This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/ABvW-1VqbSDcf540tHClkzOyb9g.roa File: ABvW-1VqbSDcf540tHClkzOyb9g.roa (raw, json) Hash identifier: tCUTk3vplCMwsVpz24IlWs8R7PpmKQHPhX6E3iUJitU= Subject key identifier: 00:1B:D6:FB:55:6A:6D:20:DC:7F:9E:34:B4:70:A5:93:33:B2:6F:D8 Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Certificate serial: 019B7F836F07B65F3B801F5BC14F8D003921 Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/ABvW-1VqbSDcf540tHClkzOyb9g.roa Signing time: Fri 02 Jan 2026 16:21:18 +0000 ROA not before: Fri 02 Jan 2026 16:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49058 IP address blocks: 95.131.176.0/21 maxlen: 32 185.25.9.0/24 maxlen: 32 185.25.10.0/23 maxlen: 32 2a00:7b60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6f:07:b6:5f:3b:80:1f:5b:c1:4f:8d:00:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892 Validity Not Before: Jan 2 16:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=001bd6fb556a6d20dc7f9e34b470a59333b26fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:27:f2:32:b4:bf:15:64:f0:69:9a:b2:10: db:c5:eb:1c:56:f1:b8:73:24:48:7a:b1:3a:bb:dd: 35:7c:cb:a1:20:46:d3:67:cf:c3:91:b3:58:67:89: 08:b8:d1:48:a4:32:c3:65:60:7e:6f:eb:35:7d:7e: 3c:cc:bf:6c:34:2c:34:96:6e:dc:d4:6b:ea:5d:c7: 75:08:51:ac:e4:27:c6:36:9f:59:4f:50:ae:20:26: d9:40:68:7c:d9:64:4c:c4:02:bf:8f:57:0d:c2:3a: 57:68:34:9b:0a:98:5a:42:36:c8:a2:f7:63:56:53: 6a:d7:d2:8a:3f:51:4d:fc:b5:cd:b4:51:47:b8:36: c2:f6:bf:ae:60:18:12:c6:6e:fa:68:a0:af:0a:12: d2:a3:26:41:4c:29:9b:32:0c:48:69:9c:e7:8e:93: fd:a5:06:77:18:0c:f6:8b:36:08:92:75:42:c1:5a: ee:ce:d5:4b:f7:60:c6:6d:14:b9:82:e2:a0:50:cf: d7:24:57:a3:d9:cc:3d:8c:e1:59:3d:05:e3:9f:e3: 5b:ca:3e:e9:1e:d1:e3:ee:23:73:45:96:a8:63:36: 65:7e:38:ee:c6:97:8f:bf:e1:a7:d8:47:7d:55:5d: 3e:7e:dc:1e:0f:59:3d:c2:4c:d0:89:dd:5f:1c:82: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1B:D6:FB:55:6A:6D:20:DC:7F:9E:34:B4:70:A5:93:33:B2:6F:D8 X509v3 Authority Key Identifier: keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/ABvW-1VqbSDcf540tHClkzOyb9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.176.0/21 185.25.9.0-185.25.11.255 IPv6: 2a00:7b60::/32 Signature Algorithm: sha256WithRSAEncryption 2c:ed:1b:ba:c5:26:f8:c5:f1:b7:4c:47:bb:a9:7c:44:90:6c: cf:76:de:cc:3b:d3:e1:dd:8a:70:2d:0a:5d:b1:c4:ed:21:96: 48:d1:a6:01:41:b1:00:c6:81:02:d1:f3:ff:b5:ca:47:a0:15: 28:8b:1e:a1:b2:dd:b6:81:5f:fb:26:77:59:91:8a:aa:a2:4e: d1:48:5d:99:5d:4c:ee:1a:28:34:d0:6e:f7:33:63:54:a3:4d: c7:4d:49:fd:20:a9:8d:25:51:78:38:38:c3:9d:1f:94:8b:d5: 5c:95:05:5e:3a:55:4a:c2:ff:e9:ca:5a:e4:29:4a:e3:21:e1: 7c:ee:cc:6f:3f:8e:f4:41:e6:da:cf:75:92:3f:ba:17:f7:16: 33:13:bd:1d:59:6d:01:18:23:1f:71:14:ce:81:f1:2c:c7:1d: df:54:d7:e9:3e:29:16:83:3a:f7:d0:c9:6b:22:64:a2:91:57: 38:63:3c:b6:8d:0a:9e:a0:23:9c:61:02:9d:e8:b7:5b:60:f0: 57:ea:1e:44:5f:9b:d6:d3:75:d1:22:de:b5:b6:e0:97:2a:a7: 7c:66:e9:b8:b9:d4:13:8e:f3:dc:8f:b9:9a:90:ab:22:2e:6a: 30:e2:a0:7f:74:ec:f0:fa:c4:61:62:6e:94:6f:2d:02:9e:70: 23:0f:8a:dd -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/g28Htl87gB9bwU+NADkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTgzYjQwYjNmNGQ3ZDMxZmIzMzY4ZGFmYWNhMTE5OWE0 NDk4OTIwHhcNMjYwMTAyMTYyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDFiZDZmYjU1NmE2ZDIwZGM3ZjllMzRiNDcwYTU5MzMzYjI2ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEIn8jK0vxVk8GmashDbxescVvG4 cyRIerE6u901fMuhIEbTZ8/DkbNYZ4kIuNFIpDLDZWB+b+s1fX48zL9sNCw0lm7c 1GvqXcd1CFGs5CfGNp9ZT1CuICbZQGh82WRMxAK/j1cNwjpXaDSbCphaQjbIovdj VlNq19KKP1FN/LXNtFFHuDbC9r+uYBgSxm76aKCvChLSoyZBTCmbMgxIaZznjpP9 pQZ3GAz2izYIknVCwVruztVL92DGbRS5guKgUM/XJFej2cw9jOFZPQXjn+Nbyj7p HtHj7iNzRZaoYzZlfjjuxpePv+Gn2Ed9VV0+ftweD1k9wkzQid1fHIJLoQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFAAb1vtVam0g3H+eNLRwpZMzsm/YMB8GA1UdIwQY MBaAFOWoO0Cz9NfTH7M2ja+soRmaRJiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEt M2QzODg2MDZkYTEyLzEvQUJ2Vy0xVnFiU0RjZjU0MHRIQ2xrek95YjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEtM2QzODg2MDZkYTEy LzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQDX4OwMAwD BAC5GQkDBAK5GQgwDQQCAAIwBwMFACoAe2AwDQYJKoZIhvcNAQELBQADggEBACzt G7rFJvjF8bdMR7upfESQbM923sw70+HdinAtCl2xxO0hlkjRpgFBsQDGgQLR8/+1 ykegFSiLHqGy3baBX/smd1mRiqqiTtFIXZldTO4aKDTQbvczY1SjTcdNSf0gqY0l UXg4OMOdH5SL1VyVBV46VUrC/+nKWuQpSuMh4XzuzG8/jvRB5trPdZI/uhf3FjMT vR1ZbQEYIx9xFM6B8SzHHd9U1+k+KRaDOvfQyWsiZKKRVzhjPLaNCp6gI5xhAp3o t1tg8FfqHkRfm9bTddEi3rW24Jcqp3xm6bi51BOO89yPuZqQqyIuajDioH907PD6 xGFibpRvLQKecCMPit0= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:53 2026 by rpki-client