This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/aBBjIklmYlMWX-vmbHGnuwsWD2M.roa File: aBBjIklmYlMWX-vmbHGnuwsWD2M.roa (raw, json) Hash identifier: +tC+W98mtUX2QstLidBAPcpltrAwZl6PNr50mq8krSU= Subject key identifier: 68:10:63:22:49:66:62:53:16:5F:EB:E6:6C:71:A7:BB:0B:16:0F:63 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019B7F83E8E9D92CFD17FF85ACA4758BE9C2 Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/aBBjIklmYlMWX-vmbHGnuwsWD2M.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208900 IP address blocks: 95.160.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e8:e9:d9:2c:fd:17:ff:85:ac:a4:75:8b:e9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6810632249666253165febe66c71a7bb0b160f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:45:c3:c3:74:dc:a1:cc:8c:7b:b7:ff:c9: 9b:f2:d4:8d:5d:03:1b:d1:ae:13:71:bb:1d:bb:48: 74:6b:37:ff:5b:74:95:31:c4:25:5b:6a:ea:df:43: cf:7d:70:19:fe:1e:2d:01:2f:17:70:36:48:a0:75: f1:4a:42:06:de:16:ec:2b:c8:be:60:88:76:7e:cf: 8e:db:88:55:72:8e:41:7c:ea:2a:4f:fa:d7:da:e5: 29:71:ab:44:40:d9:5a:82:78:55:32:7a:1e:52:3f: f0:a1:dd:bf:cc:30:6b:e8:aa:21:8c:d7:11:88:2a: e1:fe:1d:92:17:f8:74:65:8f:32:67:1f:2f:a4:d8: 6c:00:8f:50:5e:9a:10:ec:d0:2b:ee:58:bb:3b:34: 8b:b9:ea:1a:96:65:a4:9f:4e:de:01:ff:90:91:5b: 18:cf:08:32:bb:ed:ef:af:49:0a:09:84:e8:de:c0: ab:ba:91:83:c4:1b:42:2a:d5:f7:96:a1:66:7c:99: e1:c2:a3:d1:51:a6:cf:51:58:50:01:d1:96:95:cf: d4:8e:49:41:18:2b:06:25:a9:ff:06:6d:13:9e:b2: 38:c2:16:93:13:43:7c:b7:6a:ed:f9:77:40:f6:31: 3f:0c:f7:d9:96:f7:2d:18:4b:65:d0:fe:c4:20:91: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:10:63:22:49:66:62:53:16:5F:EB:E6:6C:71:A7:BB:0B:16:0F:63 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/aBBjIklmYlMWX-vmbHGnuwsWD2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.160.57.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:3c:00:1f:0d:c1:52:b1:ee:11:b0:b9:6a:6f:08:f1:58:e1: ed:06:72:d3:c2:11:1d:71:64:50:b1:69:a5:14:57:7d:96:1e: c9:96:e6:6e:84:6a:21:78:6e:57:6e:b3:52:66:b1:c8:a5:b4: 97:47:64:ae:9c:86:be:17:93:31:ec:b2:00:ad:7e:42:ef:ff: 7e:60:7c:67:16:6f:a0:33:95:03:f1:eb:6f:86:94:c8:85:6c: 3d:49:bc:7f:aa:7d:74:c1:3e:d6:12:73:a4:ff:ba:b6:ce:3e: 98:9b:36:a9:cb:4f:fd:f3:67:07:3f:12:52:7d:f2:8f:a9:59: 2c:08:f2:08:23:6e:d3:52:0d:d0:92:7c:63:cf:5f:85:11:fc: df:6b:4a:1f:ed:65:fa:30:73:c2:bc:1d:3c:dc:da:72:85:10: 78:e0:9e:84:cf:fd:c5:8e:46:c4:d3:e7:82:7d:18:50:a4:e1: f0:ee:fe:2b:18:32:bf:fe:4e:ad:e2:55:e3:fb:00:4d:d9:b8: f9:f6:db:b3:5a:d7:e8:57:57:fb:de:93:fd:06:2f:a1:f1:03: 0a:81:08:36:a6:da:9c:8a:36:3e:b6:b4:46:f7:62:30:cf:90: c3:a7:0c:e3:b2:a2:c8:ec:6e:6d:3d:8c:1d:ee:c7:98:04:d1: b9:10:02:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+jp2Sz9F/+FrKR1i+nCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODEwNjMyMjQ5NjY2MjUzMTY1ZmViZTY2YzcxYTdiYjBiMTYwZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBFw8N03KHMjHu3/8mb8tSNXQMb 0a4Tcbsdu0h0azf/W3SVMcQlW2rq30PPfXAZ/h4tAS8XcDZIoHXxSkIG3hbsK8i+ YIh2fs+O24hVco5BfOoqT/rX2uUpcatEQNlagnhVMnoeUj/wod2/zDBr6KohjNcR iCrh/h2SF/h0ZY8yZx8vpNhsAI9QXpoQ7NAr7li7OzSLueoalmWkn07eAf+QkVsY zwgyu+3vr0kKCYTo3sCrupGDxBtCKtX3lqFmfJnhwqPRUabPUVhQAdGWlc/UjklB GCsGJan/Bm0TnrI4whaTE0N8t2rt+XdA9jE/DPfZlvctGEtl0P7EIJH0oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgQYyJJZmJTFl/r5mxxp7sLFg9jMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvYUJCaklrbG1ZbE1XWC12bWJIR251d3NXRDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6A5MA0G CSqGSIb3DQEBCwUAA4IBAQCKPAAfDcFSse4RsLlqbwjxWOHtBnLTwhEdcWRQsWml FFd9lh7JluZuhGoheG5XbrNSZrHIpbSXR2SunIa+F5Mx7LIArX5C7/9+YHxnFm+g M5UD8etvhpTIhWw9Sbx/qn10wT7WEnOk/7q2zj6Ymzapy0/982cHPxJSffKPqVks CPIII27TUg3Qknxjz1+FEfzfa0of7WX6MHPCvB083NpyhRB44J6Ez/3FjkbE0+eC fRhQpOHw7v4rGDK//k6t4lXj+wBN2bj59tuzWtfoV1f73pP9Bi+h8QMKgQg2ptqc ijY+trRG92Iwz5DDpwzjsqLI7G5tPYwd7seYBNG5EAIa -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:33 2026 by rpki-client