This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/regdGTdqPxSg7ERZs4-zecqOg1c.roa File: regdGTdqPxSg7ERZs4-zecqOg1c.roa (raw, json) Hash identifier: SO+bb/AT3Es4TWWPCPRUMxbKDZ/Elg/HF32w+RORyPA= Subject key identifier: AD:E8:1D:19:37:6A:3F:14:A0:EC:44:59:B3:8F:B3:79:CA:8E:83:57 Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Certificate serial: 019B77590816B76C411400167F25C6AE18C1 Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/regdGTdqPxSg7ERZs4-zecqOg1c.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209273 IP address blocks: 217.145.228.0/23 maxlen: 23 217.145.228.0/24 maxlen: 24 217.145.229.0/24 maxlen: 24 217.145.230.0/24 maxlen: 24 217.145.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 20:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:16:b7:6c:41:14:00:16:7f:25:c6:ae:18:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ade81d19376a3f14a0ec4459b38fb379ca8e8357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:14:ea:35:de:b0:0c:3e:24:bc:ac:a3:c4: 4c:a2:13:ef:17:88:d7:57:f8:c8:c7:b7:a1:c4:a6: 55:02:75:26:e9:92:d7:bc:dc:f4:c7:c7:a0:62:3b: 61:0b:66:18:08:29:e8:8f:c6:44:36:ec:01:63:b7: da:0f:07:87:00:4a:89:be:9f:e5:e2:4e:d6:6a:16: 25:ca:a9:7d:a6:2d:7d:58:cc:ba:80:93:7a:55:08: 68:f2:0d:dd:c4:85:69:76:09:db:24:d3:e0:fa:dd: 92:1d:c5:4e:57:2b:15:b5:5c:50:d7:82:86:fc:0a: e6:bb:58:72:0f:cf:a7:7a:be:e0:a2:24:f9:6a:71: 70:4e:d3:e4:f2:16:34:89:24:81:f6:56:26:9f:55: b2:a3:2f:90:02:82:46:f8:06:ed:a5:25:ce:b6:c4: 23:4e:87:e9:a0:fc:67:0f:cc:23:f7:9e:dc:a8:00: 93:63:4e:17:7e:be:20:62:3d:06:1d:15:e5:bf:c6: 55:dc:40:f8:99:6a:ae:cf:fd:13:ed:b5:76:50:23: cb:e4:da:41:3b:b9:ae:98:26:92:38:38:20:3b:46: 9b:ed:41:31:08:b4:d0:0d:14:25:68:e1:2a:63:e2: e0:12:2b:d7:99:33:12:97:fc:7f:e7:a8:4d:76:d1: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E8:1D:19:37:6A:3F:14:A0:EC:44:59:B3:8F:B3:79:CA:8E:83:57 X509v3 Authority Key Identifier: keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/regdGTdqPxSg7ERZs4-zecqOg1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.228.0/22 Signature Algorithm: sha256WithRSAEncryption 47:72:13:b6:2c:70:27:66:03:b1:b5:f0:e3:32:d7:cc:b2:fb: af:05:e4:21:57:09:28:a4:43:de:0b:31:f8:83:72:a8:0e:76: dc:b0:14:f7:ab:05:c6:90:7c:02:a9:75:d9:a8:8c:77:42:95: b0:0a:1e:be:fb:f3:74:89:42:f8:36:92:d0:87:1d:a6:ff:03: 25:88:8d:fa:a5:ce:36:f4:20:a7:1f:99:ef:9d:2f:df:b8:e2: f7:d6:fc:54:60:d8:e6:7d:1d:6b:ef:a0:7d:2d:e8:92:0b:11: cf:aa:8f:eb:d8:87:b4:4f:88:82:21:d2:e1:0f:b0:a8:de:2e: 67:36:44:9f:bd:c8:ed:ea:b5:79:e3:e7:5f:b6:9e:e0:4f:98: 9e:9a:2a:58:3e:93:84:23:71:16:63:3f:6a:6c:d6:60:d1:db: 37:4c:3b:b4:25:a2:05:0b:c6:9e:e5:06:94:c0:61:4f:86:b9: 6f:c1:65:fb:be:8d:e1:ad:62:f8:ab:bf:d1:2c:bb:96:6a:e0: 22:2b:88:74:68:4b:56:cf:57:63:b4:90:3b:5e:61:e8:f8:fa: d9:3b:a3:16:99:48:c7:a9:b9:9e:7b:c6:54:a8:fe:df:a8:02: 40:f9:f9:4e:3a:06:f2:e3:5e:54:a3:e5:b8:f8:8c:36:62:f0: f2:7f:2b:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQgWt2xBFAAWfyXGrhjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5 OTM0ZjgwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGU4MWQxOTM3NmEzZjE0YTBlYzQ0NTliMzhmYjM3OWNhOGU4MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKoU6jXesAw+JLyso8RMohPvF4jX V/jIx7ehxKZVAnUm6ZLXvNz0x8egYjthC2YYCCnoj8ZENuwBY7faDweHAEqJvp/l 4k7WahYlyql9pi19WMy6gJN6VQho8g3dxIVpdgnbJNPg+t2SHcVOVysVtVxQ14KG /Armu1hyD8+ner7goiT5anFwTtPk8hY0iSSB9lYmn1Wyoy+QAoJG+AbtpSXOtsQj TofpoPxnD8wj957cqACTY04Xfr4gYj0GHRXlv8ZV3ED4mWquz/0T7bV2UCPL5NpB O7mumCaSODggO0ab7UExCLTQDRQlaOEqY+LgEivXmTMSl/x/56hNdtE6NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK3oHRk3aj8UoOxEWbOPs3nKjoNXMB8GA1UdIwQY MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt M2FkNTJlOGI5NjI4LzEvcmVnZEdUZHFQeFNnN0VSWnM0LXplY3FPZzFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4 LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ZHkMA0G CSqGSIb3DQEBCwUAA4IBAQBHchO2LHAnZgOxtfDjMtfMsvuvBeQhVwkopEPeCzH4 g3KoDnbcsBT3qwXGkHwCqXXZqIx3QpWwCh6++/N0iUL4NpLQhx2m/wMliI36pc42 9CCnH5nvnS/fuOL31vxUYNjmfR1r76B9LeiSCxHPqo/r2Ie0T4iCIdLhD7Co3i5n NkSfvcjt6rV54+dftp7gT5iemipYPpOEI3EWYz9qbNZg0ds3TDu0JaIFC8ae5QaU wGFPhrlvwWX7vo3hrWL4q7/RLLuWauAiK4h0aEtWz1djtJA7XmHo+PrZO6MWmUjH qbmee8ZUqP7fqAJA+flOOgby415Uo+W4+Iw2YvDyfyuo -----END CERTIFICATE-----Generated at Thu Jan 29 06:16:48 2026 by rpki-client