This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AZbdEJiEvr_3vV2V1ycByeK9wmY.roa File: AZbdEJiEvr_3vV2V1ycByeK9wmY.roa (raw, json) Hash identifier: +Htkm//brW0/GhwD/0SPl6BS2bEt6okKzCgXQ9jUmwQ= Subject key identifier: 01:96:DD:10:98:84:BE:BF:F7:BD:5D:95:D7:27:01:C9:E2:BD:C2:66 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D4A18BFE0DE854C4DD7E2F121AB4 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AZbdEJiEvr_3vV2V1ycByeK9wmY.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 159.148.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d4:a1:8b:fe:0d:e8:54:c4:dd:7e:2f:12:1a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0196dd109884bebff7bd5d95d72701c9e2bdc266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b2:20:8a:c2:a7:7e:fe:5d:74:92:b1:63:92: aa:02:d8:ba:13:fb:ff:11:c8:e9:af:fd:17:7c:f9: 1b:93:3a:bd:c1:3a:b2:1b:a5:24:57:b4:70:ea:46: 16:a2:e4:df:9a:0a:eb:8b:c1:3c:fb:57:7c:1a:30: 5b:36:a4:4a:24:5c:52:1e:17:03:cc:8f:71:86:88: 06:0d:ea:bd:df:07:d8:6d:ea:64:e7:f3:e3:b7:3b: e9:00:17:6e:b1:99:e9:03:d1:c5:4f:c8:37:bf:fb: 6d:71:1d:c1:25:ca:ae:94:bd:80:50:af:48:43:c9: ff:ba:55:69:e4:44:97:41:76:06:61:24:c5:c9:1f: f7:f8:55:d1:d7:41:bf:52:ea:78:00:0c:e3:0b:43: 0d:bc:1b:f9:d0:bc:e7:0a:7e:4b:fd:5d:82:1c:db: 1f:a4:70:fb:db:a5:6e:83:21:b4:66:92:0c:ba:a3: 6e:d9:b8:79:23:42:b4:23:21:7e:6b:ba:54:aa:39: 20:2e:be:6b:f5:a8:1e:65:6f:7d:14:bd:6c:f4:0c: ca:46:e0:31:cd:57:0f:c0:aa:3e:86:80:72:fa:7b: d6:b4:84:e0:76:23:11:28:1b:73:37:6f:b1:f7:3a: 54:1f:b4:62:7d:2c:3d:e4:d1:7d:92:a1:4d:f7:f8: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:DD:10:98:84:BE:BF:F7:BD:5D:95:D7:27:01:C9:E2:BD:C2:66 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AZbdEJiEvr_3vV2V1ycByeK9wmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.253.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b8:7c:7c:40:fc:26:4f:2d:9d:39:e8:92:3b:80:79:85:da: a3:24:98:2f:f7:c5:67:f3:ec:44:5b:4c:97:2d:be:6b:cd:6a: 51:ff:85:72:92:2b:20:37:16:a6:48:c9:40:45:3d:8e:7e:3b: 0e:f5:fe:a0:77:2b:7c:a7:3e:f7:03:82:f4:ed:98:f6:01:ba: 9b:01:4f:1f:9d:a7:2b:17:b0:08:7e:ae:27:74:6a:b4:60:dc: dc:ed:b2:fa:24:08:f8:c6:dd:c6:07:00:2d:d6:96:d9:b1:42: e0:10:87:92:f0:d4:ed:82:33:38:8c:40:1c:65:37:2a:d6:fb: 13:c8:97:1c:ff:6d:b2:ca:c1:84:34:2d:21:ec:39:33:d3:89: f3:5a:41:ac:e6:fd:30:de:4f:fb:04:9c:5e:65:38:5f:4d:3c: 27:0a:2a:86:81:06:79:64:7b:85:da:3c:42:a5:53:49:18:a0: 36:e8:46:1d:e8:a5:e6:66:22:1a:03:09:7a:f2:3a:19:39:16: 41:fa:48:fa:85:5a:52:ae:b3:48:ce:35:65:11:9e:92:d5:4a: b0:4c:ae:b2:bc:59:ad:e5:a6:fd:0f:51:1e:bb:39:31:72:6e: 29:90:a7:a9:b7:66:a0:9b:f8:e9:38:79:48:18:b1:d6:b1:25: 4d:d3:0d:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9Shi/4N6FTE3X4vEhq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTk2ZGQxMDk4ODRiZWJmZjdiZDVkOTVkNzI3MDFjOWUyYmRjMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LIgisKnfv5ddJKxY5KqAti6E/v/ Ecjpr/0XfPkbkzq9wTqyG6UkV7Rw6kYWouTfmgrri8E8+1d8GjBbNqRKJFxSHhcD zI9xhogGDeq93wfYbepk5/PjtzvpABdusZnpA9HFT8g3v/ttcR3BJcqulL2AUK9I Q8n/ulVp5ESXQXYGYSTFyR/3+FXR10G/Uup4AAzjC0MNvBv50LznCn5L/V2CHNsf pHD726VugyG0ZpIMuqNu2bh5I0K0IyF+a7pUqjkgLr5r9ageZW99FL1s9AzKRuAx zVcPwKo+hoBy+nvWtITgdiMRKBtzN2+x9zpUH7RifSw95NF9kqFN9/izLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAGW3RCYhL6/971dldcnAcnivcJmMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvQVpiZEVKaUV2cl8zdlYyVjF5Y0J5ZUs5d21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5T9MA0G CSqGSIb3DQEBCwUAA4IBAQAtuHx8QPwmTy2dOeiSO4B5hdqjJJgv98Vn8+xEW0yX Lb5rzWpR/4VykisgNxamSMlART2OfjsO9f6gdyt8pz73A4L07Zj2AbqbAU8fnacr F7AIfq4ndGq0YNzc7bL6JAj4xt3GBwAt1pbZsULgEIeS8NTtgjM4jEAcZTcq1vsT yJcc/22yysGENC0h7Dkz04nzWkGs5v0w3k/7BJxeZThfTTwnCiqGgQZ5ZHuF2jxC pVNJGKA26EYd6KXmZiIaAwl68joZORZB+kj6hVpSrrNIzjVlEZ6S1UqwTK6yvFmt 5ab9D1Eeuzkxcm4pkKept2agm/jpOHlIGLHWsSVN0w3P -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:02 2026 by rpki-client