This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/s28CR1gLazBENQfv0iRlHI-K3WE.roa File: s28CR1gLazBENQfv0iRlHI-K3WE.roa (raw, json) Hash identifier: Tp9gbqVHSFtjO/KmeIi7tCsMEDD0ASIghsoQ31CGOes= Subject key identifier: B3:6F:02:47:58:0B:6B:30:44:35:07:EF:D2:24:65:1C:8F:8A:DD:61 Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Certificate serial: 019B7AC94510F3743D7A405FC82BE7F1AF16 Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/s28CR1gLazBENQfv0iRlHI-K3WE.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214515 IP address blocks: 45.89.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:45:10:f3:74:3d:7a:40:5f:c8:2b:e7:f1:af:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b36f0247580b6b30443507efd224651c8f8add61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:ad:81:98:55:bd:3d:c4:89:38:dc:7e:ba: e2:11:43:5c:a9:6e:eb:b1:1f:50:a7:1e:43:7a:d5: f7:19:5f:b4:00:89:d5:4e:4b:4f:0c:3a:ee:11:e3: ce:39:e5:89:b7:b2:fd:42:08:f7:1a:77:89:29:05: 96:6c:b1:19:0d:d8:1c:04:b9:02:a9:34:c2:f7:e7: a1:75:64:af:3e:1d:5f:77:81:f5:c3:69:43:49:45: e1:7a:6b:49:a7:f5:80:9a:22:79:31:df:72:70:53: 66:d0:07:46:60:34:1a:92:3a:fd:22:de:80:8c:bb: 24:3f:31:cd:fe:d3:17:73:eb:b1:4a:74:ba:f3:17: 14:f4:5f:c0:19:93:ab:38:3b:6a:dd:47:be:b6:55: b0:3c:09:10:e3:ab:74:63:69:17:c5:7d:bc:30:6d: 60:2b:ed:47:af:f4:e6:df:08:e1:c0:f7:65:88:1b: e2:86:aa:cf:54:b7:de:9e:32:d1:c4:f6:41:77:c9: 81:07:0b:dd:50:dc:6d:dc:f6:05:f3:bd:b7:d4:6d: d7:e2:f9:83:dc:7d:9e:6c:77:1a:93:9a:67:ac:80: f5:55:d4:30:21:72:a7:76:63:95:a7:41:da:c9:a3: 0b:04:ea:a7:7f:2d:72:fb:fb:8c:f7:3b:49:4b:8d: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6F:02:47:58:0B:6B:30:44:35:07:EF:D2:24:65:1C:8F:8A:DD:61 X509v3 Authority Key Identifier: keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/s28CR1gLazBENQfv0iRlHI-K3WE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.223.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:a4:1b:12:c4:e6:fc:cc:94:ee:37:2e:10:89:b4:e1:eb:1a: dd:13:b8:84:1c:f8:94:b2:42:cd:fa:cf:9f:96:23:26:6a:20: a7:19:3c:9d:7e:0a:fd:aa:09:91:04:52:5c:32:01:4b:d0:26: a3:29:e4:fe:3c:30:f2:4b:29:23:36:10:86:5e:1d:5d:01:01: 91:1a:a3:1c:7e:c2:b8:e9:07:01:91:e4:8d:e4:d1:fb:d7:20: 85:5e:a9:b6:a4:58:3f:59:92:d1:0e:ef:c2:ff:df:a0:1c:29: b7:61:c7:a8:50:75:d9:0b:4a:a5:93:c2:4d:75:81:d9:ff:71: f2:1d:49:f6:59:f1:3b:6b:da:c1:b2:7a:91:9b:05:08:de:a0: d2:53:c4:dd:08:d3:ac:b4:c1:f1:09:a5:57:d5:23:a2:4b:44: ee:69:3f:d7:78:26:27:bd:33:48:b0:dc:5c:54:a7:e8:5b:c4: 65:35:f0:18:ad:3b:44:11:1e:68:25:4f:b2:45:01:6e:e0:5e: 36:05:ff:a1:b2:4e:a8:74:82:7d:40:7d:b2:e1:94:ea:96:13: a3:17:e9:ef:b3:0b:07:7f:59:8b:b7:4f:74:0b:c7:e5:e1:57: 9d:1a:0f:e3:42:a5:1a:10:4b:73:87:5b:a9:ef:46:67:51:fb: 65:4f:95:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUUQ83Q9ekBfyCvn8a8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz NTBiY2IwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzZmMDI0NzU4MGI2YjMwNDQzNTA3ZWZkMjI0NjUxYzhmOGFkZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf6tgZhVvT3EiTjcfrriEUNcqW7r sR9Qpx5DetX3GV+0AInVTktPDDruEePOOeWJt7L9Qgj3GneJKQWWbLEZDdgcBLkC qTTC9+ehdWSvPh1fd4H1w2lDSUXhemtJp/WAmiJ5Md9ycFNm0AdGYDQakjr9It6A jLskPzHN/tMXc+uxSnS68xcU9F/AGZOrODtq3Ue+tlWwPAkQ46t0Y2kXxX28MG1g K+1Hr/Tm3wjhwPdliBvihqrPVLfenjLRxPZBd8mBBwvdUNxt3PYF87231G3X4vmD 3H2ebHcak5pnrID1VdQwIXKndmOVp0HayaMLBOqnfy1y+/uM9ztJS40upwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNvAkdYC2swRDUH79IkZRyPit1hMB8GA1UdIwQY MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt NTI4NzQ2MTFjZDIxLzEvczI4Q1IxZ0xhekJFTlFmdjBpUmxISS1LM1dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVnfMA0G CSqGSIb3DQEBCwUAA4IBAQB9pBsSxOb8zJTuNy4QibTh6xrdE7iEHPiUskLN+s+f liMmaiCnGTydfgr9qgmRBFJcMgFL0CajKeT+PDDySykjNhCGXh1dAQGRGqMcfsK4 6QcBkeSN5NH71yCFXqm2pFg/WZLRDu/C/9+gHCm3YceoUHXZC0qlk8JNdYHZ/3Hy HUn2WfE7a9rBsnqRmwUI3qDSU8TdCNOstMHxCaVX1SOiS0TuaT/XeCYnvTNIsNxc VKfoW8RlNfAYrTtEER5oJU+yRQFu4F42Bf+hsk6odIJ9QH2y4ZTqlhOjF+nvswsH f1mLt090C8fl4VedGg/jQqUaEEtzh1up70ZnUftlT5Wi -----END CERTIFICATE-----Generated at Mon Jan 26 16:59:03 2026 by rpki-client