This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/93y7jagxC_0LCjUuCoTZpnqU_g8.roa File: 93y7jagxC_0LCjUuCoTZpnqU_g8.roa (raw, json) Hash identifier: IuN5gJjOB/AggbF+SzgkybfTE0YaP0gb+PCpjVyD+5Y= Subject key identifier: F7:7C:BB:8D:A8:31:0B:FD:0B:0A:35:2E:0A:84:D9:A6:7A:94:FE:0F Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346E653BDF4D9249C4513F8160C7F0 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/93y7jagxC_0LCjUuCoTZpnqU_g8.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53007 IP address blocks: 194.132.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6e:65:3b:df:4d:92:49:c4:51:3f:81:60:c7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f77cbb8da8310bfd0b0a352e0a84d9a67a94fe0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:eb:22:f2:2b:a3:8a:56:1e:b2:5b:91:0d: 5f:29:d7:86:01:80:a9:3f:63:fa:ef:40:07:65:54: 9c:84:f9:f5:0b:28:0f:a2:d9:27:98:a0:9f:51:0a: ad:5e:8b:e8:56:1d:92:79:9c:42:20:4f:40:44:84: d3:c5:ae:a0:71:4d:a6:04:2e:e8:18:9d:49:da:cf: 76:aa:11:2c:48:99:74:f2:f8:6a:b0:6c:ab:15:c0: 8f:22:a5:ed:ce:42:f8:b1:d5:53:df:a3:e4:1f:84: 96:88:09:5d:a8:c8:e2:44:56:a3:64:5e:37:cb:96: a7:cd:f0:fa:f6:49:ff:f2:a5:6e:4a:77:11:35:00: 03:60:5a:75:96:0a:60:fd:c1:0c:84:56:60:42:60: 88:e8:7c:90:e1:3e:28:2a:4d:30:c1:16:bf:08:b1: 3e:0f:2c:cf:92:a2:98:06:8b:9c:3b:e3:e3:ac:55: b1:f8:5c:f5:7c:58:71:69:66:7e:a8:04:9d:60:75: 6f:7f:97:b7:4f:94:c3:e7:ec:05:84:9d:bd:31:cf: b1:7c:eb:e1:8e:ed:cf:49:d0:0b:12:02:fb:c2:82: 52:44:95:8d:3f:7f:ad:1b:99:31:f3:e2:12:a7:d8: 8a:c4:75:02:79:67:d9:e9:e1:43:e5:17:28:34:ad: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7C:BB:8D:A8:31:0B:FD:0B:0A:35:2E:0A:84:D9:A6:7A:94:FE:0F X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/93y7jagxC_0LCjUuCoTZpnqU_g8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.132.122.0/24 Signature Algorithm: sha256WithRSAEncryption 06:df:db:82:a8:3c:a4:43:1c:32:80:51:05:22:fa:5e:2b:b8: aa:76:12:09:6b:e6:a0:cb:c5:11:c4:75:d1:7f:0f:86:4f:36: b3:a7:99:00:38:ab:1c:db:c7:e1:ad:d8:90:93:01:1b:72:a4: 1a:a9:75:90:85:90:8e:0a:e5:c1:81:63:3d:67:23:39:46:d7: 97:27:19:7c:6a:90:5a:06:a6:5b:7c:6b:d3:10:84:89:a0:33: 2c:db:7f:d3:3e:8b:4f:cd:a4:8d:84:97:9c:40:6e:c0:3b:2d: 60:88:69:30:66:23:5c:72:87:71:b9:66:a4:49:09:0d:ad:79: 31:5a:26:57:12:ea:1c:47:73:7b:e1:1e:db:9d:10:f2:37:90: 0b:2b:22:4b:7e:21:44:db:f9:bb:f1:be:d9:1f:d9:fe:11:3c: d2:eb:be:70:79:27:13:3b:d4:84:79:d2:cd:d5:b3:92:fd:65: a9:1a:5b:12:b1:3b:bb:5a:19:c2:d1:08:56:56:00:98:23:03: 28:76:7d:45:17:19:16:97:26:ee:e6:df:ca:cd:00:ed:12:7c: 6c:c4:73:bb:46:ce:92:b6:66:2a:9d:36:41:d1:25:0e:f4:b7: 74:f1:52:97:12:4a:0e:4b:25:9a:82:90:10:4c:d8:ca:b3:16: 0d:0f:5b:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NG5lO99NkknEUT+BYMfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzdjYmI4ZGE4MzEwYmZkMGIwYTM1MmUwYTg0ZDlhNjdhOTRmZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdHrIvIro4pWHrJbkQ1fKdeGAYCp P2P670AHZVSchPn1CygPotknmKCfUQqtXovoVh2SeZxCIE9ARITTxa6gcU2mBC7o GJ1J2s92qhEsSJl08vhqsGyrFcCPIqXtzkL4sdVT36PkH4SWiAldqMjiRFajZF43 y5anzfD69kn/8qVuSncRNQADYFp1lgpg/cEMhFZgQmCI6HyQ4T4oKk0wwRa/CLE+ DyzPkqKYBoucO+PjrFWx+Fz1fFhxaWZ+qASdYHVvf5e3T5TD5+wFhJ29Mc+xfOvh ju3PSdALEgL7woJSRJWNP3+tG5kx8+ISp9iKxHUCeWfZ6eFD5RcoNK0ZCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPd8u42oMQv9Cwo1LgqE2aZ6lP4PMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvOTN5N2phZ3hDXzBMQ2pVdUNvVFpwbnFVX2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoR6MA0G CSqGSIb3DQEBCwUAA4IBAQAG39uCqDykQxwygFEFIvpeK7iqdhIJa+agy8URxHXR fw+GTzazp5kAOKsc28fhrdiQkwEbcqQaqXWQhZCOCuXBgWM9ZyM5RteXJxl8apBa BqZbfGvTEISJoDMs23/TPotPzaSNhJecQG7AOy1giGkwZiNccodxuWakSQkNrXkx WiZXEuocR3N74R7bnRDyN5ALKyJLfiFE2/m78b7ZH9n+ETzS675weScTO9SEedLN 1bOS/WWpGlsSsTu7WhnC0QhWVgCYIwModn1FFxkWlybu5t/KzQDtEnxsxHO7Rs6S tmYqnTZB0SUO9Ld08VKXEkoOSyWagpAQTNjKsxYND1t/ -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:30 2026 by rpki-client