This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/abVrM-FislRQr4Jmc_QgEdjxoJk.roa File: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (raw, json) Hash identifier: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4= Subject key identifier: 69:B5:6B:33:E1:62:B2:54:50:AF:82:66:73:F4:20:11:D8:F1:A0:99 Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306 Certificate serial: 019B7AC7CD9A4DF01F5BE8F4E750AAB7416A Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/abVrM-FislRQr4Jmc_QgEdjxoJk.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8447 IP address blocks: 185.202.151.0/24 maxlen: 24 2a14:2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cd:9a:4d:f0:1f:5b:e8:f4:e7:50:aa:b7:41:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306 Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69b56b33e162b25450af826673f42011d8f1a099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:97:dc:9a:36:b5:6e:0f:a9:38:46:3a:a6: 88:ff:31:27:2c:4d:7a:36:81:a6:fc:3c:a1:16:2e: b4:f0:f8:c4:69:73:da:a8:93:dd:c6:57:82:d2:05: c2:7f:19:25:c0:0e:34:e9:43:23:33:e7:08:b6:c5: 34:88:9d:36:ac:21:b3:ea:55:e1:14:28:99:bb:7f: d1:d1:0c:33:c1:0a:9e:c8:e6:2e:22:53:e7:ea:da: ef:ea:a7:f5:e4:4e:8e:2b:67:91:c2:6a:ba:db:89: a4:6a:14:a7:2d:47:1e:07:0f:8d:ce:71:8c:5f:b3: 7b:b0:b9:a3:75:cc:60:ca:c3:a1:a3:cf:80:d1:54: e0:f0:96:3b:8d:88:ff:be:b4:1f:73:c9:c4:be:5f: 4d:87:37:eb:4a:9b:06:62:c3:15:69:af:aa:4c:f3: 50:60:57:b4:b5:7e:1e:5b:32:13:c9:c1:17:db:cc: 23:38:15:7f:4b:75:aa:94:fc:f1:45:df:29:0c:8f: 35:83:7a:7d:51:b3:0a:5c:ec:63:51:97:ff:49:51: ad:eb:0e:0e:a0:2c:b7:ff:9e:6d:90:68:d7:04:7f: 52:3e:9a:4e:c3:16:bd:3d:63:c2:c7:d7:40:e6:8b: 27:b8:51:60:86:c2:bc:7f:a2:b0:49:2b:9a:d4:3a: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B5:6B:33:E1:62:B2:54:50:AF:82:66:73:F4:20:11:D8:F1:A0:99 X509v3 Authority Key Identifier: keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/abVrM-FislRQr4Jmc_QgEdjxoJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.151.0/24 IPv6: 2a14:2c0::/29 Signature Algorithm: sha256WithRSAEncryption 39:e8:dd:17:b3:ff:c6:b6:2f:d2:30:75:d8:a2:b6:06:fc:b1: ca:43:85:69:e4:3b:9a:e3:ed:68:7e:22:6d:6b:90:3d:e9:72: 27:1e:e1:31:8e:01:9c:69:d2:17:f7:3c:11:af:f5:59:c8:35: b8:1a:bf:8d:c6:2f:47:8c:70:19:71:3f:5f:a0:49:19:5b:ba: 4c:99:18:25:7a:18:81:af:9d:a0:da:ac:d4:a2:f0:27:a5:05: b6:a9:e7:3d:be:aa:99:17:a2:3a:09:2b:78:38:2e:63:ef:07: 92:08:3e:5a:4a:ca:36:e8:4c:11:b7:2d:8c:b3:8a:84:81:97: e3:2a:8d:4d:54:81:b0:0c:ac:fa:c9:35:ed:86:f6:b1:50:9f: 73:2c:b0:4d:e7:b8:12:a5:50:0a:d8:a4:f6:e9:7d:87:03:2a: 92:04:95:40:36:ba:30:1d:8d:ef:ff:70:d2:d7:18:71:e3:2b: f7:1a:c2:9d:29:8c:3b:ac:d8:88:d7:16:5f:74:f4:62:80:7f: 56:b5:80:48:e8:b5:3a:2e:8f:9c:16:1c:a7:d5:c6:b9:fa:ec: 2d:89:5f:e6:a3:8c:91:4b:a9:a9:e8:cd:06:38:3a:7d:20:5f: 68:7d:bb:30:e4:f2:01:0d:b6:34:80:f7:ec:54:50:7f:79:33: 19:74:b5:c9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x82aTfAfW+j051Cqt0FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMDgwNGEwZWI3OTViODY4MmMyN2RhMjllOWZhMjI4ZjE3 MjgzMDYwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWI1NmIzM2UxNjJiMjU0NTBhZjgyNjY3M2Y0MjAxMWQ4ZjFhMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw2X3Jo2tW4PqThGOqaI/zEnLE16 NoGm/DyhFi608PjEaXPaqJPdxleC0gXCfxklwA406UMjM+cItsU0iJ02rCGz6lXh FCiZu3/R0QwzwQqeyOYuIlPn6trv6qf15E6OK2eRwmq624mkahSnLUceBw+NznGM X7N7sLmjdcxgysOho8+A0VTg8JY7jYj/vrQfc8nEvl9NhzfrSpsGYsMVaa+qTPNQ YFe0tX4eWzITycEX28wjOBV/S3WqlPzxRd8pDI81g3p9UbMKXOxjUZf/SVGt6w4O oCy3/55tkGjXBH9SPppOwxa9PWPCx9dA5osnuFFghsK8f6KwSSua1Dq3MwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGm1azPhYrJUUK+CZnP0IBHY8aCZMB8GA1UdIwQY MBaAFPoIBKDreVuGgsJ9op6foijxcoMGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1nZ0VvT3Q1VzRhQ3duMmlucC1pS1BGeWd3WS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMjdmYWI4LTBkMjUtNGRiZS05Zjhh LTQyNmE4Y2RjOGU0OS8xL2FiVnJNLUZpc2xSUXI0Sm1jX1FnRWRqeG9Kay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGMvMjdmYWI4LTBkMjUtNGRiZS05ZjhhLTQyNmE4Y2RjOGU0 OS8xLzEtZ2dFb090NVc0YUN3bjJpbnAtaUtQRnlnd1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAC5ypcw DQQCAAIwBwMFAyoUAsAwDQYJKoZIhvcNAQELBQADggEBADno3Rez/8a2L9Iwddii tgb8scpDhWnkO5rj7Wh+Im1rkD3pcice4TGOAZxp0hf3PBGv9VnINbgav43GL0eM cBlxP1+gSRlbukyZGCV6GIGvnaDarNSi8CelBbap5z2+qpkXojoJK3g4LmPvB5II PlpKyjboTBG3LYyzioSBl+MqjU1UgbAMrPrJNe2G9rFQn3MssE3nuBKlUArYpPbp fYcDKpIElUA2ujAdje//cNLXGHHjK/cawp0pjDus2IjXFl909GKAf1a1gEjotTou j5wWHKfVxrn67C2JX+ajjJFLqanozQY4On0gX2h9uzDk8gENtjSA9+xUUH95Mxl0 tck= -----END CERTIFICATE-----Generated at Sun Jan 25 14:30:55 2026 by rpki-client