This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa File: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (raw, json) Hash identifier: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E= Subject key identifier: 71:B9:26:4A:FE:00:F0:4E:EA:76:91:A7:20:0F:44:57:5B:8C:4D:F2 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019B7BA3CBC3141C96DA898C4F0CF36B65E5 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa Signing time: Thu 01 Jan 2026 22:18:10 +0000 ROA not before: Thu 01 Jan 2026 22:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132399 IP address blocks: 57.191.95.0/24 maxlen: 24 57.191.96.0/19 maxlen: 24 57.191.160.0/19 maxlen: 24 57.250.49.0/24 maxlen: 24 57.250.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cb:c3:14:1c:96:da:89:8c:4f:0c:f3:6b:65:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71b9264afe00f04eea7691a7200f44575b8c4df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c0:4c:a0:77:36:7e:42:d6:01:28:96:3a:b1: b8:53:70:9d:3a:33:47:57:a7:89:4d:3a:61:55:99: ba:a0:89:bb:28:03:43:b6:0a:cf:29:01:bf:35:03: 3b:c9:9e:bf:d6:e4:0b:65:9e:9a:4e:e4:01:7b:1a: 89:b1:06:01:e3:a7:1b:f8:da:6e:a3:00:37:ca:1e: 58:65:71:39:44:25:92:24:64:5d:33:dd:70:85:24: 89:bb:a3:72:ac:9d:71:9b:d4:cf:2a:24:51:f3:0f: 68:55:61:6b:e7:b7:e5:eb:6a:73:ef:eb:d9:d7:7c: cb:19:46:82:c5:9f:a7:30:de:08:b4:71:f2:b5:6f: 80:0e:45:cc:3a:4f:91:b6:b7:eb:ef:ea:9e:89:f4: 06:d0:77:96:35:35:e3:cb:b0:e1:15:31:7f:7e:ac: 58:25:13:d7:08:fc:43:f3:2f:5f:a4:66:af:d8:6a: bc:86:7d:4a:82:db:4c:4e:3e:92:0b:f4:84:24:c6: 0c:27:1a:ca:24:7d:9f:24:a0:08:17:51:95:c8:35: 15:31:f8:2c:2b:b8:89:74:e6:fb:60:e9:70:c6:25: 3c:27:db:9a:83:e1:b8:1d:13:c9:3e:73:84:a0:4c: ee:bc:c1:7e:10:48:82:73:c6:5d:ce:c2:df:7e:f4: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:26:4A:FE:00:F0:4E:EA:76:91:A7:20:0F:44:57:5B:8C:4D:F2 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.191.95.0-57.191.127.255 57.191.160.0/19 57.250.49.0/24 57.250.51.0/24 Signature Algorithm: sha256WithRSAEncryption 49:5a:43:7d:c6:4b:92:2d:d2:42:8b:cf:7c:83:7c:67:e1:5d: a8:79:02:b0:a4:21:12:39:58:1e:0b:96:43:5a:fe:79:ca:51: 2c:38:16:29:7f:68:74:8c:d7:76:1c:ef:d1:b9:b8:81:0b:b1: 63:78:dd:ec:0c:71:14:2b:e6:e6:2b:4f:3a:d1:99:bb:0a:12: b1:2f:60:4d:f8:c1:cb:b4:a0:cf:5e:35:6f:10:99:8a:15:49: 92:08:20:2a:5a:fb:c9:f2:a4:e0:a0:ff:51:73:dc:1d:3d:2e: 50:c4:d5:98:01:ab:b0:7e:14:9c:2a:ca:26:d2:ab:83:d5:00: 62:e0:4e:f9:09:15:23:cd:c6:6d:3e:3f:5d:de:c8:68:7f:f9: f2:14:aa:a8:12:c3:59:7c:62:87:72:37:12:d1:60:66:22:d4: fa:61:77:0d:e8:12:f6:74:b3:df:1c:83:79:53:3d:62:d2:b0: 55:74:de:24:5c:15:2e:c6:6f:3a:a8:36:2b:34:08:a9:b8:c7: 23:3f:e9:8f:48:33:46:4c:5e:08:1e:f7:7f:e4:a8:c7:80:80: 88:48:7e:15:e9:b6:09:8d:1f:25:be:7b:f6:d1:4f:d8:bb:dc: d5:61:23:a6:12:0d:43:38:ad:bb:26:65:52:ba:77:04:6a:f9: 89:2b:7d:20 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7o8vDFByW2omMTwzza2XlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWI5MjY0YWZlMDBmMDRlZWE3NjkxYTcyMDBmNDQ1NzViOGM0ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisBMoHc2fkLWASiWOrG4U3CdOjNH V6eJTTphVZm6oIm7KANDtgrPKQG/NQM7yZ6/1uQLZZ6aTuQBexqJsQYB46cb+Npu owA3yh5YZXE5RCWSJGRdM91whSSJu6NyrJ1xm9TPKiRR8w9oVWFr57fl62pz7+vZ 13zLGUaCxZ+nMN4ItHHytW+ADkXMOk+Rtrfr7+qeifQG0HeWNTXjy7DhFTF/fqxY JRPXCPxD8y9fpGav2Gq8hn1KgttMTj6SC/SEJMYMJxrKJH2fJKAIF1GVyDUVMfgs K7iJdOb7YOlwxiU8J9uag+G4HRPJPnOEoEzuvMF+EEiCc8ZdzsLffvTKKwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHG5Jkr+APBO6naRpyAPRFdbjE3yMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvY2JrbVN2NEE4RTdxZHBHbklBOUVWMXVNVGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAA5v18D BAc5vwADBAU5v6ADBAA5+jEDBAA5+jMwDQYJKoZIhvcNAQELBQADggEBAElaQ33G S5It0kKLz3yDfGfhXah5ArCkIRI5WB4LlkNa/nnKUSw4Fil/aHSM13Yc79G5uIEL sWN43ewMcRQr5uYrTzrRmbsKErEvYE34wcu0oM9eNW8QmYoVSZIIICpa+8nypOCg /1Fz3B09LlDE1ZgBq7B+FJwqyibSq4PVAGLgTvkJFSPNxm0+P13eyGh/+fIUqqgS w1l8YodyNxLRYGYi1Pphdw3oEvZ0s98cg3lTPWLSsFV03iRcFS7GbzqoNis0CKm4 xyM/6Y9IM0ZMXgge93/kqMeAgIhIfhXptgmNHyW+e/bRT9i73NVhI6YSDUM4rbsm ZVK6dwRq+YkrfSA= -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:03 2026 by rpki-client