This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/dAblp8vp-pMAwa1_Vthxc2gt8k8.roa File: dAblp8vp-pMAwa1_Vthxc2gt8k8.roa (raw, json) Hash identifier: wEmjefANEUzkZ5hvuYtJ5mos9QLC+6Qw68fr7kd+5go= Subject key identifier: 74:06:E5:A7:CB:E9:FA:93:00:C1:AD:7F:56:D8:71:73:68:2D:F2:4F Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e Certificate serial: 019B7A5A2C42F72CC3A262CA41DA8F043653 Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/dAblp8vp-pMAwa1_Vthxc2gt8k8.roa Signing time: Thu 01 Jan 2026 16:18:08 +0000 ROA not before: Thu 01 Jan 2026 16:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211848 IP address blocks: 91.239.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:2c:42:f7:2c:c3:a2:62:ca:41:da:8f:04:36:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e Validity Not Before: Jan 1 16:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7406e5a7cbe9fa9300c1ad7f56d87173682df24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:30:cb:49:b1:4f:6c:4d:d5:6e:fc:f7:a6: f4:05:f0:4f:82:ab:e7:01:e8:bd:39:f3:b2:83:56: 52:34:c9:59:42:d3:33:b1:b1:6d:34:e0:2f:7d:ed: b2:11:12:c6:85:78:29:87:a1:ef:c9:88:45:89:06: a0:24:fd:1a:32:3b:c1:ad:a9:12:30:9a:c8:dc:8d: 54:d0:cc:4b:ef:97:13:59:d2:7f:3c:8b:43:c6:76: 07:e5:29:cd:73:0d:4a:6c:2d:50:a6:98:39:c1:18: 9b:fa:1d:67:ee:a9:9e:3b:61:6e:d2:a5:4b:1a:c5: d9:88:5b:1e:54:5f:89:0e:e7:9e:18:77:4b:dc:ec: 65:df:25:2d:83:0e:03:56:1c:d1:f1:df:1f:c3:53: af:b0:39:00:72:03:e8:75:31:c0:9e:8c:e3:fb:c1: 76:b7:52:6b:59:a1:ab:46:e6:71:a3:29:bd:fc:1c: 2a:db:02:2d:d4:0a:3c:65:6c:e5:56:0f:52:af:ac: e6:e0:1f:cd:ec:10:ea:6c:93:6a:7d:70:2a:db:2e: d2:4e:fd:e8:f9:b7:cb:21:0d:6d:e6:b6:7e:cb:09: f6:bd:ac:62:c9:b4:55:6b:1b:ef:ee:7d:3a:18:a7: 1f:98:ff:c0:cc:85:ff:d1:19:f1:1c:32:11:d4:73: fe:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:06:E5:A7:CB:E9:FA:93:00:C1:AD:7F:56:D8:71:73:68:2D:F2:4F X509v3 Authority Key Identifier: keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/dAblp8vp-pMAwa1_Vthxc2gt8k8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.117.0/24 Signature Algorithm: sha256WithRSAEncryption 29:a5:00:da:c8:c3:fe:58:1c:97:12:23:aa:c4:2e:6f:c7:1f: 89:71:dc:61:2c:fe:e3:76:15:42:f0:45:97:10:4c:aa:34:cc: 58:87:3e:d8:54:48:59:10:d6:2c:0a:f1:a2:c0:ec:d5:24:f3: 24:76:34:4b:10:a4:1f:c3:62:32:27:0e:f3:34:90:40:28:98: 9e:7d:d5:0a:fc:64:82:27:d6:35:2d:c8:d7:36:f5:74:db:b1: 49:00:63:d4:92:05:d9:3a:19:6c:c2:a9:ff:45:f3:49:72:cf: 5f:97:0e:17:0a:6c:64:d3:6b:30:0a:c0:83:37:dc:4f:9b:f4: a5:be:3c:5f:56:06:dc:b1:79:31:b2:79:9d:bf:d2:9d:1e:ca: c3:f9:8d:9a:9d:67:ad:61:d4:8f:6c:99:3a:a4:9e:1d:3b:0c: b6:d9:47:41:43:09:9e:b5:b7:32:1e:5b:a1:0e:c8:2d:ca:38: 63:45:f6:19:06:e5:af:a8:db:57:e7:fd:5d:af:5f:a4:c9:12: 6b:4c:ef:6b:8a:08:68:17:22:e8:61:84:6f:99:ce:d0:10:0e: 32:46:29:f5:fa:2d:21:00:4f:ff:c3:fc:d6:fc:f1:99:71:9a: b7:88:40:9a:fc:e8:43:87:a3:ec:ac:a1:81:1b:92:b6:94:5a: a3:b5:a8:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WixC9yzDomLKQdqPBDZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYWNiNzdlMjBiNzgxNDdkNDdmODM5NDI5NGYxMTdiNWM4 NGVmNWUwHhcNMjYwMTAxMTYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDA2ZTVhN2NiZTlmYTkzMDBjMWFkN2Y1NmQ4NzE3MzY4MmRmMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA8wy0mxT2xN1W7896b0BfBPgqvn Aei9OfOyg1ZSNMlZQtMzsbFtNOAvfe2yERLGhXgph6HvyYhFiQagJP0aMjvBrakS MJrI3I1U0MxL75cTWdJ/PItDxnYH5SnNcw1KbC1Qppg5wRib+h1n7qmeO2Fu0qVL GsXZiFseVF+JDueeGHdL3Oxl3yUtgw4DVhzR8d8fw1OvsDkAcgPodTHAnozj+8F2 t1JrWaGrRuZxoym9/Bwq2wIt1Ao8ZWzlVg9Sr6zm4B/N7BDqbJNqfXAq2y7STv3o +bfLIQ1t5rZ+ywn2vaxiybRVaxvv7n06GKcfmP/AzIX/0RnxHDIR1HP+wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQG5afL6fqTAMGtf1bYcXNoLfJPMB8GA1UdIwQY MBaAFByst34gt4FH1H+DlClPEXtchO9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEt5M2ZpQzNnVWZVZjRPVUtVOFJlMXlFNzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MTdhYjItZmNiMy00MDVkLWEwYzgt NTMyNWE1MjAwYmE5LzEvZEFibHA4dnAtcE1Bd2ExX1Z0aHhjMmd0OGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80MTdhYjItZmNiMy00MDVkLWEwYzgtNTMyNWE1MjAwYmE5 LzEvSEt5M2ZpQzNnVWZVZjRPVUtVOFJlMXlFNzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+91MA0G CSqGSIb3DQEBCwUAA4IBAQAppQDayMP+WByXEiOqxC5vxx+JcdxhLP7jdhVC8EWX EEyqNMxYhz7YVEhZENYsCvGiwOzVJPMkdjRLEKQfw2IyJw7zNJBAKJiefdUK/GSC J9Y1LcjXNvV027FJAGPUkgXZOhlswqn/RfNJcs9flw4XCmxk02swCsCDN9xPm/Sl vjxfVgbcsXkxsnmdv9KdHsrD+Y2anWetYdSPbJk6pJ4dOwy22UdBQwmetbcyHluh DsgtyjhjRfYZBuWvqNtX5/1dr1+kyRJrTO9righoFyLoYYRvmc7QEA4yRin1+i0h AE//w/zW/PGZcZq3iECa/OhDh6PsrKGBG5K2lFqjtaha -----END CERTIFICATE-----Generated at Sat Jan 3 12:48:55 2026 by rpki-client