This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa File: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (raw, json) Hash identifier: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak= Subject key identifier: 68:1D:02:16:3E:C7:85:96:29:A7:87:9B:A5:58:56:08:0C:84:F9:9A Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019B797EA14ED1F64E3C70DC14700BF26573 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3741 IP address blocks: 192.109.144.0/24 maxlen: 24 2a07:8146::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a1:4e:d1:f6:4e:3c:70:dc:14:70:0b:f2:65:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=681d02163ec7859629a7879ba55856080c84f99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:f1:06:fb:92:38:76:85:a6:5a:40:7f:84: 63:d5:65:56:61:8e:e1:eb:48:c4:56:4f:ea:bd:bb: 6e:92:8e:2d:dd:80:53:ea:ec:4b:fa:43:a3:f7:5f: 9c:cf:e4:99:17:d5:6d:a5:80:30:9a:e7:a7:43:94: cd:21:84:13:94:5c:40:3c:1c:6b:24:e7:3d:a2:62: f0:c1:74:04:03:f6:8b:26:e9:aa:4e:32:77:58:20: e5:f6:89:cc:b3:45:fd:1e:af:fb:a8:bb:18:20:e9: a5:5b:55:9e:49:84:eb:0b:d8:20:d4:0d:57:b0:b0: 8a:4e:0e:13:18:d2:65:21:88:7f:da:8b:4a:03:cc: 73:a2:69:8a:8b:58:0f:d8:07:dd:e5:78:f8:41:40: f0:40:21:2d:41:72:05:5a:1a:e0:b4:f7:5b:cf:8b: e0:a5:2d:bc:37:ec:d4:d4:71:b4:ed:ea:dd:fe:e2: 05:b9:69:ed:8c:1f:22:60:53:d5:5a:1f:c8:42:4d: 0b:8b:1f:1f:fe:70:48:82:50:6c:da:bf:ec:57:ca: d4:15:df:33:b2:73:5a:ac:f9:42:5d:e4:da:ed:a0: 21:5e:ad:03:45:e5:9a:86:c6:34:c9:c8:ef:bb:82: 79:eb:2f:5d:8f:08:14:89:20:62:b6:f2:41:03:61: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:02:16:3E:C7:85:96:29:A7:87:9B:A5:58:56:08:0C:84:F9:9A X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.144.0/24 IPv6: 2a07:8146::/36 Signature Algorithm: sha256WithRSAEncryption 59:38:10:6d:df:20:3f:89:3d:2f:06:98:16:cd:fb:84:eb:10: 85:f1:e2:d0:67:a3:07:a0:55:03:29:eb:a7:86:cf:47:0c:5c: ae:34:fb:54:b8:a5:76:55:a0:d4:e1:6c:af:d3:30:fa:f5:0a: 3e:9a:fd:68:31:7e:bd:65:34:aa:46:87:fb:e8:c9:64:d6:bf: f3:29:2f:0e:50:e0:10:f6:77:0d:4b:1a:f7:06:45:fd:b4:e0: 40:0e:c9:ca:45:bb:3b:ac:9f:6a:b2:4b:07:ba:e4:30:0d:87: db:33:df:d0:b9:c0:95:d6:73:90:77:63:1c:ed:88:ec:30:f7: c5:01:71:96:c7:65:8b:4b:b1:00:d5:90:ea:6b:95:af:fd:58: 76:46:5d:80:d5:cf:74:e3:c8:43:c7:d4:9f:a8:b9:82:13:2a: af:54:74:38:f0:a3:3e:ae:55:e1:fd:72:ac:6e:57:a4:63:46: c2:92:60:30:44:f2:60:bc:98:b6:e4:df:79:32:9c:be:67:70: 6e:43:c5:66:d9:16:06:a2:4f:ea:f8:53:0d:7e:24:4d:08:f3: 9c:ca:29:bb:35:9c:da:a1:18:25:03:24:c4:5a:74:78:30:48: 9f:ad:33:ca:ad:e4:ac:de:61:98:ac:67:a1:62:e5:d8:16:4b: d5:c6:dc:aa -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fqFO0fZOPHDcFHAL8mVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODFkMDIxNjNlYzc4NTk2MjlhNzg3OWJhNTU4NTYwODBjODRmOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8vxBvuSOHaFplpAf4Rj1WVWYY7h 60jEVk/qvbtuko4t3YBT6uxL+kOj91+cz+SZF9VtpYAwmuenQ5TNIYQTlFxAPBxr JOc9omLwwXQEA/aLJumqTjJ3WCDl9onMs0X9Hq/7qLsYIOmlW1WeSYTrC9gg1A1X sLCKTg4TGNJlIYh/2otKA8xzommKi1gP2Afd5Xj4QUDwQCEtQXIFWhrgtPdbz4vg pS28N+zU1HG07erd/uIFuWntjB8iYFPVWh/IQk0Lix8f/nBIglBs2r/sV8rUFd8z snNarPlCXeTa7aAhXq0DReWahsY0ycjvu4J56y9djwgUiSBitvJBA2HomQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGgdAhY+x4WWKaeHm6VYVggMhPmaMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvYUIwQ0ZqN0hoWllwcDRlYnBWaFdDQXlFLVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwG2QMA4E AgACMAgDBgQqB4FGADANBgkqhkiG9w0BAQsFAAOCAQEAWTgQbd8gP4k9LwaYFs37 hOsQhfHi0GejB6BVAynrp4bPRwxcrjT7VLildlWg1OFsr9Mw+vUKPpr9aDF+vWU0 qkaH++jJZNa/8ykvDlDgEPZ3DUsa9wZF/bTgQA7JykW7O6yfarJLB7rkMA2H2zPf 0LnAldZzkHdjHO2I7DD3xQFxlsdli0uxANWQ6muVr/1YdkZdgNXPdOPIQ8fUn6i5 ghMqr1R0OPCjPq5V4f1yrG5XpGNGwpJgMETyYLyYtuTfeTKcvmdwbkPFZtkWBqJP 6vhTDX4kTQjznMopuzWc2qEYJQMkxFp0eDBIn60zyq3krN5hmKxnoWLl2BZL1cbc qg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:16 2026 by rpki-client