This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/1-ABSTKH1wT-DANifzoEt3vYq-W0.roa File: 1-ABSTKH1wT-DANifzoEt3vYq-W0.roa (raw, json) Hash identifier: oFzRFkLTXJ5mQQTzZqb5dFPrqzG+W5jr/q9L6K3O9sM= Subject key identifier: F8:00:52:4C:A1:F5:C1:3F:83:00:D8:9F:CE:81:2D:DE:F6:2A:F9:6D Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Certificate serial: 019B7C12C5E8578F345AB206DAA401023DD3 Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/1-ABSTKH1wT-DANifzoEt3vYq-W0.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204099 IP address blocks: 185.222.44.0/22 maxlen: 22 2a0c:7800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c5:e8:57:8f:34:5a:b2:06:da:a4:01:02:3d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f800524ca1f5c13f8300d89fce812ddef62af96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:f5:56:86:41:9f:cf:4b:8a:c6:83:ca:a4: 22:e9:23:c6:87:e5:6b:71:c7:5b:e2:a1:28:e9:a9: d0:ae:21:c1:7b:2f:c9:28:14:82:e6:ba:f0:a7:46: fb:77:08:d4:ee:87:eb:ff:26:d0:91:2a:0c:79:d4: 98:8a:3b:e1:8b:29:3d:2a:74:58:27:1c:c8:e1:7f: 5a:c8:19:75:68:c7:de:cb:15:05:4e:c1:15:9c:c9: 61:f9:c4:33:a6:47:f9:94:be:ce:31:02:f6:58:62: 60:39:e4:ff:fa:fa:28:38:55:d8:1e:10:03:03:9e: d6:95:c0:8f:23:b4:4e:27:03:dd:49:55:1d:bb:6a: 74:af:9a:cd:79:ae:fe:94:64:55:b8:8e:8a:de:ff: f6:fe:42:ff:9e:9d:79:c4:c0:60:09:92:f3:e2:fd: 02:46:84:56:e5:97:8b:43:4c:8c:4c:c6:c3:e5:0d: 85:fb:19:75:76:84:fb:a4:20:7d:f0:86:35:f6:b7: 75:b7:cc:0e:b8:8f:b6:74:53:4e:51:1b:b6:97:73: c8:cc:f8:85:af:ea:de:69:c0:ff:97:cd:5b:94:e1: 31:aa:14:35:5a:b8:85:42:81:33:18:d6:56:5f:04: f0:d5:54:ab:91:e6:ea:a4:70:f9:41:ba:8f:34:4d: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:00:52:4C:A1:F5:C1:3F:83:00:D8:9F:CE:81:2D:DE:F6:2A:F9:6D X509v3 Authority Key Identifier: keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/1-ABSTKH1wT-DANifzoEt3vYq-W0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.44.0/22 IPv6: 2a0c:7800::/29 Signature Algorithm: sha256WithRSAEncryption 6a:39:14:f9:f3:7c:f4:db:2d:d7:5f:4e:a7:fa:e5:f5:31:b5: 8b:e5:30:ba:20:42:00:65:1b:ad:02:14:5d:92:58:0d:34:32: b7:a4:da:0b:e3:b6:27:ad:1d:ab:b0:80:b7:00:0b:8d:b3:d6: cf:fb:b2:e1:0e:22:c2:49:6f:73:48:c9:bc:d2:44:11:4d:a2: ea:a9:6e:f3:c3:06:0e:86:9b:30:70:64:2e:f7:15:d7:24:59: ce:cd:8c:c5:a9:4a:28:66:7a:91:fe:3f:1e:a6:b1:9f:fc:da: cc:94:79:c7:c7:9e:da:85:78:f1:25:62:6e:3a:98:52:ac:7c: de:6e:96:70:da:0d:af:9e:7e:ae:8e:70:f4:41:f3:1b:82:76: a0:a1:9f:f0:8e:e4:31:17:6c:b0:ed:46:72:b0:3d:e1:72:af: 09:6a:e9:d4:3d:62:ff:51:76:15:ce:fc:88:b9:42:95:de:70: fe:02:97:ca:05:53:c0:6f:f1:14:ec:b8:4c:e0:63:d8:64:05: 47:82:5e:0a:c6:e8:f6:a2:62:4c:cb:b8:9b:29:71:a0:8a:59: ad:93:ab:1c:c9:d8:3a:60:f7:0a:66:6f:32:db:24:b3:94:9c: 3e:4d:04:6f:32:65:25:ff:10:ba:34:5e:62:e3:ec:a1:87:0a: c0:09:0e:65 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8EsXoV480WrIG2qQBAj3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDNhZTIzY2I0NmVlOWMyMTk1MGVmY2I2MGRlZmEwOTRi YTU1NDgwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODAwNTI0Y2ExZjVjMTNmODMwMGQ4OWZjZTgxMmRkZWY2MmFmOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ/1VoZBn89LisaDyqQi6SPGh+Vr ccdb4qEo6anQriHBey/JKBSC5rrwp0b7dwjU7ofr/ybQkSoMedSYijvhiyk9KnRY JxzI4X9ayBl1aMfeyxUFTsEVnMlh+cQzpkf5lL7OMQL2WGJgOeT/+vooOFXYHhAD A57WlcCPI7ROJwPdSVUdu2p0r5rNea7+lGRVuI6K3v/2/kL/np15xMBgCZLz4v0C RoRW5ZeLQ0yMTMbD5Q2F+xl1doT7pCB98IY19rd1t8wOuI+2dFNOURu2l3PIzPiF r+reacD/l81blOExqhQ1WriFQoEzGNZWXwTw1VSrkebqpHD5QbqPNE2AYwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPgAUkyh9cE/gwDYn86BLd72KvltMB8GA1UdIwQY MBaAFC3TriPLRu6cIZUO/LYN76CUulVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUt NDk2NzFhY2RmNDg2LzEvMS1BQlNUS0gxd1QtREFOaWZ6b0V0M3ZZcS1XMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2MvMzE5ZDYxLTU2MGEtNDRmZC1hYTI1LTQ5NjcxYWNkZjQ4 Ni8xL0xkT3VJOHRHN3B3aGxRNzh0ZzN2b0pTNlZVZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArneLDAN BAIAAjAHAwUDKgx4ADANBgkqhkiG9w0BAQsFAAOCAQEAajkU+fN89Nst119Op/rl 9TG1i+UwuiBCAGUbrQIUXZJYDTQyt6TaC+O2J60dq7CAtwALjbPWz/uy4Q4iwklv c0jJvNJEEU2i6qlu88MGDoabMHBkLvcV1yRZzs2MxalKKGZ6kf4/Hqaxn/zazJR5 x8ee2oV48SVibjqYUqx83m6WcNoNr55+ro5w9EHzG4J2oKGf8I7kMRdssO1GcrA9 4XKvCWrp1D1i/1F2Fc78iLlCld5w/gKXygVTwG/xFOy4TOBj2GQFR4JeCsbo9qJi TMu4mylxoIpZrZOrHMnYOmD3CmZvMtsks5ScPk0EbzJlJf8QujReYuPsoYcKwAkO ZQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:12 2026 by rpki-client