This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Rs82s1GfL_H0ZSEYQ-pjLnSpEg4.roa File: Rs82s1GfL_H0ZSEYQ-pjLnSpEg4.roa (raw, json) Hash identifier: CPahuBP/QEjD7/mn+rgujqsn8CmzHunCThRPx25Eyto= Subject key identifier: 46:CF:36:B3:51:9F:2F:F1:F4:65:21:18:43:EA:63:2E:74:A9:12:0E Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Certificate serial: 019B77590896D9F4228D2F7208CAC160A780 Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Rs82s1GfL_H0ZSEYQ-pjLnSpEg4.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212648 IP address blocks: 217.145.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 20:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:96:d9:f4:22:8d:2f:72:08:ca:c1:60:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46cf36b3519f2ff1f465211843ea632e74a9120e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:84:49:3c:aa:1e:fd:8f:29:96:b4:df:8c: ce:3f:d4:87:e2:63:d1:c8:ce:e9:e2:b7:51:93:16: 1a:f0:b3:79:5d:82:c2:09:f3:7e:10:40:65:0f:fd: 94:9c:03:07:88:a8:f7:ac:cb:fb:3b:9b:f0:0a:c9: df:7d:17:38:26:4b:9b:2c:51:7e:75:bb:c4:b1:28: 68:d1:20:90:70:84:29:06:95:42:38:43:a8:8c:d6: 77:96:8b:e5:85:80:ae:6f:9f:3a:37:3c:ae:0c:d3: e2:86:de:3e:bb:68:24:ee:06:71:7e:7e:60:02:7c: a7:4f:73:70:bf:a5:eb:aa:57:6d:f2:d4:85:46:78: 93:6b:e3:71:86:78:ef:3b:67:2b:69:1a:c6:58:7b: 29:b5:0f:29:34:82:6e:6f:cf:6d:54:15:22:4d:54: 31:d5:ad:a1:b7:51:a3:9d:57:1e:a3:2a:2b:43:bb: 70:c5:7b:8e:1a:a2:99:d0:90:2d:f6:3b:fe:76:4a: 69:b5:c0:8a:27:b8:35:48:0a:0a:75:fe:d4:fa:10: e3:85:84:3c:c9:b0:5f:40:7d:5b:1d:b4:bf:6e:f3: 72:05:42:61:02:97:3b:88:a0:b3:cf:ec:16:e4:90: f3:5b:60:06:a8:00:83:9c:37:a0:7a:04:52:da:7d: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CF:36:B3:51:9F:2F:F1:F4:65:21:18:43:EA:63:2E:74:A9:12:0E X509v3 Authority Key Identifier: keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Rs82s1GfL_H0ZSEYQ-pjLnSpEg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:06:9f:e5:bf:60:d7:8d:b4:70:c9:78:71:41:7d:f9:bb:99: 15:30:4e:66:9a:f2:43:66:c6:6a:1d:2a:ec:90:d6:77:1b:da: ce:ca:54:c2:a4:87:e7:29:f6:1a:9b:61:f3:e1:2e:74:aa:ed: 58:29:a6:94:c2:be:3d:38:f6:6d:30:d8:95:1e:8d:b1:e6:9b: 2f:df:54:c5:6e:6d:41:cb:ee:63:1c:81:78:cf:cd:0a:7a:63: ec:46:4f:b1:d2:2e:be:91:b2:fc:d7:ef:f4:52:76:d0:c2:3e: cc:13:fb:e2:0f:c9:ff:2a:1f:a2:69:4b:ce:94:cb:08:c2:c8: c3:5d:07:05:b5:64:e1:70:c7:7b:58:4e:98:e0:ed:c7:72:15: 0d:63:8c:52:87:81:17:74:aa:aa:69:b6:43:6c:c6:c1:62:0d: cc:eb:91:d2:1b:fc:ca:7a:06:63:dd:0e:02:83:6d:89:9c:30: d2:d2:eb:34:47:14:c2:88:96:e5:a0:e8:10:0e:c5:af:05:82: c5:7e:91:83:54:2e:bb:ce:67:1a:b0:54:49:42:ac:86:0a:16: 84:32:d6:de:75:de:5c:ae:b8:15:7a:ed:a8:8b:df:10:ef:86: 2b:a2:f5:ab:f7:f3:ed:f7:40:86:85:02:73:bb:71:84:67:85: 1c:74:21:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQiW2fQijS9yCMrBYKeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5 OTM0ZjgwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmNmMzZiMzUxOWYyZmYxZjQ2NTIxMTg0M2VhNjMyZTc0YTkxMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyCESTyqHv2PKZa034zOP9SH4mPR yM7p4rdRkxYa8LN5XYLCCfN+EEBlD/2UnAMHiKj3rMv7O5vwCsnffRc4JkubLFF+ dbvEsSho0SCQcIQpBpVCOEOojNZ3lovlhYCub586NzyuDNPiht4+u2gk7gZxfn5g AnynT3Nwv6Xrqldt8tSFRniTa+NxhnjvO2craRrGWHsptQ8pNIJub89tVBUiTVQx 1a2ht1GjnVceoyorQ7twxXuOGqKZ0JAt9jv+dkpptcCKJ7g1SAoKdf7U+hDjhYQ8 ybBfQH1bHbS/bvNyBUJhApc7iKCzz+wW5JDzW2AGqACDnDegegRS2n2LMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEbPNrNRny/x9GUhGEPqYy50qRIOMB8GA1UdIwQY MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt M2FkNTJlOGI5NjI4LzEvUnM4MnMxR2ZMX0gwWlNFWVEtcGpMblNwRWc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4 LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZHnMA0G CSqGSIb3DQEBCwUAA4IBAQB6Bp/lv2DXjbRwyXhxQX35u5kVME5mmvJDZsZqHSrs kNZ3G9rOylTCpIfnKfYam2Hz4S50qu1YKaaUwr49OPZtMNiVHo2x5psv31TFbm1B y+5jHIF4z80KemPsRk+x0i6+kbL81+/0UnbQwj7ME/viD8n/Kh+iaUvOlMsIwsjD XQcFtWThcMd7WE6Y4O3HchUNY4xSh4EXdKqqabZDbMbBYg3M65HSG/zKegZj3Q4C g22JnDDS0us0RxTCiJbloOgQDsWvBYLFfpGDVC67zmcasFRJQqyGChaEMtbedd5c rrgVeu2oi98Q74YrovWr9/Pt90CGhQJzu3GEZ4UcdCHB -----END CERTIFICATE-----Generated at Thu Jan 29 06:15:19 2026 by rpki-client