This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/ASJCxMwgFICdhd2ryix0TW1woMo.roa File: ASJCxMwgFICdhd2ryix0TW1woMo.roa (raw, json) Hash identifier: eB2/RH4etmts4ZGHiKx5FyzcKrdqSgyRln6WwxKw+Ac= Subject key identifier: 01:22:42:C4:CC:20:14:80:9D:85:DD:AB:CA:2C:74:4D:6D:70:A0:CA Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf Certificate serial: 019B7910C40355BEF3B8C4B003197CB6975C Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/ASJCxMwgFICdhd2ryix0TW1woMo.roa Signing time: Thu 01 Jan 2026 10:18:20 +0000 ROA not before: Thu 01 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51800 IP address blocks: 217.28.80.0/21 maxlen: 21 217.28.88.0/21 maxlen: 21 2a02:28a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c4:03:55:be:f3:b8:c4:b0:03:19:7c:b6:97:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=012242c4cc2014809d85ddabca2c744d6d70a0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:32:d0:49:a1:c0:30:ce:43:01:da:6b:fa: 3c:5a:a5:3f:c2:ec:63:e9:c8:2e:9e:d9:6e:5f:b2: ed:75:d5:c9:aa:d5:bd:bf:b3:ab:0e:4a:09:d0:c8: 0b:d1:20:0b:9a:4a:bb:45:22:c0:9e:4b:16:24:03: 83:6b:9d:88:4b:ec:f4:11:99:90:5b:6c:42:c6:25: aa:31:1e:01:60:1a:52:5f:ca:82:f4:28:a7:21:e3: b5:c6:22:83:61:1f:45:33:85:ab:32:c4:1a:df:83: 29:97:b6:3c:ec:78:81:55:d4:b7:d3:f0:4f:f0:21: f1:06:36:a8:da:92:7d:43:9e:9d:32:10:35:0c:13: 26:95:2b:b0:c2:b5:e6:81:89:f3:66:39:2d:2e:a0: d7:10:91:6a:f4:1f:2b:c3:11:76:0e:a9:d0:b1:5c: 70:f1:1b:86:ee:46:23:68:fa:22:5e:67:b4:89:a1: 0f:19:2b:be:2c:97:de:5b:0d:35:7a:a0:d5:6e:d0: 0b:eb:48:0f:49:3e:3a:88:61:1a:88:a8:16:4b:40: 9e:cc:93:9f:fb:2f:33:d7:0a:4b:aa:a2:ef:47:f1: 8d:55:51:03:97:20:9d:21:b1:f0:11:d9:90:1e:87: 54:7e:8f:ff:32:cd:e9:fb:e9:3e:89:2d:70:76:f0: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:22:42:C4:CC:20:14:80:9D:85:DD:AB:CA:2C:74:4D:6D:70:A0:CA X509v3 Authority Key Identifier: keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/ASJCxMwgFICdhd2ryix0TW1woMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.28.80.0/20 IPv6: 2a02:28a8::/32 Signature Algorithm: sha256WithRSAEncryption 5e:7a:a0:a8:d2:be:7f:2b:a0:29:cf:b2:82:f3:1b:7c:30:38: 36:b1:4e:b7:7f:14:7d:b3:36:5a:3e:4d:c2:a2:73:63:38:f6: ad:7a:d3:2c:94:e0:5f:42:d1:fc:13:8c:f5:dc:b2:b9:b4:3c: cf:e0:6d:29:fe:ed:5e:4f:7a:33:c3:fd:4a:16:e4:d4:98:63: 25:f0:08:a5:71:e2:d5:de:75:ae:da:0c:b5:ad:ad:83:e2:87: 9c:03:0c:00:e6:95:0c:1a:34:f6:bd:cb:e4:9c:e7:5a:e3:b9: 29:f1:da:b8:44:61:a0:c8:32:ba:2b:6d:e1:2d:46:36:57:25: f0:e7:39:2a:15:64:ef:5b:42:97:08:fc:76:84:f4:4d:81:e9: a5:76:a5:71:88:f8:77:82:29:bc:9c:0b:50:30:67:37:7c:e7: 1f:78:98:74:26:a4:2e:cb:41:9a:8d:75:c0:6f:4c:42:01:eb: a6:b3:a6:0e:a1:53:8f:9d:f4:84:00:94:2c:e0:6e:2b:8d:c9: 29:77:33:d8:af:3e:2b:d5:57:d3:3a:96:0d:bb:8c:61:56:02: 69:70:b4:28:a7:f6:88:fe:f7:7a:84:af:e4:cd:a8:71:a6:aa: 99:98:57:e6:57:11:b9:b7:f7:1a:da:82:54:78:e1:4f:13:53: 78:bd:c8:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EMQDVb7zuMSwAxl8tpdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYmY0ZDU5Y2JkOTc4YWUxMTI3YzY3ZmQyMmYwNGM2MmZm ODM3Y2YwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTIyNDJjNGNjMjAxNDgwOWQ4NWRkYWJjYTJjNzQ0ZDZkNzBhMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5wy0EmhwDDOQwHaa/o8WqU/wuxj 6cguntluX7LtddXJqtW9v7OrDkoJ0MgL0SALmkq7RSLAnksWJAODa52IS+z0EZmQ W2xCxiWqMR4BYBpSX8qC9CinIeO1xiKDYR9FM4WrMsQa34Mpl7Y87HiBVdS30/BP 8CHxBjao2pJ9Q56dMhA1DBMmlSuwwrXmgYnzZjktLqDXEJFq9B8rwxF2DqnQsVxw 8RuG7kYjaPoiXme0iaEPGSu+LJfeWw01eqDVbtAL60gPST46iGEaiKgWS0CezJOf +y8z1wpLqqLvR/GNVVEDlyCdIbHwEdmQHodUfo//Ms3p++k+iS1wdvBEbwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAEiQsTMIBSAnYXdq8osdE1tcKDKMB8GA1UdIwQY MBaAFPu/TVnL2XiuESfGf9IvBMYv+DfPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03OU5XY3ZaZUs0Uko4Wl8waThFeGlfNE44OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvODhjOTk1LWVkZTAtNGNjNC1hNjZk LTI1YmFhODIzMGZjYi8xL0FTSkN4TXdnRklDZGhkMnJ5aXgwVFcxd29Nby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzQvODhjOTk1LWVkZTAtNGNjNC1hNjZkLTI1YmFhODIzMGZj Yi8xLzEtNzlOV2N2WmVLNFJKOFpfMGk4RXhpXzROODguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBATZHFAw DQQCAAIwBwMFACoCKKgwDQYJKoZIhvcNAQELBQADggEBAF56oKjSvn8roCnPsoLz G3wwODaxTrd/FH2zNlo+TcKic2M49q160yyU4F9C0fwTjPXcsrm0PM/gbSn+7V5P ejPD/UoW5NSYYyXwCKVx4tXeda7aDLWtrYPih5wDDADmlQwaNPa9y+Sc51rjuSnx 2rhEYaDIMrorbeEtRjZXJfDnOSoVZO9bQpcI/HaE9E2B6aV2pXGI+HeCKbycC1Aw Zzd85x94mHQmpC7LQZqNdcBvTEIB66azpg6hU4+d9IQAlCzgbiuNySl3M9ivPivV V9M6lg27jGFWAmlwtCin9oj+93qEr+TNqHGmqpmYV+ZXEbm39xraglR44U8TU3i9 yN4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:15:22 2026 by rpki-client