This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa File: 28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa (raw, json) Hash identifier: CSosAC0RkIivRtuzYTWYojYmIhFl5s25SMxfOZ9APWQ= Subject key identifier: DB:C1:69:E4:5D:13:6B:DC:29:C4:33:95:76:75:FC:6F:77:E2:03:B3 Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Certificate serial: 019B7EA6BD5F29615D7B06E56AAC1065CC5A Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50031 IP address blocks: 109.69.112.0/21 maxlen: 21 2a01:7300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bd:5f:29:61:5d:7b:06:e5:6a:ac:10:65:cc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbc169e45d136bdc29c433957675fc6f77e203b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:e6:d6:7b:46:73:8d:53:69:1b:90:b0:f7: 29:41:3a:73:49:66:54:e6:df:66:82:77:66:85:b8: 73:ce:64:6b:11:eb:3d:03:b7:1c:77:a8:18:45:92: 24:23:4d:82:dd:6f:23:95:79:a3:1c:47:f4:c8:7a: 27:59:dc:7c:45:bf:ee:27:5f:e0:77:96:c9:4e:95: 7f:8d:e7:00:63:ec:1b:42:0d:b7:64:a4:be:a9:ba: 85:26:7c:7b:4d:de:6d:fa:d6:94:17:68:ac:25:d1: 11:bd:b4:ac:23:08:ad:69:3c:c7:7a:43:50:45:86: da:0f:54:83:1a:18:be:f5:23:f6:8e:d9:65:c0:c2: 8c:a5:5d:e9:2c:ee:53:5d:8a:cb:5b:bd:a0:21:62: 22:dc:69:fb:29:e2:da:45:5c:ee:c3:41:8d:49:b4: db:eb:43:3f:f5:b9:05:7a:25:19:0e:4b:37:bc:d5: 01:df:81:de:41:23:64:20:82:ff:f8:44:ba:64:da: 98:2f:6e:37:a1:a8:f0:29:1b:ed:39:7d:5a:dd:d8: 1f:34:7e:77:46:ea:25:2e:a0:89:22:48:2e:f5:2f: 02:ac:0f:38:5d:c8:45:42:68:67:a6:c1:57:e8:35: 8c:ef:fa:e9:b4:61:4a:9f:bb:95:80:12:87:6b:fd: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C1:69:E4:5D:13:6B:DC:29:C4:33:95:76:75:FC:6F:77:E2:03:B3 X509v3 Authority Key Identifier: keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.112.0/21 IPv6: 2a01:7300::/32 Signature Algorithm: sha256WithRSAEncryption 8a:d9:5b:2e:f0:3e:9b:19:79:45:18:28:34:ec:4a:e4:0c:ee: b2:37:7c:3b:97:b7:98:e9:dc:fa:ab:ab:79:42:c2:38:25:bb: c1:76:6c:fb:ee:65:75:04:de:6e:b3:1c:7f:6a:1d:43:60:85: d4:3b:76:f6:e3:ed:cf:04:da:34:4d:14:e3:d1:1b:02:3c:2e: 4d:4b:cf:8b:29:6a:db:1d:d2:f7:59:63:58:de:89:09:5d:16: 02:a1:cc:7b:22:ba:57:3d:d7:f5:82:ae:12:26:68:c7:01:0f: cf:3b:61:ff:18:66:ff:4a:50:b3:82:52:20:89:9f:bb:69:10: b2:b8:7b:1f:72:a5:c4:d8:5f:94:42:20:45:96:5e:cc:b7:8b: 3a:e3:fc:62:25:07:22:fe:12:f3:7b:70:cd:15:27:70:c2:b3: 37:5d:c2:59:46:9a:93:5c:03:bc:ae:98:6d:71:55:9d:14:3a: f7:9f:1c:29:d6:78:54:34:43:8a:3a:cb:28:4f:d7:7b:97:e1: 97:43:89:7b:98:e9:d2:4e:f1:af:36:1e:77:73:9b:e9:ad:22: 6a:31:5e:29:9c:53:21:5c:c8:8e:d7:85:f5:c7:61:89:06:b8: 04:9a:07:be:ac:1b:01:d7:54:6e:4f:d5:55:eb:ed:1d:f1:6a: ca:d4:8b:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pr1fKWFdewblaqwQZcxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWY2ZTFlYmI4MzE5MzVjODQyMmM5NzJiY2FiMmU1NmQx ZDllMzYwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmMxNjllNDVkMTM2YmRjMjljNDMzOTU3Njc1ZmM2Zjc3ZTIwM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzPm1ntGc41TaRuQsPcpQTpzSWZU 5t9mgndmhbhzzmRrEes9A7ccd6gYRZIkI02C3W8jlXmjHEf0yHonWdx8Rb/uJ1/g d5bJTpV/jecAY+wbQg23ZKS+qbqFJnx7Td5t+taUF2isJdERvbSsIwitaTzHekNQ RYbaD1SDGhi+9SP2jtllwMKMpV3pLO5TXYrLW72gIWIi3Gn7KeLaRVzuw0GNSbTb 60M/9bkFeiUZDks3vNUB34HeQSNkIIL/+ES6ZNqYL243oajwKRvtOX1a3dgfNH53 RuolLqCJIkgu9S8CrA84XchFQmhnpsFX6DWM7/rptGFKn7uVgBKHa/0fOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNvBaeRdE2vcKcQzlXZ1/G934gOzMB8GA1UdIwQY MBaAFBdfbh67gxk1yEIslyvKsuVtHZ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQt MDI4NWMxNWZjNTFlLzEvMjhGcDVGMFRhOXdweERPVmRuWDhiM2ZpQTdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQtMDI4NWMxNWZjNTFl LzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDbUVwMA0E AgACMAcDBQAqAXMAMA0GCSqGSIb3DQEBCwUAA4IBAQCK2Vsu8D6bGXlFGCg07Erk DO6yN3w7l7eY6dz6q6t5QsI4JbvBdmz77mV1BN5usxx/ah1DYIXUO3b24+3PBNo0 TRTj0RsCPC5NS8+LKWrbHdL3WWNY3okJXRYCocx7IrpXPdf1gq4SJmjHAQ/PO2H/ GGb/SlCzglIgiZ+7aRCyuHsfcqXE2F+UQiBFll7Mt4s64/xiJQci/hLze3DNFSdw wrM3XcJZRpqTXAO8rphtcVWdFDr3nxwp1nhUNEOKOssoT9d7l+GXQ4l7mOnSTvGv Nh53c5vprSJqMV4pnFMhXMiO14X1x2GJBrgEmge+rBsB11RuT9VV6+0d8WrK1Isn -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:01 2026 by rpki-client