This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/ASskbiBD-ObX8oC040-fCoWvcFA.roa File: ASskbiBD-ObX8oC040-fCoWvcFA.roa (raw, json) Hash identifier: Sm4y81MRyHGizqogZIaFxikCrX8RLabzmDJ+zETP3zo= Subject key identifier: 01:2B:24:6E:20:43:F8:E6:D7:F2:80:B4:E3:4F:9F:0A:85:AF:70:50 Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06 Certificate serial: 019B7BA33EEDD3B8B099FA8B7EA73D43B611 Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/ASskbiBD-ObX8oC040-fCoWvcFA.roa Signing time: Thu 01 Jan 2026 22:17:34 +0000 ROA not before: Thu 01 Jan 2026 22:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16327 IP address blocks: 91.209.193.0/24 maxlen: 24 194.146.180.0/22 maxlen: 22 194.146.180.0/23 maxlen: 23 194.146.180.0/24 maxlen: 24 194.146.181.0/24 maxlen: 24 194.146.182.0/23 maxlen: 23 194.146.182.0/24 maxlen: 24 194.146.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3e:ed:d3:b8:b0:99:fa:8b:7e:a7:3d:43:b6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06 Validity Not Before: Jan 1 22:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=012b246e2043f8e6d7f280b4e34f9f0a85af7050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:68:f1:85:93:34:33:c1:4a:b3:18:47:a3: a8:3f:a5:8d:ed:39:00:45:19:fc:24:8e:da:e5:3c: 8d:90:dd:59:7c:a7:93:7a:e9:f8:fa:13:ea:b3:c1: 3b:55:1c:f6:6b:9e:94:b1:8f:57:b8:0e:9c:cb:7d: a2:75:40:f3:51:80:ae:28:cb:cc:c1:9c:30:38:c7: 8e:ab:bb:74:23:22:96:92:1b:7c:dc:46:54:74:4b: 5a:64:cb:d8:44:87:89:7a:9b:af:8b:3f:d6:25:a8: db:b6:7c:55:c7:86:86:99:5c:0b:26:72:94:cc:72: 1e:6c:83:00:d3:bd:76:ec:76:03:24:ea:98:1c:f3: 5f:5f:bf:e4:9b:8e:5a:58:de:97:55:c1:4c:8b:70: 18:8a:11:2c:39:82:d9:f4:a7:db:8b:db:78:47:27: ff:98:8e:0f:ee:e9:e6:6d:54:4c:a3:4d:24:f6:da: 04:c4:00:e5:21:88:1f:41:b7:9e:ea:44:ff:6f:21: 40:4c:34:b5:40:ee:bb:d0:86:f6:08:a5:b8:12:80: 09:0d:f5:ba:22:30:cc:12:aa:8d:a7:3d:19:73:89: 01:27:52:04:6c:0b:da:d9:df:8d:d9:89:34:09:b7: 41:13:d6:95:d0:9b:86:a7:14:59:42:e0:fb:4a:67: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2B:24:6E:20:43:F8:E6:D7:F2:80:B4:E3:4F:9F:0A:85:AF:70:50 X509v3 Authority Key Identifier: keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/ASskbiBD-ObX8oC040-fCoWvcFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.193.0/24 194.146.180.0/22 Signature Algorithm: sha256WithRSAEncryption d8:dd:f0:b9:12:69:08:cf:d2:96:a2:01:ec:34:f1:bb:8c:11: 1a:f9:bd:72:b3:00:ea:17:c7:f7:72:d9:2d:93:2e:a3:71:da: 5d:cd:6c:bd:15:e5:85:8a:b4:69:01:dc:59:5a:c6:c2:9e:92: a1:d4:7b:17:df:fc:a5:12:9e:88:47:bd:c4:14:40:4e:c5:ab: 32:d7:61:f1:eb:63:36:79:12:ef:19:b6:e5:f5:d3:47:9a:d8: e9:df:bb:0a:5d:b9:8b:64:30:1d:b2:da:05:6e:ed:30:4d:3a: dd:9a:6c:9a:87:68:13:62:be:29:32:75:44:c1:ab:6b:bd:21: 8c:d1:55:93:1b:f8:bf:d4:b5:1a:bf:34:f8:f9:fd:53:64:c4: a3:b9:20:29:4a:8d:10:c4:95:56:95:6c:96:f5:b9:e2:f6:ba: 9d:49:a9:94:a7:f1:9f:d8:70:fc:d6:8a:0e:02:b6:b1:a1:3d: 3c:1c:e7:d2:3f:11:a9:df:c5:8d:e1:d7:10:e6:42:0e:0d:53: ff:ad:b9:b9:27:b5:17:29:c7:65:f8:4f:60:9a:05:f9:7e:da: aa:de:a5:f1:77:cc:5e:83:e4:26:b4:34:3f:83:f8:23:84:aa: 30:b6:25:f8:a8:15:54:ee:fe:8f:18:ed:12:d4:aa:d9:b4:e5: 4d:8c:69:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oz7t07iwmfqLfqc9Q7YRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZTc2Y2U1MzVjZmI4ZTIxNmVjMGQyNGRlYjU3OWQxYTRj YTBlMDYwHhcNMjYwMTAxMjIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTJiMjQ2ZTIwNDNmOGU2ZDdmMjgwYjRlMzRmOWYwYTg1YWY3MDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZRo8YWTNDPBSrMYR6OoP6WN7TkA RRn8JI7a5TyNkN1ZfKeTeun4+hPqs8E7VRz2a56UsY9XuA6cy32idUDzUYCuKMvM wZwwOMeOq7t0IyKWkht83EZUdEtaZMvYRIeJepuviz/WJajbtnxVx4aGmVwLJnKU zHIebIMA07127HYDJOqYHPNfX7/km45aWN6XVcFMi3AYihEsOYLZ9Kfbi9t4Ryf/ mI4P7unmbVRMo00k9toExADlIYgfQbee6kT/byFATDS1QO670Ib2CKW4EoAJDfW6 IjDMEqqNpz0Zc4kBJ1IEbAva2d+N2Yk0CbdBE9aV0JuGpxRZQuD7SmdSuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAErJG4gQ/jm1/KAtONPnwqFr3BQMB8GA1UdIwQY MBaAFB3nbOU1z7jiFuwNJN61edGkyg4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wNzZhZGQtZWRmYS00ZjM3LTk5OTYt NjZjZTllM2E4YzFlLzEvQVNza2JpQkQtT2JYOG9DMDQwLWZDb1d2Y0ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wNzZhZGQtZWRmYS00ZjM3LTk5OTYtNjZjZTllM2E4YzFl LzEvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9HBAwQC wpK0MA0GCSqGSIb3DQEBCwUAA4IBAQDY3fC5EmkIz9KWogHsNPG7jBEa+b1yswDq F8f3ctktky6jcdpdzWy9FeWFirRpAdxZWsbCnpKh1HsX3/ylEp6IR73EFEBOxasy 12Hx62M2eRLvGbbl9dNHmtjp37sKXbmLZDAdstoFbu0wTTrdmmyah2gTYr4pMnVE watrvSGM0VWTG/i/1LUavzT4+f1TZMSjuSApSo0QxJVWlWyW9bni9rqdSamUp/Gf 2HD81ooOAraxoT08HOfSPxGp38WN4dcQ5kIODVP/rbm5J7UXKcdl+E9gmgX5ftqq 3qXxd8xeg+QmtDQ/g/gjhKowtiX4qBVU7v6PGO0S1KrZtOVNjGlx -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:15 2026 by rpki-client