This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/abn-CxXxv5Rm2WIdcwt9ous2t2s.roa File: abn-CxXxv5Rm2WIdcwt9ous2t2s.roa (raw, json) Hash identifier: it3lL5aTJS7LEu1aTKl3RpoSZmJES0pUWzEarx1I+aY= Subject key identifier: 69:B9:FE:0B:15:F1:BF:94:66:D9:62:1D:73:0B:7D:A2:EB:36:B7:6B Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1458A4D73DBE4F0B15EDA8E1F7757D Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/abn-CxXxv5Rm2WIdcwt9ous2t2s.roa Signing time: Fri 02 Jan 2026 14:19:58 +0000 ROA not before: Fri 02 Jan 2026 14:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202799 IP address blocks: 147.45.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:58:a4:d7:3d:be:4f:0b:15:ed:a8:e1:f7:75:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69b9fe0b15f1bf9466d9621d730b7da2eb36b76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:cd:09:6b:16:20:ae:46:b5:8d:70:3c:75: e3:18:c7:2a:ca:de:09:65:cd:f3:84:03:4d:8f:1a: b8:4d:ee:48:d0:3d:65:ce:ec:b6:e4:2d:5a:71:8c: 0e:86:f4:4e:88:56:c2:99:f5:4d:95:ef:3d:76:28: b9:60:b3:b2:1f:01:72:b3:35:54:57:96:e0:a7:bc: a4:9c:6e:c6:1c:63:9f:3b:fe:4b:f6:24:90:a7:95: f3:9c:96:86:64:23:5b:66:e1:99:1a:7b:01:f9:12: 69:56:39:9d:a9:6c:5a:41:72:ee:23:4f:0b:85:4c: 78:03:21:5c:24:ee:69:a5:2b:9e:d0:43:33:7f:d8: e9:07:58:f5:67:33:b6:36:86:12:d5:70:4f:33:26: e4:12:ab:48:f2:a4:fa:c0:89:ef:a8:17:3b:bd:60: 75:4b:66:ec:16:cf:db:95:78:ce:02:96:43:30:58: 21:cd:3c:d1:17:7b:5f:c4:f7:8c:b3:0f:1f:dd:35: ec:77:91:7a:ee:28:3e:0e:b7:5c:59:ba:ae:2d:b4: 34:cd:b6:ad:3e:ce:fd:e7:64:2e:39:02:86:29:a5: 50:bf:bd:79:97:00:de:c0:62:dc:e6:4a:36:7c:33: c5:ac:25:52:e3:54:d2:d1:95:86:c0:b2:6a:56:97: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B9:FE:0B:15:F1:BF:94:66:D9:62:1D:73:0B:7D:A2:EB:36:B7:6B X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/abn-CxXxv5Rm2WIdcwt9ous2t2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.44.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a5:65:e7:93:75:45:c5:e6:ed:3e:32:ca:33:39:ed:f3:93: d5:3d:5e:20:cc:ae:7e:ca:72:f4:31:59:3e:e0:31:4b:16:20: d9:d9:d2:d4:d9:73:ec:45:b0:5c:c1:69:65:df:56:07:48:db: 2d:f6:1f:f8:60:28:e2:35:a8:da:0e:fd:72:ca:fd:36:f7:bb: d5:56:94:91:11:04:ab:93:04:27:2c:45:7a:fb:3f:18:1a:9a: 63:e4:a7:6c:27:1b:c8:98:00:93:0e:10:50:2e:83:50:19:39: 17:a8:04:53:97:f6:e2:70:ef:f0:b9:51:52:52:a4:44:5b:99: b2:9d:6d:00:38:c7:37:e9:63:82:42:df:76:1f:88:18:c4:f3: fb:c4:73:91:78:6a:5b:e8:28:2c:ee:65:b1:f0:ef:90:f0:3c: c9:2c:0b:09:66:1e:30:56:69:6d:d1:f3:1f:1f:ab:6a:8d:91: b4:2f:b1:c0:2f:1d:33:3c:58:69:71:a3:5c:0b:9e:5a:1c:83: 5a:ec:a2:2f:00:9a:b3:b9:47:3d:22:65:f5:75:84:ff:37:e0: 5b:70:bd:58:85:02:4e:96:bc:0f:09:26:ae:49:85:f6:01:05: 87:c6:0a:60:dd:67:2e:e5:26:d4:0a:6b:e7:f3:64:4e:4a:91: 11:52:dd:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFik1z2+TwsV7ajh93V9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWI5ZmUwYjE1ZjFiZjk0NjZkOTYyMWQ3MzBiN2RhMmViMzZiNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6zNCWsWIK5GtY1wPHXjGMcqyt4J Zc3zhANNjxq4Te5I0D1lzuy25C1acYwOhvROiFbCmfVNle89dii5YLOyHwFyszVU V5bgp7yknG7GHGOfO/5L9iSQp5XznJaGZCNbZuGZGnsB+RJpVjmdqWxaQXLuI08L hUx4AyFcJO5ppSue0EMzf9jpB1j1ZzO2NoYS1XBPMybkEqtI8qT6wInvqBc7vWB1 S2bsFs/blXjOApZDMFghzTzRF3tfxPeMsw8f3TXsd5F67ig+DrdcWbquLbQ0zbat Ps7952QuOQKGKaVQv715lwDewGLc5ko2fDPFrCVS41TS0ZWGwLJqVpdfjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGm5/gsV8b+UZtliHXMLfaLrNrdrMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvYWJuLUN4WHh2NVJtMldJZGN3dDlvdXMydDJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky0sMA0G CSqGSIb3DQEBCwUAA4IBAQAApWXnk3VFxebtPjLKMznt85PVPV4gzK5+ynL0MVk+ 4DFLFiDZ2dLU2XPsRbBcwWll31YHSNst9h/4YCjiNajaDv1yyv0297vVVpSREQSr kwQnLEV6+z8YGppj5KdsJxvImACTDhBQLoNQGTkXqARTl/bicO/wuVFSUqREW5my nW0AOMc36WOCQt92H4gYxPP7xHOReGpb6Cgs7mWx8O+Q8DzJLAsJZh4wVmlt0fMf H6tqjZG0L7HALx0zPFhpcaNcC55aHINa7KIvAJqzuUc9ImX1dYT/N+BbcL1YhQJO lrwPCSauSYX2AQWHxgpg3Wcu5SbUCmvn82ROSpERUt0C -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:35 2026 by rpki-client