This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_7rqKC1n9X4ifIk56osVlDPjg44.roa File: _7rqKC1n9X4ifIk56osVlDPjg44.roa (raw, json) Hash identifier: ikQcpPmQqKmANvt2MMq0vusNz0s8zmhOZsDMKwsiBhw= Subject key identifier: FF:BA:EA:28:2D:67:F5:7E:22:7C:89:39:EA:8B:15:94:33:E3:83:8E Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFA2B924D2A34E5E8D8B4C5CD59A6 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_7rqKC1n9X4ifIk56osVlDPjg44.roa Signing time: Fri 02 Jan 2026 06:17:52 +0000 ROA not before: Fri 02 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30890 IP address blocks: 195.28.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fa:2b:92:4d:2a:34:e5:e8:d8:b4:c5:cd:59:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffbaea282d67f57e227c8939ea8b159433e3838e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:f6:7b:34:d3:58:05:40:7a:03:b8:9e:a1: a6:63:42:cc:67:bf:1c:e3:80:2e:a5:b6:62:11:84: 0c:a6:8a:7b:5d:40:6c:22:a6:1d:34:ff:2a:c1:22: 84:bc:f2:c0:48:88:64:0d:49:98:d7:fa:de:3e:5d: 97:91:96:3e:ef:60:fb:58:de:d5:d6:73:d0:74:23: c6:48:86:db:c2:97:91:51:8c:f1:3b:a8:57:b2:0f: 19:db:09:ef:44:93:9b:50:0f:9b:4e:82:e9:27:70: c6:36:60:7c:fe:70:08:14:36:76:d2:78:63:4b:65: 61:2b:68:4d:47:a0:d5:94:c8:69:46:9d:ff:0d:0c: fc:d5:89:01:72:a3:19:7c:96:cc:86:71:b3:ee:a5: a4:fc:5c:57:b0:46:16:6d:b2:79:3f:f1:5c:62:6a: 55:c3:d8:a7:4a:40:76:b3:d5:8d:b8:9d:bb:e6:f1: e1:dd:07:2b:4f:5c:08:02:c6:ce:c9:8f:94:06:cb: f6:ff:65:08:71:8f:f3:7f:2c:b0:ed:ec:03:7f:0d: 40:c7:2f:a2:83:08:49:0e:53:21:47:fb:db:54:81: a5:5f:a0:ed:d1:fb:71:26:4f:fc:dd:19:31:57:fb: e0:77:fe:b7:12:0b:5a:04:79:95:b3:64:15:5e:79: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BA:EA:28:2D:67:F5:7E:22:7C:89:39:EA:8B:15:94:33:E3:83:8E X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_7rqKC1n9X4ifIk56osVlDPjg44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.2.0/23 Signature Algorithm: sha256WithRSAEncryption 29:f2:c8:ac:4e:24:d4:07:21:47:e8:49:9f:39:15:a8:8e:be: b4:a0:d5:2d:c4:c4:7d:c9:4e:dc:84:88:b9:ba:c8:f2:9c:cb: 90:31:19:b0:28:8a:b0:02:df:11:e0:fb:2f:3d:fa:ed:05:04: 2c:de:6e:d7:c8:e4:9d:49:52:72:bd:4b:de:f1:f7:eb:da:0f: e1:68:38:28:7a:44:6c:f7:31:f4:26:0f:70:d3:53:3e:ab:9c: 70:1e:4c:ad:cb:7e:05:de:17:95:6d:4e:cd:56:bc:48:b1:56: ca:14:67:63:6b:d5:d0:ba:83:0e:45:7b:93:97:42:05:71:df: 4b:1f:4d:c5:de:cd:e7:f8:dd:fb:83:84:02:c4:7b:2e:52:85: 09:38:10:98:7c:a7:01:64:72:ad:ed:d8:20:95:cd:e3:57:f7: f8:70:c0:f1:f9:71:59:a9:a2:8e:1f:16:e1:98:d5:41:c1:d4: c8:2a:c7:52:d7:96:14:8f:c7:01:60:86:cd:bd:a6:cf:6f:dc: 55:e8:bd:e9:6b:74:1d:f0:bb:b4:ee:5c:c1:8c:a2:e0:a7:f1: 4f:d1:d8:66:73:68:ac:bf:d0:0f:d3:a6:91:25:de:3d:0d:cb: d4:40:8e:72:07:2b:2d:90:39:43:3b:d7:1a:92:b9:d9:03:68: 73:c2:c8:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wvorkk0qNOXo2LTFzVmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmJhZWEyODJkNjdmNTdlMjI3Yzg5MzllYThiMTU5NDMzZTM4MzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufT2ezTTWAVAegO4nqGmY0LMZ78c 44AupbZiEYQMpop7XUBsIqYdNP8qwSKEvPLASIhkDUmY1/rePl2XkZY+72D7WN7V 1nPQdCPGSIbbwpeRUYzxO6hXsg8Z2wnvRJObUA+bToLpJ3DGNmB8/nAIFDZ20nhj S2VhK2hNR6DVlMhpRp3/DQz81YkBcqMZfJbMhnGz7qWk/FxXsEYWbbJ5P/FcYmpV w9inSkB2s9WNuJ275vHh3QcrT1wIAsbOyY+UBsv2/2UIcY/zfyyw7ewDfw1Axy+i gwhJDlMhR/vbVIGlX6Dt0ftxJk/83RkxV/vgd/63EgtaBHmVs2QVXnk5KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+66igtZ/V+InyJOeqLFZQz44OOMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvXzdycUtDMW45WDRpZklrNTZvc1ZsRFBqZzQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxwCMA0G CSqGSIb3DQEBCwUAA4IBAQAp8sisTiTUByFH6EmfORWojr60oNUtxMR9yU7chIi5 usjynMuQMRmwKIqwAt8R4PsvPfrtBQQs3m7XyOSdSVJyvUve8ffr2g/haDgoekRs 9zH0Jg9w01M+q5xwHkyty34F3heVbU7NVrxIsVbKFGdja9XQuoMORXuTl0IFcd9L H03F3s3n+N37g4QCxHsuUoUJOBCYfKcBZHKt7dgglc3jV/f4cMDx+XFZqaKOHxbh mNVBwdTIKsdS15YUj8cBYIbNvabPb9xV6L3pa3Qd8Lu07lzBjKLgp/FP0dhmc2is v9AP06aRJd49DcvUQI5yBystkDlDO9cakrnZA2hzwsgy -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:17 2026 by rpki-client