This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/S28rpMcpp3w49m6y_fINkRVcEtM.roa File: S28rpMcpp3w49m6y_fINkRVcEtM.roa (raw, json) Hash identifier: eLvKibs6faEooTZK3nOFlcSse5Oak+Y2lXD9zUA5VvU= Subject key identifier: 4B:6F:2B:A4:C7:29:A7:7C:38:F6:6E:B2:FD:F2:0D:91:15:5C:12:D3 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA49606E3E6209A6A418213C28C85FE Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/S28rpMcpp3w49m6y_fINkRVcEtM.roa Signing time: Thu 01 Jan 2026 22:19:02 +0000 ROA not before: Thu 01 Jan 2026 22:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 2.56.138.0/24 maxlen: 24 45.10.108.0/24 maxlen: 24 45.133.32.0/22 maxlen: 22 77.83.80.0/24 maxlen: 24 185.235.247.0/24 maxlen: 24 193.9.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:96:06:e3:e6:20:9a:6a:41:82:13:c2:8c:85:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b6f2ba4c729a77c38f66eb2fdf20d91155c12d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e1:2e:55:da:70:0b:32:1d:a0:b2:b9:f6:02: 53:74:61:dc:ab:d9:8e:5f:3f:89:c9:e7:76:28:64: 47:25:a4:ba:1e:86:f7:81:46:23:b1:e2:b7:35:16: 64:05:66:7e:19:4f:32:e7:b9:b1:e6:25:b3:e3:9f: c0:5f:10:7c:00:b3:b2:0e:a3:86:eb:ce:60:93:46: 06:b5:41:c2:9b:14:63:cc:ab:c4:43:80:3d:d4:28: d0:48:9f:98:0d:5f:c6:c9:82:32:9f:23:ec:dc:a8: 4f:2a:57:b8:0f:0a:84:2b:9f:21:25:88:b0:fd:1b: 80:fd:0c:17:db:7d:88:ed:3d:33:8d:af:c6:59:45: 77:07:8e:08:f3:08:5e:61:9d:49:3d:ef:39:f2:1b: c6:6a:a6:4b:d7:b4:9e:79:e3:33:93:45:b6:98:6b: 0e:10:b8:6a:0c:0c:b2:c9:29:c6:47:47:b4:70:71: 31:df:e1:10:20:9f:e7:1a:77:4d:75:4d:59:54:15: c2:b8:b9:1d:6c:7a:67:d8:e2:55:58:b2:d9:df:2d: 18:6f:5a:9e:a0:4d:9f:30:55:69:c3:83:bf:a0:02: 92:f3:81:de:72:8d:fc:af:ca:4b:50:5b:21:2c:73: e3:c8:a6:57:a1:62:1c:36:27:d8:90:23:76:25:b2: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6F:2B:A4:C7:29:A7:7C:38:F6:6E:B2:FD:F2:0D:91:15:5C:12:D3 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/S28rpMcpp3w49m6y_fINkRVcEtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.138.0/24 45.10.108.0/24 45.133.32.0/22 77.83.80.0/24 185.235.247.0/24 193.9.126.0/24 Signature Algorithm: sha256WithRSAEncryption 19:b1:3a:98:69:a5:8d:b9:63:88:01:d2:3c:69:23:e2:22:89: f4:1c:b4:cd:fe:35:a8:9b:e4:e3:8b:18:8d:78:93:8d:31:bc: e2:04:34:3c:28:c6:2d:c4:58:75:b9:08:13:74:8e:fd:7a:06: 50:8a:2d:fc:5e:d7:03:5d:34:8f:63:01:a4:40:33:63:d3:31: 09:d4:f1:fc:6b:a4:c3:be:4e:0d:0b:d9:8a:c2:77:d1:a7:cd: 74:75:a6:ed:d9:5a:64:dc:70:ad:81:63:c2:38:de:c1:cd:d1: 19:6b:47:32:fa:96:46:b9:37:83:23:75:1d:84:3d:54:49:91: 51:32:9e:0c:9f:7a:fe:00:90:86:b3:f6:a8:9c:55:fd:58:57: ba:8d:00:1c:93:b1:6f:8f:2a:92:06:b8:d2:53:5c:0a:2b:35: b5:3c:51:8c:e7:98:68:36:05:41:f5:00:33:2a:01:fb:5d:65: a0:51:28:5e:cb:d7:e5:fa:3a:5a:f8:b3:05:60:40:5a:3f:c8: 55:7b:27:06:bc:14:c1:ae:17:16:4d:37:72:84:bd:95:38:36: d5:6b:a3:4b:a4:5d:fe:37:1c:45:33:a8:3c:87:25:71:e1:2f: 13:7e:c5:33:bf:63:c1:32:df:bf:ad:1e:58:9d:45:69:ba:db: e2:fb:be:72 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pJYG4+YgmmpBghPCjIX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjZmMmJhNGM3MjlhNzdjMzhmNjZlYjJmZGYyMGQ5MTE1NWMxMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+EuVdpwCzIdoLK59gJTdGHcq9mO Xz+Jyed2KGRHJaS6Hob3gUYjseK3NRZkBWZ+GU8y57mx5iWz45/AXxB8ALOyDqOG 685gk0YGtUHCmxRjzKvEQ4A91CjQSJ+YDV/GyYIynyPs3KhPKle4DwqEK58hJYiw /RuA/QwX232I7T0zja/GWUV3B44I8wheYZ1JPe858hvGaqZL17SeeeMzk0W2mGsO ELhqDAyyySnGR0e0cHEx3+EQIJ/nGndNdU1ZVBXCuLkdbHpn2OJVWLLZ3y0Yb1qe oE2fMFVpw4O/oAKS84Heco38r8pLUFshLHPjyKZXoWIcNifYkCN2JbJFLQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEtvK6THKad8OPZusv3yDZEVXBLTMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvUzI4cnBNY3BwM3c0OW02eV9mSU5rUlZjRXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjiKAwQA LQpsAwQCLYUgAwQATVNQAwQAuev3AwQAwQl+MA0GCSqGSIb3DQEBCwUAA4IBAQAZ sTqYaaWNuWOIAdI8aSPiIon0HLTN/jWom+TjixiNeJONMbziBDQ8KMYtxFh1uQgT dI79egZQii38XtcDXTSPYwGkQDNj0zEJ1PH8a6TDvk4NC9mKwnfRp810dabt2Vpk 3HCtgWPCON7BzdEZa0cy+pZGuTeDI3UdhD1USZFRMp4Mn3r+AJCGs/aonFX9WFe6 jQAck7FvjyqSBrjSU1wKKzW1PFGM55hoNgVB9QAzKgH7XWWgUShey9fl+jpa+LMF YEBaP8hVeycGvBTBrhcWTTdyhL2VODbVa6NLpF3+NxxFM6g8hyVx4S8TfsUzv2PB Mt+/rR5YnUVputvi+75y -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:22 2026 by rpki-client