This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/PKIsDHUR7jxFAsus-wdsRMLiSqA.roa File: PKIsDHUR7jxFAsus-wdsRMLiSqA.roa (raw, json) Hash identifier: gaSVKfmjUGAGycTPbk7kLy1z07Kh829WcikSnbJ29nU= Subject key identifier: 3C:A2:2C:0C:75:11:EE:3C:45:02:CB:AC:FB:07:6C:44:C2:E2:4A:A0 Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Certificate serial: 019B7F82D536EA850267E5F09E821F677E79 Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/PKIsDHUR7jxFAsus-wdsRMLiSqA.roa Signing time: Fri 02 Jan 2026 16:20:39 +0000 ROA not before: Fri 02 Jan 2026 16:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209383 IP address blocks: 139.28.192.0/22 maxlen: 22 139.28.192.0/23 maxlen: 23 139.28.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d5:36:ea:85:02:67:e5:f0:9e:82:1f:67:7e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8 Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ca22c0c7511ee3c4502cbacfb076c44c2e24aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:7d:9c:b0:cc:24:f2:51:e6:4c:bd:5c:fb: 68:9b:f9:05:b0:b2:f4:26:9f:ac:88:21:72:02:4e: d4:2e:a4:b1:9a:45:e7:49:67:0d:28:f6:f1:f7:61: 49:80:f3:f1:4e:31:bd:d6:97:06:f9:2c:2f:ec:d9: e4:fa:5f:5a:93:d5:8b:c5:53:c1:e5:f7:a4:80:32: c9:c4:c5:30:db:78:0e:b1:76:29:a1:b0:cf:ea:e5: 4f:c6:67:05:93:f1:95:fb:2d:57:77:8b:48:54:33: bd:8c:78:f8:4d:47:e9:27:0a:6d:b8:54:04:9d:be: 6a:fc:ed:85:fb:63:57:1d:ed:e8:67:5b:77:db:4d: cc:82:b5:8a:44:4a:23:be:17:7c:f1:07:f6:d9:1e: ab:8c:61:ab:a6:2d:5b:04:89:d3:75:25:b3:3a:1e: b3:23:3f:1a:f9:3f:6a:1c:a0:aa:cf:3d:81:26:1c: 43:d3:f5:d5:42:41:20:04:b8:11:18:22:cd:80:2b: 07:20:63:ae:57:e4:09:44:cb:30:4a:71:e3:df:db: 95:c3:35:73:f0:db:af:19:94:86:42:29:25:05:54: 4c:73:ad:f1:d6:8f:59:26:84:3c:38:4f:f9:ed:fa: 04:b3:e5:3e:1e:e1:e2:3b:53:a5:43:7d:c8:c6:59: 2f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:2C:0C:75:11:EE:3C:45:02:CB:AC:FB:07:6C:44:C2:E2:4A:A0 X509v3 Authority Key Identifier: keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/PKIsDHUR7jxFAsus-wdsRMLiSqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.192.0/22 Signature Algorithm: sha256WithRSAEncryption 20:bc:7a:24:e4:b9:c6:4c:23:ac:c9:9f:82:73:19:60:ac:82: c5:4d:86:6e:5b:c7:18:91:b9:18:f7:76:c2:b3:9c:f9:a7:3f: 7e:9a:e0:52:71:5b:81:f2:0d:1d:53:99:87:2b:39:b4:82:01: 92:e2:35:f7:40:8a:0d:25:36:aa:4f:70:a5:ab:f6:c7:f0:3a: 96:9a:90:52:30:a2:4a:e1:14:94:89:93:0a:eb:74:c5:0b:14: e9:92:1c:68:a0:f6:82:5d:f3:19:c5:db:22:f1:1e:c3:a1:a5: b5:39:6e:42:91:f4:07:67:d0:83:47:f1:35:12:d9:28:55:ac: 2a:2b:83:43:b4:8f:2e:39:f3:ac:d3:31:02:e8:d5:18:11:c5: 35:cc:77:55:92:33:1a:a8:62:a7:43:7b:d4:5f:81:95:e2:c5: dd:ae:8e:fe:43:be:4a:57:05:c3:25:d5:28:02:e2:2e:93:1f: 3b:a5:bd:e7:0a:98:3b:ef:bb:4a:88:4a:96:bc:a1:ce:db:17: 94:ff:9c:10:45:30:bd:cf:43:68:ec:69:bf:dd:75:06:3e:18: e9:b6:11:e8:e5:ca:d9:4b:7e:84:27:22:5f:8e:06:0d:76:6a: 7d:36:51:3b:c3:dd:a4:b6:64:8f:55:b4:e6:94:f7:8a:72:f6: 35:6d:24:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gtU26oUCZ+XwnoIfZ355MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5 NDlmYTgwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2EyMmMwYzc1MTFlZTNjNDUwMmNiYWNmYjA3NmM0NGMyZTI0YWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4B9nLDMJPJR5ky9XPtom/kFsLL0 Jp+siCFyAk7ULqSxmkXnSWcNKPbx92FJgPPxTjG91pcG+Swv7Nnk+l9ak9WLxVPB 5fekgDLJxMUw23gOsXYpobDP6uVPxmcFk/GV+y1Xd4tIVDO9jHj4TUfpJwptuFQE nb5q/O2F+2NXHe3oZ1t3203MgrWKREojvhd88Qf22R6rjGGrpi1bBInTdSWzOh6z Iz8a+T9qHKCqzz2BJhxD0/XVQkEgBLgRGCLNgCsHIGOuV+QJRMswSnHj39uVwzVz 8NuvGZSGQiklBVRMc63x1o9ZJoQ8OE/57foEs+U+HuHiO1OlQ33IxlkvXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDyiLAx1Ee48RQLLrPsHbETC4kqgMB8GA1UdIwQY MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct OGEzZDhkYzM1OGViLzEvUEtJc0RIVVI3anhGQXN1cy13ZHNSTUxpU3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixzAMA0G CSqGSIb3DQEBCwUAA4IBAQAgvHok5LnGTCOsyZ+CcxlgrILFTYZuW8cYkbkY93bC s5z5pz9+muBScVuB8g0dU5mHKzm0ggGS4jX3QIoNJTaqT3Clq/bH8DqWmpBSMKJK 4RSUiZMK63TFCxTpkhxooPaCXfMZxdsi8R7DoaW1OW5CkfQHZ9CDR/E1EtkoVawq K4NDtI8uOfOs0zEC6NUYEcU1zHdVkjMaqGKnQ3vUX4GV4sXdro7+Q75KVwXDJdUo AuIukx87pb3nCpg777tKiEqWvKHO2xeU/5wQRTC9z0No7Gm/3XUGPhjpthHo5crZ S36EJyJfjgYNdmp9NlE7w92ktmSPVbTmlPeKcvY1bSRi -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:06 2026 by rpki-client