This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/ii2y3_3OasAT5vVqpy7EkID9V2Q.roa File: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (raw, json) Hash identifier: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo= Subject key identifier: 8A:2D:B2:DF:FD:CE:6A:C0:13:E6:F5:6A:A7:2E:C4:90:80:FD:57:64 Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Certificate serial: 019B7E3878817D303DD38C1AD799348F1051 Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/ii2y3_3OasAT5vVqpy7EkID9V2Q.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:78:81:7d:30:3d:d3:8c:1a:d7:99:34:8f:10:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a2db2dffdce6ac013e6f56aa72ec49080fd5764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:e6:bc:bc:5d:53:c1:04:7a:7e:33:d0:7f: 18:ca:ce:32:67:d1:31:0e:9a:cd:ca:4c:44:5e:55: 7a:17:d1:2b:19:eb:0e:70:51:70:ec:11:a7:2b:91: b2:1d:a2:5f:ba:2e:2f:81:37:74:74:66:ad:59:99: 3d:de:07:89:08:4c:da:e1:13:9a:a2:06:bd:b9:b9: 18:6d:2c:b1:c8:60:b0:00:ac:56:5a:db:b4:cb:ea: 44:c8:2b:75:21:e5:dd:0d:a4:0b:1b:4f:8e:c3:e3: 36:42:4d:9c:44:18:28:b3:07:88:ed:42:94:ee:10: e1:8b:1b:f4:54:e7:3d:1d:62:d7:5b:e1:4b:95:15: c9:25:b9:c6:88:68:87:f9:12:9d:ae:02:02:c1:97: 2b:2a:58:c8:6e:b7:d5:fa:1d:f5:db:6b:5e:e9:3c: 08:01:6f:78:1f:56:bf:7b:db:2c:12:2b:2f:a6:56: a1:11:c1:d7:a3:90:72:3b:63:ab:1c:f1:3c:51:49: f7:b7:95:33:21:48:10:35:09:42:18:8a:f6:47:0f: 18:b3:a1:89:3e:35:8f:4b:fc:10:8f:b6:cb:2d:e8: db:4c:a5:e8:c9:bc:c2:81:70:1f:76:80:e4:cb:2d: 4b:76:46:d4:27:48:8b:b9:c9:2d:c8:1d:d2:10:26: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:B2:DF:FD:CE:6A:C0:13:E6:F5:6A:A7:2E:C4:90:80:FD:57:64 X509v3 Authority Key Identifier: keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/ii2y3_3OasAT5vVqpy7EkID9V2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption 72:09:93:a5:df:b9:2d:2b:74:d2:9c:34:64:7b:90:7e:1e:37: 12:41:d0:bf:84:7b:eb:23:31:9e:5d:66:2a:58:21:bd:0c:b2: f4:d0:1a:9c:95:f0:86:36:02:3e:91:7c:52:c2:fe:9a:36:80: 89:84:5f:86:64:be:2a:ff:4f:29:22:73:ca:7f:b8:b6:db:9c: 4d:2d:a7:19:0b:47:76:16:40:7d:b0:92:13:c6:0f:58:7b:d0: f2:64:76:d3:3b:83:75:3a:ac:35:b4:d3:f6:1c:7b:9c:e4:4c: 83:6d:8d:f5:04:41:60:5a:45:6f:70:17:11:f2:a7:2c:81:7e: 03:27:19:2d:3e:79:94:1c:53:78:09:c3:8c:99:ef:2a:49:ab: 8b:8a:4a:ad:f1:78:b5:c8:48:7b:e0:17:95:41:36:6e:f7:5c: d0:58:93:5b:3a:a9:e9:56:e9:7b:ee:4d:7f:e5:44:ca:6f:89: 5c:b6:17:d2:34:36:51:92:a1:cc:b1:ae:25:17:0c:3a:77:f7: ed:28:4c:69:e7:b5:09:d4:d8:53:f7:38:13:64:2e:38:85:3e: d7:84:88:cc:1e:27:d1:85:27:8e:6a:b0:1d:30:53:ef:5f:03: 99:d0:54:9c:a9:c0:07:47:33:ba:5d:12:f3:4a:cb:d4:58:4c: d4:6f:2a:a1 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+OHiBfTA904wa15k0jxBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmE1NDFkNWFjOGZmN2JiMDQwOGM3NDM0YWMxMDEyZWZm NzNjYjUwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTJkYjJkZmZkY2U2YWMwMTNlNmY1NmFhNzJlYzQ5MDgwZmQ1NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F/mvLxdU8EEen4z0H8Yys4yZ9Ex DprNykxEXlV6F9ErGesOcFFw7BGnK5GyHaJfui4vgTd0dGatWZk93geJCEza4ROa oga9ubkYbSyxyGCwAKxWWtu0y+pEyCt1IeXdDaQLG0+Ow+M2Qk2cRBgosweI7UKU 7hDhixv0VOc9HWLXW+FLlRXJJbnGiGiH+RKdrgICwZcrKljIbrfV+h3122te6TwI AW94H1a/e9ssEisvplahEcHXo5ByO2OrHPE8UUn3t5UzIUgQNQlCGIr2Rw8Ys6GJ PjWPS/wQj7bLLejbTKXoybzCgXAfdoDkyy1LdkbUJ0iLucktyB3SECb3AQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFIotst/9zmrAE+b1aqcuxJCA/VdkMB8GA1UdIwQY MBaAFJgqVB1ayP97sECMdDSsEBLv9zy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDct MDEyMDhkODZkZGNjLzEvaWkyeTNfM09hc0FUNXZWcXB5N0VrSUQ5VjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDctMDEyMDhkODZkZGNj LzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhhwwDQYJ KoZIhvcNAQELBQADggEBAHIJk6XfuS0rdNKcNGR7kH4eNxJB0L+Ee+sjMZ5dZipY Ib0MsvTQGpyV8IY2Aj6RfFLC/po2gImEX4Zkvir/Tykic8p/uLbbnE0tpxkLR3YW QH2wkhPGD1h70PJkdtM7g3U6rDW00/Yce5zkTINtjfUEQWBaRW9wFxHypyyBfgMn GS0+eZQcU3gJw4yZ7ypJq4uKSq3xeLXISHvgF5VBNm73XNBYk1s6qelW6XvuTX/l RMpviVy2F9I0NlGSocyxriUXDDp39+0oTGnntQnU2FP3OBNkLjiFPteEiMweJ9GF J45qsB0wU+9fA5nQVJypwAdHM7pdEvNKy9RYTNRvKqE= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:50 2026 by rpki-client