This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/RbsL-xX9pnl_GJm6Gej-Q9zwFsY.roa File: RbsL-xX9pnl_GJm6Gej-Q9zwFsY.roa (raw, json) Hash identifier: HJuDMuVxi+H4ewMQ1fnqz3XBNzngnt1KBgq67N7yx5o= Subject key identifier: 45:BB:0B:FB:15:FD:A6:79:7F:18:99:BA:19:E8:FE:43:DC:F0:16:C6 Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Certificate serial: 019B7B353DF7782B1BA9CA871D7C09BA10CF Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/RbsL-xX9pnl_GJm6Gej-Q9zwFsY.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208848 IP address blocks: 37.60.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3d:f7:78:2b:1b:a9:ca:87:1d:7c:09:ba:10:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45bb0bfb15fda6797f1899ba19e8fe43dcf016c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:bd:93:61:8e:80:23:ed:78:d1:09:54:9c: 32:a5:6a:76:47:04:6d:31:fa:d2:bb:d6:86:64:75: 09:04:3b:ae:c6:e5:89:43:2d:19:64:9f:58:94:bf: b2:84:30:b9:1a:5e:e1:65:c7:3a:c6:3e:5b:da:71: b1:0c:b1:1f:7c:d1:bb:4e:ce:60:95:a7:79:30:0a: 18:87:af:98:d8:9b:25:0d:7e:e8:0e:2e:9c:54:b7: 8c:6d:7a:fb:89:18:39:cb:95:0f:48:5e:00:11:72: 83:33:66:be:99:f4:f9:93:1a:a0:47:f6:49:5d:8f: 63:fa:1c:75:ad:b8:86:6a:30:bd:48:f5:87:78:ba: 96:76:bc:b9:7a:60:95:2d:bb:7e:19:de:9a:e6:9c: 61:1e:fa:81:a5:15:d5:d1:66:02:9b:90:c2:86:0c: a2:53:29:5f:c4:b2:da:ca:48:85:21:54:76:23:da: 20:bf:03:9c:1d:2d:49:27:b6:7c:2e:1b:1e:b7:24: 4c:99:37:49:e4:12:85:bd:40:d1:cc:ba:7c:2c:76: 6a:f8:14:f5:4d:f8:6e:eb:92:a4:4d:de:ba:c1:85: 5e:17:ef:57:92:e1:34:45:98:7c:6c:b5:33:06:17: dd:ab:76:ea:ac:ac:df:64:2f:36:ff:74:52:8d:3b: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BB:0B:FB:15:FD:A6:79:7F:18:99:BA:19:E8:FE:43:DC:F0:16:C6 X509v3 Authority Key Identifier: keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/RbsL-xX9pnl_GJm6Gej-Q9zwFsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:a5:c8:d9:65:b4:de:7a:0a:8d:b7:5c:d4:0a:a9:b3:43:a8: d1:f5:a3:90:11:cc:96:a3:2a:9b:1f:c9:f4:c6:9d:e7:b8:6b: 90:97:d9:66:09:69:4a:e8:5a:c1:33:97:34:99:dc:22:61:9d: 8e:06:60:4b:30:fe:95:99:29:ca:df:fe:76:b5:c2:c0:38:62: 2d:e5:a3:10:99:57:4e:56:c5:6f:7a:29:08:51:a5:88:d5:f8: f2:95:e9:94:9d:01:1f:43:7a:2f:2f:6f:69:a5:94:02:87:48: 91:7a:24:4a:0c:ef:07:9c:40:5b:eb:32:98:cd:e8:61:0a:d1: e5:97:f8:c8:28:ad:5f:ef:16:a8:3d:05:2e:0e:d5:14:57:52: 99:9d:57:42:f2:23:f4:9c:9f:70:ed:41:4a:65:82:f3:fa:a1: a6:32:44:be:9e:1a:07:3e:e8:94:8a:9d:a7:bb:36:15:51:8f: 5e:e7:c5:02:01:63:d5:5a:0b:ce:c3:37:09:c3:63:b7:8b:12: 71:a3:f2:b8:dd:5b:4f:77:e0:e3:de:18:2a:0d:bf:12:d1:78: fa:aa:7d:0a:8a:40:c8:fc:e7:05:66:0e:d1:f0:db:1a:63:e9: 25:88:93:f8:3e:d1:66:b9:f3:07:e8:b3:d9:5a:7d:a6:ef:09: c9:af:d0:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NT33eCsbqcqHHXwJuhDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZThkOTU5ZjFjOTU2NGEzM2YyOGZlNDRhYjYxNGI4ZjYy YjAwMWIwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWJiMGJmYjE1ZmRhNjc5N2YxODk5YmExOWU4ZmU0M2RjZjAxNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuy9k2GOgCPteNEJVJwypWp2RwRt MfrSu9aGZHUJBDuuxuWJQy0ZZJ9YlL+yhDC5Gl7hZcc6xj5b2nGxDLEffNG7Ts5g lad5MAoYh6+Y2JslDX7oDi6cVLeMbXr7iRg5y5UPSF4AEXKDM2a+mfT5kxqgR/ZJ XY9j+hx1rbiGajC9SPWHeLqWdry5emCVLbt+Gd6a5pxhHvqBpRXV0WYCm5DChgyi UylfxLLaykiFIVR2I9ogvwOcHS1JJ7Z8LhsetyRMmTdJ5BKFvUDRzLp8LHZq+BT1 Tfhu65KkTd66wYVeF+9XkuE0RZh8bLUzBhfdq3bqrKzfZC82/3RSjTu4LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEW7C/sV/aZ5fxiZuhno/kPc8BbGMB8GA1UdIwQY MBaAFMfo2VnxyVZKM/KP5Eq2FLj2KwAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAt YjFjOWI3ODlhYWE5LzEvUmJzTC14WDlwbmxfR0ptNkdlai1ROXp3RnNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAtYjFjOWI3ODlhYWE5 LzEveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTwcMA0G CSqGSIb3DQEBCwUAA4IBAQAfpcjZZbTeegqNt1zUCqmzQ6jR9aOQEcyWoyqbH8n0 xp3nuGuQl9lmCWlK6FrBM5c0mdwiYZ2OBmBLMP6VmSnK3/52tcLAOGIt5aMQmVdO VsVveikIUaWI1fjylemUnQEfQ3ovL29ppZQCh0iReiRKDO8HnEBb6zKYzehhCtHl l/jIKK1f7xaoPQUuDtUUV1KZnVdC8iP0nJ9w7UFKZYLz+qGmMkS+nhoHPuiUip2n uzYVUY9e58UCAWPVWgvOwzcJw2O3ixJxo/K43VtPd+Dj3hgqDb8S0Xj6qn0KikDI /OcFZg7R8NsaY+kliJP4PtFmufMH6LPZWn2m7wnJr9D3 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:49 2026 by rpki-client