This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/28NIcQsoO9aYUkqz8eNuokXmz7k.roa File: 28NIcQsoO9aYUkqz8eNuokXmz7k.roa (raw, json) Hash identifier: Maz19xfHOeRc2yxXkK1eH+j110RWG6meSjGWmHuiuf8= Subject key identifier: DB:C3:48:71:0B:28:3B:D6:98:52:4A:B3:F1:E3:6E:A2:45:E6:CF:B9 Certificate issuer: /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Certificate serial: 019B7F146DF7D0D05D8477685ED0D29B3615 Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/28NIcQsoO9aYUkqz8eNuokXmz7k.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43682 IP address blocks: 78.24.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6d:f7:d0:d0:5d:84:77:68:5e:d0:d2:9b:36:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbc348710b283bd698524ab3f1e36ea245e6cfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:75:ce:4a:e2:c0:31:70:8f:e2:a4:ad:c5: a7:62:3f:b2:0e:de:2e:00:6f:64:0a:13:5d:49:72: a5:95:56:7f:17:71:c2:06:57:2b:9b:ce:d0:ad:ef: 93:7a:3a:f4:5e:56:b6:b1:bf:4c:b2:6e:e2:2d:3a: 03:56:e3:9a:64:a5:0f:dc:a0:86:04:bb:26:50:6d: ed:dc:d3:09:4c:7d:07:2d:9b:88:c5:5b:f5:46:f4: 6e:47:63:c4:67:9b:34:1f:ba:69:8f:53:76:96:61: d4:0e:95:66:6f:e1:f0:84:05:34:5d:d7:a6:e3:24: 00:47:d1:e3:07:4a:be:7e:ef:bf:7f:50:82:96:50: f9:e2:df:53:1c:b2:8e:8c:fb:7f:7c:b2:a8:b9:e6: 1c:fa:cf:ac:d2:43:9f:c1:ed:48:21:44:c9:bd:cf: 38:17:82:75:34:1d:e7:19:6f:4e:b3:d0:43:0e:56: 93:26:31:7e:fe:26:e2:20:5d:89:db:d8:a8:aa:47: 63:1f:65:c9:50:e0:9e:99:f2:5f:61:44:31:34:66: e6:73:82:4f:5e:23:c4:38:fe:7a:5c:ff:29:3a:7e: 74:a3:97:2d:56:7d:47:3c:cb:ea:bf:8d:b3:62:3b: 04:b9:92:18:22:d9:21:5b:cc:7e:64:bf:96:cb:b5: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C3:48:71:0B:28:3B:D6:98:52:4A:B3:F1:E3:6E:A2:45:E6:CF:B9 X509v3 Authority Key Identifier: keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/28NIcQsoO9aYUkqz8eNuokXmz7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.192.0/21 Signature Algorithm: sha256WithRSAEncryption 44:19:b8:86:5a:ef:c5:0d:2b:1a:2f:1a:73:d5:69:3e:d9:1e: 9a:63:a5:52:20:7a:15:36:0a:dd:b0:80:95:86:10:db:19:26: a6:a6:d8:f1:0f:2c:19:2b:ca:e2:4e:11:ed:75:bb:f1:b0:7e: bf:89:da:b1:13:1a:dc:16:08:53:f9:f6:cd:51:44:4d:3e:d4: 0d:4a:98:6b:e0:3a:09:75:5e:16:f5:ce:11:9e:30:a7:d1:c3: 3a:fe:5e:96:37:7c:04:09:ea:f0:58:db:9e:49:f4:a0:df:d0: 50:c6:8e:c3:64:a7:82:ba:7d:c4:79:ee:47:ca:f7:d7:88:4a: e9:e9:36:70:3a:88:08:f5:17:16:02:fd:8f:95:2b:ec:15:fc: 37:c6:bd:32:44:c0:f5:c7:74:bc:62:f1:0c:53:0a:7e:0d:b6: 79:c8:b4:0d:7e:ed:b3:d9:27:f4:05:d3:89:ba:9c:4d:e6:4b: e8:53:37:29:02:be:38:62:f5:c1:0e:06:35:f3:8c:61:af:17: 3a:c5:89:3d:19:7c:19:37:7e:c1:c0:b8:ee:4a:75:a9:c8:d5: 42:41:bb:09:5d:13:09:eb:fc:31:9f:ce:18:59:de:73:6d:4a: 6b:cd:19:c0:be:61:cc:c3:ea:f5:a4:c4:48:ab:da:ac:43:e7: 0c:c1:4b:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FG330NBdhHdoXtDSmzYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJjMGU4M2U4MWY1N2ZiNDg5NDA0MWRjYTc2Yzc3ZDMz ZjAyZTcwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmMzNDg3MTBiMjgzYmQ2OTg1MjRhYjNmMWUzNmVhMjQ1ZTZjZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD11zkriwDFwj+KkrcWnYj+yDt4u AG9kChNdSXKllVZ/F3HCBlcrm87Qre+Tejr0Xla2sb9Msm7iLToDVuOaZKUP3KCG BLsmUG3t3NMJTH0HLZuIxVv1RvRuR2PEZ5s0H7ppj1N2lmHUDpVmb+HwhAU0Xdem 4yQAR9HjB0q+fu+/f1CCllD54t9THLKOjPt/fLKoueYc+s+s0kOfwe1IIUTJvc84 F4J1NB3nGW9Os9BDDlaTJjF+/ibiIF2J29ioqkdjH2XJUOCemfJfYUQxNGbmc4JP XiPEOP56XP8pOn50o5ctVn1HPMvqv42zYjsEuZIYItkhW8x+ZL+Wy7WHHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvDSHELKDvWmFJKs/HjbqJF5s+5MB8GA1UdIwQY MBaAFNRLwOg+gfV/tIlAQdynbHfTPwLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgt ZjJhZjgwMDFhYzc4LzEvMjhOSWNRc29POWFZVWtxejhlTnVva1htejdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgtZjJhZjgwMDFhYzc4 LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDThjAMA0G CSqGSIb3DQEBCwUAA4IBAQBEGbiGWu/FDSsaLxpz1Wk+2R6aY6VSIHoVNgrdsICV hhDbGSamptjxDywZK8riThHtdbvxsH6/idqxExrcFghT+fbNUURNPtQNSphr4DoJ dV4W9c4RnjCn0cM6/l6WN3wECerwWNueSfSg39BQxo7DZKeCun3Eee5HyvfXiErp 6TZwOogI9RcWAv2PlSvsFfw3xr0yRMD1x3S8YvEMUwp+DbZ5yLQNfu2z2Sf0BdOJ upxN5kvoUzcpAr44YvXBDgY184xhrxc6xYk9GXwZN37BwLjuSnWpyNVCQbsJXRMJ 6/wxn84YWd5zbUprzRnAvmHMw+r1pMRIq9qsQ+cMwUsX -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:54 2026 by rpki-client