This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aBngke0rUnv7vA6GHS0vTbhgWkQ.roa File: aBngke0rUnv7vA6GHS0vTbhgWkQ.roa (raw, json) Hash identifier: ZnbTG2Ieqo5aB6DnwFUpCi7oe7NwTcmkx6RXH4gyG9g= Subject key identifier: 68:19:E0:91:ED:2B:52:7B:FB:BC:0E:86:1D:2D:2F:4D:B8:60:5A:44 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D5DC2702B605840CAAFFAC26983B2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aBngke0rUnv7vA6GHS0vTbhgWkQ.roa Signing time: Fri 02 Jan 2026 06:20:29 +0000 ROA not before: Fri 02 Jan 2026 06:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 45.131.186.0/24 maxlen: 24 93.88.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5d:c2:70:2b:60:58:40:ca:af:fa:c2:69:83:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6819e091ed2b527bfbbc0e861d2d2f4db8605a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:75:90:81:7d:11:ff:0e:88:f0:5c:3f:d4: 26:dd:a2:c2:59:ad:63:d0:35:06:5d:66:af:f0:af: 2c:bd:58:49:1d:02:36:89:6e:39:6e:08:70:b7:ea: 34:5a:4f:33:cf:c5:9a:09:a7:8d:f6:fb:73:ec:c1: d6:f6:7a:85:63:25:48:f5:13:d1:98:d6:9a:34:e6: 21:e5:8a:fb:7b:db:d4:e6:a3:fc:c5:a0:b9:13:a1: 5c:b4:b3:81:54:c1:9d:49:0d:fb:09:c1:f0:1b:20: 4b:87:7e:f0:13:d6:46:2e:76:3f:e3:f9:75:a4:d4: 1f:6b:1c:b6:43:ba:be:b4:4a:b5:67:87:32:39:90: e5:89:9f:a3:b3:e1:e6:29:e7:61:4d:16:85:03:d1: 74:37:cc:71:83:19:df:c6:02:15:ed:05:a7:d1:c6: 16:32:eb:06:75:8c:90:e3:1f:5d:59:5f:a8:3a:1d: de:1a:10:77:fe:3f:c8:de:5e:f5:d7:26:79:3a:68: 2a:5a:18:1f:79:6b:4f:ac:a2:0b:39:08:7d:e6:40: e9:1e:43:fc:47:9b:59:21:82:e8:d7:03:d5:ee:14: 6b:60:08:71:39:26:29:3d:f4:cf:b3:a7:54:81:b8: d2:22:e3:b2:84:41:c1:fd:3a:8c:f4:27:c2:f3:98: c8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:19:E0:91:ED:2B:52:7B:FB:BC:0E:86:1D:2D:2F:4D:B8:60:5A:44 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aBngke0rUnv7vA6GHS0vTbhgWkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.186.0/24 93.88.203.0/24 Signature Algorithm: sha256WithRSAEncryption c8:be:b1:74:98:a7:88:50:4c:b9:dc:1a:db:f2:5f:42:1c:0b: 62:a1:d8:83:da:de:57:dd:d2:4a:d5:16:f0:05:b6:c2:8f:a8: 52:82:ad:23:f1:61:8f:55:64:d4:45:8f:3b:5f:23:69:3e:35: 61:70:3e:b1:4a:63:11:30:f2:07:75:16:b5:8b:a9:73:e4:dc: 16:5f:57:17:ce:a7:13:dd:f1:f2:22:8c:68:ce:72:cf:67:b2: b4:45:85:6e:b7:d7:9c:76:74:ec:30:8e:1a:70:1a:23:f3:71: e7:f8:0f:23:fb:5b:83:e5:14:1b:cc:a4:9a:ee:68:a7:38:45: 72:48:84:b1:d6:d1:a4:5c:54:f1:46:e5:6d:c6:d9:66:ff:c9: 2a:f8:d5:b2:dc:b0:e2:b4:ca:29:66:21:69:2a:63:9c:15:52: fe:57:b4:73:8b:04:0d:9f:bc:33:fe:b9:ab:65:45:ae:23:a8: d5:5a:da:ae:3f:9e:e5:88:3a:8c:75:7d:c0:19:ce:31:ab:0a: bb:7b:ad:56:81:9e:dd:d4:da:61:35:8f:7a:93:a2:5c:ac:7b: a5:fe:8f:26:9f:76:ef:88:04:09:97:93:8c:a1:99:da:e7:dc: dd:3f:f6:78:08:15:08:e0:fd:f8:02:9c:5a:ac:87:9e:de:06: 0c:72:0b:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XV3CcCtgWEDKr/rCaYOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODE5ZTA5MWVkMmI1MjdiZmJiYzBlODYxZDJkMmY0ZGI4NjA1YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz11kIF9Ef8OiPBcP9Qm3aLCWa1j 0DUGXWav8K8svVhJHQI2iW45bghwt+o0Wk8zz8WaCaeN9vtz7MHW9nqFYyVI9RPR mNaaNOYh5Yr7e9vU5qP8xaC5E6FctLOBVMGdSQ37CcHwGyBLh37wE9ZGLnY/4/l1 pNQfaxy2Q7q+tEq1Z4cyOZDliZ+js+HmKedhTRaFA9F0N8xxgxnfxgIV7QWn0cYW MusGdYyQ4x9dWV+oOh3eGhB3/j/I3l711yZ5OmgqWhgfeWtPrKILOQh95kDpHkP8 R5tZIYLo1wPV7hRrYAhxOSYpPfTPs6dUgbjSIuOyhEHB/TqM9CfC85jIFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGgZ4JHtK1J7+7wOhh0tL024YFpEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYUJuZ2tlMHJVbnY3dkE2R0hTMHZUYmhnV2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYO6AwQA XVjLMA0GCSqGSIb3DQEBCwUAA4IBAQDIvrF0mKeIUEy53Brb8l9CHAtiodiD2t5X 3dJK1RbwBbbCj6hSgq0j8WGPVWTURY87XyNpPjVhcD6xSmMRMPIHdRa1i6lz5NwW X1cXzqcT3fHyIoxoznLPZ7K0RYVut9ecdnTsMI4acBoj83Hn+A8j+1uD5RQbzKSa 7minOEVySISx1tGkXFTxRuVtxtlm/8kq+NWy3LDitMopZiFpKmOcFVL+V7RziwQN n7wz/rmrZUWuI6jVWtquP57liDqMdX3AGc4xqwq7e61WgZ7d1NphNY96k6JcrHul /o8mn3bviAQJl5OMoZna59zdP/Z4CBUI4P34ApxarIee3gYMcgtf -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:47 2026 by rpki-client