This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AbwTxleO7uQskm5Wi1-X5voRHXE.roa File: AbwTxleO7uQskm5Wi1-X5voRHXE.roa (raw, json) Hash identifier: pX2w9se2lRIPQWRDwJF6fHVKeLGiqanF0Qj+dIar3o8= Subject key identifier: 01:BC:13:C6:57:8E:EE:E4:2C:92:6E:56:8B:5F:97:E6:FA:11:1D:71 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33BB494D10839A75CF1911CACB66D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AbwTxleO7uQskm5Wi1-X5voRHXE.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211275 IP address blocks: 109.206.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:b4:94:d1:08:39:a7:5c:f1:91:1c:ac:b6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01bc13c6578eeee42c926e568b5f97e6fa111d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:60:1a:2d:15:dd:3b:7e:3b:39:82:6a:54: 6d:d6:b9:75:45:21:16:2b:f8:f3:4d:bb:8a:c8:2f: 98:2e:54:3b:45:d8:f9:b4:91:ca:fd:52:b9:90:26: 4a:55:2c:ab:03:ed:58:a6:77:a5:09:94:3b:f2:c4: 36:62:a8:a7:40:df:65:52:29:a6:05:f5:5b:f7:96: 5e:0a:42:14:35:cb:00:96:b7:ac:67:50:b9:13:8b: 8c:0c:0b:46:7d:ba:51:b0:77:70:15:ef:74:c3:40: 5f:9f:c9:b2:77:cc:89:07:e8:06:b4:23:45:ab:03: 1c:90:02:45:d1:ab:16:29:b5:c7:d1:62:21:8b:1b: 3f:df:7e:5d:19:25:a0:b1:01:49:46:62:36:64:51: d8:6d:2f:16:9a:1d:47:e9:58:5f:37:42:8b:f7:bf: 0a:dd:a2:f0:cd:50:ba:eb:0d:67:a5:e6:d6:5f:f3: 11:4c:0d:a2:bf:b6:3e:ef:c6:0d:97:d5:12:37:25: a1:b9:38:a5:0e:d1:ac:6d:0f:bc:6d:1e:ce:1d:ee: 8b:62:1f:17:38:71:05:d8:36:7c:22:e7:1d:c7:7c: f8:aa:58:88:41:10:6a:d7:0e:0d:8b:b0:e2:05:7d: 36:63:01:af:40:ec:16:61:cf:0f:fa:b8:cb:8f:3a: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BC:13:C6:57:8E:EE:E4:2C:92:6E:56:8B:5F:97:E6:FA:11:1D:71 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AbwTxleO7uQskm5Wi1-X5voRHXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.206.239.0/24 Signature Algorithm: sha256WithRSAEncryption 52:d7:ce:6b:ab:4a:37:33:fb:23:9f:cb:24:81:cf:f1:47:8b: 6e:45:71:b4:fc:17:ac:3a:b7:ac:d7:97:34:44:01:2a:f2:1b: d8:f2:72:c8:d6:b4:c5:dc:9d:f1:3c:8f:b4:48:ca:60:57:e8: ee:60:a0:c0:18:4a:1a:64:ec:9a:b7:95:0f:8b:ce:e3:14:c0: 7a:70:cc:6e:77:87:83:b2:a4:22:af:51:3a:59:ab:cc:79:83: 86:c7:e8:0f:45:65:52:6c:55:9c:e1:f4:9f:37:a9:c4:43:06: 30:02:a3:1a:d2:19:7e:78:84:8f:93:64:82:43:32:e7:17:d6: 7e:92:85:2a:0d:a8:4e:38:12:60:b7:07:be:cc:fb:f8:fb:2c: b3:a1:80:4b:38:99:a0:00:f1:61:a6:c1:74:b6:e5:e5:81:01: fc:45:82:06:ff:71:64:c4:75:bb:dd:79:b1:2b:8d:2c:07:e9: c9:53:d3:63:4c:aa:3f:22:f3:36:02:18:fd:81:0b:f4:b5:cf: 1b:c3:68:0b:1e:0e:f9:45:dd:18:8d:78:2e:d6:50:c3:4d:8e: da:8a:8f:2a:8b:96:11:08:ff:90:4a:5d:ea:7d:17:22:69:ee: 89:93:2a:ac:fd:60:fd:26:9b:35:65:10:e9:db:35:60:f6:8e: 3e:88:66:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozu0lNEIOadc8ZEcrLZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWJjMTNjNjU3OGVlZWU0MmM5MjZlNTY4YjVmOTdlNmZhMTExZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmdgGi0V3Tt+OzmCalRt1rl1RSEW K/jzTbuKyC+YLlQ7Rdj5tJHK/VK5kCZKVSyrA+1YpnelCZQ78sQ2YqinQN9lUimm BfVb95ZeCkIUNcsAlresZ1C5E4uMDAtGfbpRsHdwFe90w0Bfn8myd8yJB+gGtCNF qwMckAJF0asWKbXH0WIhixs/335dGSWgsQFJRmI2ZFHYbS8Wmh1H6VhfN0KL978K 3aLwzVC66w1npebWX/MRTA2iv7Y+78YNl9USNyWhuTilDtGsbQ+8bR7OHe6LYh8X OHEF2DZ8Iucdx3z4qliIQRBq1w4Ni7DiBX02YwGvQOwWYc8P+rjLjzp03wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAG8E8ZXju7kLJJuVotfl+b6ER1xMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQWJ3VHhsZU83dVFza201V2kxLVg1dm9SSFhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc7vMA0G CSqGSIb3DQEBCwUAA4IBAQBS185rq0o3M/sjn8skgc/xR4tuRXG0/BesOres15c0 RAEq8hvY8nLI1rTF3J3xPI+0SMpgV+juYKDAGEoaZOyat5UPi87jFMB6cMxud4eD sqQir1E6WavMeYOGx+gPRWVSbFWc4fSfN6nEQwYwAqMa0hl+eISPk2SCQzLnF9Z+ koUqDahOOBJgtwe+zPv4+yyzoYBLOJmgAPFhpsF0tuXlgQH8RYIG/3FkxHW73Xmx K40sB+nJU9NjTKo/IvM2Ahj9gQv0tc8bw2gLHg75Rd0YjXgu1lDDTY7aio8qi5YR CP+QSl3qfRciae6Jkyqs/WD9Jps1ZRDp2zVg9o4+iGaq -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:23 2026 by rpki-client