This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/d9RC9y2977bpfxw87-wu3C0_I00.roa File: d9RC9y2977bpfxw87-wu3C0_I00.roa (raw, json) Hash identifier: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw= Subject key identifier: 77:D4:42:F7:2D:BD:EF:B6:E9:7F:1C:3C:EF:EC:2E:DC:2D:3F:23:4D Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Certificate serial: 019B7CEE49A902079AE877868D14A429811B Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/d9RC9y2977bpfxw87-wu3C0_I00.roa Signing time: Fri 02 Jan 2026 04:19:09 +0000 ROA not before: Fri 02 Jan 2026 04:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 139.28.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:49:a9:02:07:9a:e8:77:86:8d:14:a4:29:81:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77d442f72dbdefb6e97f1c3cefec2edc2d3f234d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:5f:23:87:b5:e9:27:d8:71:96:06:b0:5f: 32:3d:ec:51:48:7b:e5:62:e2:a5:96:8a:33:4b:90: c0:90:c3:6a:78:8f:b0:4a:f8:13:f4:af:3f:ee:aa: af:be:6f:e6:68:9d:d2:b3:7c:4a:b1:c8:55:a4:94: 23:17:b4:9f:4e:82:84:79:74:0a:03:b5:65:2f:a6: d1:2e:7c:d2:af:87:b7:e7:82:90:eb:2b:f6:20:e2: af:9c:12:78:c4:82:89:49:e6:c6:9b:0e:74:ea:0a: 0d:a4:f3:69:a1:01:77:00:a5:72:e4:3f:ce:1e:0d: f9:f0:89:13:6f:fe:f8:19:d9:da:b4:98:09:33:fe: be:47:2b:9f:18:a4:47:0d:27:51:40:2d:70:2b:38: f9:d7:93:0d:5c:53:3e:10:65:87:c8:fe:dd:40:b8: b7:d6:5b:e8:67:f2:f7:ef:20:87:14:1d:9c:e5:fe: 98:ec:1c:b6:54:74:fb:ed:fa:92:ef:a0:ac:7d:15: 1d:0a:3d:d0:84:80:85:75:43:eb:1c:60:50:b9:a0: 58:80:3c:ea:b4:20:8f:c7:05:b9:a4:07:33:bf:49: 67:7c:b8:8b:fb:55:c9:5d:39:f3:67:cc:21:f4:31: 63:2e:1d:b5:d0:00:ea:bd:dc:1e:44:15:b0:3f:a5: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D4:42:F7:2D:BD:EF:B6:E9:7F:1C:3C:EF:EC:2E:DC:2D:3F:23:4D X509v3 Authority Key Identifier: keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/d9RC9y2977bpfxw87-wu3C0_I00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.227.0/24 Signature Algorithm: sha256WithRSAEncryption 29:e1:64:fb:79:c8:6c:fe:ff:17:67:cb:f3:fa:07:65:87:e6: 85:68:80:47:33:86:73:dd:f6:13:63:4d:0e:1a:3c:cd:a3:cf: 8a:9f:9f:04:b7:d9:82:15:89:df:53:22:82:dd:18:ff:2e:e2: 14:05:7b:41:2a:61:4b:d1:90:b2:11:a9:e6:38:71:f5:3e:24: 13:c0:8e:96:91:a1:e4:13:29:6f:9f:2e:19:21:ef:b1:c4:49: a2:ad:0a:35:5b:eb:55:1b:e1:30:80:ae:3c:56:32:0b:51:f5: c0:7f:9c:1f:c4:2d:ca:2d:e0:8c:f9:10:66:aa:c6:13:d1:72: 54:c5:50:81:1d:b1:e7:bf:fb:44:04:04:1b:5d:3d:e8:a1:ee: 32:b5:0b:a6:6a:90:54:e5:2c:43:11:d3:58:5d:a2:07:53:e6: 0f:30:77:fb:ff:fc:27:fb:66:84:4e:19:a8:24:f6:0d:dd:f2: bb:bb:36:f0:67:13:b4:7d:2d:16:f5:dd:79:59:16:26:72:a9: 7a:a8:91:19:a0:d2:d2:12:85:06:cf:15:36:68:65:d3:5c:73: a4:3e:ae:3b:cb:38:d2:2d:ff:b2:6b:41:a2:f4:c1:06:92:cb: ee:94:68:a9:78:d0:78:da:e4:7e:4f:a4:fd:37:32:d1:78:14: 64:0d:e8:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kmpAgea6HeGjRSkKYEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz MzliYWUwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2Q0NDJmNzJkYmRlZmI2ZTk3ZjFjM2NlZmVjMmVkYzJkM2YyMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKZfI4e16SfYcZYGsF8yPexRSHvl YuKlloozS5DAkMNqeI+wSvgT9K8/7qqvvm/maJ3Ss3xKschVpJQjF7SfToKEeXQK A7VlL6bRLnzSr4e354KQ6yv2IOKvnBJ4xIKJSebGmw506goNpPNpoQF3AKVy5D/O Hg358IkTb/74GdnatJgJM/6+RyufGKRHDSdRQC1wKzj515MNXFM+EGWHyP7dQLi3 1lvoZ/L37yCHFB2c5f6Y7By2VHT77fqS76CsfRUdCj3QhICFdUPrHGBQuaBYgDzq tCCPxwW5pAczv0lnfLiL+1XJXTnzZ8wh9DFjLh210ADqvdweRBWwP6XXWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHfUQvctve+26X8cPO/sLtwtPyNNMB8GA1UdIwQY MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt Y2M3YjI4OTkwYjgxLzEvZDlSQzl5Mjk3N2JwZnh3ODctd3UzQzBfSTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixzjMA0G CSqGSIb3DQEBCwUAA4IBAQAp4WT7echs/v8XZ8vz+gdlh+aFaIBHM4Zz3fYTY00O GjzNo8+Kn58Et9mCFYnfUyKC3Rj/LuIUBXtBKmFL0ZCyEanmOHH1PiQTwI6WkaHk Eylvny4ZIe+xxEmirQo1W+tVG+EwgK48VjILUfXAf5wfxC3KLeCM+RBmqsYT0XJU xVCBHbHnv/tEBAQbXT3ooe4ytQumapBU5SxDEdNYXaIHU+YPMHf7//wn+2aEThmo JPYN3fK7uzbwZxO0fS0W9d15WRYmcql6qJEZoNLSEoUGzxU2aGXTXHOkPq47yzjS Lf+ya0Gi9MEGksvulGipeNB42uR+T6T9NzLReBRkDeiq -----END CERTIFICATE-----Generated at Wed Jan 7 17:18:53 2026 by rpki-client