This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/28sBRBWF62QAkRrCbPiZ2ZPwMxc.roa File: 28sBRBWF62QAkRrCbPiZ2ZPwMxc.roa (raw, json) Hash identifier: yGQVpHk9qBER5HpkM+DZEe6o5vmbbCXGZC71+G9ZJko= Subject key identifier: DB:CB:01:44:15:85:EB:64:00:91:1A:C2:6C:F8:99:D9:93:F0:33:17 Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7 Certificate serial: 019B7EA6C11F3CE061F98F9358E9B870B7FD Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/28sBRBWF62QAkRrCbPiZ2ZPwMxc.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210226 IP address blocks: 185.235.39.0/24 maxlen: 24 2a0e:1702:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c1:1f:3c:e0:61:f9:8f:93:58:e9:b8:70:b7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbcb01441585eb6400911ac26cf899d993f03317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:ea:30:47:e1:77:6f:ba:58:f0:51:c5:61: 73:96:a5:4c:05:a7:8b:65:be:b7:58:4e:00:ff:45: 86:ee:88:c4:46:a4:67:aa:cd:30:0c:91:60:6b:df: 4b:44:7b:97:86:0c:fa:d3:09:99:37:b3:7d:52:67: 77:49:35:54:e2:d8:25:d4:68:bc:05:90:c8:79:e9: b6:41:ff:48:24:cf:2a:89:d0:1c:1b:1e:2a:2e:2e: 20:e3:97:d1:47:cc:72:e3:6c:fd:e0:85:96:03:c6: b8:d9:20:54:e0:dd:29:b5:1d:4a:78:4c:d5:e2:32: af:98:6e:c0:41:75:8d:80:f7:c0:d1:95:b9:07:be: 4f:15:68:69:ec:82:be:96:3f:e4:fb:c3:9c:ae:b0: c7:48:4a:9c:e6:71:11:1f:3d:81:cc:e8:24:cb:78: ce:dd:2f:68:f9:f1:38:13:7e:2f:1f:65:95:2a:0a: 65:e5:21:b8:60:38:28:ab:14:09:c8:c3:96:39:16: 53:89:c3:37:48:3b:b2:21:69:f4:14:cf:98:1d:41: 45:1e:48:a2:a4:61:1e:4d:96:98:76:e1:36:0a:97: 73:bd:90:f8:70:6e:e2:33:ee:76:c6:15:4f:2f:e9: 6f:42:0a:1f:0f:f8:c5:38:97:b8:cf:97:91:32:cc: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CB:01:44:15:85:EB:64:00:91:1A:C2:6C:F8:99:D9:93:F0:33:17 X509v3 Authority Key Identifier: keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/28sBRBWF62QAkRrCbPiZ2ZPwMxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.39.0/24 IPv6: 2a0e:1702:2::/48 Signature Algorithm: sha256WithRSAEncryption 9d:59:2d:fc:02:24:a6:6b:1c:3b:9e:a5:dc:bd:6d:9a:7f:ef: 21:f7:31:64:cf:47:46:31:69:c7:23:ce:05:07:0d:9f:d2:59: 02:97:dc:7f:dc:5d:32:54:8f:af:d0:d2:80:66:5b:9f:4f:7a: 94:4c:8e:03:13:31:32:5d:bf:c8:f2:af:1c:5e:4c:44:14:be: ac:23:44:33:f8:cd:12:35:90:e3:68:d0:8d:bb:a4:8c:de:9b: 95:52:d7:35:00:f0:95:2e:3d:e9:c4:73:cc:1b:15:a9:15:4f: 28:c9:e4:19:6a:43:ee:67:0a:2a:9a:24:ee:29:ac:a7:55:75: 18:19:6c:4e:6e:9f:40:b0:3e:61:a6:e8:bb:4c:2c:5f:45:a1: fc:b0:ae:34:bf:24:0a:d4:74:b0:a5:a1:8e:90:11:90:49:02: 1b:45:b5:a3:3f:35:32:00:4a:39:7e:44:76:bf:67:a3:c2:09: 6a:89:33:c2:e1:d7:fe:aa:d8:87:b5:e9:37:1a:3f:cf:4d:a1: d8:4c:f4:18:11:b5:0c:d3:d3:f9:9f:bc:bb:0d:76:ee:05:89: e9:97:4f:96:93:6d:2a:07:78:45:29:8a:7c:16:26:21:e4:d3: 5f:ee:ea:7e:ae:e1:94:64:89:bd:c0:e5:6b:52:9d:f8:92:65: 90:05:13:e1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+psEfPOBh+Y+TWOm4cLf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWU2MjU3ZDBjM2EyYjkzMDU2MWFmMjUyMmQ5ZTVhZjdm OWNiYzcwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmNiMDE0NDE1ODVlYjY0MDA5MTFhYzI2Y2Y4OTlkOTkzZjAzMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthjqMEfhd2+6WPBRxWFzlqVMBaeL Zb63WE4A/0WG7ojERqRnqs0wDJFga99LRHuXhgz60wmZN7N9Umd3STVU4tgl1Gi8 BZDIeem2Qf9IJM8qidAcGx4qLi4g45fRR8xy42z94IWWA8a42SBU4N0ptR1KeEzV 4jKvmG7AQXWNgPfA0ZW5B75PFWhp7IK+lj/k+8OcrrDHSEqc5nERHz2BzOgky3jO 3S9o+fE4E34vH2WVKgpl5SG4YDgoqxQJyMOWORZTicM3SDuyIWn0FM+YHUFFHkii pGEeTZaYduE2CpdzvZD4cG7iM+52xhVPL+lvQgofD/jFOJe4z5eRMsxDqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNvLAUQVhetkAJEawmz4mdmT8DMXMB8GA1UdIwQY MBaAFBLuYlfQw6K5MFYa8lItnlr3+cvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEt M2YzMzg2NjE5MmQwLzEvMjhzQlJCV0Y2MlFBa1JyQ2JQaVoyWlB3TXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEtM2YzMzg2NjE5MmQw LzEvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuesnMA8E AgACMAkDBwAqDhcCAAIwDQYJKoZIhvcNAQELBQADggEBAJ1ZLfwCJKZrHDuepdy9 bZp/7yH3MWTPR0YxaccjzgUHDZ/SWQKX3H/cXTJUj6/Q0oBmW59PepRMjgMTMTJd v8jyrxxeTEQUvqwjRDP4zRI1kONo0I27pIzem5VS1zUA8JUuPenEc8wbFakVTyjJ 5BlqQ+5nCiqaJO4prKdVdRgZbE5un0CwPmGm6LtMLF9FofywrjS/JArUdLCloY6Q EZBJAhtFtaM/NTIASjl+RHa/Z6PCCWqJM8Lh1/6q2Ie16TcaP89NodhM9BgRtQzT 0/mfvLsNdu4FiemXT5aTbSoHeEUpinwWJiHk01/u6n6u4ZRkib3A5WtSnfiSZZAF E+E= -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:13 2026 by rpki-client