This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/C-abTzCIbXFgxvPW7k6teM7MbRc.roa File: C-abTzCIbXFgxvPW7k6teM7MbRc.roa (raw, json) Hash identifier: oQIr/wmoUMQn7nR8X7gfTaU4wANQ9l5sQzDHjPwW4FQ= Subject key identifier: 0B:E6:9B:4F:30:88:6D:71:60:C6:F3:D6:EE:4E:AD:78:CE:CC:6D:17 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105177F3A6907973492C1EC95B8805 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/C-abTzCIbXFgxvPW7k6teM7MbRc.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49334 IP address blocks: 31.210.34.0/24 maxlen: 24 31.210.52.0/24 maxlen: 24 31.210.53.0/24 maxlen: 24 78.135.65.0/24 maxlen: 24 188.132.131.0/24 maxlen: 24 188.132.173.0/24 maxlen: 24 188.132.181.0/24 maxlen: 24 188.132.182.0/24 maxlen: 24 188.132.187.0/24 maxlen: 24 212.68.53.0/24 maxlen: 24 212.68.54.0/24 maxlen: 24 212.68.62.0/24 maxlen: 24 212.68.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:51:77:f3:a6:90:79:73:49:2c:1e:c9:5b:88:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0be69b4f30886d7160c6f3d6ee4ead78cecc6d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:de:06:17:4d:e4:ab:49:6a:35:14:45:d1: da:3d:9e:48:4c:df:fa:22:d4:8d:5e:66:5a:43:62: ef:a9:ee:aa:23:8c:9d:35:62:3c:64:1c:8f:28:4e: 71:bd:76:85:31:04:2c:02:60:ca:58:19:40:6b:ee: dd:71:4f:72:bc:3e:48:31:6c:11:d7:62:92:e4:ec: f3:17:bf:a8:0f:86:b3:e3:4f:f3:56:6d:8d:39:a2: 57:c7:fb:b3:f9:3a:bb:9c:22:fd:ab:a2:dd:21:77: ac:6a:cb:92:76:cb:8c:b2:ad:59:52:8c:de:b2:b2: e7:2b:ce:10:87:99:40:4a:6c:ea:7d:45:01:12:cf: 57:2e:9c:9c:6f:26:3e:fb:73:df:24:aa:6c:d5:ed: b4:12:ca:6d:a0:91:58:90:69:44:75:9b:34:1b:c9: 80:e0:c9:8c:fa:0e:74:35:2c:6d:89:1b:15:42:15: bb:59:76:b4:da:97:f7:64:41:ed:90:e8:f8:d2:4f: f9:b9:e2:01:29:93:14:ad:8b:dc:ce:0b:9b:44:15: e4:05:da:df:af:89:68:32:5d:35:63:e9:c4:05:7c: ed:ce:2a:73:19:bd:82:78:c7:04:c5:07:5f:a5:6f: ed:02:41:97:0f:72:47:d1:34:cd:76:23:66:27:8e: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E6:9B:4F:30:88:6D:71:60:C6:F3:D6:EE:4E:AD:78:CE:CC:6D:17 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/C-abTzCIbXFgxvPW7k6teM7MbRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.34.0/24 31.210.52.0/23 78.135.65.0/24 188.132.131.0/24 188.132.173.0/24 188.132.181.0-188.132.182.255 188.132.187.0/24 212.68.53.0-212.68.54.255 212.68.62.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:37:b7:2d:c2:ab:a5:5d:8e:3d:5d:b7:48:2c:c3:87:36:d2: 82:6d:17:d6:e6:dd:79:08:41:43:e0:c4:aa:37:88:43:6a:6e: ac:57:2c:9a:d0:f8:95:7f:43:e0:05:ca:e6:5a:f4:5a:fc:1e: 6b:d2:67:d4:33:37:65:38:3f:09:80:9e:93:54:ef:8e:dc:14: 8f:0e:36:2e:b8:01:4b:18:71:95:c5:09:c1:a8:04:a1:f6:05: 82:1e:af:c7:ff:c5:ff:e3:94:28:e5:58:b8:24:00:70:7f:5d: e0:75:9d:97:fe:8c:dc:9b:32:02:4b:89:38:e8:0f:f0:5d:48: d3:67:3c:f5:2b:74:9e:67:11:f2:92:4f:97:d0:2b:79:53:64: 27:c7:fa:3e:e9:39:17:66:92:50:e5:24:f3:c1:87:22:48:d8: bc:d5:54:61:82:9c:5e:79:49:49:3a:b2:81:91:8e:e9:cf:16: 70:14:ff:87:58:cd:c7:15:31:02:73:1d:f3:00:c8:9f:47:dd: 3a:a7:4e:71:bc:8c:16:cf:f6:87:a2:0f:d9:d1:4d:2d:42:dc: 52:8c:07:89:ec:ba:0d:d7:4e:18:4a:d3:d1:56:70:1f:04:d8: 2a:e7:e4:39:be:d3:82:00:73:45:84:5b:00:43:2e:6c:d8:e2: d2:9f:3b:23 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt5EFF386aQeXNJLB7JW4gFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmU2OWI0ZjMwODg2ZDcxNjBjNmYzZDZlZTRlYWQ3OGNlY2M2ZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YjeBhdN5KtJajUURdHaPZ5ITN/6 ItSNXmZaQ2Lvqe6qI4ydNWI8ZByPKE5xvXaFMQQsAmDKWBlAa+7dcU9yvD5IMWwR 12KS5OzzF7+oD4az40/zVm2NOaJXx/uz+Tq7nCL9q6LdIXesasuSdsuMsq1ZUoze srLnK84Qh5lASmzqfUUBEs9XLpycbyY++3PfJKps1e20EsptoJFYkGlEdZs0G8mA 4MmM+g50NSxtiRsVQhW7WXa02pf3ZEHtkOj40k/5ueIBKZMUrYvczgubRBXkBdrf r4loMl01Y+nEBXztzipzGb2CeMcExQdfpW/tAkGXD3JH0TTNdiNmJ47IMQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFAvmm08wiG1xYMbz1u5OrXjOzG0XMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQy1hYlR6Q0liWEZneHZQVzdrNnRlTTdNYlJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAH9IiAwQB H9I0AwQATodBAwQAvISDAwQAvIStMAwDBAC8hLUDBAC8hLYDBAC8hLswDAMEANRE NQMEANRENgMEAdREPjANBgkqhkiG9w0BAQsFAAOCAQEAGze3LcKrpV2OPV23SCzD hzbSgm0X1ubdeQhBQ+DEqjeIQ2purFcsmtD4lX9D4AXK5lr0Wvwea9Jn1DM3ZTg/ CYCek1TvjtwUjw42LrgBSxhxlcUJwagEofYFgh6vx//F/+OUKOVYuCQAcH9d4HWd l/6M3JsyAkuJOOgP8F1I02c89St0nmcR8pJPl9AreVNkJ8f6Puk5F2aSUOUk88GH IkjYvNVUYYKcXnlJSTqygZGO6c8WcBT/h1jNxxUxAnMd8wDIn0fdOqdOcbyMFs/2 h6IP2dFNLULcUowHiey6DddOGErT0VZwHwTYKufkOb7TggBzRYRbAEMubNji0p87 Iw== -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:56 2026 by rpki-client