This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/h53oA3SujEDr4ELckr6UN9W2NOk.roa File: h53oA3SujEDr4ELckr6UN9W2NOk.roa (raw, json) Hash identifier: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q= Subject key identifier: 87:9D:E8:03:74:AE:8C:40:EB:E0:42:DC:92:BE:94:37:D5:B6:34:E9 Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1 Certificate serial: 019B7AC841D4FDDA2879985D3709A5150DF3 Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/h53oA3SujEDr4ELckr6UN9W2NOk.roa Signing time: Thu 01 Jan 2026 18:18:22 +0000 ROA not before: Thu 01 Jan 2026 18:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39305 IP address blocks: 139.28.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:41:d4:fd:da:28:79:98:5d:37:09:a5:15:0d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1 Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=879de80374ae8c40ebe042dc92be9437d5b634e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:b3:d8:1d:23:a3:d7:6b:37:0d:bc:7c:e5: 4e:b7:05:c5:2a:a3:78:a4:dd:50:5b:16:68:1f:7b: ba:a2:b3:e9:49:0c:60:35:fe:ae:f6:c6:63:d2:63: 21:f9:f5:9e:fc:b2:71:03:2f:a5:e4:b3:9e:01:2a: 9e:a1:83:4b:07:4c:23:e0:d7:41:72:69:24:2c:99: 4e:a5:17:ab:42:ad:22:22:0b:be:43:55:96:a3:56: 4f:b8:aa:87:00:14:54:24:7c:57:b6:3c:56:b8:bd: 40:eb:0e:50:b9:e7:3a:3d:47:88:7c:a0:32:e4:b9: e7:dc:b7:d2:e2:06:20:d8:1a:ee:c4:53:4f:ed:41: dd:e8:47:46:74:88:fc:b9:2e:eb:ad:dd:d8:c5:69: 3a:c0:35:64:1f:4f:53:5b:5e:d5:96:b1:ba:78:3c: 36:10:51:36:7f:4b:ca:cc:1c:da:d3:0b:bb:13:fa: 93:de:1b:6c:a5:81:d9:b3:63:13:bb:fb:3d:f7:76: fc:69:6b:22:7f:e1:1e:89:c0:a1:9c:ba:59:5a:01: 1c:c4:fe:a0:58:6a:27:23:a4:df:76:1d:67:c6:53: 68:94:0c:71:f8:48:cb:ef:ce:f4:93:9d:96:10:33: 6d:d4:21:55:73:44:7c:1b:dd:8f:45:85:b1:4d:90: 29:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9D:E8:03:74:AE:8C:40:EB:E0:42:DC:92:BE:94:37:D5:B6:34:E9 X509v3 Authority Key Identifier: keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/h53oA3SujEDr4ELckr6UN9W2NOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.68.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:dd:61:03:c6:e8:a4:3e:4b:30:23:82:66:aa:ce:d7:02:db: 54:88:65:d6:85:20:84:35:d7:9d:81:ca:b1:b6:a0:a5:9c:90: 22:fb:1a:1b:be:69:fb:af:82:14:9b:53:8e:80:0d:94:91:06: e3:cc:f6:49:7a:27:61:d8:9a:b0:be:b9:21:9e:06:c0:cb:a4: 64:f2:70:9d:a3:34:c5:96:3c:a8:c6:ad:53:e7:91:25:25:04: 7b:4e:a3:2c:ec:e1:9d:30:99:ee:5e:9c:0b:d7:af:4b:e9:a2: 61:bc:b0:1e:c5:10:fb:2c:c0:87:86:ec:8d:c1:9c:e7:61:51: c0:e4:d7:0d:46:f5:87:3c:44:f1:ad:d0:76:e8:5c:02:77:8c: 05:54:c4:cd:00:4b:24:31:1e:c2:94:6c:46:45:95:8d:fb:49: 38:54:10:72:3b:83:8c:05:34:97:22:fe:81:1a:1e:17:bd:ea: 53:f3:99:95:31:ee:93:72:b7:8f:cd:db:3f:ab:73:38:b4:58: 2a:84:aa:00:db:61:25:8c:19:71:49:20:82:0b:23:9d:55:1a: 45:dd:0c:7e:94:54:60:5d:c5:83:d7:bc:53:13:2b:2d:60:f4: 35:78:76:e7:68:ff:ca:60:fd:0a:9a:79:ee:08:a6:cd:d9:d7: 07:e1:18:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yEHU/dooeZhdNwmlFQ3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWYzNjUyZTQ0NThmYTAwMWM2NzM4YTQxNDI1YjA3ZTcw YzkxYTEwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzlkZTgwMzc0YWU4YzQwZWJlMDQyZGM5MmJlOTQzN2Q1YjYzNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsuz2B0jo9drNw28fOVOtwXFKqN4 pN1QWxZoH3u6orPpSQxgNf6u9sZj0mMh+fWe/LJxAy+l5LOeASqeoYNLB0wj4NdB cmkkLJlOpRerQq0iIgu+Q1WWo1ZPuKqHABRUJHxXtjxWuL1A6w5Quec6PUeIfKAy 5Lnn3LfS4gYg2BruxFNP7UHd6EdGdIj8uS7rrd3YxWk6wDVkH09TW17VlrG6eDw2 EFE2f0vKzBza0wu7E/qT3htspYHZs2MTu/s993b8aWsif+EeicChnLpZWgEcxP6g WGonI6Tfdh1nxlNolAxx+EjL7870k52WEDNt1CFVc0R8G92PRYWxTZApCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIed6AN0roxA6+BC3JK+lDfVtjTpMB8GA1UdIwQY MBaAFCefNlLkRY+gAcZzikFCWwfnDJGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEt ZjhlNmJmZTFhZGZiLzEvaDUzb0EzU3VqRURyNEVMY2tyNlVOOVcyTk9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEtZjhlNmJmZTFhZGZi LzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixxEMA0G CSqGSIb3DQEBCwUAA4IBAQAK3WEDxuikPkswI4Jmqs7XAttUiGXWhSCENdedgcqx tqClnJAi+xobvmn7r4IUm1OOgA2UkQbjzPZJeidh2JqwvrkhngbAy6Rk8nCdozTF ljyoxq1T55ElJQR7TqMs7OGdMJnuXpwL169L6aJhvLAexRD7LMCHhuyNwZznYVHA 5NcNRvWHPETxrdB26FwCd4wFVMTNAEskMR7ClGxGRZWN+0k4VBByO4OMBTSXIv6B Gh4XvepT85mVMe6TcrePzds/q3M4tFgqhKoA22EljBlxSSCCCyOdVRpF3Qx+lFRg XcWD17xTEystYPQ1eHbnaP/KYP0KmnnuCKbN2dcH4Rg9 -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:03 2026 by rpki-client