This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/cAb3gzi_-5dX7oZgG5DuiQlyKPk.roa File: cAb3gzi_-5dX7oZgG5DuiQlyKPk.roa (raw, json) Hash identifier: +kWZuWkA5DwWR0r9WkuNVqCVYOmn8l0De9LCH0AifJc= Subject key identifier: 70:06:F7:83:38:BF:FB:97:57:EE:86:60:1B:90:EE:89:09:72:28:F9 Certificate issuer: /CN=ababd67e3e108c19f34fc00c76c6005993233512 Certificate serial: 019BD58B176C39F40B3B196223734F199C72 Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/cAb3gzi_-5dX7oZgG5DuiQlyKPk.roa Signing time: Mon 19 Jan 2026 09:17:01 +0000 ROA not before: Mon 19 Jan 2026 09:17:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212316 IP address blocks: 107.6.126.0/23 maxlen: 24 2a05:dc80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:8b:17:6c:39:f4:0b:3b:19:62:23:73:4f:19:9c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512 Validity Not Before: Jan 19 09:17:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7006f78338bffb9757ee86601b90ee89097228f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:c8:03:5f:6b:8e:01:23:9f:7e:29:92:c4: 40:4b:bb:7d:e8:f1:77:68:3b:b7:a0:61:6d:17:36: 59:bd:6f:a3:72:b4:24:11:12:cc:42:4f:be:77:7d: 17:f2:65:df:ee:e0:9c:79:02:75:18:a3:a3:65:1d: 1b:0e:52:5b:11:1a:c4:e4:54:5b:e4:fa:8d:b1:ad: 60:3e:5e:72:f9:fd:df:64:6b:8b:7e:90:e7:d2:67: 5f:31:0f:cd:78:25:1d:79:b6:c3:7b:e3:12:23:1f: e9:3f:6d:71:4a:b4:6e:6d:6f:7b:43:ab:74:1f:6d: 17:1c:43:3e:d6:3e:4a:15:dc:79:04:94:77:0e:67: c4:de:28:87:a0:63:df:68:3d:b0:45:19:5b:c9:19: d7:14:65:a0:bb:58:9e:5c:fd:58:8e:f8:e7:7b:83: 9a:eb:9e:79:2d:a0:65:1e:ec:ee:6a:94:e3:db:c4: c9:73:30:a5:90:aa:95:96:1e:d5:8a:86:b0:57:b4: ff:c6:dc:49:7e:20:95:1e:91:4b:68:43:3a:94:9c: 2a:a9:bd:64:06:a3:a4:94:ed:07:40:e7:c2:5e:03: 53:6a:a4:a5:3f:9e:48:70:56:ab:c6:fc:5a:bc:f9: 83:83:2e:e9:ce:b8:59:b8:f3:78:9d:27:ca:87:ea: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:06:F7:83:38:BF:FB:97:57:EE:86:60:1B:90:EE:89:09:72:28:F9 X509v3 Authority Key Identifier: keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/cAb3gzi_-5dX7oZgG5DuiQlyKPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.6.126.0/23 IPv6: 2a05:dc80::/29 Signature Algorithm: sha256WithRSAEncryption 03:ff:9f:65:d7:b2:e3:c5:9d:f9:59:31:4c:22:d8:69:3d:d3: 9e:09:9a:a5:cc:d1:74:77:05:70:fb:ec:53:97:3a:36:57:67: 75:ff:9e:7c:9c:4c:d4:d1:46:bb:3f:79:e7:f7:3f:ce:cd:41: 06:7b:2d:13:02:5e:37:45:7b:11:de:30:12:34:4a:c5:d3:e4: 85:5e:c8:0f:1b:6e:4a:d6:68:e8:ab:99:e2:f3:2c:41:6f:f3: a0:05:8a:60:96:de:9e:1e:96:0b:e9:4e:fc:04:2a:39:13:df: 86:57:f2:26:91:aa:15:0f:08:9a:ac:cd:da:5f:18:d7:11:19: b4:e6:62:3b:af:b0:9e:3f:4c:30:d2:fe:34:fa:6a:16:80:ab: ed:a8:eb:a4:2a:87:7c:09:a3:34:4f:6f:3f:c3:9d:ea:98:3f: 66:04:4d:cc:c4:41:e3:1a:92:3e:a4:2e:e6:5a:65:ea:c0:87: 84:0a:be:cd:ec:8e:b0:07:54:5b:1d:06:a4:71:40:75:3b:28: ac:52:7b:47:d8:f8:a2:67:06:bb:58:fa:fe:cf:8c:fd:bc:56: a7:24:ef:6d:3c:a5:78:97:b1:eb:bf:7e:22:2c:7f:85:bc:a0: 3c:d9:1a:f4:38:cd:72:ec:7b:ef:1f:9b:c1:11:9c:3a:7c:ae: 11:c0:b3:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvVixdsOfQLOxliI3NPGZxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYWJkNjdlM2UxMDhjMTlmMzRmYzAwYzc2YzYwMDU5OTMy MzM1MTIwHhcNMjYwMTE5MDkxNzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDA2Zjc4MzM4YmZmYjk3NTdlZTg2NjAxYjkwZWU4OTA5NzIyOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEfIA19rjgEjn34pksRAS7t96PF3 aDu3oGFtFzZZvW+jcrQkERLMQk++d30X8mXf7uCceQJ1GKOjZR0bDlJbERrE5FRb 5PqNsa1gPl5y+f3fZGuLfpDn0mdfMQ/NeCUdebbDe+MSIx/pP21xSrRubW97Q6t0 H20XHEM+1j5KFdx5BJR3DmfE3iiHoGPfaD2wRRlbyRnXFGWgu1ieXP1Yjvjne4Oa 6555LaBlHuzuapTj28TJczClkKqVlh7VioawV7T/xtxJfiCVHpFLaEM6lJwqqb1k BqOklO0HQOfCXgNTaqSlP55IcFarxvxavPmDgy7pzrhZuPN4nSfKh+qyowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHAG94M4v/uXV+6GYBuQ7okJcij5MB8GA1UdIwQY MBaAFKur1n4+EIwZ80/ADHbGAFmTIzUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZ2V2ZqNFFqQm56VDhBTWRzWUFXWk1qTlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNWQ1NDAtNGY1Yi00YTViLTg4ZWMt NjI0NTg0ZDFmZDk2LzEvY0FiM2d6aV8tNWRYN29aZ0c1RHVpUWx5S1BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNWQ1NDAtNGY1Yi00YTViLTg4ZWMtNjI0NTg0ZDFmZDk2 LzEvcTZ2V2ZqNFFqQm56VDhBTWRzWUFXWk1qTlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBawZ+MA0E AgACMAcDBQMqBdyAMA0GCSqGSIb3DQEBCwUAA4IBAQAD/59l17LjxZ35WTFMIthp PdOeCZqlzNF0dwVw++xTlzo2V2d1/558nEzU0Ua7P3nn9z/OzUEGey0TAl43RXsR 3jASNErF0+SFXsgPG25K1mjoq5ni8yxBb/OgBYpglt6eHpYL6U78BCo5E9+GV/Im kaoVDwiarM3aXxjXERm05mI7r7CeP0ww0v40+moWgKvtqOukKod8CaM0T28/w53q mD9mBE3MxEHjGpI+pC7mWmXqwIeECr7N7I6wB1RbHQakcUB1OyisUntH2PiiZwa7 WPr+z4z9vFanJO9tPKV4l7Hrv34iLH+FvKA82Rr0OM1y7HvvH5vBEZw6fK4RwLMZ -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:23 2026 by rpki-client