This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa File: aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa (raw, json) Hash identifier: R+3z3be5a6cpJXKXgxNcsq7jkEToT3RKyUkCWxn8eBI= Subject key identifier: 68:51:F7:C9:93:82:06:FB:F4:A7:02:13:9F:EA:23:38:EF:6E:E7:F6 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019B7BA3CD2504FB048178AD925F36F425E0 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206433 IP address blocks: 57.190.0.0/19 maxlen: 19 57.190.0.0/20 maxlen: 20 57.190.16.0/24 maxlen: 24 57.190.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cd:25:04:fb:04:81:78:ad:92:5f:36:f4:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6851f7c9938206fbf4a702139fea2338ef6ee7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:07:80:0a:3c:66:ba:9e:a6:00:bd:ab:2a: a5:35:b9:ba:27:b6:79:60:43:8f:e5:9b:0a:27:68: 93:0c:0f:fe:9f:94:25:f4:02:20:61:dc:bb:b3:76: e7:43:98:cc:5e:19:d0:db:e1:77:d8:f0:03:bb:5f: 14:6e:d4:d8:1b:9e:75:75:dc:04:de:e6:81:5b:44: a8:69:09:f7:18:f0:7d:f7:dd:e8:d7:65:15:18:c1: 21:0e:3f:cd:93:1b:af:fb:ce:3f:a7:d0:7b:b0:95: cc:60:02:1f:14:fa:b7:ca:2e:00:ea:ba:51:f8:db: 0e:f3:53:a8:11:36:f4:4f:8e:ae:fe:a9:0c:e5:5e: 80:ff:c5:a2:43:ff:f1:b3:1e:30:3b:d2:8a:26:03: e1:97:2f:de:40:e8:b8:f6:29:87:d0:ac:e3:d2:5d: ec:7c:e2:2e:e2:45:3a:25:aa:31:11:2f:b3:51:71: 13:b9:f0:c1:31:cd:7f:36:3f:a7:3d:3b:68:6c:da: 89:b7:4d:35:21:4b:ed:72:c2:ab:d6:b6:8e:83:a5: 8a:88:00:c0:7e:9e:4b:51:c5:9b:db:19:6d:c3:0b: 05:cd:60:33:24:fe:97:e1:6d:d7:4c:64:82:9e:b0: 72:68:a2:a6:67:ab:a6:d1:46:70:5d:16:14:a3:a4: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:51:F7:C9:93:82:06:FB:F4:A7:02:13:9F:EA:23:38:EF:6E:E7:F6 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.190.0.0/19 Signature Algorithm: sha256WithRSAEncryption 97:57:16:51:4e:42:6a:95:f0:60:96:7a:83:97:82:6b:0c:0a: eb:43:8a:f8:50:c7:39:2f:bf:f1:fb:aa:3c:6f:91:54:58:3b: f9:bd:83:d9:77:f1:12:a4:0c:f0:09:c3:2c:35:b5:52:19:df: a2:fc:85:86:5c:e7:0a:17:44:e6:14:35:79:12:6c:52:84:f3: 7b:d8:26:4b:e9:07:47:44:02:15:6c:0b:d6:fa:88:0e:49:2b: 58:61:78:7a:b9:eb:35:79:c9:be:39:43:24:ab:28:d7:cf:84: 18:39:ad:5a:02:84:f0:f4:e3:dc:d9:17:a9:38:45:8c:a1:89: 5a:37:65:2b:4a:73:d4:76:d2:de:ae:70:7d:9b:ef:20:bf:d6: ed:fb:31:89:78:0d:b1:61:2e:fb:80:f2:9a:da:4a:79:b2:71: 59:79:14:db:af:6d:0f:52:58:e2:72:44:2e:33:cc:8e:72:13: 9d:e6:d5:33:30:48:8a:dd:76:59:ee:0d:24:45:c4:97:5f:a1: 11:ed:7c:64:fe:f7:9e:d4:e1:38:aa:6a:89:04:0c:cd:f0:1e: b2:c8:40:4d:5a:42:c4:fb:22:e8:a4:10:7f:0f:7f:b1:6a:9e: ed:89:35:86:43:1f:e0:c9:c7:52:80:98:c1:c3:cb:63:fb:69: 76:1b:26:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o80lBPsEgXitkl829CXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODUxZjdjOTkzODIwNmZiZjRhNzAyMTM5ZmVhMjMzOGVmNmVlN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJsHgAo8ZrqepgC9qyqlNbm6J7Z5 YEOP5ZsKJ2iTDA/+n5Ql9AIgYdy7s3bnQ5jMXhnQ2+F32PADu18UbtTYG551ddwE 3uaBW0SoaQn3GPB9993o12UVGMEhDj/Nkxuv+84/p9B7sJXMYAIfFPq3yi4A6rpR +NsO81OoETb0T46u/qkM5V6A/8WiQ//xsx4wO9KKJgPhly/eQOi49imH0Kzj0l3s fOIu4kU6JaoxES+zUXETufDBMc1/Nj+nPTtobNqJt001IUvtcsKr1raOg6WKiADA fp5LUcWb2xltwwsFzWAzJP6X4W3XTGSCnrByaKKmZ6um0UZwXRYUo6TEzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhR98mTggb79KcCE5/qIzjvbuf2MB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvYUZIM3laT0NCdnYwcHdJVG4tb2pPTzl1NV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFOb4AMA0G CSqGSIb3DQEBCwUAA4IBAQCXVxZRTkJqlfBglnqDl4JrDArrQ4r4UMc5L7/x+6o8 b5FUWDv5vYPZd/ESpAzwCcMsNbVSGd+i/IWGXOcKF0TmFDV5EmxShPN72CZL6QdH RAIVbAvW+ogOSStYYXh6ues1ecm+OUMkqyjXz4QYOa1aAoTw9OPc2RepOEWMoYla N2UrSnPUdtLernB9m+8gv9bt+zGJeA2xYS77gPKa2kp5snFZeRTbr20PUljickQu M8yOchOd5tUzMEiK3XZZ7g0kRcSXX6ER7Xxk/vee1OE4qmqJBAzN8B6yyEBNWkLE +yLopBB/D3+xap7tiTWGQx/gycdSgJjBw8tj+2l2GyaV -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:29 2026 by rpki-client