This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/adb_NQqDE2btKs5IvofM8ruzaqs.roa File: adb_NQqDE2btKs5IvofM8ruzaqs.roa (raw, json) Hash identifier: mZd2SOSViUwqdouzHTAAV8V8TgiRqrWPvi7A8y6abkk= Subject key identifier: 69:D6:FF:35:0A:83:13:66:ED:2A:CE:48:BE:87:CC:F2:BB:B3:6A:AB Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019B7F15DD9553DE96376682CD2E87F05B4C Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/adb_NQqDE2btKs5IvofM8ruzaqs.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213114 IP address blocks: 72.56.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:dd:95:53:de:96:37:66:82:cd:2e:87:f0:5b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d6ff350a831366ed2ace48be87ccf2bbb36aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:a6:ce:16:a2:56:62:4d:18:5b:29:70:17: 82:b4:78:b1:c2:56:01:4b:e6:d1:cb:83:be:26:ce: aa:90:cb:b3:dc:a1:88:cf:86:6b:35:d7:c2:3a:23: 16:ab:d7:f2:92:75:12:19:0c:ac:0e:67:b4:cb:f7: 88:4f:2d:51:a2:a9:8d:67:29:6c:d5:94:60:e5:5d: 39:b9:2f:cc:9c:27:73:f1:f0:86:f3:7b:e5:9f:f1: d6:73:fb:da:e4:02:20:f0:01:71:61:5d:97:69:34: 77:73:49:dd:66:31:01:69:60:42:bd:32:3d:4f:75: 23:3f:66:98:6b:33:68:43:18:eb:74:ee:ae:cd:53: 98:de:d2:38:fb:39:18:65:f4:6e:1a:d6:a7:50:37: e6:ea:2a:78:a0:98:78:76:0b:22:1f:a0:75:d8:03: 7d:ac:1b:b4:88:31:21:89:34:be:b5:97:50:7f:3e: 54:36:65:65:72:51:13:32:8f:2b:d2:e4:81:b6:1d: f3:4a:fd:de:47:48:72:05:d4:48:a7:25:d4:e7:fb: 43:f8:47:09:4b:b5:b8:06:5e:90:28:36:cd:69:a7: 36:d4:ad:7c:32:2a:9a:76:3d:cd:cc:e7:4f:7c:e6: af:bd:43:65:92:d7:13:ad:07:94:aa:8f:3d:8b:e9: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D6:FF:35:0A:83:13:66:ED:2A:CE:48:BE:87:CC:F2:BB:B3:6A:AB X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/adb_NQqDE2btKs5IvofM8ruzaqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.58.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:5b:da:e5:67:64:cd:8b:bd:37:f1:17:38:f6:a0:8e:dd:a0: 40:69:0b:2a:a8:44:8c:e7:54:2e:b2:09:39:f4:70:71:0f:5f: 4d:30:07:85:12:4f:a9:aa:0e:31:df:e7:2d:d9:b3:6b:de:8f: d3:f8:a6:7f:6d:3d:91:44:dc:7e:9b:02:eb:81:cd:14:0e:0c: 20:fb:96:26:05:94:d7:f4:1c:85:bc:92:60:58:96:4e:46:0b: 52:8b:97:66:76:8f:92:a1:86:8a:5a:d8:a0:d7:bf:27:6a:15: 1e:55:38:b2:45:1c:62:24:b7:3c:72:79:17:fe:2f:6b:95:4b: 02:54:97:5a:e9:8f:8a:d2:f0:fe:76:98:da:c6:d1:0f:67:d7: a7:fc:9f:80:f2:de:49:c1:0f:38:3f:d3:3c:5b:e4:8f:38:89: 97:7d:70:59:36:c2:00:d3:98:1b:a2:52:70:a7:a9:f0:76:fd: 97:da:86:02:81:54:5e:57:81:1a:f7:8f:85:52:48:af:9a:aa: 55:b9:09:9c:4b:71:e1:3f:c5:8e:f4:c2:04:32:20:99:28:59: 9d:91:65:dc:43:59:66:0e:93:e1:4d:b1:66:7c:97:fd:10:11: 4d:64:f5:67:07:9b:71:56:99:5b:75:09:ec:5d:19:40:63:80: 65:6a:01:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fd2VU96WN2aCzS6H8FtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWQ2ZmYzNTBhODMxMzY2ZWQyYWNlNDhiZTg3Y2NmMmJiYjM2YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYimzhaiVmJNGFspcBeCtHixwlYB S+bRy4O+Js6qkMuz3KGIz4ZrNdfCOiMWq9fyknUSGQysDme0y/eITy1RoqmNZyls 1ZRg5V05uS/MnCdz8fCG83vln/HWc/va5AIg8AFxYV2XaTR3c0ndZjEBaWBCvTI9 T3UjP2aYazNoQxjrdO6uzVOY3tI4+zkYZfRuGtanUDfm6ip4oJh4dgsiH6B12AN9 rBu0iDEhiTS+tZdQfz5UNmVlclETMo8r0uSBth3zSv3eR0hyBdRIpyXU5/tD+EcJ S7W4Bl6QKDbNaac21K18Miqadj3NzOdPfOavvUNlktcTrQeUqo89i+maPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGnW/zUKgxNm7SrOSL6HzPK7s2qrMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvYWRiX05RcURFMmJ0S3M1SXZvZk04cnV6YXFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDg6MA0G CSqGSIb3DQEBCwUAA4IBAQALW9rlZ2TNi7038Rc49qCO3aBAaQsqqESM51Qusgk5 9HBxD19NMAeFEk+pqg4x3+ct2bNr3o/T+KZ/bT2RRNx+mwLrgc0UDgwg+5YmBZTX 9ByFvJJgWJZORgtSi5dmdo+SoYaKWtig178nahUeVTiyRRxiJLc8cnkX/i9rlUsC VJda6Y+K0vD+dpjaxtEPZ9en/J+A8t5JwQ84P9M8W+SPOImXfXBZNsIA05gbolJw p6nwdv2X2oYCgVReV4Ea94+FUkivmqpVuQmcS3HhP8WO9MIEMiCZKFmdkWXcQ1lm DpPhTbFmfJf9EBFNZPVnB5txVplbdQnsXRlAY4BlagHx -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:44 2026 by rpki-client