This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/AB8umA8bjPgJltKkIRne6IfYP0Y.roa File: AB8umA8bjPgJltKkIRne6IfYP0Y.roa (raw, json) Hash identifier: bEK6Pc0xzgpCyMevab0GP8GntCpJtnUMRsRnsemYpvg= Subject key identifier: 00:1F:2E:98:0F:1B:8C:F8:09:96:D2:A4:21:19:DE:E8:87:D8:3F:46 Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Certificate serial: 019B7B368E737FCFA923890C1A7506CE778A Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/AB8umA8bjPgJltKkIRne6IfYP0Y.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.150.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8e:73:7f:cf:a9:23:89:0c:1a:75:06:ce:77:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=001f2e980f1b8cf80996d2a42119dee887d83f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:29:47:65:ab:f1:06:be:b6:14:9e:32:e2: 8d:80:44:98:72:59:ee:87:0b:79:32:fa:7f:4e:9f: cf:07:78:be:b8:0f:5d:33:50:f7:72:cf:a6:44:07: 6e:75:dc:45:b0:b1:bc:33:5e:96:12:db:68:26:3f: a1:49:83:d5:54:58:b3:0c:76:3f:02:f9:c5:74:26: f9:65:c3:7c:0d:a1:d6:c4:60:8c:cc:16:5d:df:c7: 17:85:90:c4:3b:7b:fc:13:94:51:2c:7a:24:3c:e1: 9c:eb:db:b4:90:67:b5:19:39:5f:84:d8:11:40:bd: 4b:da:5b:2d:3b:6a:fa:ad:8f:70:01:95:81:a4:15: d3:15:9d:86:f4:5e:d9:1c:e4:57:ae:41:82:91:b0: ab:95:10:21:b8:fa:66:c6:c5:c6:8c:ea:7b:90:65: c0:02:dc:bd:40:9d:1f:e2:7f:4a:d1:24:02:2b:b1: 1b:df:ff:03:4e:e4:0a:6a:f6:1b:70:51:38:37:e3: 3c:cb:f1:4b:04:8f:d0:c6:5d:ab:88:9d:37:b1:7b: 12:2f:58:58:5f:5c:6f:21:cd:f1:7e:a5:c0:80:45: 60:6f:77:b7:5e:c0:2d:0c:e8:0a:c3:83:98:df:0d: 1c:8e:3d:d4:4a:3d:11:25:44:f1:35:ce:6a:23:d3: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1F:2E:98:0F:1B:8C:F8:09:96:D2:A4:21:19:DE:E8:87:D8:3F:46 X509v3 Authority Key Identifier: keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/AB8umA8bjPgJltKkIRne6IfYP0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.164.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:40:e3:66:82:b8:d0:bb:55:2f:71:84:16:7c:46:79:1d:87: e3:b7:b4:09:16:22:d7:0e:8c:e7:74:57:8f:e6:ef:b0:da:cd: 72:76:db:7d:37:8b:fd:d0:63:40:cb:f0:0d:b1:14:7f:e2:5d: 31:21:64:80:ec:59:69:ed:40:03:12:d2:bb:92:83:17:bb:ac: 3d:32:9f:c2:01:6e:04:fc:17:4e:fb:30:ed:95:5b:a1:c5:4a: 4b:ca:01:cd:01:c8:58:ee:6a:87:19:cc:f9:93:4e:0d:5a:cc: e3:31:f6:b9:2f:40:4e:51:3b:e5:91:34:3b:9f:ab:d7:a1:01: 7d:17:50:10:9f:af:85:5e:55:b5:91:ea:89:71:5d:b3:3f:94: 06:25:a8:39:de:2a:11:75:c7:42:23:fc:f0:99:f7:80:3a:31: b9:ae:80:ae:66:07:46:6f:4a:a5:89:5c:4a:51:d8:65:10:12: 7e:42:d1:91:92:1d:bb:a1:05:ac:40:b4:60:3a:ae:8d:54:b1: 60:c7:53:41:35:86:69:99:7f:d9:21:5d:4a:e8:e6:32:ce:5d: 97:3a:f7:d9:84:96:3d:0c:90:ea:60:aa:96:47:43:b4:f9:30: fb:3a:48:01:ee:c4:82:3b:32:d7:b5:04:71:dd:ac:48:ed:15: 19:88:86:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7No5zf8+pI4kMGnUGzneKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZjkyZTY4MzFkZjFmMmViY2Q1ZDVlYjBlNTk5OWM1YjA0 NzVjNTEwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDFmMmU5ODBmMWI4Y2Y4MDk5NmQyYTQyMTE5ZGVlODg3ZDgzZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaIpR2Wr8Qa+thSeMuKNgESYclnu hwt5Mvp/Tp/PB3i+uA9dM1D3cs+mRAduddxFsLG8M16WEttoJj+hSYPVVFizDHY/ AvnFdCb5ZcN8DaHWxGCMzBZd38cXhZDEO3v8E5RRLHokPOGc69u0kGe1GTlfhNgR QL1L2lstO2r6rY9wAZWBpBXTFZ2G9F7ZHORXrkGCkbCrlRAhuPpmxsXGjOp7kGXA Aty9QJ0f4n9K0SQCK7Eb3/8DTuQKavYbcFE4N+M8y/FLBI/Qxl2riJ03sXsSL1hY X1xvIc3xfqXAgEVgb3e3XsAtDOgKw4OY3w0cjj3USj0RJUTxNc5qI9PX+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAAfLpgPG4z4CZbSpCEZ3uiH2D9GMB8GA1UdIwQY MBaAFAb5Lmgx3x8uvNXV6w5ZmcWwR1xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEt NTAyYjc3Y2U5MmY4LzEvQUI4dW1BOGJqUGdKbHRLa0lSbmU2SWZZUDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEtNTAyYjc3Y2U5MmY4 LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZakMA0G CSqGSIb3DQEBCwUAA4IBAQB+QONmgrjQu1UvcYQWfEZ5HYfjt7QJFiLXDozndFeP 5u+w2s1ydtt9N4v90GNAy/ANsRR/4l0xIWSA7Flp7UADEtK7koMXu6w9Mp/CAW4E /BdO+zDtlVuhxUpLygHNAchY7mqHGcz5k04NWszjMfa5L0BOUTvlkTQ7n6vXoQF9 F1AQn6+FXlW1keqJcV2zP5QGJag53ioRdcdCI/zwmfeAOjG5roCuZgdGb0qliVxK UdhlEBJ+QtGRkh27oQWsQLRgOq6NVLFgx1NBNYZpmX/ZIV1K6OYyzl2XOvfZhJY9 DJDqYKqWR0O0+TD7OkgB7sSCOzLXtQRx3axI7RUZiIYP -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:01 2026 by rpki-client