This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1RYM8EGuHi5fKQEogxVqmIJgnuM.roa File: 1RYM8EGuHi5fKQEogxVqmIJgnuM.roa (raw, json) Hash identifier: baSFqnzsDESlycZeBlMy54lzOYjb2O8mHK1QAOLF7qo= Subject key identifier: D5:16:0C:F0:41:AE:1E:2E:5F:29:01:28:83:15:6A:98:82:60:9E:E3 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834715FB9DCB545DC3DC8FC5DADC80F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1RYM8EGuHi5fKQEogxVqmIJgnuM.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58653 IP address blocks: 193.235.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:71:5f:b9:dc:b5:45:dc:3d:c8:fc:5d:ad:c8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5160cf041ae1e2e5f29012883156a9882609ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cb:7a:e3:16:5a:25:3e:e8:da:6a:ef:d3:9a: 22:0d:f9:d5:d1:89:d9:b5:0d:0c:48:79:13:44:7a: 6c:e1:f6:28:40:14:08:ce:b3:00:77:14:1f:3b:f5: 6a:ee:cb:2d:7f:fe:e5:9a:99:b5:e8:80:fd:e5:0e: 7d:b5:bf:13:60:c7:24:8a:51:2f:ec:35:de:4b:9c: 1e:11:b3:7b:7e:bd:ec:3f:3e:ad:aa:cb:5a:57:02: 85:64:17:75:88:cd:ed:7e:dc:14:72:06:2f:45:0a: 0a:2a:d9:06:d1:4c:fa:54:f0:e0:71:f9:f5:99:ff: 56:5d:e8:c1:49:0e:b0:b5:aa:33:33:77:3b:4e:76: ac:27:3d:3c:38:3a:3f:5e:0f:83:8d:46:ae:85:04: 17:6f:51:83:51:1e:ec:fb:1f:33:35:b4:a6:6b:93: bd:32:c2:6d:cd:a7:38:be:08:de:35:36:99:3e:da: d6:bd:a8:dc:8f:2a:57:ec:40:b6:1e:53:6d:57:21: 67:30:ee:88:59:69:92:aa:2f:f3:5f:73:aa:d6:2f: dc:67:29:4a:71:11:f2:77:b6:83:7e:a3:bf:32:e9: a0:40:35:7a:11:cf:dd:6f:06:57:36:81:13:b1:5b: 63:8c:b7:4f:3e:cd:7a:d8:93:5d:6f:8c:06:53:8b: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:16:0C:F0:41:AE:1E:2E:5F:29:01:28:83:15:6A:98:82:60:9E:E3 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1RYM8EGuHi5fKQEogxVqmIJgnuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.104.0/24 Signature Algorithm: sha256WithRSAEncryption 96:76:00:e8:26:bf:c3:b2:24:97:01:c9:cf:d0:f6:e1:72:d7: 1f:7c:2b:d0:ec:bd:e6:79:b0:b9:81:2a:a5:fb:f4:44:98:35: a9:25:98:5a:a6:05:9d:33:49:13:5d:79:3b:14:9b:50:34:44: 9a:3e:c7:fa:4b:19:b8:75:93:64:78:e4:f3:83:2e:5e:d6:1d: b6:4d:fa:e5:13:a8:88:ee:91:dd:ef:11:ce:4b:b9:a1:76:5e: 91:af:8c:7e:d0:b2:27:ec:b8:a1:14:59:7f:62:ad:9e:ba:a3: 44:c4:0b:36:93:cb:60:41:e1:fd:dd:69:00:df:9c:96:4f:07: ee:61:a2:b9:d4:69:9c:56:c8:98:f9:4c:0d:fb:ad:01:43:e5: 7e:24:ed:3f:33:e6:9a:44:ac:b1:b0:71:b7:b1:1a:18:ba:df: 00:1b:e6:3b:60:f6:11:3d:db:63:6c:f4:40:63:5b:f5:f7:79: fb:bb:f0:0d:9a:0f:04:1d:3d:5a:98:06:a2:07:18:25:60:2d: 3d:e7:df:4e:51:39:4c:be:b3:0c:fb:f6:5a:63:8b:22:20:aa: 80:b3:5e:14:70:91:fa:b9:31:36:a1:0a:fa:44:2e:36:73:8d: 86:5f:b3:6b:6e:8b:ee:02:45:78:f9:6a:db:c3:2c:89:85:03: 3f:2c:93:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHFfudy1Rdw9yPxdrcgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTE2MGNmMDQxYWUxZTJlNWYyOTAxMjg4MzE1NmE5ODgyNjA5ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58t64xZaJT7o2mrv05oiDfnV0YnZ tQ0MSHkTRHps4fYoQBQIzrMAdxQfO/Vq7sstf/7lmpm16ID95Q59tb8TYMckilEv 7DXeS5weEbN7fr3sPz6tqstaVwKFZBd1iM3tftwUcgYvRQoKKtkG0Uz6VPDgcfn1 mf9WXejBSQ6wtaozM3c7TnasJz08ODo/Xg+DjUauhQQXb1GDUR7s+x8zNbSma5O9 MsJtzac4vgjeNTaZPtrWvajcjypX7EC2HlNtVyFnMO6IWWmSqi/zX3Oq1i/cZylK cRHyd7aDfqO/MumgQDV6Ec/dbwZXNoETsVtjjLdPPs162JNdb4wGU4vvewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUWDPBBrh4uXykBKIMVapiCYJ7jMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvMVJZTThFR3VIaTVmS1FFb2d4VnFtSUpnbnVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwetoMA0G CSqGSIb3DQEBCwUAA4IBAQCWdgDoJr/DsiSXAcnP0PbhctcffCvQ7L3mebC5gSql +/REmDWpJZhapgWdM0kTXXk7FJtQNESaPsf6Sxm4dZNkeOTzgy5e1h22TfrlE6iI 7pHd7xHOS7mhdl6Rr4x+0LIn7LihFFl/Yq2euqNExAs2k8tgQeH93WkA35yWTwfu YaK51GmcVsiY+UwN+60BQ+V+JO0/M+aaRKyxsHG3sRoYut8AG+Y7YPYRPdtjbPRA Y1v193n7u/ANmg8EHT1amAaiBxglYC09599OUTlMvrMM+/ZaY4siIKqAs14UcJH6 uTE2oQr6RC42c42GX7NrbovuAkV4+WrbwyyJhQM/LJPE -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:22 2026 by rpki-client