This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa File: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (raw, json) Hash identifier: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY= Subject key identifier: 68:13:81:B8:BF:C7:DB:D1:F4:CB:EF:FE:40:13:F4:12:18:F5:0D:3D Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Certificate serial: 019B79ECF2BC60857DF7FBBFE97015E35AA0 Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 195.190.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f2:bc:60:85:7d:f7:fb:bf:e9:70:15:e3:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=681381b8bfc7dbd1f4cbeffe4013f41218f50d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:b6:57:aa:96:a7:7a:36:ea:f9:26:b1:af: d0:fc:5f:05:ab:65:54:d2:95:6a:37:5e:75:3c:3a: fe:07:23:82:f3:d0:87:8d:52:c2:96:85:25:32:fb: ad:4e:58:2a:91:47:6b:69:d3:f2:ea:ef:0c:4a:b1: 03:5e:3b:c6:e3:dd:c3:67:90:9d:3e:23:2a:97:4d: 4b:28:61:99:af:64:17:e0:43:1c:d2:ae:fd:cb:d7: f1:ec:c8:9f:e9:b8:84:0e:6d:ce:de:1d:12:7d:3e: 4d:5f:2e:b1:61:a0:be:c9:0e:19:cf:4a:bc:ca:d1: f1:ab:15:cf:5f:45:ae:e4:33:c2:70:54:57:f8:66: b5:ce:09:18:e1:c5:26:e4:8f:e7:a1:ae:1b:e8:e2: 32:14:ad:ca:f3:45:42:d5:1b:bb:88:b9:12:e5:76: cb:ed:b5:14:5f:38:85:89:bf:c8:47:41:d7:e1:5c: 7f:e9:e9:c9:28:35:6e:20:d0:91:c7:06:f4:88:82: 48:a8:a2:e8:aa:0b:2e:ed:71:5b:2c:d3:f3:a5:fe: c1:48:06:f1:d8:59:9b:6a:dc:ae:11:81:c8:a1:36: de:d4:bf:ff:41:9a:e7:9d:a5:cd:41:ba:71:16:8c: 87:e2:21:f3:37:d2:ba:90:12:85:71:db:af:1c:3e: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:13:81:B8:BF:C7:DB:D1:F4:CB:EF:FE:40:13:F4:12:18:F5:0D:3D X509v3 Authority Key Identifier: keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.8.0/24 Signature Algorithm: sha256WithRSAEncryption 22:34:68:12:be:6d:b5:45:d8:04:a2:1b:00:f6:89:75:bd:e7: 07:43:ec:06:bc:e7:3e:70:b5:05:2b:d9:ba:8c:ce:b8:de:e4: 23:62:a5:1e:81:c5:be:72:20:c0:b0:77:0b:67:bd:a8:17:19: 0c:c4:e6:74:9d:63:c4:42:c5:4a:37:44:ec:b5:36:46:ff:03: a7:96:c5:d8:74:e1:5b:b8:8e:7b:03:95:f7:04:d9:08:a1:44: a4:40:5f:c2:a0:82:82:f8:e4:5d:ad:5c:a8:ae:80:b5:f7:11: ed:ad:8d:32:3a:cf:c1:bc:4b:49:75:b6:02:28:05:68:ca:4f: 50:73:56:97:ba:be:ac:1c:f0:31:b6:95:ac:1c:f2:28:7b:cd: 8c:06:09:b5:30:95:9a:aa:07:1f:66:39:c5:ff:62:e6:70:4a: b1:61:e3:c4:09:23:76:b1:ba:62:c7:f6:cf:44:cd:40:d0:c2: 3c:fe:d8:1e:81:cc:b3:3a:f8:ca:dd:9d:1f:b6:48:30:e7:cd: 1b:95:3e:fb:d6:8e:c9:d6:b6:a7:7b:a1:53:c9:01:30:d7:cf: 07:60:ba:91:0c:58:93:37:fd:de:0f:96:00:32:cd:80:22:76: 4a:4b:5e:6f:c3:4e:c9:5e:63:4f:fd:a8:53:e2:f5:c7:c9:2a: 06:2c:d0:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PK8YIV99/u/6XAV41qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0 ZjRkNGIwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODEzODFiOGJmYzdkYmQxZjRjYmVmZmU0MDEzZjQxMjE4ZjUwZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqK2V6qWp3o26vkmsa/Q/F8Fq2VU 0pVqN151PDr+ByOC89CHjVLCloUlMvutTlgqkUdradPy6u8MSrEDXjvG493DZ5Cd PiMql01LKGGZr2QX4EMc0q79y9fx7Mif6biEDm3O3h0SfT5NXy6xYaC+yQ4Zz0q8 ytHxqxXPX0Wu5DPCcFRX+Ga1zgkY4cUm5I/noa4b6OIyFK3K80VC1Ru7iLkS5XbL 7bUUXziFib/IR0HX4Vx/6enJKDVuINCRxwb0iIJIqKLoqgsu7XFbLNPzpf7BSAbx 2FmbatyuEYHIoTbe1L//QZrnnaXNQbpxFoyH4iHzN9K6kBKFcduvHD7+jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgTgbi/x9vR9Mvv/kAT9BIY9Q09MB8GA1UdIwQY MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt M2Y0MmM3MTc4MGJjLzEvYUJPQnVMX0gyOUgweS1fLVFCUDBFaGoxRFQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw74IMA0G CSqGSIb3DQEBCwUAA4IBAQAiNGgSvm21RdgEohsA9ol1vecHQ+wGvOc+cLUFK9m6 jM643uQjYqUegcW+ciDAsHcLZ72oFxkMxOZ0nWPEQsVKN0TstTZG/wOnlsXYdOFb uI57A5X3BNkIoUSkQF/CoIKC+ORdrVyoroC19xHtrY0yOs/BvEtJdbYCKAVoyk9Q c1aXur6sHPAxtpWsHPIoe82MBgm1MJWaqgcfZjnF/2LmcEqxYePECSN2sbpix/bP RM1A0MI8/tgegcyzOvjK3Z0ftkgw580blT771o7J1rane6FTyQEw188HYLqRDFiT N/3eD5YAMs2AInZKS15vw07JXmNP/ahT4vXHySoGLNCo -----END CERTIFICATE-----Generated at Tue Feb 3 06:34:09 2026 by rpki-client