzI/K86MJh50ezqDm5SJOB9 k5a40pgwM6qb/+Sibemn4Lh9eQQcmZswZ5RazHNdOyFRqbOl3Jl2jXEcnMX+ImBd EIKG5EM8ogyStD3EOV22+u4PvhKOAG00/Vxnom36Ljx3fTiHHbWtlOxm6Lbq3dff L+Em/Kaepb4+CFKwN14tYUFho9mCyEoKDo4J57nS3IBh -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:19 2025 by rpki-client