This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa File: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (raw, json) Hash identifier: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q= Subject key identifier: 00:19:98:37:C4:01:E2:FB:49:80:61:DF:BA:EA:5A:67:BB:EA:FC:35 Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e Certificate serial: 019B78A22E4C18B3DB1A99D0A5340AB93CA5 Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64266 IP address blocks: 176.115.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2e:4c:18:b3:db:1a:99:d0:a5:34:0a:b9:3c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00199837c401e2fb498061dfbaea5a67bbeafc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:7e:96:fa:82:74:d8:96:7e:27:4d:6d:70: c2:51:09:44:05:14:7d:75:94:2c:3d:e0:9d:8d:11: 6f:06:27:e0:82:56:8a:11:61:e6:a1:45:9c:3b:c4: 6f:86:c1:51:40:b8:1e:a0:f2:37:18:f2:72:f5:38: b8:97:f1:d2:c2:ec:6b:52:68:ed:b6:da:16:5a:1f: 10:8a:0d:46:4b:1d:d0:62:d5:3c:50:6d:ab:a0:69: db:03:62:b2:a5:3c:1d:30:aa:3c:f3:9a:4e:3a:82: 05:38:cb:bb:28:e7:97:76:55:c3:cd:2f:e4:cb:1b: e2:ad:a8:53:db:fa:55:d2:07:d3:21:be:39:0e:9e: 33:19:b2:5d:c5:d5:45:dd:6c:21:8f:74:3c:ca:e0: 6d:eb:c9:16:de:1a:d8:c3:44:a3:14:c6:28:d1:cd: 0f:1e:ed:26:f6:19:f8:0e:92:16:eb:e9:fb:7b:b7: 59:4b:9e:1b:89:6f:b0:15:d1:b1:7a:8f:7a:72:73: 27:7c:23:23:5d:2d:81:6d:38:b7:4b:67:26:13:e3: e4:fb:d6:fa:7c:f3:ea:fd:60:48:fe:08:a6:1a:f0: 53:8b:55:d9:41:73:32:f6:ef:8b:ab:52:cd:ff:e7: 6f:5e:6f:a5:7f:d9:46:7c:fa:9e:57:d7:bc:41:ed: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:19:98:37:C4:01:E2:FB:49:80:61:DF:BA:EA:5A:67:BB:EA:FC:35 X509v3 Authority Key Identifier: keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.115.188.0/22 Signature Algorithm: sha256WithRSAEncryption 87:31:e1:f9:ae:e0:00:52:e5:f3:1e:11:6b:d9:ec:02:10:52: a1:6a:4b:da:06:2a:03:ef:3f:8b:8b:20:4b:42:10:5d:11:5b: 03:6b:7b:16:58:04:10:98:b3:91:23:29:6d:ed:66:20:ad:ac: 56:c0:a8:08:52:38:87:f3:22:24:9e:38:94:d0:7b:cf:89:3a: d5:aa:44:26:af:94:4f:b5:29:9a:ac:e8:03:a3:1f:f7:57:4e: c1:04:f4:27:36:d8:28:fd:57:65:33:33:27:9b:7f:5a:0c:dd: 71:52:56:8a:c2:1f:25:08:c3:ce:5b:f9:8b:31:b4:6c:99:de: fa:15:7f:70:88:42:99:f3:25:de:62:f1:07:92:f8:03:7c:a1: ed:92:12:f5:43:06:83:87:e4:39:01:82:59:9d:9b:4d:08:a8: 4e:ff:ca:2e:98:a8:e2:24:3f:22:20:c3:a8:dc:52:33:9b:c0: e3:86:18:00:5e:62:3a:cc:24:a6:98:3f:5c:0f:ea:46:81:dd: 48:8d:d5:b6:91:c4:2a:26:6c:39:0c:98:20:63:ec:a6:29:4a: 4d:3a:00:f6:1b:bd:8d:5e:81:e6:3f:fd:a1:48:07:71:5e:0d: 0c:49:53:f6:e0:36:7c:00:6c:ff:21:f3:fc:63:26:d8:65:54: 5a:ec:91:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi5MGLPbGpnQpTQKuTylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl YTM2OWUwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDE5OTgzN2M0MDFlMmZiNDk4MDYxZGZiYWVhNWE2N2JiZWFmYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU9+lvqCdNiWfidNbXDCUQlEBRR9 dZQsPeCdjRFvBifgglaKEWHmoUWcO8RvhsFRQLgeoPI3GPJy9Ti4l/HSwuxrUmjt ttoWWh8Qig1GSx3QYtU8UG2roGnbA2KypTwdMKo885pOOoIFOMu7KOeXdlXDzS/k yxvirahT2/pV0gfTIb45Dp4zGbJdxdVF3Wwhj3Q8yuBt68kW3hrYw0SjFMYo0c0P Hu0m9hn4DpIW6+n7e7dZS54biW+wFdGxeo96cnMnfCMjXS2BbTi3S2cmE+Pk+9b6 fPPq/WBI/gimGvBTi1XZQXMy9u+Lq1LN/+dvXm+lf9lGfPqeV9e8Qe1/BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAAZmDfEAeL7SYBh37rqWme76vw1MB8GA1UdIwQY MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt MTExMDU2MzY5YTIzLzEvQUJtWU44UUI0dnRKZ0dIZnV1cGFaN3ZxX0RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsHO8MA0G CSqGSIb3DQEBCwUAA4IBAQCHMeH5ruAAUuXzHhFr2ewCEFKhakvaBioD7z+LiyBL QhBdEVsDa3sWWAQQmLORIylt7WYgraxWwKgIUjiH8yIknjiU0HvPiTrVqkQmr5RP tSmarOgDox/3V07BBPQnNtgo/VdlMzMnm39aDN1xUlaKwh8lCMPOW/mLMbRsmd76 FX9wiEKZ8yXeYvEHkvgDfKHtkhL1QwaDh+Q5AYJZnZtNCKhO/8oumKjiJD8iIMOo 3FIzm8DjhhgAXmI6zCSmmD9cD+pGgd1IjdW2kcQqJmw5DJggY+ymKUpNOgD2G72N XoHmP/2hSAdxXg0MSVP24DZ8AGz/IfP8YybYZVRa7JH4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:59 2026 by rpki-client