This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1IQ__FatMIlU8KuNQXxl5Vq-nq0.roa File: 1IQ__FatMIlU8KuNQXxl5Vq-nq0.roa (raw, json) Hash identifier: 0Tcx5avW517FT45B7i6WwDGJKYoeNgbSARkP75OFOOs= Subject key identifier: D4:84:3F:FC:56:AD:30:89:54:F0:AB:8D:41:7C:65:E5:5A:BE:9E:AD Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834859287A3D4B17C433C87A8156503 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1IQ__FatMIlU8KuNQXxl5Vq-nq0.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206170 IP address blocks: 192.36.176.0/24 maxlen: 24 192.71.246.0/24 maxlen: 24 192.121.140.0/24 maxlen: 24 192.121.182.0/24 maxlen: 24 192.165.9.0/24 maxlen: 24 194.14.207.0/24 maxlen: 24 194.68.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:85:92:87:a3:d4:b1:7c:43:3c:87:a8:15:65:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4843ffc56ad308954f0ab8d417c65e55abe9ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:0a:ca:52:1f:32:bc:4d:74:56:07:90:9f: 5a:e5:b4:da:75:f0:dc:52:8e:e7:13:d2:e4:af:ad: 19:dd:65:55:d4:0b:9b:62:a0:e4:1e:c5:55:61:df: 59:55:34:cc:bf:01:6a:da:3d:cb:55:3d:fe:65:97: f1:bb:60:00:ba:24:38:2a:d7:6d:47:2b:0e:20:d7: d2:88:32:2b:5a:44:de:4b:19:91:4e:d0:93:4a:09: 8f:c6:71:30:aa:48:f6:6d:ac:1a:60:77:72:6d:64: 6b:fe:ad:fc:59:9e:40:9e:ba:40:e2:6b:2c:45:f2: d9:96:20:37:f8:c0:f4:cb:30:3e:99:e2:44:f7:d0: 0b:ae:5f:81:7a:c9:6e:87:4c:5a:6b:6b:10:d7:2b: 2d:df:da:b4:48:03:3f:ea:62:45:bd:9d:ca:d6:42: 75:97:d1:2f:93:08:2c:21:b3:c1:36:e6:44:06:67: 2a:9e:84:21:51:ac:dc:89:89:9a:93:a6:a7:18:22: d4:c8:99:ad:52:bd:42:67:2e:07:f6:ee:0b:66:a7: 64:5b:ca:9a:04:60:96:f8:e2:75:ec:88:8a:3d:60: 59:77:0e:34:7e:8d:25:70:7f:ac:d2:d7:65:ce:55: 90:ab:e4:2a:9c:6b:0e:dd:73:31:a7:19:c3:cf:b9: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:3F:FC:56:AD:30:89:54:F0:AB:8D:41:7C:65:E5:5A:BE:9E:AD X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1IQ__FatMIlU8KuNQXxl5Vq-nq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.176.0/24 192.71.246.0/24 192.121.140.0/24 192.121.182.0/24 192.165.9.0/24 194.14.207.0/24 194.68.59.0/24 Signature Algorithm: sha256WithRSAEncryption bf:4f:45:b1:f0:9a:64:ae:b1:de:93:63:38:65:01:be:d2:06: 07:07:ee:2f:38:8f:64:ce:39:5b:d8:ef:19:59:35:87:52:50: db:ae:b6:e9:46:87:64:6f:69:01:fe:4e:3d:af:d8:9e:16:ea: 3e:45:8b:68:89:2d:c2:cd:60:8a:ef:65:ff:9f:eb:49:d2:6c: 22:3c:b1:5b:61:ef:ab:e7:a9:60:be:9a:65:70:25:a9:57:eb: 08:f0:f2:23:de:5d:52:10:fe:d5:43:14:97:43:cd:d6:25:b5: 28:a7:f9:fe:6e:d8:bb:d1:0a:c4:a2:ea:ed:63:89:9e:c7:6f: 28:24:de:4b:50:f7:53:d8:f3:78:21:52:57:e9:96:1f:b9:24: ef:54:64:fe:b5:2d:2d:d9:f7:86:da:ec:0f:d4:ef:73:a6:b8: d1:80:18:a1:e9:b2:f3:7b:1e:0d:07:db:98:d9:80:af:09:3d: bc:69:3f:fd:ef:5c:3e:c4:65:a0:ef:7f:9d:f5:f2:4a:dc:b9: b1:56:7e:1f:d7:86:02:c9:1e:fb:a3:de:3c:ad:d3:cf:0b:d4: 2b:ac:3d:d9:15:d8:b0:84:17:13:6d:12:89:1f:9d:30:be:59: 3c:b7:bb:12:f6:76:f5:32:97:d9:5d:4a:f3:37:c8:de:6f:71: a6:ff:cd:6c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NIWSh6PUsXxDPIeoFWUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDg0M2ZmYzU2YWQzMDg5NTRmMGFiOGQ0MTdjNjVlNTVhYmU5ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbMKylIfMrxNdFYHkJ9a5bTadfDc Uo7nE9Lkr60Z3WVV1AubYqDkHsVVYd9ZVTTMvwFq2j3LVT3+ZZfxu2AAuiQ4Ktdt RysOINfSiDIrWkTeSxmRTtCTSgmPxnEwqkj2bawaYHdybWRr/q38WZ5AnrpA4mss RfLZliA3+MD0yzA+meJE99ALrl+Besluh0xaa2sQ1yst39q0SAM/6mJFvZ3K1kJ1 l9EvkwgsIbPBNuZEBmcqnoQhUazciYmak6anGCLUyJmtUr1CZy4H9u4LZqdkW8qa BGCW+OJ17IiKPWBZdw40fo0lcH+s0tdlzlWQq+QqnGsO3XMxpxnDz7lesQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFNSEP/xWrTCJVPCrjUF8ZeVavp6tMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvMUlRX19GYXRNSWxVOEt1TlFYeGw1VnEtbnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAwCSwAwQA wEf2AwQAwHmMAwQAwHm2AwQAwKUJAwQAwg7PAwQAwkQ7MA0GCSqGSIb3DQEBCwUA A4IBAQC/T0Wx8JpkrrHek2M4ZQG+0gYHB+4vOI9kzjlb2O8ZWTWHUlDbrrbpRodk b2kB/k49r9ieFuo+RYtoiS3CzWCK72X/n+tJ0mwiPLFbYe+r56lgvpplcCWpV+sI 8PIj3l1SEP7VQxSXQ83WJbUop/n+bti70QrEourtY4mex28oJN5LUPdT2PN4IVJX 6ZYfuSTvVGT+tS0t2feG2uwP1O9zprjRgBih6bLzex4NB9uY2YCvCT28aT/971w+ xGWg73+d9fJK3LmxVn4f14YCyR77o948rdPPC9QrrD3ZFdiwhBcTbRKJH50wvlk8 t7sS9nb1MpfZXUrzN8jeb3Gm/81s -----END CERTIFICATE-----Generated at Sun Jan 25 08:00:20 2026 by rpki-client