This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa File: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (raw, json) Hash identifier: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0= Subject key identifier: 69:B6:8F:C0:FD:90:FF:C3:92:08:74:D6:22:52:34:08:A9:C4:5D:93 Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019B79ED1F191D2DDD9BB9F0DC04D40A94CD Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210194 IP address blocks: 194.39.230.0/24 maxlen: 24 194.39.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1f:19:1d:2d:dd:9b:b9:f0:dc:04:d4:0a:94:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69b68fc0fd90ffc3920874d622523408a9c45d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:6b:cd:cf:c0:04:33:07:08:03:d2:42:04: 43:56:b6:10:0a:c8:b8:58:ae:87:8b:29:22:84:94: 97:23:96:21:c6:a7:33:24:9f:2c:7b:4a:80:ef:45: 0b:f9:4e:fe:d4:0d:ad:dd:fd:67:2d:15:74:a7:b5: 00:f0:68:43:6a:b7:54:1b:39:2c:14:c4:55:98:b7: 72:e3:ba:d6:3f:ed:97:f3:3a:03:bf:33:79:92:25: de:4e:4c:63:71:c2:27:50:84:c1:38:5f:27:86:78: 29:1b:0c:77:f7:25:3b:ae:b5:20:5b:af:73:7a:8c: 7b:20:c2:17:05:04:f4:3d:00:75:ca:0c:43:2d:58: d7:dd:4c:07:03:08:24:89:72:97:72:7d:9f:cf:8e: 97:71:c0:6a:29:73:18:15:fe:a6:ff:95:ea:8d:8e: 9a:e7:a3:e3:07:44:35:77:23:e1:96:a6:3e:2b:f2: 2d:d2:c5:15:6f:7a:d7:8c:e2:ba:9b:04:78:75:e6: e0:05:8a:df:86:4b:72:d4:bb:90:9b:89:7e:cf:08: 06:03:e3:c2:90:0f:c7:2a:94:58:61:a2:a4:f6:ce: f2:79:09:8b:99:bb:c1:c3:14:e0:5a:80:14:3e:15: a1:a6:1c:fb:dd:98:62:17:24:d4:e8:fb:42:70:ca: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B6:8F:C0:FD:90:FF:C3:92:08:74:D6:22:52:34:08:A9:C4:5D:93 X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.230.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:f2:9e:94:2f:05:85:7d:e2:ef:75:f3:c9:67:7f:5a:95:48: d1:d7:9f:f9:ac:96:fb:a6:eb:19:92:56:aa:84:ca:6c:dd:e3: 51:3d:ba:bf:85:4a:92:16:83:35:43:27:8e:fa:2b:45:3d:09: 56:06:e1:d2:6d:9e:a4:8c:12:e7:20:cd:57:76:ac:06:e4:b0: 21:b8:1c:51:e9:4c:2f:1d:a4:45:0b:7b:8d:35:4f:27:98:7b: 0c:32:71:fd:80:8f:37:ff:8e:ee:ea:ca:04:c9:f9:9a:19:1e: 93:8b:57:bd:89:77:13:4c:c8:96:f1:83:64:31:80:a0:f0:7c: 80:52:2e:76:c4:74:25:09:cd:df:ce:4d:5b:8f:d3:d7:90:85: d9:0a:bc:28:bb:f2:1a:4b:51:47:24:86:2d:5a:27:20:ce:aa: 6d:b5:83:cd:ee:3e:97:2e:c1:f8:ef:36:95:0e:56:47:b9:17: 5c:84:56:06:3a:10:2d:47:52:7a:05:df:c6:7c:ca:67:ee:3f: f5:23:16:e7:c5:b5:ee:cf:28:a4:a9:96:1d:8b:aa:ee:6d:9c: b2:23:9f:80:92:d6:4a:39:f7:10:94:32:16:7b:34:f8:62:f8: c2:79:b6:bd:28:4a:56:8c:5a:06:28:a9:00:39:f3:a6:94:12: 49:d1:69:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R8ZHS3dm7nw3ATUCpTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWI2OGZjMGZkOTBmZmMzOTIwODc0ZDYyMjUyMzQwOGE5YzQ1ZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd9rzc/ABDMHCAPSQgRDVrYQCsi4 WK6HiykihJSXI5YhxqczJJ8se0qA70UL+U7+1A2t3f1nLRV0p7UA8GhDardUGzks FMRVmLdy47rWP+2X8zoDvzN5kiXeTkxjccInUITBOF8nhngpGwx39yU7rrUgW69z eox7IMIXBQT0PQB1ygxDLVjX3UwHAwgkiXKXcn2fz46XccBqKXMYFf6m/5XqjY6a 56PjB0Q1dyPhlqY+K/It0sUVb3rXjOK6mwR4debgBYrfhkty1LuQm4l+zwgGA+PC kA/HKpRYYaKk9s7yeQmLmbvBwxTgWoAUPhWhphz73ZhiFyTU6PtCcMqkewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGm2j8D9kP/Dkgh01iJSNAipxF2TMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvYWJhUHdQMlFfOE9TQ0hUV0lsSTBDS25FWFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwifmMA0G CSqGSIb3DQEBCwUAA4IBAQCa8p6ULwWFfeLvdfPJZ39alUjR15/5rJb7pusZklaq hMps3eNRPbq/hUqSFoM1QyeO+itFPQlWBuHSbZ6kjBLnIM1XdqwG5LAhuBxR6Uwv HaRFC3uNNU8nmHsMMnH9gI83/47u6soEyfmaGR6Ti1e9iXcTTMiW8YNkMYCg8HyA Ui52xHQlCc3fzk1bj9PXkIXZCrwou/IaS1FHJIYtWicgzqpttYPN7j6XLsH47zaV DlZHuRdchFYGOhAtR1J6Bd/GfMpn7j/1IxbnxbXuzyikqZYdi6rubZyyI5+AktZK OfcQlDIWezT4YvjCeba9KEpWjFoGKKkAOfOmlBJJ0WkL -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:26 2026 by rpki-client