This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/aBftrkBz6JjSHVZmS1km5TowGS0.roa File: aBftrkBz6JjSHVZmS1km5TowGS0.roa (raw, json) Hash identifier: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE= Subject key identifier: 68:17:ED:AE:40:73:E8:98:D2:1D:56:66:4B:59:26:E5:3A:30:19:2D Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7C7347F24E15E38D73AA440253BB Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/aBftrkBz6JjSHVZmS1km5TowGS0.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59797 IP address blocks: 5.160.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7c:73:47:f2:4e:15:e3:8d:73:aa:44:02:53:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6817edae4073e898d21d56664b5926e53a30192d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:98:b1:97:eb:10:79:be:3f:6d:85:11:77: 69:6b:a4:de:0a:bf:d5:2c:47:a5:81:62:d0:85:96: dd:47:f5:72:30:fb:0c:7a:44:df:ad:da:16:f6:cc: 4b:9b:c1:38:8e:f0:f1:12:2e:21:7e:24:32:c4:01: 20:aa:a7:b4:a0:0c:80:13:8f:bb:dc:44:4e:41:84: 2b:c0:e8:4b:da:c7:2e:4d:fc:38:f4:09:47:81:73: b2:df:fb:be:76:62:c2:4c:12:ce:9c:ca:5f:ea:b6: 74:00:bf:c5:2a:e3:c7:8c:d3:e7:0f:bb:73:b4:55: a4:9e:ed:39:0f:bb:9f:59:25:84:3b:f2:e7:4f:a4: 72:30:9a:52:69:78:55:e1:1b:63:26:65:27:42:dc: 74:3f:15:ee:77:07:ba:2c:ae:c0:e7:17:c2:9b:1e: 1a:d4:42:ce:66:53:26:a7:73:e9:be:b4:92:48:ca: c9:30:9b:76:ef:56:cc:aa:2a:0b:0d:a8:87:2f:41: f1:b2:2c:f6:f1:57:ad:90:8f:60:64:ed:71:0c:fd: 3e:63:2e:18:42:88:60:b1:19:d5:17:22:11:f7:5d: be:4d:f4:7b:a3:30:95:a7:07:ea:34:8f:c7:7e:3e: 3b:0b:e3:17:a3:27:59:38:05:53:aa:b7:04:22:6d: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:17:ED:AE:40:73:E8:98:D2:1D:56:66:4B:59:26:E5:3A:30:19:2D X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/aBftrkBz6JjSHVZmS1km5TowGS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.194.0/24 Signature Algorithm: sha256WithRSAEncryption 43:57:da:17:ef:90:16:98:21:dd:d5:ad:50:aa:fe:fd:eb:7a: fb:a7:f1:55:d9:3a:23:ba:8d:99:19:53:26:f8:9f:c3:e5:44: fe:10:9a:9e:f0:8e:69:95:41:13:52:2e:de:c0:d8:e8:4d:7f: c2:3b:75:62:c7:07:23:87:0d:9d:e4:f5:22:f4:59:fd:9b:f6: 6e:7c:02:f4:66:8b:f3:26:f3:2d:29:0e:11:37:72:68:4e:3c: 6d:aa:3c:8e:2c:5b:ff:dd:77:fd:0a:5f:47:6c:80:91:00:d2: db:c1:ee:08:99:0b:19:ca:bc:c8:61:be:0f:89:9d:2a:3b:f1: 9d:8e:fd:f3:b8:1c:04:3e:24:b9:e1:44:0c:9a:e9:67:7d:26: 31:13:30:37:d7:90:0d:fa:5e:99:9d:22:59:2e:0f:2c:52:ea: 6a:45:8f:70:ef:4f:a1:98:78:fe:65:d7:78:7e:2d:d8:4a:48: 2d:9b:30:48:57:0b:5b:7e:e3:2b:bd:7c:c9:15:20:b3:ef:61: d6:97:14:75:04:a9:18:3e:a0:ad:72:fb:68:7b:4a:8d:02:5c: 99:06:70:41:95:ba:77:91:42:e1:8f:37:13:ea:21:56:9d:fe: 57:48:8b:c4:fd:cd:9c:97:9c:aa:cd:91:15:c2:ed:7b:6d:15: ba:a2:75:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3xzR/JOFeONc6pEAlO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODE3ZWRhZTQwNzNlODk4ZDIxZDU2NjY0YjU5MjZlNTNhMzAxOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5OYsZfrEHm+P22FEXdpa6TeCr/V LEelgWLQhZbdR/VyMPsMekTfrdoW9sxLm8E4jvDxEi4hfiQyxAEgqqe0oAyAE4+7 3EROQYQrwOhL2scuTfw49AlHgXOy3/u+dmLCTBLOnMpf6rZ0AL/FKuPHjNPnD7tz tFWknu05D7ufWSWEO/LnT6RyMJpSaXhV4RtjJmUnQtx0PxXudwe6LK7A5xfCmx4a 1ELOZlMmp3PpvrSSSMrJMJt271bMqioLDaiHL0Hxsiz28VetkI9gZO1xDP0+Yy4Y QohgsRnVFyIR912+TfR7ozCVpwfqNI/Hfj47C+MXoydZOAVTqrcEIm2z9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgX7a5Ac+iY0h1WZktZJuU6MBktMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvYUJmdHJrQno2SmpTSFZabVMxa201VG93R1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaDCMA0G CSqGSIb3DQEBCwUAA4IBAQBDV9oX75AWmCHd1a1Qqv7963r7p/FV2Tojuo2ZGVMm +J/D5UT+EJqe8I5plUETUi7ewNjoTX/CO3Vixwcjhw2d5PUi9Fn9m/ZufAL0Zovz JvMtKQ4RN3JoTjxtqjyOLFv/3Xf9Cl9HbICRANLbwe4ImQsZyrzIYb4PiZ0qO/Gd jv3zuBwEPiS54UQMmulnfSYxEzA315AN+l6ZnSJZLg8sUupqRY9w70+hmHj+Zdd4 fi3YSkgtmzBIVwtbfuMrvXzJFSCz72HWlxR1BKkYPqCtcvtoe0qNAlyZBnBBlbp3 kULhjzcT6iFWnf5XSIvE/c2cl5yqzZEVwu17bRW6onVK -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:51 2026 by rpki-client