This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/28QSm-nWPh3k170EUdx31IY1dMI.roa File: 28QSm-nWPh3k170EUdx31IY1dMI.roa (raw, json) Hash identifier: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4= Subject key identifier: DB:C4:12:9B:E9:D6:3E:1D:E4:D7:BD:04:51:DC:77:D4:86:35:74:C2 Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Certificate serial: 019B7A59B9F2BC50BF9DBB95C537D7ACFB91 Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/28QSm-nWPh3k170EUdx31IY1dMI.roa Signing time: Thu 01 Jan 2026 16:17:39 +0000 ROA not before: Thu 01 Jan 2026 16:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215551 IP address blocks: 193.189.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b9:f2:bc:50:bf:9d:bb:95:c5:37:d7:ac:fb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Validity Not Before: Jan 1 16:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbc4129be9d63e1de4d7bd0451dc77d4863574c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:46:05:71:fc:c7:6a:75:06:42:f6:91:e4: c6:12:78:35:54:52:22:4e:44:b1:bd:fd:c6:51:1b: df:14:1a:40:77:92:a5:68:4d:81:73:f8:8f:62:44: 6d:8e:1e:d3:08:8f:bf:80:18:6a:47:41:38:f7:4d: fc:5b:ab:89:a6:aa:8d:8c:a0:b9:d0:2c:93:e2:97: 12:9c:56:b1:1e:18:55:89:ef:6d:24:32:7d:c0:48: 4e:0c:7e:9f:93:21:c1:5a:5e:fb:c7:2f:cb:2b:32: 14:39:86:ec:87:a3:74:49:76:27:f3:64:00:a2:0a: 5c:69:08:90:de:d4:93:c9:29:cb:2b:3d:8b:e2:0a: 60:98:e6:72:27:75:44:9f:96:bc:06:1c:d6:71:0e: f3:2c:3a:e5:b7:d1:a9:e9:92:90:6c:dc:62:59:07: 68:4a:29:17:26:d6:c4:55:a2:ba:52:91:01:da:8a: a9:29:5a:39:f4:2d:92:94:46:77:4a:d4:a5:a8:31: e2:3e:a6:8b:c7:a3:68:43:55:2e:73:c7:48:68:9c: 78:88:75:e5:d3:5c:93:78:dc:34:9f:68:7c:f8:92: 41:67:24:0f:87:4a:06:1e:c5:e5:8b:4c:d7:bb:54: 67:06:8b:ff:9e:72:e7:75:05:08:37:87:19:28:46: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C4:12:9B:E9:D6:3E:1D:E4:D7:BD:04:51:DC:77:D4:86:35:74:C2 X509v3 Authority Key Identifier: keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/28QSm-nWPh3k170EUdx31IY1dMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.101.0/24 Signature Algorithm: sha256WithRSAEncryption c4:e0:93:2a:56:68:7d:0a:49:6d:49:ac:30:86:d3:20:d6:57: 26:ac:b7:96:68:b3:58:d9:8e:fb:cd:e4:ed:7e:66:2c:55:52: a6:8b:bc:bb:49:5c:6a:89:b1:48:68:82:77:a9:d1:a7:3e:58: 11:56:fe:4a:c2:e3:5f:f7:93:d6:90:6f:b8:da:ad:f6:4b:97: 03:2d:6c:36:97:b9:63:94:58:58:66:84:b3:88:40:11:9e:fe: 74:88:d5:06:ed:2f:63:b4:06:0b:08:16:48:fe:db:8f:cb:1f: 98:34:1f:53:0f:b4:df:89:31:9b:9e:31:39:cc:0d:fc:4a:fe: eb:86:8d:b7:31:0b:26:7e:de:af:5f:06:46:dd:76:50:88:3a: 8f:64:9b:81:4d:f6:39:ec:76:8f:f4:fe:25:ab:75:78:fc:c4: b4:b8:04:5e:41:b2:79:bb:a9:24:02:99:4c:ba:7f:12:53:1b: e2:c8:98:30:04:13:c2:99:17:60:1a:c1:0f:09:ac:35:5a:fe: 71:02:ae:42:03:5b:27:14:82:87:f3:b6:6e:e4:99:df:98:e7: 4c:43:47:62:bb:80:ff:c7:60:79:c4:1c:eb:42:34:a0:e7:85: f6:70:78:5d:0a:2c:6e:81:f3:8c:8a:f2:a1:58:fe:2a:74:41: 49:6d:4d:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WbnyvFC/nbuVxTfXrPuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3 ODhlZjUwHhcNMjYwMTAxMTYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmM0MTI5YmU5ZDYzZTFkZTRkN2JkMDQ1MWRjNzdkNDg2MzU3NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3axGBXH8x2p1BkL2keTGEng1VFIi TkSxvf3GURvfFBpAd5KlaE2Bc/iPYkRtjh7TCI+/gBhqR0E49038W6uJpqqNjKC5 0CyT4pcSnFaxHhhVie9tJDJ9wEhODH6fkyHBWl77xy/LKzIUOYbsh6N0SXYn82QA ogpcaQiQ3tSTySnLKz2L4gpgmOZyJ3VEn5a8BhzWcQ7zLDrlt9Gp6ZKQbNxiWQdo SikXJtbEVaK6UpEB2oqpKVo59C2SlEZ3StSlqDHiPqaLx6NoQ1Uuc8dIaJx4iHXl 01yTeNw0n2h8+JJBZyQPh0oGHsXli0zXu1RnBov/nnLndQUIN4cZKEb4swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvEEpvp1j4d5Ne9BFHcd9SGNXTCMB8GA1UdIwQY MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt MjMwN2JiNTkyMjVmLzEvMjhRU20tbldQaDNrMTcwRVVkeDMxSVkxZE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwb1lMA0G CSqGSIb3DQEBCwUAA4IBAQDE4JMqVmh9CkltSawwhtMg1lcmrLeWaLNY2Y77zeTt fmYsVVKmi7y7SVxqibFIaIJ3qdGnPlgRVv5KwuNf95PWkG+42q32S5cDLWw2l7lj lFhYZoSziEARnv50iNUG7S9jtAYLCBZI/tuPyx+YNB9TD7TfiTGbnjE5zA38Sv7r ho23MQsmft6vXwZG3XZQiDqPZJuBTfY57HaP9P4lq3V4/MS0uAReQbJ5u6kkAplM un8SUxviyJgwBBPCmRdgGsEPCaw1Wv5xAq5CA1snFIKH87Zu5JnfmOdMQ0diu4D/ x2B5xBzrQjSg54X2cHhdCixugfOMivKhWP4qdEFJbU3x -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:14 2026 by rpki-client