This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3Tsy0vw24bK9PjTohr9CP-IQau8.roa File: 3Tsy0vw24bK9PjTohr9CP-IQau8.roa (raw, json) Hash identifier: 7gvmakR7pJqS7cjxayUuKcyZum762PjnSK0jwvR/tTQ= Subject key identifier: DD:3B:32:D2:FC:36:E1:B2:BD:3E:34:E8:86:BF:42:3F:E2:10:6A:EF Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783478FF7941A7B7364A07979ADDBE74 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3Tsy0vw24bK9PjTohr9CP-IQau8.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199545 IP address blocks: 192.121.118.0/23 maxlen: 24 193.234.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:78:ff:79:41:a7:b7:36:4a:07:97:9a:dd:be:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd3b32d2fc36e1b2bd3e34e886bf423fe2106aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:21:8d:c5:99:7c:9c:6d:e3:b5:e0:00:6b: 26:fd:cc:84:6a:9f:67:a0:9f:5d:cf:18:87:69:5e: 4f:a1:f0:41:7e:30:72:3f:b6:0a:3c:94:c7:89:1f: ab:ff:6b:94:f3:18:7d:5f:ba:99:be:de:35:04:06: 3e:6a:b9:28:b8:7f:76:1d:41:4e:ce:28:06:21:74: 36:d0:d3:eb:7b:4e:07:c5:d3:05:f6:bd:04:05:25: db:51:bd:a0:f1:df:0c:59:a1:17:39:7b:00:99:ef: 72:49:bb:8d:88:4e:f3:46:ee:e9:dd:8c:4d:eb:2f: 56:1a:12:dc:a1:77:0f:1b:f9:d1:ab:c2:ee:d4:bd: 0b:47:3d:26:3d:b3:43:96:88:07:21:53:d3:4b:33: 42:88:7d:36:89:95:4e:a6:1b:cd:21:c1:83:5d:c8: db:75:1a:1a:ef:7e:dc:de:ab:c5:07:48:a0:55:b5: 24:69:cf:52:d3:ec:4e:8e:9a:71:60:b6:a5:8f:7f: 72:4f:60:e1:a8:9d:ff:fd:22:0e:87:b4:c5:75:a3: 78:ea:4d:5b:13:ce:08:0b:4f:9f:fd:1d:a9:37:c3: ad:7d:76:1f:26:33:a5:1f:7b:5d:5c:99:6e:4a:b5: 36:48:fb:76:f0:00:01:1b:56:86:42:fc:59:e3:16: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3B:32:D2:FC:36:E1:B2:BD:3E:34:E8:86:BF:42:3F:E2:10:6A:EF X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3Tsy0vw24bK9PjTohr9CP-IQau8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.118.0/23 193.234.88.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b5:a7:bc:5c:c7:25:56:79:3c:5f:9f:47:c9:86:e0:a7:03: 65:9d:cd:29:df:90:cf:83:1f:da:f9:c2:a3:58:28:fa:ec:6b: e1:27:f3:1b:fb:04:ef:d2:55:2f:b3:d3:e0:4e:2e:c8:8b:52: 65:f9:24:47:c6:13:fb:2b:3b:3a:ca:10:14:7c:24:54:1e:c1: c1:7d:da:42:5c:c2:b0:fd:2e:a1:ac:90:dc:41:45:e5:50:b9: bd:4a:9f:2a:b2:48:00:fb:a4:71:ff:18:11:65:1c:aa:9a:b1: 25:17:8f:6d:79:b6:8c:bd:83:77:c0:81:df:36:fd:72:11:3b: 67:4d:af:75:2a:16:a7:6b:a9:4a:5f:6f:39:e2:4a:b3:6a:4a: b9:ac:fc:92:c2:f1:f1:a1:4c:43:12:ba:d0:12:48:a9:a4:1b: 3a:0e:d0:a4:97:d4:34:6b:64:ca:e8:1e:38:02:a5:86:39:0e: 4c:ae:f6:b1:75:5e:95:68:16:f4:e8:74:30:b7:fe:5b:e6:0e: 8f:30:90:89:8a:24:2f:30:d5:99:fe:89:6f:f4:04:4c:dd:62: d1:8a:6f:1a:f6:6f:eb:df:c1:be:ad:49:e6:5f:e0:31:96:29: f7:77:10:61:37:31:f7:74:97:80:f9:27:ea:4c:bd:22:85:a7: 63:33:8c:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NHj/eUGntzZKB5ea3b50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDNiMzJkMmZjMzZlMWIyYmQzZTM0ZTg4NmJmNDIzZmUyMTA2YWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbwhjcWZfJxt47XgAGsm/cyEap9n oJ9dzxiHaV5PofBBfjByP7YKPJTHiR+r/2uU8xh9X7qZvt41BAY+arkouH92HUFO zigGIXQ20NPre04HxdMF9r0EBSXbUb2g8d8MWaEXOXsAme9ySbuNiE7zRu7p3YxN 6y9WGhLcoXcPG/nRq8Lu1L0LRz0mPbNDlogHIVPTSzNCiH02iZVOphvNIcGDXcjb dRoa737c3qvFB0igVbUkac9S0+xOjppxYLalj39yT2DhqJ3//SIOh7TFdaN46k1b E84IC0+f/R2pN8OtfXYfJjOlH3tdXJluSrU2SPt28AABG1aGQvxZ4xZUuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN07MtL8NuGyvT406Ia/Qj/iEGrvMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvM1RzeTB2dzI0Yks5UGpUb2hyOUNQLUlRYXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwHl2AwQA wepYMA0GCSqGSIb3DQEBCwUAA4IBAQBntae8XMclVnk8X59HyYbgpwNlnc0p35DP gx/a+cKjWCj67GvhJ/Mb+wTv0lUvs9PgTi7Ii1Jl+SRHxhP7Kzs6yhAUfCRUHsHB fdpCXMKw/S6hrJDcQUXlULm9Sp8qskgA+6Rx/xgRZRyqmrElF49tebaMvYN3wIHf Nv1yETtnTa91Khana6lKX2854kqzakq5rPySwvHxoUxDErrQEkippBs6DtCkl9Q0 a2TK6B44AqWGOQ5MrvaxdV6VaBb06HQwt/5b5g6PMJCJiiQvMNWZ/olv9ARM3WLR im8a9m/r38G+rUnmX+Axlin3dxBhNzH3dJeA+SfqTL0ihadjM4zE -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:47 2026 by rpki-client