This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1abhrlOuSKnZ708WnL5sdHK1Ie0.roa File: 1abhrlOuSKnZ708WnL5sdHK1Ie0.roa (raw, json) Hash identifier: /NbpRcPbPMObQ6oF2HglXE8t2NqbPyxSqMDeYEigMy8= Subject key identifier: D5:A6:E1:AE:53:AE:48:A9:D9:EF:4F:16:9C:BE:6C:74:72:B5:21:ED Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1ADBD4354C830B9FC6CD1B084987 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1abhrlOuSKnZ708WnL5sdHK1Ie0.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 193.106.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:db:d4:35:4c:83:0b:9f:c6:cd:1b:08:49:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5a6e1ae53ae48a9d9ef4f169cbe6c7472b521ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:91:3b:73:40:07:0c:14:a9:3b:49:1a:83:b7: fe:26:fd:41:15:a6:2e:83:5f:14:a3:0b:f2:68:27: ee:67:24:3e:13:b3:2c:b0:99:8d:91:15:6d:b5:33: fe:39:67:bd:3f:1c:3b:61:3d:8b:d9:02:d9:3c:23: 64:47:e3:50:72:89:cf:74:ee:2d:a0:fa:de:93:11: 9d:85:d8:31:a0:e4:ce:de:da:18:c4:b6:44:c8:a1: 74:65:37:c5:f0:f7:d6:7c:37:5c:20:67:0c:bf:86: 9d:7c:d9:6a:6a:24:7b:22:17:fb:c7:56:6a:44:2e: fa:29:10:fb:ab:71:23:b5:02:8d:6a:a9:38:4f:6c: e7:ad:93:23:ba:21:fe:dd:e7:ff:6e:0e:38:c0:8a: 04:a0:11:cc:3d:bf:9f:ba:f6:cc:12:9e:48:1e:49: 08:0f:4b:1b:42:81:c2:de:b4:40:e3:1b:a6:42:d3: c7:89:fa:09:3c:46:69:fc:e8:ad:4c:92:50:05:32: 15:03:32:38:d8:1e:2d:4e:4f:96:79:41:fb:78:f8: 76:e2:31:a6:53:c6:06:ea:10:29:07:8d:26:1e:5e: 94:70:82:a1:33:72:94:0f:82:37:79:8a:68:a7:25: e9:b9:fe:2c:42:3e:88:a5:0b:e7:ee:38:19:ef:a4: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A6:E1:AE:53:AE:48:A9:D9:EF:4F:16:9C:BE:6C:74:72:B5:21:ED X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1abhrlOuSKnZ708WnL5sdHK1Ie0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.199.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:61:bc:df:db:6d:bb:d7:da:db:82:7d:7b:c1:8c:0e:09:a5: 39:d8:0a:57:ec:cb:ef:72:f4:45:3d:29:22:5a:66:54:d2:f0: 6f:4e:44:f0:df:24:68:e5:04:ab:0b:fb:b5:a3:c7:f3:f3:d4: f0:7c:64:c2:ab:0f:28:c2:72:96:96:cb:e3:ac:ef:16:f6:1e: e6:b7:f1:21:fc:d8:f5:8c:58:76:38:26:27:66:1f:fb:19:d3: 0d:55:aa:09:86:38:cf:84:29:22:47:b4:ea:23:c7:4b:49:6f: 35:1e:5f:88:a7:f0:24:70:88:45:3b:21:2a:39:f0:06:77:ee: 5c:11:65:8b:17:64:f7:23:b2:39:b0:16:39:44:e2:e1:b9:ce: 8b:0a:f0:3c:7e:4e:6b:3f:a6:5e:64:d4:eb:43:00:30:4f:fe: c2:ea:45:7f:1a:3a:32:95:81:ed:55:5b:42:ff:37:9b:2c:d7: db:88:b0:8c:2c:17:b3:50:3e:8c:6b:d7:a7:f8:28:45:10:8f: 44:9e:e7:b6:06:97:2c:eb:e6:a7:8f:51:d8:db:a8:51:96:b5: ce:66:e1:cd:57:cb:d1:52:ad:36:e7:dc:3d:c8:c4:ae:78:7a: 2a:fb:13:73:d9:ce:e9:a7:4f:3b:b9:10:16:e5:63:92:92:29: d5:a8:19:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xrb1DVMgwufxs0bCEmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWE2ZTFhZTUzYWU0OGE5ZDllZjRmMTY5Y2JlNmM3NDcyYjUyMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JE7c0AHDBSpO0kag7f+Jv1BFaYu g18UowvyaCfuZyQ+E7MssJmNkRVttTP+OWe9Pxw7YT2L2QLZPCNkR+NQconPdO4t oPrekxGdhdgxoOTO3toYxLZEyKF0ZTfF8PfWfDdcIGcMv4adfNlqaiR7Ihf7x1Zq RC76KRD7q3EjtQKNaqk4T2znrZMjuiH+3ef/bg44wIoEoBHMPb+fuvbMEp5IHkkI D0sbQoHC3rRA4xumQtPHifoJPEZp/OitTJJQBTIVAzI42B4tTk+WeUH7ePh24jGm U8YG6hApB40mHl6UcIKhM3KUD4I3eYpopyXpuf4sQj6IpQvn7jgZ76RY4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWm4a5Trkip2e9PFpy+bHRytSHtMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvMWFiaHJsT3VTS25aNzA4V25MNXNkSEsxSWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrHMA0G CSqGSIb3DQEBCwUAA4IBAQAbYbzf222719rbgn17wYwOCaU52ApX7MvvcvRFPSki WmZU0vBvTkTw3yRo5QSrC/u1o8fz89TwfGTCqw8ownKWlsvjrO8W9h7mt/Eh/Nj1 jFh2OCYnZh/7GdMNVaoJhjjPhCkiR7TqI8dLSW81Hl+Ip/AkcIhFOyEqOfAGd+5c EWWLF2T3I7I5sBY5ROLhuc6LCvA8fk5rP6ZeZNTrQwAwT/7C6kV/GjoylYHtVVtC /zebLNfbiLCMLBezUD6Ma9en+ChFEI9Enue2Bpcs6+anj1HY26hRlrXOZuHNV8vR Uq0259w9yMSueHoq+xNz2c7pp087uRAW5WOSkinVqBn4 -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:45 2026 by rpki-client