This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6ZTwWc6BBeAb_niP2KeAgPCPmWk.roa File: 6ZTwWc6BBeAb_niP2KeAgPCPmWk.roa (raw, json) Hash identifier: XY0PhWVa4r5u3nd8+nTsk8teRdvZyq/2TiBlocFWC9A= Subject key identifier: E9:94:F0:59:CE:81:05:E0:1B:FE:78:8F:D8:A7:80:80:F0:8F:99:69 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78347A2986E39C15987FF1D4375357A0 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6ZTwWc6BBeAb_niP2KeAgPCPmWk.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199902 IP address blocks: 192.36.83.0/24 maxlen: 24 192.36.97.0/24 maxlen: 24 192.71.188.0/24 maxlen: 24 192.71.190.0/24 maxlen: 24 192.71.191.0/24 maxlen: 24 192.121.3.0/24 maxlen: 24 192.121.120.0/24 maxlen: 24 2a01:280:300::/48 maxlen: 48 2a01:280:301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7a:29:86:e3:9c:15:98:7f:f1:d4:37:53:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e994f059ce8105e01bfe788fd8a78080f08f9969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:49:a3:c2:88:ed:44:c2:33:6a:74:0f:8d: 98:d5:e4:0a:fe:a9:a5:eb:73:49:9e:1c:c5:2d:90: b3:cd:1b:2e:38:d3:0c:78:74:48:56:56:d3:5f:54: 7d:82:c5:ee:85:6e:91:40:89:bb:13:12:63:ab:d0: c4:fb:56:71:53:71:c9:5c:5d:92:3d:17:22:d4:a0: f5:d1:ef:75:1e:b7:be:1d:c5:11:81:8b:de:2d:78: de:a9:29:67:0a:ec:e6:22:7a:17:2e:3d:a4:3e:d5: 63:1e:95:fe:17:a9:e9:39:99:6c:99:3c:d8:5d:49: f3:f2:49:67:41:8d:ec:0a:4e:f9:48:37:2c:ce:98: f1:a6:9c:5f:d7:a9:71:96:13:33:6a:be:8d:c5:b5: 51:ec:3d:7c:26:aa:5f:64:a2:60:30:49:58:0c:2f: 1c:24:9e:b9:09:2f:d2:e4:48:b9:c0:84:d4:9f:26: 90:3b:af:10:b8:16:24:75:a2:44:75:af:e0:ad:00: 75:1c:31:e1:e9:47:99:40:d0:1d:1c:95:d5:86:3c: db:ec:8c:25:80:8d:39:1c:19:91:99:cf:48:c8:bc: b7:de:5b:64:31:d2:ea:4e:80:67:77:ed:c0:e6:0f: da:7b:b2:fc:8e:37:65:fe:5a:5d:7b:39:33:c2:52: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:F0:59:CE:81:05:E0:1B:FE:78:8F:D8:A7:80:80:F0:8F:99:69 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6ZTwWc6BBeAb_niP2KeAgPCPmWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.83.0/24 192.36.97.0/24 192.71.188.0/24 192.71.190.0/23 192.121.3.0/24 192.121.120.0/24 IPv6: 2a01:280:300::/47 Signature Algorithm: sha256WithRSAEncryption 4c:39:6a:60:2b:e1:60:9c:f5:5d:a5:b5:53:c0:3b:4e:49:67: 4f:a2:9d:72:af:43:c9:0f:94:90:df:98:8b:0c:4e:d6:f4:94: 91:7c:e4:a3:21:b0:00:fd:ad:ca:be:88:f0:d8:71:5d:02:10: 8b:1c:36:75:7f:88:c9:d2:cd:ed:0d:17:b8:af:94:9f:97:98: 22:c4:07:38:86:cc:90:2c:de:0a:65:9e:fc:74:36:1e:db:76: 5b:0b:56:d4:ac:3a:73:a5:40:51:d1:9c:6d:81:3e:12:1e:75: 42:d5:e9:c2:52:3a:dd:86:c9:73:ec:3d:34:66:e8:32:96:d6: 27:67:6e:e9:4b:84:46:ce:2b:83:bb:18:08:8b:2f:ad:da:fa: 94:a8:0a:83:19:2f:bc:07:37:e1:74:57:85:2b:e0:2b:58:63: 01:94:3e:e6:72:28:0a:97:4e:08:9f:08:0f:80:2c:27:d5:82: e2:18:57:07:5e:d7:5d:ce:83:7e:a0:c5:eb:00:0f:c0:1d:74: 84:28:1a:09:20:82:fb:81:59:32:04:8a:74:59:11:c9:67:a5: da:16:c1:02:7c:98:6c:d7:16:d5:bf:82:9e:c7:e3:49:0b:b3: 91:c6:d1:e5:a6:c2:71:9f:df:d5:50:24:b6:7f:d2:e8:58:ff: 86:41:bc:86 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt4NHophuOcFZh/8dQ3U1egMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTk0ZjA1OWNlODEwNWUwMWJmZTc4OGZkOGE3ODA4MGYwOGY5OTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy1Jo8KI7UTCM2p0D42Y1eQK/qml 63NJnhzFLZCzzRsuONMMeHRIVlbTX1R9gsXuhW6RQIm7ExJjq9DE+1ZxU3HJXF2S PRci1KD10e91Hre+HcURgYveLXjeqSlnCuzmInoXLj2kPtVjHpX+F6npOZlsmTzY XUnz8klnQY3sCk75SDcszpjxppxf16lxlhMzar6NxbVR7D18JqpfZKJgMElYDC8c JJ65CS/S5Ei5wITUnyaQO68QuBYkdaJEda/grQB1HDHh6UeZQNAdHJXVhjzb7Iwl gI05HBmRmc9IyLy33ltkMdLqToBnd+3A5g/ae7L8jjdl/lpdezkzwlKyqwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFOmU8FnOgQXgG/54j9ingIDwj5lpMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvNlpUd1djNkJCZUFiX25pUDJLZUFnUENQbVdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQAwCRTAwQA wCRhAwQAwEe8AwQBwEe+AwQAwHkDAwQAwHl4MA8EAgACMAkDBwEqAQKAAwAwDQYJ KoZIhvcNAQELBQADggEBAEw5amAr4WCc9V2ltVPAO05JZ0+inXKvQ8kPlJDfmIsM Ttb0lJF85KMhsAD9rcq+iPDYcV0CEIscNnV/iMnSze0NF7ivlJ+XmCLEBziGzJAs 3gplnvx0Nh7bdlsLVtSsOnOlQFHRnG2BPhIedULV6cJSOt2GyXPsPTRm6DKW1idn bulLhEbOK4O7GAiLL63a+pSoCoMZL7wHN+F0V4Ur4CtYYwGUPuZyKAqXTgifCA+A LCfVguIYVwde113Og36gxesAD8AddIQoGgkggvuBWTIEinRZEclnpdoWwQJ8mGzX FtW/gp7H40kLs5HG0eWmwnGf39VQJLZ/0uhY/4ZBvIY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:10 2026 by rpki-client