This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AXQSQv1rG9L77mhrZolv65zfTTA.roa File: AXQSQv1rG9L77mhrZolv65zfTTA.roa (raw, json) Hash identifier: 3JzLqEtH+tfOAdRy9hruT0LqadaCu1jqHY538hswXa4= Subject key identifier: 01:74:12:42:FD:6B:1B:D2:FB:EE:68:6B:66:89:6F:EB:9C:DF:4D:30 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345F8E0F3BAEF3754C3F5360633D52 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AXQSQv1rG9L77mhrZolv65zfTTA.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44136 IP address blocks: 193.180.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5f:8e:0f:3b:ae:f3:75:4c:3f:53:60:63:3d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01741242fd6b1bd2fbee686b66896feb9cdf4d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:2f:ea:e9:d6:bb:4a:39:6c:42:f4:56:51: 5f:ad:5f:80:02:66:6b:91:b0:63:34:1b:2a:0f:f9: 68:e8:2c:25:69:cf:ca:60:c9:29:4f:5e:7c:fa:51: 7f:c5:fc:c1:6c:f6:06:8a:ef:bc:60:83:62:97:d8: 6d:87:03:77:ed:91:04:d7:12:49:1a:f7:26:1c:f3: 70:b2:99:bb:35:bf:09:b6:98:7d:f8:5a:50:9e:b0: 0b:85:e2:46:ba:60:11:e1:8a:c6:d0:3a:83:b2:9f: dd:af:93:fd:47:f1:d7:87:61:ee:cb:1e:9c:b5:14: 50:3d:f0:e0:b9:2f:dc:e7:46:f4:4d:d8:4f:1e:56: cf:9a:38:bf:61:75:15:83:6f:8c:81:ea:66:cd:56: 68:71:3c:d3:d2:21:c1:fa:99:81:a1:dd:2f:90:f0: df:dd:4e:e2:60:7b:61:8a:ed:22:5e:cf:41:95:8e: 7c:7a:e0:ab:aa:25:ad:81:93:19:c7:e9:f1:28:45: d3:eb:a0:0c:03:4e:67:c3:c3:17:4f:0f:ba:c3:0b: 73:1b:6c:e7:ff:b9:15:6e:5b:f0:13:f3:bf:d6:bf: 18:b2:e3:5d:fe:3a:9a:4f:50:56:23:cf:80:e4:2b: af:b8:83:0d:6a:f8:4a:9e:79:0d:66:92:6a:89:03: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:12:42:FD:6B:1B:D2:FB:EE:68:6B:66:89:6F:EB:9C:DF:4D:30 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AXQSQv1rG9L77mhrZolv65zfTTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.18.0/23 Signature Algorithm: sha256WithRSAEncryption 43:cd:0d:c2:37:11:ec:77:af:cc:f1:38:e2:e2:bc:5d:d3:0d: e6:1c:37:32:0e:d4:08:8a:a5:04:98:48:a6:a2:8f:ac:a8:29: a7:1f:cc:dc:bc:79:75:79:2c:8f:01:b4:d9:bb:97:37:db:a1: 06:01:48:2f:b3:d7:55:ca:9d:d9:1e:65:1b:c0:ee:d0:78:10: e9:61:4a:54:3d:d7:6b:9c:8e:e7:d9:0e:31:7a:9f:13:b2:44: f6:75:0a:5b:7b:42:c1:50:b3:a8:b9:37:9c:8d:f6:df:36:f5: bd:47:2d:06:5c:c2:a4:f4:87:67:9a:82:d0:cd:0e:45:4b:ae: 2a:8f:bf:44:ad:41:c7:96:09:61:15:8f:f2:7b:95:82:77:f8: 5b:2c:d1:f4:22:f3:03:49:e9:ea:47:dc:70:36:26:df:24:d5: 36:b2:b0:46:a4:da:87:97:19:e0:fe:54:f7:35:96:e4:4e:ce: d1:87:ce:ba:c4:56:30:66:26:6d:ec:3b:a2:ce:b8:4b:b8:67: 1b:ad:56:30:c4:56:47:9a:87:05:6a:5b:9c:1f:03:c0:53:09: a9:66:d4:91:9a:f9:21:17:1f:c0:8f:b2:ca:fa:04:62:79:6f: 57:03:75:4c:35:e0:9e:6a:5d:26:d1:07:68:8d:92:26:5f:5f: 08:1d:c6:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NF+ODzuu83VMP1NgYz1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTc0MTI0MmZkNmIxYmQyZmJlZTY4NmI2Njg5NmZlYjljZGY0ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZIv6unWu0o5bEL0VlFfrV+AAmZr kbBjNBsqD/lo6Cwlac/KYMkpT158+lF/xfzBbPYGiu+8YINil9hthwN37ZEE1xJJ GvcmHPNwspm7Nb8Jtph9+FpQnrALheJGumAR4YrG0DqDsp/dr5P9R/HXh2Huyx6c tRRQPfDguS/c50b0TdhPHlbPmji/YXUVg2+MgepmzVZocTzT0iHB+pmBod0vkPDf 3U7iYHthiu0iXs9BlY58euCrqiWtgZMZx+nxKEXT66AMA05nw8MXTw+6wwtzG2zn /7kVblvwE/O/1r8YsuNd/jqaT1BWI8+A5CuvuIMNavhKnnkNZpJqiQOs5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAF0EkL9axvS++5oa2aJb+uc300wMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQVhRU1F2MXJHOUw3N21oclpvbHY2NXpmVFRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbQSMA0G CSqGSIb3DQEBCwUAA4IBAQBDzQ3CNxHsd6/M8Tji4rxd0w3mHDcyDtQIiqUEmEim oo+sqCmnH8zcvHl1eSyPAbTZu5c326EGAUgvs9dVyp3ZHmUbwO7QeBDpYUpUPddr nI7n2Q4xep8TskT2dQpbe0LBULOouTecjfbfNvW9Ry0GXMKk9IdnmoLQzQ5FS64q j79ErUHHlglhFY/ye5WCd/hbLNH0IvMDSenqR9xwNibfJNU2srBGpNqHlxng/lT3 NZbkTs7Rh866xFYwZiZt7DuizrhLuGcbrVYwxFZHmocFalucHwPAUwmpZtSRmvkh Fx/Aj7LK+gRieW9XA3VMNeCeal0m0QdojZImX18IHcY8 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:14 2026 by rpki-client