This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/28qciXJsiY_HinbmOHfVFSyJkQk.roa File: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (raw, json) Hash identifier: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho= Subject key identifier: DB:CA:9C:89:72:6C:89:8F:C7:8A:76:E6:38:77:D5:15:2C:89:91:09 Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38 Certificate serial: 019B7EA4D804B09C9E0BBEC996BD3AA41557 Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/28qciXJsiY_HinbmOHfVFSyJkQk.roa Signing time: Fri 02 Jan 2026 12:18:11 +0000 ROA not before: Fri 02 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49771 IP address blocks: 64.7.88.0/22 maxlen: 24 194.242.24.0/24 maxlen: 24 194.242.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d8:04:b0:9c:9e:0b:be:c9:96:bd:3a:a4:15:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38 Validity Not Before: Jan 2 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbca9c89726c898fc78a76e63877d5152c899109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:32:fd:b3:d1:3c:c3:9d:87:1f:c9:49:64: 34:4b:38:24:10:94:48:9e:7e:61:bb:b3:7d:97:3b: 1c:ef:37:7e:37:a8:53:b0:ef:41:e2:0c:7a:c2:c4: 4f:96:88:4a:ee:5b:d4:4a:2d:0f:a7:7b:7b:5d:cd: 7b:e0:a4:3d:d6:4a:37:bb:ee:5e:ca:e0:69:df:69: ed:ef:d6:61:9a:23:1f:87:41:35:ff:5e:c1:b8:80: 68:13:91:a5:2a:ee:07:e1:75:c9:80:12:c2:e0:16: b8:3a:63:05:f8:d6:af:b6:b1:c7:00:d3:d8:b0:24: e9:61:39:64:ee:a0:e4:3d:d3:a7:2a:d9:8c:81:c2: a0:3c:19:1b:c8:b1:ca:06:f0:e6:91:06:e6:10:11: bd:7c:80:08:f3:df:ee:62:c5:88:83:e7:3d:69:7d: e5:09:6e:b8:13:1f:9d:00:4f:e0:99:7a:33:14:41: 74:18:d0:ac:37:52:6a:f6:a5:7c:64:b2:79:d8:bf: 94:da:6f:58:34:23:a1:39:c1:bf:45:34:7d:94:e5: a6:f1:42:05:80:08:0b:0a:45:01:47:f0:f7:56:05: 4d:0e:2d:85:29:98:3e:d2:a4:10:53:d1:31:ab:d5: 2f:e0:73:84:e6:33:81:1d:0a:35:56:9a:e0:66:78: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:9C:89:72:6C:89:8F:C7:8A:76:E6:38:77:D5:15:2C:89:91:09 X509v3 Authority Key Identifier: keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/28qciXJsiY_HinbmOHfVFSyJkQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.7.88.0/22 194.242.24.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:11:7f:d7:29:3b:63:6d:b4:c9:1c:6e:b6:eb:5f:fe:b1:3b: 88:82:af:cc:cf:ff:ae:7f:47:09:4a:9d:c7:8e:06:9c:f6:f2: 1c:d4:e6:6f:79:81:f5:4f:5b:71:29:94:5a:1c:bc:ae:bb:06: de:e6:e1:75:e7:50:47:ad:8e:c4:0e:8c:fb:5d:ee:6f:4e:02: b9:ff:3c:b5:09:fa:2e:bc:df:1f:15:03:a4:2f:0e:a1:a4:3f: 16:52:75:ca:c7:f8:d4:5d:52:e1:bb:d4:1e:ec:f8:19:33:15: 38:68:35:0a:a4:ab:21:b7:91:cf:3b:60:ac:27:df:c9:a7:66: 8b:6d:32:28:80:fc:c4:b4:0a:64:83:95:fb:f0:63:cc:ee:4d: 1f:3c:f2:68:c5:3c:bf:be:9d:4d:1c:f6:0b:dd:ab:f0:ef:18: f5:ff:e0:e6:a8:bb:ab:be:23:8b:b4:5e:9c:ab:4a:a3:18:a7: 73:77:e7:ea:b8:66:fc:a1:b8:e2:6e:94:ac:fb:e7:47:9b:c8: 9a:f3:73:6a:a8:22:33:8f:b8:e5:91:f5:19:c8:7d:c0:90:68: 0b:f0:4e:7c:88:67:de:ca:49:56:7d:99:fd:4a:f7:4a:a0:f8: b7:ea:03:ca:12:ec:5f:8c:de:c3:eb:ba:f0:46:29:b8:d0:b4: 91:e6:0e:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pNgEsJyeC77Jlr06pBVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk ODFkMzgwHhcNMjYwMTAyMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmNhOWM4OTcyNmM4OThmYzc4YTc2ZTYzODc3ZDUxNTJjODk5MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLcy/bPRPMOdhx/JSWQ0SzgkEJRI nn5hu7N9lzsc7zd+N6hTsO9B4gx6wsRPlohK7lvUSi0Pp3t7Xc174KQ91ko3u+5e yuBp32nt79ZhmiMfh0E1/17BuIBoE5GlKu4H4XXJgBLC4Ba4OmMF+NavtrHHANPY sCTpYTlk7qDkPdOnKtmMgcKgPBkbyLHKBvDmkQbmEBG9fIAI89/uYsWIg+c9aX3l CW64Ex+dAE/gmXozFEF0GNCsN1Jq9qV8ZLJ52L+U2m9YNCOhOcG/RTR9lOWm8UIF gAgLCkUBR/D3VgVNDi2FKZg+0qQQU9Exq9Uv4HOE5jOBHQo1VprgZniSmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNvKnIlybImPx4p25jh31RUsiZEJMB8GA1UdIwQY MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct ZmI1YzU4MmU0MDk3LzEvMjhxY2lYSnNpWV9IaW5ibU9IZlZGU3lKa1FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3 LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQAdYAwQB wvIYMA0GCSqGSIb3DQEBCwUAA4IBAQAbEX/XKTtjbbTJHG6261/+sTuIgq/Mz/+u f0cJSp3Hjgac9vIc1OZveYH1T1txKZRaHLyuuwbe5uF151BHrY7EDoz7Xe5vTgK5 /zy1CfouvN8fFQOkLw6hpD8WUnXKx/jUXVLhu9Qe7PgZMxU4aDUKpKsht5HPO2Cs J9/Jp2aLbTIogPzEtApkg5X78GPM7k0fPPJoxTy/vp1NHPYL3avw7xj1/+DmqLur viOLtF6cq0qjGKdzd+fquGb8objibpSs++dHm8ia83NqqCIzj7jlkfUZyH3AkGgL 8E58iGfeyklWfZn9SvdKoPi36gPKEuxfjN7D67rwRim40LSR5g4H -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:37 2026 by rpki-client