This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/2798bsS-ftRBFC8OmYwDYZazwYQ.roa File: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (raw, json) Hash identifier: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo= Subject key identifier: DB:BF:7C:6E:C4:BE:7E:D4:41:14:2F:0E:99:8C:03:61:96:B3:C1:84 Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Certificate serial: 019B7F83D52FAE2AEC8BA92324CA256893EC Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/2798bsS-ftRBFC8OmYwDYZazwYQ.roa Signing time: Fri 02 Jan 2026 16:21:44 +0000 ROA not before: Fri 02 Jan 2026 16:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211703 IP address blocks: 130.193.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d5:2f:ae:2a:ec:8b:a9:23:24:ca:25:68:93:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbbf7c6ec4be7ed441142f0e998c036196b3c184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:b3:99:b5:fd:52:de:e4:95:fa:da:58:00: 98:e8:e7:d0:49:48:55:42:fd:fe:b9:f3:3d:b2:f4: af:4e:c0:49:81:46:32:4c:26:fb:ec:6a:60:61:ca: 42:d2:ce:d7:de:8b:41:bd:67:b0:71:c3:e8:6a:eb: 7b:9f:a9:9f:24:5f:39:97:b3:e1:50:f2:09:bb:2e: 15:5a:d6:bf:a8:68:10:6d:86:93:6a:1d:65:ff:07: 92:8c:27:d5:15:a5:c6:07:ef:3b:09:84:1c:b7:24: 9f:12:db:87:86:74:92:00:b8:1f:8a:45:50:46:d0: 7b:ff:1c:73:ec:95:bd:f8:bb:e6:b7:28:8d:41:26: 7e:00:b1:1d:31:3f:b4:ee:45:99:4e:33:48:e4:56: e6:30:a6:45:8a:eb:9d:21:aa:26:c0:8e:02:be:68: 2b:da:4d:1a:a8:6f:0d:2f:94:5e:7a:4c:17:09:de: 06:1c:09:86:58:90:97:6f:5e:82:1a:83:60:54:d3: 75:37:47:e4:c7:14:9f:dd:de:5d:80:2d:93:c4:fc: 4e:c9:3c:7e:d8:9c:73:6e:73:4a:e2:89:d3:94:8c: 6e:ba:2c:b6:03:0e:bd:f9:63:10:3e:d5:14:54:bc: 70:95:f1:bd:24:d2:6a:8c:a5:4e:e7:14:93:8a:cb: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BF:7C:6E:C4:BE:7E:D4:41:14:2F:0E:99:8C:03:61:96:B3:C1:84 X509v3 Authority Key Identifier: keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/2798bsS-ftRBFC8OmYwDYZazwYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.24.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:97:c4:12:7b:59:92:dc:8a:41:2f:a8:da:be:83:5d:65:1b: 99:5b:2a:ed:34:df:42:c2:70:fd:c6:2b:53:cd:f5:58:0f:6a: 8d:81:37:57:37:37:93:fc:ac:8f:3f:06:43:b4:6a:76:94:46: 20:e4:38:29:50:2b:1d:7b:9d:be:5a:e7:59:50:b7:c8:27:e8: 73:0a:8f:97:fa:ad:cb:f9:54:a4:8b:ec:0d:15:01:f6:0d:66: 04:c8:44:b6:41:38:58:7f:88:cf:3c:64:11:d1:b3:99:96:58: 80:05:57:2b:d8:86:55:39:9b:a9:6e:c2:3c:55:20:34:d9:35: 71:57:2a:da:55:b1:10:e1:69:0c:bd:b8:62:85:f8:e0:07:f3: 53:26:6b:6f:37:5a:50:0e:3b:d1:30:12:64:f8:e9:b6:72:a5: f9:4d:94:ee:e5:45:72:e9:50:d5:aa:09:ab:0b:77:66:88:16: 64:7c:b6:07:3e:82:77:fb:3f:e4:4b:31:1c:93:30:b7:f4:39: bf:bf:6b:b5:8e:f3:bd:09:9e:6e:57:7b:0f:e2:6e:68:67:20: 14:92:bc:49:ba:79:6b:2b:19:d7:28:b5:10:28:41:db:e5:ed: 44:1a:fb:e5:2c:e4:cc:aa:d7:97:53:da:3b:b6:fb:4a:22:91: eb:fd:fa:35 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/g9Uvrirsi6kjJMolaJPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmIyODQ0MWI1ZWFkMDE4NDY1MzVlYWYyMGJmZDA3NTJl MDc2NDUwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmJmN2M2ZWM0YmU3ZWQ0NDExNDJmMGU5OThjMDM2MTk2YjNjMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMazmbX9Ut7klfraWACY6OfQSUhV Qv3+ufM9svSvTsBJgUYyTCb77GpgYcpC0s7X3otBvWewccPoaut7n6mfJF85l7Ph UPIJuy4VWta/qGgQbYaTah1l/weSjCfVFaXGB+87CYQctySfEtuHhnSSALgfikVQ RtB7/xxz7JW9+LvmtyiNQSZ+ALEdMT+07kWZTjNI5FbmMKZFiuudIaomwI4Cvmgr 2k0aqG8NL5ReekwXCd4GHAmGWJCXb16CGoNgVNN1N0fkxxSf3d5dgC2TxPxOyTx+ 2JxzbnNK4onTlIxuuiy2Aw69+WMQPtUUVLxwlfG9JNJqjKVO5xSTist+WwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNu/fG7Evn7UQRQvDpmMA2GWs8GEMB8GA1UdIwQY MBaAFPprKEQbXq0BhGU16vIL/QdS4HZFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tc29SQnRlclFHRVpUWHE4Z3Y5QjFMZ2RrVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYmRkMjU2LTJmNTktNDMxYi1iNjUz LWNhZTY3OGIyZjIxZS8xLzI3OThic1MtZnRSQkZDOE9tWXdEWVphendZUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDgvYmRkMjU2LTJmNTktNDMxYi1iNjUzLWNhZTY3OGIyZjIx ZS8xLzEtbXNvUkJ0ZXJRR0VaVFhxOGd2OUIxTGdka1UuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACCwRgw DQYJKoZIhvcNAQELBQADggEBAE2XxBJ7WZLcikEvqNq+g11lG5lbKu0030LCcP3G K1PN9VgPao2BN1c3N5P8rI8/BkO0anaURiDkOClQKx17nb5a51lQt8gn6HMKj5f6 rcv5VKSL7A0VAfYNZgTIRLZBOFh/iM88ZBHRs5mWWIAFVyvYhlU5m6luwjxVIDTZ NXFXKtpVsRDhaQy9uGKF+OAH81Mma283WlAOO9EwEmT46bZypflNlO7lRXLpUNWq CasLd2aIFmR8tgc+gnf7P+RLMRyTMLf0Ob+/a7WO870Jnm5Xew/ibmhnIBSSvEm6 eWsrGdcotRAoQdvl7UQa++Us5Myq15dT2ju2+0oikev9+jU= -----END CERTIFICATE-----Generated at Fri Jan 9 07:45:58 2026 by rpki-client