This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0_Dsz3G-8kyZcT7dXGh8D2YxAUg.roa File: 0_Dsz3G-8kyZcT7dXGh8D2YxAUg.roa (raw, json) Hash identifier: /Ql1e6bcA79dcnBq0dJSeUMuzeYilTr+zjvsRE5JDpM= Subject key identifier: D3:F0:EC:CF:71:BE:F2:4C:99:71:3E:DD:5C:68:7C:0F:66:31:01:48 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344C78DADA75B905E2125CFA44212C Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0_Dsz3G-8kyZcT7dXGh8D2YxAUg.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20626 IP address blocks: 192.165.46.0/23 maxlen: 23 193.183.240.0/21 maxlen: 21 193.235.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4c:78:da:da:75:b9:05:e2:12:5c:fa:44:21:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3f0eccf71bef24c99713edd5c687c0f66310148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:1b:0c:76:11:e5:09:85:aa:99:59:61:e2: 74:27:0f:e8:19:c8:53:ea:93:e0:f2:6f:b0:48:f7: 28:8a:5b:90:3d:7e:4d:e6:85:13:f4:e3:b9:95:cf: 6d:95:f2:b8:b6:6e:b0:4c:a8:31:1b:7a:78:0f:65: 64:7f:10:1d:2d:7e:68:11:f9:55:bf:4f:27:d6:8e: aa:ff:6e:18:d4:18:66:be:78:da:f1:08:cd:05:e6: e8:2d:5a:67:b0:8c:e9:f0:fe:49:73:ac:31:7b:f2: fb:7b:9d:4c:97:25:11:33:20:71:90:42:15:a1:d5: 48:80:b9:d1:e4:73:1f:60:47:ed:fb:4d:94:28:f7: 2d:f1:2d:98:36:5c:bd:c7:53:b9:ee:67:4c:a6:24: 00:07:f0:2f:61:ab:de:69:83:ea:ce:30:bd:84:13: 64:6c:19:ac:96:de:6d:dc:31:32:17:33:12:b1:e7: 8e:57:96:bc:27:4e:96:08:8b:9b:c9:2b:97:b0:a8: a7:f7:9c:17:22:7a:31:34:af:5d:e3:c1:07:c6:a7: ef:81:18:23:dc:d4:f4:a8:bf:65:ea:0e:d0:7c:00: 99:99:25:7a:4f:28:5b:e3:6f:b8:59:75:64:d0:1f: 58:79:3e:73:77:74:ec:3e:a7:f8:73:43:7f:be:8c: dc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F0:EC:CF:71:BE:F2:4C:99:71:3E:DD:5C:68:7C:0F:66:31:01:48 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0_Dsz3G-8kyZcT7dXGh8D2YxAUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.46.0/23 193.183.240.0/21 193.235.236.0/24 Signature Algorithm: sha256WithRSAEncryption a1:11:98:dd:88:dd:7c:ac:9a:ab:67:6e:cd:03:d8:ac:04:29: 61:3e:e0:43:5e:c3:12:04:82:f1:89:cc:c7:6f:5c:58:4b:c7: ff:4c:d4:6b:ed:6b:97:62:2b:e3:90:c9:d5:75:a3:86:63:80: de:78:66:33:c8:58:98:7a:33:b2:1a:00:6c:56:e6:0f:9d:b1: bf:e2:a2:1a:32:80:c0:49:ef:b1:06:5a:6f:ee:7b:85:57:e9: 42:1e:cf:f7:f3:52:eb:2b:71:f2:4e:cb:98:4c:9e:cf:c6:4a: 6d:9d:40:2d:a8:df:f5:e6:7c:d7:ae:e9:1e:a9:59:92:de:1d: ad:b2:f6:cd:7a:1a:97:f2:ed:bd:21:1a:6f:22:a5:e2:3c:54: 79:ce:9f:37:a4:7a:8e:6f:eb:74:e7:f0:d6:6e:66:b3:d9:80: d1:c0:2b:93:0f:ae:e9:7b:e5:3d:14:86:5a:0e:9b:93:ac:a0: 59:21:72:b7:b4:b8:d3:08:14:c6:c0:54:c8:24:a4:fb:32:49: 2a:0a:28:fc:f5:a1:9e:f8:a4:24:94:cc:07:4f:09:be:03:4b: b6:14:67:10:01:ab:14:f6:98:35:5b:81:b4:ff:ec:7d:87:35: e1:5e:3f:28:ad:47:d1:7d:be:70:0d:41:34:21:57:32:fe:cc: 88:89:2b:7c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NEx42tp1uQXiElz6RCEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2YwZWNjZjcxYmVmMjRjOTk3MTNlZGQ1YzY4N2MwZjY2MzEwMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oUbDHYR5QmFqplZYeJ0Jw/oGchT 6pPg8m+wSPcoiluQPX5N5oUT9OO5lc9tlfK4tm6wTKgxG3p4D2VkfxAdLX5oEflV v08n1o6q/24Y1Bhmvnja8QjNBeboLVpnsIzp8P5Jc6wxe/L7e51MlyURMyBxkEIV odVIgLnR5HMfYEft+02UKPct8S2YNly9x1O57mdMpiQAB/AvYaveaYPqzjC9hBNk bBmslt5t3DEyFzMSseeOV5a8J06WCIubySuXsKin95wXInoxNK9d48EHxqfvgRgj 3NT0qL9l6g7QfACZmSV6Tyhb42+4WXVk0B9YeT5zd3TsPqf4c0N/vozcVQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNPw7M9xvvJMmXE+3VxofA9mMQFIMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvMF9Ec3ozRy04a3laY1Q3ZFhHaDhEMll4QVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwKUuAwQD wbfwAwQAwevsMA0GCSqGSIb3DQEBCwUAA4IBAQChEZjdiN18rJqrZ27NA9isBClh PuBDXsMSBILxiczHb1xYS8f/TNRr7WuXYivjkMnVdaOGY4DeeGYzyFiYejOyGgBs VuYPnbG/4qIaMoDASe+xBlpv7nuFV+lCHs/381LrK3HyTsuYTJ7PxkptnUAtqN/1 5nzXrukeqVmS3h2tsvbNehqX8u29IRpvIqXiPFR5zp83pHqOb+t05/DWbmaz2YDR wCuTD67pe+U9FIZaDpuTrKBZIXK3tLjTCBTGwFTIJKT7MkkqCij89aGe+KQklMwH Twm+A0u2FGcQAasU9pg1W4G0/+x9hzXhXj8orUfRfb5wDUE0IVcy/syIiSt8 -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:04 2026 by rpki-client