This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/R7hZuzSJ3fOJ-YsqrV0cyLkIQsU.roa File: R7hZuzSJ3fOJ-YsqrV0cyLkIQsU.roa (raw, json) Hash identifier: H1csasv2Sk5dYaopJkvpDFzXW3jjYLOcsq1z9G486ss= Subject key identifier: 47:B8:59:BB:34:89:DD:F3:89:F9:8B:2A:AD:5D:1C:C8:B9:08:42:C5 Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460 Certificate serial: 019B78355404D9C77365B784772689A68F13 Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/R7hZuzSJ3fOJ-YsqrV0cyLkIQsU.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44914 IP address blocks: 78.28.0.0/19 maxlen: 19 78.28.32.0/19 maxlen: 19 78.28.32.0/21 maxlen: 21 78.28.40.0/21 maxlen: 21 78.28.48.0/21 maxlen: 21 78.28.48.0/24 maxlen: 24 78.28.56.0/21 maxlen: 21 78.28.56.0/23 maxlen: 23 78.28.58.0/23 maxlen: 23 78.28.60.0/22 maxlen: 22 78.28.62.0/23 maxlen: 23 188.125.128.0/20 maxlen: 20 188.125.144.0/22 maxlen: 22 188.125.148.0/22 maxlen: 22 188.125.152.0/22 maxlen: 22 188.125.157.0/24 maxlen: 24 188.125.158.0/24 maxlen: 24 188.125.159.0/24 maxlen: 24 2a02:e88:8000::/48 maxlen: 48 2a02:e88:8100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:04:d9:c7:73:65:b7:84:77:26:89:a6:8f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47b859bb3489ddf389f98b2aad5d1cc8b90842c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:ad:19:2a:f4:28:2f:06:a0:90:23:04:3c: 9d:53:6d:6d:a7:08:9f:fe:6f:0f:fe:bd:b0:63:6a: a2:95:fa:c9:d6:61:83:87:05:ef:42:65:bb:4a:f2: 38:df:10:2c:c7:10:4b:cd:cb:f9:a1:d4:d1:3f:09: a3:3d:0e:52:6e:5a:da:59:70:af:91:ee:cc:fd:8b: 30:ee:8d:d2:7a:83:67:36:b4:8e:7e:2d:9e:3e:7c: 70:f7:ba:7d:2d:e4:e3:e5:d6:7e:e8:07:ca:32:19: e8:4a:be:fa:69:1e:ab:08:e6:ee:34:a1:e0:fb:bd: be:e7:e5:59:0c:a4:d0:ce:68:bb:47:38:f7:d9:17: c5:09:57:eb:d8:88:0f:6d:19:21:34:86:b6:19:76: 7d:58:e9:56:e2:fd:52:66:ab:d7:68:44:47:f8:31: e4:ea:5d:30:cb:19:32:7a:a4:5f:f5:ae:f4:96:b7: 83:a9:37:55:7f:4a:5f:65:d2:ca:33:0e:23:f2:19: 33:f8:c4:15:c6:ee:04:29:24:f1:53:8b:d6:ce:8f: 9f:5e:e2:30:ef:c1:96:b8:67:1d:8b:d8:15:c6:42: 68:49:9e:2f:c6:ee:32:1a:3f:8a:62:d0:e2:f7:9d: 7f:e3:cf:db:c7:af:cb:e6:ab:94:15:f8:aa:8c:31: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B8:59:BB:34:89:DD:F3:89:F9:8B:2A:AD:5D:1C:C8:B9:08:42:C5 X509v3 Authority Key Identifier: keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/R7hZuzSJ3fOJ-YsqrV0cyLkIQsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.28.0.0/18 188.125.128.0-188.125.155.255 188.125.157.0-188.125.159.255 IPv6: 