This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/rS0ub271N0mgf5Pfb161dvFC_v4.roa File: rS0ub271N0mgf5Pfb161dvFC_v4.roa (raw, json) Hash identifier: cU/s0tr6dDuR+BKKqu2aSnnlyz5+VDlFiksMCpDRrOo= Subject key identifier: AD:2D:2E:6F:6E:F5:37:49:A0:7F:93:DF:6F:5E:B5:76:F1:42:FE:FE Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc Certificate serial: 019B79111AC20B981158E6897030E139D2DD Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/rS0ub271N0mgf5Pfb161dvFC_v4.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207246 IP address blocks: 212.28.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1a:c2:0b:98:11:58:e6:89:70:30:e1:39:d2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad2d2e6f6ef53749a07f93df6f5eb576f142fefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:be:5f:c6:59:28:7b:b9:7b:29:5f:d7:42: 4d:d1:9f:73:48:de:16:5d:5d:1a:03:cb:c3:f4:eb: 18:00:07:c1:ba:e9:c3:c3:02:ff:e4:8b:75:e1:6c: 16:3e:01:6b:b2:98:ca:4c:36:a1:3e:fd:75:1a:06: 91:5c:87:3f:3b:57:d1:c1:f3:f0:2d:65:a7:3a:0a: fe:36:e0:27:bc:f0:73:f2:b8:19:2e:cb:60:05:c4: f1:2e:90:2c:5d:77:4c:d0:8d:3f:28:9e:c3:51:30: 3c:a9:6c:4f:d1:61:9b:46:c7:a1:43:7d:32:e9:04: 3e:b7:94:35:c3:4c:ef:e8:d9:e9:18:5b:12:42:8a: 73:f6:3c:24:a2:5e:9d:34:4c:4e:81:c5:26:d2:4b: 38:3d:6c:7e:10:a4:5f:eb:7e:d2:e7:72:28:7b:c3: 03:69:62:85:82:c2:19:36:80:96:9f:8e:2b:48:e4: 5d:6c:55:9e:bd:98:a5:b5:92:02:2a:ab:46:e6:c0: d4:d4:21:b3:a0:f4:96:71:e4:bd:dc:97:1e:b9:2a: c9:67:79:96:86:8f:06:38:46:7f:3d:84:e8:48:87: f1:ee:8d:fa:e9:7d:1d:68:b2:6a:d1:fe:b3:c5:0c: dc:e3:df:fc:64:3a:18:59:42:35:56:ff:ea:37:8c: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2D:2E:6F:6E:F5:37:49:A0:7F:93:DF:6F:5E:B5:76:F1:42:FE:FE X509v3 Authority Key Identifier: keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/rS0ub271N0mgf5Pfb161dvFC_v4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.28.77.0/24 Signature Algorithm: sha256WithRSAEncryption 91:64:ed:ad:25:da:2f:d0:be:f6:69:2b:dc:86:1e:95:19:b9: a4:d4:aa:2a:cc:dd:03:ec:e1:34:c2:56:dc:82:b1:17:04:9a: 6b:30:0c:06:fd:e9:f6:38:c5:dc:43:7c:91:31:15:79:d9:a8: 9c:73:58:8b:f0:7c:32:e3:db:64:f0:4b:bc:49:1d:3f:17:3f: 42:fe:21:f6:bd:b2:11:d6:b9:e8:ab:dc:52:d2:6f:c5:e4:6f: 4e:e6:f6:05:85:01:2f:09:c9:bd:11:0a:f0:dc:f5:67:bb:e3: 93:68:66:2c:a9:ce:d7:12:c2:87:81:e1:20:2a:56:7e:b9:a4: 09:1b:14:bd:13:52:f1:b9:7d:9e:ef:9a:28:53:5b:53:fd:02: dc:e8:e9:18:23:84:ab:ee:ed:ae:53:5a:48:90:d6:b2:21:48: 54:b9:f9:bf:56:68:73:eb:5a:ec:e8:5e:3d:6f:c7:c5:a9:74: 7a:2a:07:36:0c:55:76:aa:b1:19:03:bd:f6:e8:5a:ca:82:99: 29:7b:08:8d:f8:1b:4f:e4:a7:19:de:6c:c2:55:9a:63:52:ff: c9:f4:17:d7:d3:aa:cf:62:7a:88:f4:d0:bf:c3:a2:af:5d:37: 34:36:e8:25:f9:30:68:b7:e6:45:cd:7b:e1:4e:a9:2b:66:23: 88:c5:87:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERrCC5gRWOaJcDDhOdLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzQyNzI1ODYyYjkwYmRhNDUxMGEwMmU4MDRmZWYzYWQx MTQyZGMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDJkMmU2ZjZlZjUzNzQ5YTA3ZjkzZGY2ZjVlYjU3NmYxNDJmZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziy+X8ZZKHu5eylf10JN0Z9zSN4W XV0aA8vD9OsYAAfBuunDwwL/5It14WwWPgFrspjKTDahPv11GgaRXIc/O1fRwfPw LWWnOgr+NuAnvPBz8rgZLstgBcTxLpAsXXdM0I0/KJ7DUTA8qWxP0WGbRsehQ30y 6QQ+t5Q1w0zv6NnpGFsSQopz9jwkol6dNExOgcUm0ks4PWx+EKRf637S53Ioe8MD aWKFgsIZNoCWn44rSORdbFWevZiltZICKqtG5sDU1CGzoPSWceS93JceuSrJZ3mW ho8GOEZ/PYToSIfx7o366X0daLJq0f6zxQzc49/8ZDoYWUI1Vv/qN4xQ2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0tLm9u9TdJoH+T329etXbxQv7+MB8GA1UdIwQY MBaAFPd0JyWGK5C9pFEKAugE/vOtEULcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUt N2I4ZTlkMzM1Y2E4LzEvclMwdWIyNzFOMG1nZjVQZmIxNjFkdkZDX3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUtN2I4ZTlkMzM1Y2E4 LzEvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BxNMA0G CSqGSIb3DQEBCwUAA4IBAQCRZO2tJdov0L72aSvchh6VGbmk1KoqzN0D7OE0wlbc grEXBJprMAwG/en2OMXcQ3yRMRV52aicc1iL8Hwy49tk8Eu8SR0/Fz9C/iH2vbIR 1rnoq9xS0m/F5G9O5vYFhQEvCcm9EQrw3PVnu+OTaGYsqc7XEsKHgeEgKlZ+uaQJ GxS9E1LxuX2e75ooU1tT/QLc6OkYI4Sr7u2uU1pIkNayIUhUufm/Vmhz61rs6F49 b8fFqXR6Kgc2DFV2qrEZA7326FrKgpkpewiN+BtP5KcZ3mzCVZpjUv/J9BfX06rP YnqI9NC/w6KvXTc0Nugl+TBot+ZFzXvhTqkrZiOIxYc2 -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:00 2026 by rpki-client