This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/abClcaJF9Pz5P-aPFdTiX1324wo.roa File: abClcaJF9Pz5P-aPFdTiX1324wo.roa (raw, json) Hash identifier: y9xq/HgVZ9OrpJC9mppsc8uPLkL4WQBTwePMbo3kLgg= Subject key identifier: 69:B0:A5:71:A2:45:F4:FC:F9:3F:E6:8F:15:D4:E2:5F:5D:F6:E3:0A Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Certificate serial: 019B7D5C9B87FAC11DB25C215CA56CE104B6 Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/abClcaJF9Pz5P-aPFdTiX1324wo.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 194.104.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9b:87:fa:c1:1d:b2:5c:21:5c:a5:6c:e1:04:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69b0a571a245f4fcf93fe68f15d4e25f5df6e30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:d1:49:78:1a:ff:0a:0b:c3:d6:a8:62:31: 4f:0f:45:2f:e4:cd:2f:81:6b:f1:42:96:43:2a:2e: 14:1e:cc:4e:c8:6d:f1:88:b4:97:2a:ff:4b:f7:db: 1c:37:20:2f:15:1b:34:0f:3d:90:69:3c:ee:b2:20: 56:59:28:a9:ac:f6:7b:70:35:ff:1c:af:0a:79:f1: 57:57:2d:43:c3:50:f8:cc:06:f6:ad:d3:a2:6a:22: a7:2e:9c:e1:9f:99:01:03:0b:f7:5a:5d:42:cc:d6: 99:40:12:b3:29:32:71:a2:b7:45:e5:19:d9:7f:db: 7b:2a:d1:0d:67:b6:97:91:43:54:a3:40:e0:dc:58: 44:31:89:35:1f:58:b3:e3:97:a0:06:65:30:2d:0c: 0f:c4:e6:10:a0:b4:f0:17:c6:ef:6a:cd:58:28:f0: ce:fc:b8:7d:d2:58:0b:5b:1b:bb:9f:08:c0:0d:73: 26:c5:7b:7b:08:ed:2b:ab:96:f2:d4:d6:af:f3:52: 0e:3d:c3:0d:6c:80:7a:d4:06:1e:20:32:a4:9c:12: 22:2b:fd:a8:08:be:aa:c6:79:39:c4:d8:1e:32:1b: 71:f7:ab:7b:36:66:31:df:f5:b9:24:ec:ec:7b:d9: a2:cc:02:96:4d:e7:c6:65:31:1f:df:f0:18:78:a6: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B0:A5:71:A2:45:F4:FC:F9:3F:E6:8F:15:D4:E2:5F:5D:F6:E3:0A X509v3 Authority Key Identifier: keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/abClcaJF9Pz5P-aPFdTiX1324wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.138.0/24 Signature Algorithm: sha256WithRSAEncryption 08:46:e8:8b:d4:51:c7:f6:12:36:5d:66:7c:9e:5f:38:0d:f8: 42:fe:68:c8:28:9c:b1:64:d6:a8:82:f5:20:fc:77:2a:e9:15: 58:97:dc:ed:d9:c2:c4:ed:bc:2b:c5:e0:0c:17:92:d8:ef:6e: 91:e1:d0:37:1d:2d:bd:e5:2e:9a:10:f4:10:f3:04:bf:38:b5: 09:07:6f:da:a7:cd:78:e5:e7:c7:34:79:51:b9:94:ee:f3:dc: 36:3e:a5:bf:29:99:96:ff:b0:59:8d:f7:a5:31:f9:34:3c:c4: 27:7a:52:4c:95:48:76:4f:b3:81:9c:9a:be:e2:97:b1:58:3a: 86:bc:e5:44:b4:7e:7b:e9:78:d4:52:64:0d:fc:55:18:93:2f: 3e:5c:ef:76:09:61:5a:a6:55:ce:0a:30:1b:7e:17:92:8a:17: a5:05:96:b1:5f:d8:c3:38:82:a1:d5:28:98:c8:06:e0:9c:0c: 62:79:eb:53:3f:4b:e4:e5:1a:57:68:ba:05:f6:b8:e9:b1:4a: 33:d9:15:3c:ad:e4:c5:93:a7:77:81:f5:23:15:eb:29:b2:6b: 29:dd:63:5d:da:4e:e6:f7:15:5a:07:1e:66:5a:64:8a:9b:39: 6f:67:ac:03:8e:2b:22:6b:d9:e5:4f:df:e8:31:83:a5:ce:8f: 7f:f9:93:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJuH+sEdslwhXKVs4QS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0 YTZjMzAwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWIwYTU3MWEyNDVmNGZjZjkzZmU2OGYxNWQ0ZTI1ZjVkZjZlMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzHRSXga/woLw9aoYjFPD0Uv5M0v gWvxQpZDKi4UHsxOyG3xiLSXKv9L99scNyAvFRs0Dz2QaTzusiBWWSiprPZ7cDX/ HK8KefFXVy1Dw1D4zAb2rdOiaiKnLpzhn5kBAwv3Wl1CzNaZQBKzKTJxordF5RnZ f9t7KtENZ7aXkUNUo0Dg3FhEMYk1H1iz45egBmUwLQwPxOYQoLTwF8bvas1YKPDO /Lh90lgLWxu7nwjADXMmxXt7CO0rq5by1Nav81IOPcMNbIB61AYeIDKknBIiK/2o CL6qxnk5xNgeMhtx96t7NmYx3/W5JOzse9mizAKWTefGZTEf3/AYeKbgcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmwpXGiRfT8+T/mjxXU4l9d9uMKMB8GA1UdIwQY MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt NTcxN2I0NTQ0MjM3LzEvYWJDbGNhSkY5UHo1UC1hUEZkVGlYMTMyNHdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3 LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiKMA0G CSqGSIb3DQEBCwUAA4IBAQAIRuiL1FHH9hI2XWZ8nl84DfhC/mjIKJyxZNaogvUg /Hcq6RVYl9zt2cLE7bwrxeAMF5LY726R4dA3HS295S6aEPQQ8wS/OLUJB2/ap814 5efHNHlRuZTu89w2PqW/KZmW/7BZjfelMfk0PMQnelJMlUh2T7OBnJq+4pexWDqG vOVEtH576XjUUmQN/FUYky8+XO92CWFaplXOCjAbfheSihelBZaxX9jDOIKh1SiY yAbgnAxieetTP0vk5RpXaLoF9rjpsUoz2RU8reTFk6d3gfUjFespsmsp3WNd2k7m 9xVaBx5mWmSKmzlvZ6wDjisia9nlT9/oMYOlzo9/+ZOP -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client