This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9nxe4WHQqmiqfdbNC4j-RqKJXd4.roa File: 9nxe4WHQqmiqfdbNC4j-RqKJXd4.roa (raw, json) Hash identifier: lmvqHDuYsqIaAZ/1Wx4jM9yiL+N1B2LOG/lIUs1c5C0= Subject key identifier: F6:7C:5E:E1:61:D0:AA:68:AA:7D:D6:CD:0B:88:FE:46:A2:89:5D:DE Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019AC9D291FF1326BF326108DF7F0F7AFA89 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9nxe4WHQqmiqfdbNC4j-RqKJXd4.roa Signing time: Fri 28 Nov 2025 09:36:51 +0000 ROA not before: Fri 28 Nov 2025 09:36:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212725 IP address blocks: 193.181.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:d2:91:ff:13:26:bf:32:61:08:df:7f:0f:7a:fa:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 28 09:36:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f67c5ee161d0aa68aa7dd6cd0b88fe46a2895dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:bd:65:29:f1:77:37:e1:2c:cf:42:78:e0: c9:37:4a:d2:e0:a1:45:8a:26:50:dc:e8:6e:e5:76: 06:b5:00:36:e9:b6:bd:39:08:11:bf:1e:5b:6d:76: 1d:09:e5:28:dd:92:43:d6:34:5a:bb:b6:04:3a:8f: 3a:da:1f:18:a3:f5:98:a6:99:9c:3d:fa:db:4f:19: 61:d2:43:1a:13:38:7c:37:e3:4c:97:f2:6c:88:3f: 7b:a8:9b:63:83:b7:77:9b:4b:cd:86:f9:39:b5:a3: 38:43:3c:e7:02:e2:23:d5:5d:9c:8a:d1:ab:ce:23: 22:25:e5:7b:69:36:c5:7b:f4:e3:e4:a2:41:a0:af: b9:8f:13:bb:0a:b1:0e:37:d7:60:d8:02:0f:32:87: dd:38:32:bf:3c:45:5e:9d:30:b5:d6:c5:a3:a6:dc: cd:b5:77:1c:e9:5c:6c:80:2d:02:9b:74:6a:fb:2a: 60:49:ab:31:67:69:82:53:65:49:cb:40:ac:f4:0e: c7:cf:55:cf:13:df:cd:d0:15:bf:b2:b7:7a:9f:0a: a0:06:f6:bc:af:76:38:da:64:c9:e6:ae:0f:c9:63: 2d:1a:86:0a:4a:4a:f7:3c:00:53:35:a3:9f:9a:36: 7b:ec:8d:82:07:84:df:05:b8:ee:47:9d:12:17:65: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7C:5E:E1:61:D0:AA:68:AA:7D:D6:CD:0B:88:FE:46:A2:89:5D:DE X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9nxe4WHQqmiqfdbNC4j-RqKJXd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.181.160.0/24 Signature Algorithm: sha256WithRSAEncryption b1:0e:4c:e9:d9:5e:d0:3a:a2:9a:b9:77:1d:7c:a7:89:6a:01: 1d:92:dc:0a:3b:26:6d:97:7d:01:2c:d3:cf:97:eb:20:1d:a5: 8a:9c:d8:5d:35:c1:b5:d8:7b:63:8b:82:ef:c0:32:6f:d3:0f: 05:67:8f:9f:60:23:99:92:7c:01:0c:46:67:c0:02:9a:64:1f: 3e:e3:15:65:16:54:10:07:9a:7a:1e:43:53:40:75:4e:92:8c: 2e:e6:c0:34:f9:c1:1e:1b:e6:77:b1:70:a2:4f:a0:1c:f5:7f: 03:73:3f:b8:d9:9b:1a:c7:99:bc:54:75:43:aa:f7:c2:2e:6b: 2e:4e:48:01:7d:d0:d6:fe:bc:6d:e5:d9:8a:0a:04:1b:e6:5a: 2d:9e:42:71:9f:c8:0e:3e:f1:60:84:24:d9:b6:4c:cb:a5:9b: a5:d3:44:cb:fe:c3:1e:98:a2:21:3d:03:c5:11:a0:75:5e:f9: c8:83:c0:14:00:e3:e6:8b:1d:a0:7e:b9:a4:d5:5a:96:8b:e1: f5:54:fb:87:b0:9c:98:59:e0:c7:ae:20:5f:05:e1:c8:0f:6d: bd:6e:55:5e:38:ac:0a:18:bf:a2:d9:eb:f3:c9:83:c3:7e:59: b3:a3:da:6e:f4:b6:79:54:f9:bc:2f:7a:b9:c9:bd:65:82:a2: f0:db:15:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJ0pH/Eya/MmEI338PevqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTI4MDkzNjUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjdjNWVlMTYxZDBhYTY4YWE3ZGQ2Y2QwYjg4ZmU0NmEyODk1ZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIe9ZSnxdzfhLM9CeODJN0rS4KFF iiZQ3Ohu5XYGtQA26ba9OQgRvx5bbXYdCeUo3ZJD1jRau7YEOo862h8Yo/WYppmc PfrbTxlh0kMaEzh8N+NMl/JsiD97qJtjg7d3m0vNhvk5taM4QzznAuIj1V2citGr ziMiJeV7aTbFe/Tj5KJBoK+5jxO7CrEON9dg2AIPMofdODK/PEVenTC11sWjptzN tXcc6VxsgC0Cm3Rq+ypgSasxZ2mCU2VJy0Cs9A7Hz1XPE9/N0BW/srd6nwqgBva8 r3Y42mTJ5q4PyWMtGoYKSkr3PABTNaOfmjZ77I2CB4TfBbjuR50SF2XVrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZ8XuFh0Kpoqn3WzQuI/kaiiV3eMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvOW54ZTRXSFFxbWlxZmRiTkM0ai1ScUtKWGQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbWgMA0G CSqGSIb3DQEBCwUAA4IBAQCxDkzp2V7QOqKauXcdfKeJagEdktwKOyZtl30BLNPP l+sgHaWKnNhdNcG12Htji4LvwDJv0w8FZ4+fYCOZknwBDEZnwAKaZB8+4xVlFlQQ B5p6HkNTQHVOkowu5sA0+cEeG+Z3sXCiT6Ac9X8Dcz+42Zsax5m8VHVDqvfCLmsu TkgBfdDW/rxt5dmKCgQb5lotnkJxn8gOPvFghCTZtkzLpZul00TL/sMemKIhPQPF EaB1XvnIg8AUAOPmix2gfrmk1VqWi+H1VPuHsJyYWeDHriBfBeHID229blVeOKwK GL+i2evzyYPDflmzo9pu9LZ5VPm8L3q5yb1lgqLw2xWR -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:51 2025 by rpki-client