This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9zgOHeinE_uWlIUhXH9QkvzuKeE.roa File: 9zgOHeinE_uWlIUhXH9QkvzuKeE.roa (raw, json) Hash identifier: 3Jhkbb45yIXzBJsrPHOMGSWkmVqheLNjkQxbyWzWVas= Subject key identifier: F7:38:0E:1D:E8:A7:13:FB:96:94:85:21:5C:7F:50:92:FC:EE:29:E1 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349D97FAACF3940DD5E47281090F81 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9zgOHeinE_uWlIUhXH9QkvzuKeE.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216350 IP address blocks: 192.165.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9d:97:fa:ac:f3:94:0d:d5:e4:72:81:09:0f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7380e1de8a713fb969485215c7f5092fcee29e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:3b:32:9c:38:27:2f:28:47:04:5a:0d:1a: 50:04:c2:ad:f0:90:0a:55:4c:bf:1a:3d:55:fd:73: fd:64:5a:15:e6:03:cd:a6:f8:3b:32:08:9c:58:f1: 66:1c:2e:ca:ad:0c:82:b4:a7:0d:42:86:7b:04:cd: 24:7e:69:26:2e:75:2d:e0:b8:5f:26:3a:f5:1a:40: 93:87:48:4f:90:d2:0b:5d:be:1a:44:99:68:4a:bb: 2e:47:d4:e5:30:54:3f:a4:46:d0:c2:81:75:25:72: 2e:e6:fb:f2:a8:c0:64:36:b0:35:79:70:72:cf:5e: c1:af:5b:95:8b:98:df:f8:28:fd:bc:a5:42:5e:ec: 2d:d2:46:99:67:a6:aa:48:ba:af:e1:39:19:6e:ce: 18:0a:99:32:51:3c:1d:1e:3c:9b:3b:1c:dd:f4:ad: 66:d5:70:56:e2:7a:24:0f:7d:70:9e:65:6a:2e:15: ed:4a:e6:a1:0a:ad:6c:67:79:e7:88:cc:69:1f:aa: 15:6c:0f:87:0e:6b:88:91:aa:9c:82:aa:30:ef:d5: 56:51:f8:33:11:36:26:d5:b5:ba:da:19:5f:b0:b0: fb:40:92:58:ef:e8:5e:0a:00:c9:7a:bc:28:4b:a0: 63:81:29:ea:95:9c:39:bb:a8:e2:19:5d:ef:ba:8b: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:0E:1D:E8:A7:13:FB:96:94:85:21:5C:7F:50:92:FC:EE:29:E1 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9zgOHeinE_uWlIUhXH9QkvzuKeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.83.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c5:1d:9a:4c:2f:a7:b7:7d:83:0e:8b:01:b7:12:30:d9:2a: 05:07:f5:72:ca:5d:05:6c:a9:9c:3b:0c:b3:9b:b2:65:6e:1e: 5e:a4:90:06:42:f1:66:68:d8:9c:32:6c:e3:86:4f:6b:a3:9c: 40:53:7f:c3:99:94:9d:87:7f:37:39:4b:c2:c0:38:08:92:be: 47:97:ee:6e:ac:d7:1e:26:59:41:67:43:ef:8e:66:ea:df:24: 3b:19:16:e1:c5:67:83:80:16:ad:a1:c5:ee:40:5d:e1:2e:15: b0:b1:b5:77:9b:47:83:46:0e:53:6d:61:93:83:c5:18:c3:59: 96:20:00:98:34:21:22:ee:bb:56:c3:f1:08:86:a3:17:e0:60: 4d:95:b1:2a:66:c6:7d:26:8f:eb:fb:77:04:49:75:07:fe:4d: d3:06:96:36:1a:83:72:2b:de:2f:07:d1:d4:85:3d:2b:3b:a2: d3:98:c1:a1:f2:e3:eb:d5:d0:22:f0:82:e6:f1:cb:22:80:c9: c6:33:8a:91:74:7f:70:25:a7:bf:42:34:7f:5f:4e:cd:e9:bb: f6:43:21:bd:9f:02:21:3c:1c:a3:85:2d:88:b4:5a:00:a1:7f: 6e:84:22:2c:41:1a:99:a3:c0:65:61:4e:77:50:30:32:ad:e3: db:b8:2c:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJ2X+qzzlA3V5HKBCQ+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzM4MGUxZGU4YTcxM2ZiOTY5NDg1MjE1YzdmNTA5MmZjZWUyOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2I7Mpw4Jy8oRwRaDRpQBMKt8JAK VUy/Gj1V/XP9ZFoV5gPNpvg7MgicWPFmHC7KrQyCtKcNQoZ7BM0kfmkmLnUt4Lhf Jjr1GkCTh0hPkNILXb4aRJloSrsuR9TlMFQ/pEbQwoF1JXIu5vvyqMBkNrA1eXBy z17Br1uVi5jf+Cj9vKVCXuwt0kaZZ6aqSLqv4TkZbs4YCpkyUTwdHjybOxzd9K1m 1XBW4nokD31wnmVqLhXtSuahCq1sZ3nniMxpH6oVbA+HDmuIkaqcgqow79VWUfgz ETYm1bW62hlfsLD7QJJY7+heCgDJerwoS6BjgSnqlZw5u6jiGV3vuouBqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPc4Dh3opxP7lpSFIVx/UJL87inhMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvOXpnT0hlaW5FX3VXbElVaFhIOVFrdnp1S2VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKVTMA0G CSqGSIb3DQEBCwUAA4IBAQCHxR2aTC+nt32DDosBtxIw2SoFB/Vyyl0FbKmcOwyz m7Jlbh5epJAGQvFmaNicMmzjhk9ro5xAU3/DmZSdh383OUvCwDgIkr5Hl+5urNce JllBZ0Pvjmbq3yQ7GRbhxWeDgBatocXuQF3hLhWwsbV3m0eDRg5TbWGTg8UYw1mW IACYNCEi7rtWw/EIhqMX4GBNlbEqZsZ9Jo/r+3cESXUH/k3TBpY2GoNyK94vB9HU hT0rO6LTmMGh8uPr1dAi8ILm8csigMnGM4qRdH9wJae/QjR/X07N6bv2QyG9nwIh PByjhS2ItFoAoX9uhCIsQRqZo8BlYU53UDAyrePbuCxj -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:26 2026 by rpki-client