This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1AB3-IyNOD8M3AAFiina6xRqct8.roa File: 1AB3-IyNOD8M3AAFiina6xRqct8.roa (raw, json) Hash identifier: wBBg1hnBzkct2iSu6tF5wCbw7h/vD/OZKArvZxT9xxk= Subject key identifier: D4:00:77:F8:8C:8D:38:3F:0C:DC:00:05:8A:29:DA:EB:14:6A:72:DF Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834584E53034FFF27AE71A53D22EA1F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1AB3-IyNOD8M3AAFiina6xRqct8.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39840 IP address blocks: 192.36.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:58:4e:53:03:4f:ff:27:ae:71:a5:3d:22:ea:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d40077f88c8d383f0cdc00058a29daeb146a72df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:07:34:7e:01:72:07:7f:80:23:01:6e:7e:26: 83:5c:10:5c:5d:96:a9:0b:28:74:f0:f6:c9:e7:79: b1:4f:1d:88:e5:16:9b:8a:2c:d0:66:0a:80:a4:43: 4b:96:50:ed:54:75:21:52:54:68:82:2a:f7:ce:12: 83:11:47:47:e2:a5:84:c2:b4:e1:b1:c3:5e:be:14: 9f:93:96:82:05:1b:48:e5:8a:33:e6:8b:0d:57:98: 4e:3a:e1:88:3d:8b:d3:ea:44:06:67:5b:95:36:9e: dd:99:b2:64:a8:85:78:75:fb:b1:58:02:3a:ae:a9: 81:5d:e9:7f:07:70:76:25:6d:8d:b9:ca:6a:6a:b2: 85:55:29:5b:6d:c4:0d:94:b1:68:91:19:d3:4e:2d: e5:bc:f8:51:c5:b7:23:ab:cf:63:fa:af:91:48:26: ce:d7:f0:d9:83:86:3b:75:b8:84:81:06:50:ef:0f: 64:fd:4a:1c:9d:31:b7:57:04:16:5e:5c:36:6d:a8: db:50:72:39:e5:db:66:ca:f3:38:4c:54:fb:0d:bb: d8:c5:f6:e4:44:8c:88:01:be:c1:2e:63:b4:f4:c9: a7:3d:4b:30:b4:59:c9:63:ae:1c:f1:33:e0:0d:c5: fd:18:0e:3c:a5:60:99:8f:b4:b7:52:92:61:4f:b7: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:00:77:F8:8C:8D:38:3F:0C:DC:00:05:8A:29:DA:EB:14:6A:72:DF X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1AB3-IyNOD8M3AAFiina6xRqct8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.135.0/24 Signature Algorithm: sha256WithRSAEncryption 37:84:06:42:90:20:02:4b:14:9b:fa:82:cd:ed:83:bb:87:d9: 19:19:83:cb:e5:ae:aa:01:3b:15:a2:9b:f8:b5:b4:b6:82:97: e1:c9:04:be:27:31:c1:e5:d8:8b:55:11:7b:85:be:07:8c:c1: e7:3c:bc:31:0b:98:80:5b:7b:ee:fc:73:c7:a4:44:2f:30:3f: 9d:d1:15:49:3e:b7:68:96:7b:0a:6f:fb:d2:d6:74:9f:08:5d: 4b:5b:df:fb:8f:94:38:65:43:00:8b:10:00:c0:1b:db:fd:6c: a8:a2:20:51:a9:aa:ac:4c:ce:8a:d8:95:dc:aa:bb:67:0d:98: 7f:b8:4b:c9:df:d6:2b:d6:e7:4c:07:3f:af:b0:89:4c:79:85: 5d:33:f9:69:9b:82:df:1d:4a:a2:6f:33:c5:ab:2c:2b:af:45: 5e:06:85:0c:72:5d:75:d2:19:95:17:85:17:7c:3d:2e:d9:5a: b2:c9:cd:8b:8e:95:02:01:92:14:4a:c1:3d:79:2c:e8:6c:a5: ea:ca:37:89:d0:52:9b:8b:93:96:a6:a9:f4:07:82:a4:bb:80: 36:2f:ad:96:4a:12:24:c9:79:e3:9c:b4:f0:d7:c2:ee:38:78: b8:41:c6:55:19:83:35:7d:73:6f:33:04:44:af:57:09:fe:ce: 38:b3:72:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFhOUwNP/yeucaU9IuofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDAwNzdmODhjOGQzODNmMGNkYzAwMDU4YTI5ZGFlYjE0NmE3MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ac0fgFyB3+AIwFufiaDXBBcXZap Cyh08PbJ53mxTx2I5RabiizQZgqApENLllDtVHUhUlRogir3zhKDEUdH4qWEwrTh scNevhSfk5aCBRtI5Yoz5osNV5hOOuGIPYvT6kQGZ1uVNp7dmbJkqIV4dfuxWAI6 rqmBXel/B3B2JW2NucpqarKFVSlbbcQNlLFokRnTTi3lvPhRxbcjq89j+q+RSCbO 1/DZg4Y7dbiEgQZQ7w9k/UocnTG3VwQWXlw2bajbUHI55dtmyvM4TFT7DbvYxfbk RIyIAb7BLmO09MmnPUswtFnJY64c8TPgDcX9GA48pWCZj7S3UpJhT7cj2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQAd/iMjTg/DNwABYop2usUanLfMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvMUFCMy1JeU5PRDhNM0FBRmlpbmE2eFJxY3Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCSHMA0G CSqGSIb3DQEBCwUAA4IBAQA3hAZCkCACSxSb+oLN7YO7h9kZGYPL5a6qATsVopv4 tbS2gpfhyQS+JzHB5diLVRF7hb4HjMHnPLwxC5iAW3vu/HPHpEQvMD+d0RVJPrdo lnsKb/vS1nSfCF1LW9/7j5Q4ZUMAixAAwBvb/WyooiBRqaqsTM6K2JXcqrtnDZh/ uEvJ39Yr1udMBz+vsIlMeYVdM/lpm4LfHUqibzPFqywrr0VeBoUMcl110hmVF4UX fD0u2Vqyyc2LjpUCAZIUSsE9eSzobKXqyjeJ0FKbi5OWpqn0B4Kku4A2L62WShIk yXnjnLTw18LuOHi4QcZVGYM1fXNvMwREr1cJ/s44s3Jt -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:55 2026 by rpki-client