This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ABtoc5D9PBJ9hvGNTg0kzHvWuUE.roa File: ABtoc5D9PBJ9hvGNTg0kzHvWuUE.roa (raw, json) Hash identifier: LojJr81heWmB0zA9NQ5ZSPttkz7AtdWyyJUm9XwG5xQ= Subject key identifier: 00:1B:68:73:90:FD:3C:12:7D:86:F1:8D:4E:0D:24:CC:7B:D6:B9:41 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD8C55E2E1CF644FB4D979A1F7D6A Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ABtoc5D9PBJ9hvGNTg0kzHvWuUE.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214677 IP address blocks: 45.9.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d8:c5:5e:2e:1c:f6:44:fb:4d:97:9a:1f:7d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=001b687390fd3c127d86f18d4e0d24cc7bd6b941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:6b:df:fa:99:02:ac:f4:78:0e:3b:39:d6: fd:57:a1:df:47:71:00:22:44:06:25:a4:59:cf:a9: 51:a1:5a:69:02:cc:e2:75:52:49:2d:27:ad:76:0c: 8d:3f:e3:22:ce:a8:f5:d0:3e:0f:b6:ab:92:1f:6d: e9:31:fa:a7:ff:f8:fa:fc:d5:89:a9:f4:f0:3f:53: 9e:d1:e9:63:8e:a9:0d:ce:75:ac:76:24:44:61:46: a7:f5:36:f1:83:41:95:6f:0b:2e:1b:15:0f:0e:b4: 4e:0f:31:47:53:f2:9e:02:b3:b8:be:57:09:65:63: d8:4b:21:38:0d:61:c7:75:7c:87:e5:3f:e9:e2:ae: ef:62:5a:bd:99:d5:1f:28:43:e0:ea:5f:26:fd:65: 71:5c:a4:b2:ac:48:a0:ef:97:ea:eb:22:6e:d2:82: 5a:9e:03:70:bc:68:07:89:12:21:99:e5:21:e4:c0: e4:2c:1c:7c:a7:cf:d8:8f:82:96:7d:19:bd:c4:2f: 4d:58:fe:ea:92:bd:73:72:d4:e2:a7:a3:c4:f1:91: b3:21:d8:0e:08:70:a7:fc:ec:8f:04:be:95:38:82: 0a:c6:13:1f:25:60:b1:35:13:0d:89:c9:34:6d:4f: 32:93:10:cd:10:69:6a:a2:df:3b:02:32:fc:a5:4b: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1B:68:73:90:FD:3C:12:7D:86:F1:8D:4E:0D:24:CC:7B:D6:B9:41 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ABtoc5D9PBJ9hvGNTg0kzHvWuUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.2.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:83:ea:5f:a9:d4:6c:cd:ac:2b:8f:92:f5:30:c6:b6:d8:45: 5b:59:b0:b0:48:d6:58:87:d3:13:ae:5b:39:d9:4b:81:c3:86: 34:63:6d:31:f1:17:23:6d:5f:9a:3c:8c:f1:c5:da:0d:7e:53: 06:8e:78:79:b1:0e:0c:64:31:84:cc:9c:fc:92:ae:d1:f2:a5: 96:4a:59:5b:20:6b:93:f4:45:8a:b2:3d:c1:4d:04:e3:7c:b5: 2e:6f:7c:29:3a:85:05:39:a7:02:24:8e:fc:b0:0d:8a:da:e8: 70:fe:63:49:be:0d:8c:80:e0:8b:ff:81:b2:06:7f:62:a9:fc: 95:f8:df:c3:f6:5c:2d:a0:3e:0b:2c:36:35:de:03:ac:24:66: 51:ee:f6:6b:16:20:df:35:a8:8f:04:96:23:99:f5:70:aa:70: e9:53:84:bd:cc:67:2c:5e:75:f7:ae:b0:40:88:e5:8a:a6:06: 9a:bc:06:b8:cb:18:89:e5:44:93:d3:79:35:af:26:94:23:a7: 72:46:11:c5:1b:5b:f0:ee:63:93:1d:ac:b9:20:4b:38:6b:74: a7:a6:ee:76:4a:14:cd:ec:7b:ab:9e:3f:7e:6d:ea:48:e1:98: b7:b2:d8:c9:ff:f3:76:37:3a:36:05:20:ce:da:4a:92:8f:de: 19:68:bc:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tjFXi4c9kT7TZeaH31qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDFiNjg3MzkwZmQzYzEyN2Q4NmYxOGQ0ZTBkMjRjYzdiZDZiOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9dr3/qZAqz0eA47Odb9V6HfR3EA IkQGJaRZz6lRoVppAszidVJJLSetdgyNP+Mizqj10D4PtquSH23pMfqn//j6/NWJ qfTwP1Oe0eljjqkNznWsdiREYUan9Tbxg0GVbwsuGxUPDrRODzFHU/KeArO4vlcJ ZWPYSyE4DWHHdXyH5T/p4q7vYlq9mdUfKEPg6l8m/WVxXKSyrEig75fq6yJu0oJa ngNwvGgHiRIhmeUh5MDkLBx8p8/Yj4KWfRm9xC9NWP7qkr1zctTip6PE8ZGzIdgO CHCn/OyPBL6VOIIKxhMfJWCxNRMNick0bU8ykxDNEGlqot87AjL8pUv08QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAAbaHOQ/TwSfYbxjU4NJMx71rlBMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvQUJ0b2M1RDlQQko5aHZHTlRnMGt6SHZXdVVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQkCMA0G CSqGSIb3DQEBCwUAA4IBAQAug+pfqdRszawrj5L1MMa22EVbWbCwSNZYh9MTrls5 2UuBw4Y0Y20x8RcjbV+aPIzxxdoNflMGjnh5sQ4MZDGEzJz8kq7R8qWWSllbIGuT 9EWKsj3BTQTjfLUub3wpOoUFOacCJI78sA2K2uhw/mNJvg2MgOCL/4GyBn9iqfyV +N/D9lwtoD4LLDY13gOsJGZR7vZrFiDfNaiPBJYjmfVwqnDpU4S9zGcsXnX3rrBA iOWKpgaavAa4yxiJ5UST03k1ryaUI6dyRhHFG1vw7mOTHay5IEs4a3Snpu52ShTN 7Hurnj9+bepI4Zi3stjJ//N2Nzo2BSDO2kqSj94ZaLyv -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:15 2026 by rpki-client