This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/n28cYCSgTnP520B781yYlApy_Gg.roa File: n28cYCSgTnP520B781yYlApy_Gg.roa (raw, json) Hash identifier: oPppogarovRMmUPnZholMB6dsQYDDsQ39+mpcmiwa7k= Subject key identifier: 9F:6F:1C:60:24:A0:4E:73:F9:DB:40:7B:F3:5C:98:94:0A:72:FC:68 Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0 Certificate serial: 019B7C131E957FA59DD40D4C0443120F9E9B Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/n28cYCSgTnP520B781yYlApy_Gg.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57722 IP address blocks: 185.248.172.0/22 maxlen: 22 185.248.172.0/24 maxlen: 24 185.248.173.0/24 maxlen: 24 185.248.174.0/24 maxlen: 24 185.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1e:95:7f:a5:9d:d4:0d:4c:04:43:12:0f:9e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f6f1c6024a04e73f9db407bf35c98940a72fc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:ee:fd:0c:fb:bf:3a:4c:8e:99:da:6c:5c: 5f:c5:83:e9:4c:13:5d:bb:27:dd:e9:8f:68:73:d1: 5f:7a:d6:ad:7a:ba:f8:8d:4f:1a:38:14:c9:2f:b4: a4:1e:81:9b:e9:7e:b3:4e:3d:83:57:aa:4d:bb:4b: 68:3d:5d:75:63:26:25:d7:2c:e5:62:5a:79:a2:dd: 6e:bd:95:4d:9c:4f:53:b7:c7:0a:0d:47:c1:f8:ea: db:14:ba:e6:df:e3:98:c8:a6:ee:92:3b:68:dd:fc: ba:2a:83:93:a0:60:27:f6:64:6d:20:39:6a:92:d0: 18:b5:c2:58:ef:c0:6d:a2:a4:c3:91:bc:a7:49:8d: 80:12:98:32:0f:83:56:65:3a:4c:51:77:45:96:db: 0d:db:1c:31:45:e4:16:9a:fd:03:b2:60:91:2d:59: f7:07:bb:f9:79:ed:51:6c:56:69:ed:65:cd:ca:62: 0b:d2:16:ca:37:82:2c:08:63:da:d6:42:cf:bb:23: 12:69:c4:15:a0:ae:71:02:b7:19:14:68:f4:a3:d7: 9f:4f:06:32:0e:ce:2b:06:60:3f:ee:c2:f0:91:63: 8a:b9:12:1a:12:fc:03:15:2a:64:5f:70:5d:71:d9: ac:1b:e3:b0:05:14:34:6d:69:07:63:6e:82:4c:82: d2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6F:1C:60:24:A0:4E:73:F9:DB:40:7B:F3:5C:98:94:0A:72:FC:68 X509v3 Authority Key Identifier: keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/n28cYCSgTnP520B781yYlApy_Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.172.0/22 Signature Algorithm: sha256WithRSAEncryption a1:1e:4f:1a:90:91:a0:96:77:00:59:2b:45:79:d8:93:a7:b4: d8:a6:ec:45:bb:ec:31:a9:e8:72:d4:fd:b6:67:6c:78:1e:a7: ee:b9:b8:3e:b5:d3:ea:05:2c:f1:bf:f5:c4:2f:c7:fb:a6:ad: e9:66:f6:a7:e6:6d:3e:23:6f:5b:d1:78:35:73:31:f2:7c:53: 3b:15:90:df:8b:89:96:fa:dd:cb:09:06:34:e0:16:0f:03:d1: 6e:55:09:39:c8:15:5e:50:ea:9e:22:8d:36:2b:2a:38:a0:9f: 6b:04:94:2a:d9:cb:35:cc:f8:26:42:93:8c:f7:8c:22:02:64: e7:f4:c6:e4:2e:ca:72:2b:38:70:74:51:4d:8d:82:bb:61:05: 45:02:9a:32:ca:8f:fb:3d:61:46:2d:3f:96:77:1b:40:34:59: 9f:d4:3c:b6:55:4a:d1:76:59:75:89:c9:6e:97:59:6c:5e:13: ce:bb:e3:f2:c2:b1:88:ac:41:73:62:51:3c:60:c4:b8:25:38: 84:7c:fc:df:69:da:a5:82:69:4b:ac:c5:e9:6d:d4:cf:60:fb: 4c:78:64:98:82:d7:aa:2d:95:7c:ea:4e:10:1c:17:3d:a2:48: 04:08:e1:fb:a4:98:f4:59:32:3f:73:fd:63:f7:61:dc:b1:44: dd:49:20:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ex6Vf6Wd1A1MBEMSD56bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjVhZDJiNGU3MzhmNTQyZmEwZTY4MTM4ZjM2MjY2NDQx ZTI5YTAwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjZmMWM2MDI0YTA0ZTczZjlkYjQwN2JmMzVjOTg5NDBhNzJmYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC/u/Qz7vzpMjpnabFxfxYPpTBNd uyfd6Y9oc9Ffetaterr4jU8aOBTJL7SkHoGb6X6zTj2DV6pNu0toPV11YyYl1yzl Ylp5ot1uvZVNnE9Tt8cKDUfB+OrbFLrm3+OYyKbukjto3fy6KoOToGAn9mRtIDlq ktAYtcJY78BtoqTDkbynSY2AEpgyD4NWZTpMUXdFltsN2xwxReQWmv0DsmCRLVn3 B7v5ee1RbFZp7WXNymIL0hbKN4IsCGPa1kLPuyMSacQVoK5xArcZFGj0o9efTwYy Ds4rBmA/7sLwkWOKuRIaEvwDFSpkX3BdcdmsG+OwBRQ0bWkHY26CTILSewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9vHGAkoE5z+dtAe/NcmJQKcvxoMB8GA1UdIwQY MBaAFFRlrStOc49UL6DmgTjzYmZEHimgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMt MGQzYWQzNmViMTYxLzEvbjI4Y1lDU2dUblA1MjBCNzgxeVlsQXB5X0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMtMGQzYWQzNmViMTYx LzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufisMA0G CSqGSIb3DQEBCwUAA4IBAQChHk8akJGglncAWStFediTp7TYpuxFu+wxqehy1P22 Z2x4Hqfuubg+tdPqBSzxv/XEL8f7pq3pZvan5m0+I29b0Xg1czHyfFM7FZDfi4mW +t3LCQY04BYPA9FuVQk5yBVeUOqeIo02Kyo4oJ9rBJQq2cs1zPgmQpOM94wiAmTn 9MbkLspyKzhwdFFNjYK7YQVFApoyyo/7PWFGLT+WdxtANFmf1Dy2VUrRdll1iclu l1lsXhPOu+PywrGIrEFzYlE8YMS4JTiEfPzfadqlgmlLrMXpbdTPYPtMeGSYgteq LZV86k4QHBc9okgECOH7pJj0WTI/c/1j92HcsUTdSSAw -----END CERTIFICATE-----Generated at Mon Jan 12 07:35:47 2026 by rpki-client