This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-xOqDbQSlSU4AeTrciWj99dinBc.roa File: 1-xOqDbQSlSU4AeTrciWj99dinBc.roa (raw, json) Hash identifier: JXVhUGP3LdH3h6zGH+KjAyO0UXfmnRZwvhYdszSgH/k= Subject key identifier: FB:13:AA:0D:B4:12:95:25:38:01:E4:EB:72:25:A3:F7:D7:62:9C:17 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834772AC32D0828FA476D0D21C38E88 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-xOqDbQSlSU4AeTrciWj99dinBc.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198837 IP address blocks: 193.180.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:77:2a:c3:2d:08:28:fa:47:6d:0d:21:c3:8e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb13aa0db41295253801e4eb7225a3f7d7629c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:ea:c5:da:5d:93:51:1f:96:6f:89:2d:64: 70:c2:e1:28:b6:1b:cd:5e:7a:e2:42:42:84:53:38: b9:49:27:e9:83:d8:e6:3c:80:11:26:19:31:05:18: 8d:a1:b2:64:6e:5e:70:64:da:35:9a:59:ef:29:24: 75:97:a7:b9:c3:0a:c6:d6:24:ef:c9:28:77:b3:95: fb:d0:a0:0c:5c:c9:8d:ce:5e:32:b2:67:40:78:f0: d6:2f:56:ff:96:93:ae:8f:71:95:15:bf:dd:5a:7f: 50:92:5f:72:b3:12:37:a5:fb:88:ee:2d:34:25:c2: d9:28:c4:33:42:42:ad:10:80:c2:3b:d7:0a:1b:fb: 2f:46:76:30:46:0b:fb:ca:9b:3a:57:86:b0:1a:fa: 7d:cc:9e:86:1f:4e:03:7a:07:c0:cb:df:5d:2b:e2: d3:52:27:ac:83:c8:d8:6f:f4:8c:d9:7f:7a:7c:98: 93:ca:e2:81:bc:2b:31:a9:a0:a3:af:ee:60:62:bb: ae:38:1e:10:16:e2:09:33:fd:ad:78:33:38:5b:a3: 02:8f:79:e8:28:d4:25:a5:2c:01:b0:8d:44:46:19: 36:ee:9d:e7:48:4c:e7:cb:8c:22:fb:ff:b7:ae:d1: 3d:67:9f:23:b2:95:a5:30:da:0c:37:1b:72:66:b9: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:AA:0D:B4:12:95:25:38:01:E4:EB:72:25:A3:F7:D7:62:9C:17 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-xOqDbQSlSU4AeTrciWj99dinBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.8.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:dd:f6:5b:b7:68:d4:61:9b:29:eb:51:66:94:64:0b:79:53: 1d:a3:af:68:75:21:71:f1:33:41:44:0f:23:fa:20:f7:15:88: 9e:27:6a:0a:31:e6:f6:e5:8d:76:4c:b4:b9:92:c4:31:21:65: 01:a7:7d:11:91:ca:45:ac:50:78:0a:8d:05:27:66:10:4a:ea: a0:c2:a1:39:e7:64:2b:d3:bc:4a:c7:f4:91:de:b3:19:3c:71: 35:81:a3:6a:7f:e1:5e:b8:ef:94:22:64:6c:e4:a7:b9:22:0e: 3b:80:40:4a:a8:43:3c:4b:ce:79:e7:94:0c:25:e6:a6:3f:4f: 4b:80:02:9d:dd:85:0b:65:66:31:01:04:74:cb:71:1a:12:68: 28:1f:1e:d7:38:73:b6:b3:3c:5f:ba:7d:36:aa:6a:d6:9b:18: cd:62:10:20:ce:67:c5:46:d1:fa:b6:70:d8:8b:53:42:8d:bd: 2f:28:99:58:a6:26:3c:59:82:97:9c:05:df:9b:87:24:ea:ff: 1f:5e:22:91:53:bf:0a:98:42:56:7b:29:75:38:1e:47:6f:fe: bd:b3:f5:c3:b3:a6:21:9d:32:37:6f:a6:60:f9:29:54:bf:ef: b4:68:01:4e:54:2a:31:6f:91:48:96:4b:5d:f9:17:3d:de:19: 90:16:1f:50 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NHcqwy0IKPpHbQ0hw46IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjEzYWEwZGI0MTI5NTI1MzgwMWU0ZWI3MjI1YTNmN2Q3NjI5YzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Hqxdpdk1Eflm+JLWRwwuEothvN XnriQkKEUzi5SSfpg9jmPIARJhkxBRiNobJkbl5wZNo1mlnvKSR1l6e5wwrG1iTv ySh3s5X70KAMXMmNzl4ysmdAePDWL1b/lpOuj3GVFb/dWn9Qkl9ysxI3pfuI7i00 JcLZKMQzQkKtEIDCO9cKG/svRnYwRgv7yps6V4awGvp9zJ6GH04DegfAy99dK+LT Uiesg8jYb/SM2X96fJiTyuKBvCsxqaCjr+5gYruuOB4QFuIJM/2teDM4W6MCj3no KNQlpSwBsI1ERhk27p3nSEzny4wi+/+3rtE9Z58jspWlMNoMNxtyZrmUdQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsTqg20EpUlOAHk63Ilo/fXYpwXMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvMS14T3FEYlFTbFNVNEFlVHJjaVdqOTlkaW5CYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMy Ni8xL0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsG0CDAN BgkqhkiG9w0BAQsFAAOCAQEAPd32W7do1GGbKetRZpRkC3lTHaOvaHUhcfEzQUQP I/og9xWInidqCjHm9uWNdky0uZLEMSFlAad9EZHKRaxQeAqNBSdmEErqoMKhOedk K9O8Ssf0kd6zGTxxNYGjan/hXrjvlCJkbOSnuSIOO4BASqhDPEvOeeeUDCXmpj9P S4ACnd2FC2VmMQEEdMtxGhJoKB8e1zhztrM8X7p9Nqpq1psYzWIQIM5nxUbR+rZw 2ItTQo29LyiZWKYmPFmCl5wF35uHJOr/H14ikVO/CphCVnspdTgeR2/+vbP1w7Om IZ0yN2+mYPkpVL/vtGgBTlQqMW+RSJZLXfkXPd4ZkBYfUA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:39 2026 by rpki-client