This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa File: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (raw, json) Hash identifier: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4= Subject key identifier: D4:06:F0:4E:76:20:D1:65:D4:3E:96:30:9E:76:99:2F:FA:30:DD:B2 Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Certificate serial: 019B77591A811384755D14823C452AB052B0 Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16175 IP address blocks: 2a00:e08::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1a:81:13:84:75:5d:14:82:3c:45:2a:b0:52:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d406f04e7620d165d43e96309e76992ffa30ddb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:6e:69:c3:2f:f7:47:b0:8b:66:d3:e6:76: 8b:14:e1:b4:c7:dc:87:16:e6:d8:7a:7d:83:4f:e0: 80:22:f7:54:03:4b:c5:7b:92:e9:52:56:bf:1f:d2: 4b:18:3e:cf:3b:13:79:82:b6:81:bd:0c:d6:11:60: 4d:a3:ad:ac:e6:30:4f:aa:4c:54:14:4b:c6:a6:6a: 66:1c:aa:00:57:ee:ee:db:39:1b:35:f2:a0:04:b0: e8:40:ec:de:b7:bc:ae:f3:d3:9c:ab:15:8c:8b:9f: 13:c9:f3:d4:eb:f3:05:dc:1f:15:ee:3a:a0:41:73: 1d:c8:57:d4:9b:c4:a8:35:49:d4:73:77:5a:38:41: f3:f1:b3:73:5c:34:57:51:a2:d6:3f:8a:60:cb:a3: 57:de:37:09:e3:1c:24:75:db:65:cc:d9:0a:88:6a: 93:7b:93:63:82:81:0d:92:c9:dd:1a:6a:3d:79:28: ba:4c:81:4d:0a:c8:44:dd:00:25:00:29:82:f9:79: 29:bc:8c:20:7a:56:41:57:4a:65:c9:58:06:f8:d0: ab:5a:3c:cc:3f:50:65:44:2e:86:ad:3f:53:90:01: 86:8b:1c:3f:bf:53:a1:d9:47:e5:81:fb:49:82:e0: ec:53:2a:df:a9:8b:7b:a3:8d:77:8a:8f:85:e6:e6: 9b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:06:F0:4E:76:20:D1:65:D4:3E:96:30:9E:76:99:2F:FA:30:DD:B2 X509v3 Authority Key Identifier: keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:e08::/32 Signature Algorithm: sha256WithRSAEncryption 7d:37:45:73:f4:7e:59:cf:1f:91:02:2c:c4:10:69:ab:06:a1: 31:ac:fc:3e:9a:8f:34:6d:d0:88:99:5a:ff:73:d0:b0:48:44: ba:86:77:a3:f9:e7:65:c8:8b:e2:f0:a3:1f:46:5c:7d:a6:68: 91:6c:ac:40:7d:6d:4f:91:88:dd:30:cb:46:ab:1d:d1:d6:48: 6d:53:07:a2:da:2c:ec:fe:34:5a:72:e2:18:00:17:a0:90:ed: a0:b2:73:77:67:25:ad:97:8c:c8:a8:6c:8a:ac:e5:d0:93:e1: cf:b9:42:05:04:df:ce:4c:7e:99:62:af:9a:fd:33:74:26:44: 70:87:fc:cc:d5:5e:a3:e6:08:72:df:45:8a:49:02:74:7f:75: 80:3a:74:b5:af:19:0c:c4:00:2c:e6:cb:c4:b0:27:f7:67:52: cc:eb:7a:3e:b2:ce:96:5a:bc:f0:85:06:cc:50:fa:6b:31:08: c5:32:51:2a:f1:c5:e7:c9:ce:24:7c:c9:1f:cc:ec:56:c1:89: eb:54:e6:fb:dd:7e:ac:de:71:4a:1f:db:ed:44:42:04:52:a3: cf:a2:4e:1b:0e:3b:0c:09:07:87:0e:8b:f1:fd:e1:c6:61:a0: d1:50:1a:45:d8:1d:bd:3e:ea:47:9e:83:37:ea:18:f3:89:9b: 55:b2:c0:b1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WRqBE4R1XRSCPEUqsFKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz ZGI4MzQwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDA2ZjA0ZTc2MjBkMTY1ZDQzZTk2MzA5ZTc2OTkyZmZhMzBkZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9uacMv90ewi2bT5naLFOG0x9yH FubYen2DT+CAIvdUA0vFe5LpUla/H9JLGD7POxN5graBvQzWEWBNo62s5jBPqkxU FEvGpmpmHKoAV+7u2zkbNfKgBLDoQOzet7yu89OcqxWMi58TyfPU6/MF3B8V7jqg QXMdyFfUm8SoNUnUc3daOEHz8bNzXDRXUaLWP4pgy6NX3jcJ4xwkddtlzNkKiGqT e5NjgoENksndGmo9eSi6TIFNCshE3QAlACmC+XkpvIwgelZBV0plyVgG+NCrWjzM P1BlRC6GrT9TkAGGixw/v1Oh2UflgftJguDsUyrfqYt7o413io+F5uab6QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNQG8E52INFl1D6WMJ52mS/6MN2yMB8GA1UdIwQY MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt NzBkYWQ1MWU3M2ZiLzEvMUFid1RuWWcwV1hVUHBZd25uYVpMX293M2JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgAOCDAN BgkqhkiG9w0BAQsFAAOCAQEAfTdFc/R+Wc8fkQIsxBBpqwahMaz8PpqPNG3QiJla /3PQsEhEuoZ3o/nnZciL4vCjH0ZcfaZokWysQH1tT5GI3TDLRqsd0dZIbVMHotos 7P40WnLiGAAXoJDtoLJzd2clrZeMyKhsiqzl0JPhz7lCBQTfzkx+mWKvmv0zdCZE cIf8zNVeo+YIct9FikkCdH91gDp0ta8ZDMQALObLxLAn92dSzOt6PrLOllq88IUG zFD6azEIxTJRKvHF58nOJHzJH8zsVsGJ61Tm+91+rN5xSh/b7URCBFKjz6JOGw47 DAkHhw6L8f3hxmGg0VAaRdgdvT7qR56DN+oY84mbVbLAsQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:33 2026 by rpki-client