2a02:e88:8000::/48 2a02:e88:8100::/48 Signature Algorithm: sha256WithRSAEncryption 27:a9:25:b1:6b:f4:7e:e6:cf:05:e8:57:a7:6d:63:b2:41:8e: 5a:cf:69:10:c0:ee:c6:f2:e5:cf:c0:0f:4a:65:2a:9a:b3:7b: 29:cc:bb:ef:9a:3d:10:96:0d:7e:ce:76:f4:d7:1c:d6:d2:dd: 39:41:5e:db:23:ac:02:27:69:66:60:76:c2:d9:72:6c:89:58: 46:02:71:4a:8b:e3:4f:4a:1d:8e:0b:a3:33:69:1a:84:8f:1b: b8:23:d5:ab:04:3e:71:e0:59:cb:68:4f:9b:9c:42:19:e7:c2: 2a:31:6b:91:bc:3f:f7:02:ee:d4:44:4c:30:94:6c:d1:c8:72: 04:7e:81:2b:26:ea:ab:fc:d1:a4:ed:eb:de:42:b4:70:0b:87: 25:d2:fa:8a:e0:42:2a:b2:0c:a1:51:83:99:ef:ac:a8:ab:28: 99:a5:dd:1c:8c:20:3b:33:58:82:12:06:99:9f:54:84:c3:6e: 6f:cb:de:f5:c1:38:e2:bd:ed:74:7a:1f:28:8f:fc:a3:de:2f: 3f:a8:26:96:0b:25:9d:a1:5c:82:f8:c4:df:ab:f3:f1:0d:a9: 90:c2:84:ab:d9:1c:f5:65:67:1a:97:c8:2f:ee:f8:50:26:04: 33:03:5c:76:8c:39:8c:a9:aa:e2:e7:b8:2b:9a:bf:82:ba:11: 35:74:19:a6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt4NVQE2cdzZbeEdyaJpo8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjA2MDZkZTczMDQ1NmVkZDczMzVjYzg4MmNiZGY0Mzk2 ZjM0NjAwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2I4NTliYjM0ODlkZGYzODlmOThiMmFhZDVkMWNjOGI5MDg0MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvKtGSr0KC8GoJAjBDydU21tpwif /m8P/r2wY2qilfrJ1mGDhwXvQmW7SvI43xAsxxBLzcv5odTRPwmjPQ5SblraWXCv ke7M/Ysw7o3SeoNnNrSOfi2ePnxw97p9LeTj5dZ+6AfKMhnoSr76aR6rCObuNKHg +72+5+VZDKTQzmi7Rzj32RfFCVfr2IgPbRkhNIa2GXZ9WOlW4v1SZqvXaERH+DHk 6l0wyxkyeqRf9a70lreDqTdVf0pfZdLKMw4j8hkz+MQVxu4EKSTxU4vWzo+fXuIw 78GWuGcdi9gVxkJoSZ4vxu4yGj+KYtDi951/48/bx6/L5quUFfiqjDEnKwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFEe4Wbs0id3zifmLKq1dHMi5CELFMB8GA1UdIwQY MBaAFMsgYG3nMEVu3XM1zIgsvfQ5bzRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQt YjNkODZhYTQzYmM1LzEvUjdoWnV6U0ozZk9KLVlzcXJWMGN5TGtJUXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQtYjNkODZhYTQzYmM1 LzEveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAoBAIAATAiAwQGThwAMAwD BAe8fYADBAK8fZgwDAMEALx9nQMEBbx9gDAYBAIAAjASAwcAKgIOiIAAAwcAKgIO iIEAMA0GCSqGSIb3DQEBCwUAA4IBAQAnqSWxa/R+5s8F6FenbWOyQY5az2kQwO7G 8uXPwA9KZSqas3spzLvvmj0Qlg1+znb01xzW0t05QV7bI6wCJ2lmYHbC2XJsiVhG AnFKi+NPSh2OC6MzaRqEjxu4I9WrBD5x4FnLaE+bnEIZ58IqMWuRvD/3Au7UREww lGzRyHIEfoErJuqr/NGk7eveQrRwC4cl0vqK4EIqsgyhUYOZ76yoqyiZpd0cjCA7 M1iCEgaZn1SEw25vy971wTjive10eh8oj/yj3i8/qCaWCyWdoVyC+MTfq/PxDamQ woSr2Rz1ZWcal8gv7vhQJgQzA1x2jDmMqari57grmr+CuhE1dBmm -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:27 2026 by rpki-client