This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/28zXLFeRXoHKQibLR_FN7To5SA4.roa File: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (raw, json) Hash identifier: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw= Subject key identifier: DB:CC:D7:2C:57:91:5E:81:CA:42:26:CB:47:F1:4D:ED:3A:39:48:0E Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Certificate serial: 019B7B36F96AECE5AA400156EAB706A1EEF7 Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/28zXLFeRXoHKQibLR_FN7To5SA4.roa Signing time: Thu 01 Jan 2026 20:19:18 +0000 ROA not before: Thu 01 Jan 2026 20:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28725 IP address blocks: 194.50.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f9:6a:ec:e5:aa:40:01:56:ea:b7:06:a1:ee:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbccd72c57915e81ca4226cb47f14ded3a39480e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ca:49:35:02:88:59:db:fd:3b:39:7b:be:1c: 14:45:79:63:00:66:1a:d1:56:43:fc:93:d8:9e:e7: fd:86:da:09:d5:e3:74:07:08:b3:12:96:e5:ee:ce: bd:76:36:cc:d8:b0:9e:6d:2f:43:ff:55:e3:d5:b0: eb:44:f7:d5:bb:dc:3d:23:78:95:f4:b7:87:b4:38: 68:99:4a:a9:33:14:e7:58:1f:d3:a8:37:2a:a2:61: c1:d4:13:ba:8c:f6:c8:72:e0:78:4a:57:51:82:77: 84:a8:c8:53:8b:0d:8d:8c:2e:6e:8f:a0:bf:99:86: 6b:08:fc:27:67:73:2c:65:07:69:8a:de:18:d7:6b: 50:6f:ca:56:99:4c:b0:9d:31:42:5e:4b:dd:58:29: 1a:88:af:4c:f6:9a:f7:a2:a1:66:b2:39:a5:46:a2: 2a:99:1b:fc:21:30:4f:ca:64:39:1d:aa:94:6c:47: 03:a2:03:65:39:fd:f5:cf:88:a6:97:8d:78:ab:6d: 4c:a1:96:ae:d0:de:64:65:c0:82:18:94:6c:63:e3: c1:2d:24:32:c0:fa:5c:2b:2b:5e:11:4e:9c:e7:b7: 82:68:70:41:47:2f:7f:f4:a0:ea:03:23:3f:9b:2a: f9:10:4d:3e:95:c3:39:47:7d:7c:ef:4e:f1:89:e2: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CC:D7:2C:57:91:5E:81:CA:42:26:CB:47:F1:4D:ED:3A:39:48:0E X509v3 Authority Key Identifier: keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/28zXLFeRXoHKQibLR_FN7To5SA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.64.0/22 Signature Algorithm: sha256WithRSAEncryption 49:64:f1:d7:3f:10:0b:37:b3:db:64:d9:74:c4:07:c5:0c:19: 7a:1b:75:8b:8b:ad:a5:82:2d:76:5c:33:b7:1f:fc:a6:0f:ea: 69:7e:eb:2d:33:db:21:39:19:e8:66:cc:65:29:c5:2d:b6:42: c9:ac:f9:79:93:83:4f:19:75:d1:7d:01:91:64:70:7e:1e:75: 26:96:6b:b0:bb:97:f8:3e:de:90:6f:1b:1b:6b:29:b0:6b:ea: 4e:50:e3:65:d1:6b:42:33:af:bd:c9:2c:4a:ce:f3:6b:d0:cc: f0:1a:8e:47:d7:8e:68:6c:5c:ab:1e:b7:89:e5:ed:44:36:2b: 89:2e:3d:a8:b2:61:ee:ac:59:5d:3e:8e:89:cc:7b:7b:2e:ba: 52:21:b9:71:62:19:7c:db:ef:5d:2d:fb:54:ee:23:2f:e2:06: 7e:d9:8a:36:ed:d2:85:c1:2f:f1:e5:07:32:52:92:b9:ec:07: 79:7a:dc:68:af:7a:f5:cb:1b:96:6d:87:eb:53:c0:ee:c0:e2: d0:13:84:23:33:0e:9b:68:86:75:bf:bd:79:14:c7:e9:5e:11: f1:ef:aa:64:7b:0a:75:0c:ec:79:31:b1:99:b5:a1:d5:32:88: 93:24:da:53:e7:61:02:ba:87:26:1f:89:5f:29:8f:48:cf:e3: eb:5a:8f:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nvlq7OWqQAFW6rcGoe73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNTRlNTIwZTdiYjdlMTNmNTMyY2VjZjA1YTgyZDJiNzk3 OTUyYTIwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmNjZDcyYzU3OTE1ZTgxY2E0MjI2Y2I0N2YxNGRlZDNhMzk0ODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcpJNQKIWdv9Ozl7vhwURXljAGYa 0VZD/JPYnuf9htoJ1eN0BwizEpbl7s69djbM2LCebS9D/1Xj1bDrRPfVu9w9I3iV 9LeHtDhomUqpMxTnWB/TqDcqomHB1BO6jPbIcuB4SldRgneEqMhTiw2NjC5uj6C/ mYZrCPwnZ3MsZQdpit4Y12tQb8pWmUywnTFCXkvdWCkaiK9M9pr3oqFmsjmlRqIq mRv8ITBPymQ5HaqUbEcDogNlOf31z4iml414q21MoZau0N5kZcCCGJRsY+PBLSQy wPpcKyteEU6c57eCaHBBRy9/9KDqAyM/myr5EE0+lcM5R318707xieK7dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvM1yxXkV6BykImy0fxTe06OUgOMB8GA1UdIwQY MBaAFPNU5SDnu34T9TLOzwWoLSt5eVKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzkt Y2E1MWZiMzBlZGRmLzEvMjh6WExGZVJYb0hLUWliTFJfRk43VG81U0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzktY2E1MWZiMzBlZGRm LzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjJAMA0G CSqGSIb3DQEBCwUAA4IBAQBJZPHXPxALN7PbZNl0xAfFDBl6G3WLi62lgi12XDO3 H/ymD+ppfustM9shORnoZsxlKcUttkLJrPl5k4NPGXXRfQGRZHB+HnUmlmuwu5f4 Pt6Qbxsbaymwa+pOUONl0WtCM6+9ySxKzvNr0MzwGo5H145obFyrHreJ5e1ENiuJ Lj2osmHurFldPo6JzHt7LrpSIblxYhl82+9dLftU7iMv4gZ+2Yo27dKFwS/x5Qcy UpK57Ad5etxor3r1yxuWbYfrU8DuwOLQE4QjMw6baIZ1v715FMfpXhHx76pkewp1 DOx5MbGZtaHVMoiTJNpT52ECuocmH4lfKY9Iz+PrWo9g -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:56 2026 by rpki-client