This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Awlc8vmgLVfCfsqVkvq790mRHVY.roa File: Awlc8vmgLVfCfsqVkvq790mRHVY.roa (raw, json) Hash identifier: gSqiAx1JFuCMiJCKwUwejDQP0p6fEO83GFwvI18w0Bw= Subject key identifier: 03:09:5C:F2:F9:A0:2D:57:C2:7E:CA:95:92:FA:BB:F7:49:91:1D:56 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346206F11D0F9C5E1683792C053B18 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Awlc8vmgLVfCfsqVkvq790mRHVY.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47527 IP address blocks: 192.121.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:62:06:f1:1d:0f:9c:5e:16:83:79:2c:05:3b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03095cf2f9a02d57c27eca9592fabbf749911d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:84:3a:cc:d3:07:65:59:10:70:55:bc:a3: b0:48:89:f9:52:c2:b9:50:25:ba:07:ab:ee:39:06: 8b:8b:c6:72:4d:41:d8:c2:9c:eb:4b:a3:25:52:d0: 88:33:9c:da:3f:67:6d:97:26:00:0b:45:8d:f5:26: e8:35:b6:71:fa:22:5a:5a:92:96:97:b9:15:a0:c3: 66:7e:d5:b4:73:31:6b:7f:2f:5e:47:51:54:f1:02: 4d:8e:6f:38:c2:40:48:9f:e6:04:49:2f:9b:0c:16: dc:d3:ad:0b:4d:71:58:89:a2:66:01:0f:4d:d6:7b: 1e:11:09:63:3c:2d:86:55:5d:08:7d:5f:3e:e7:0e: 82:39:78:fe:63:bc:b7:d0:67:ad:21:3d:8d:8d:fe: a7:5d:17:e5:9f:78:21:2f:32:c3:db:ba:82:60:bc: 8c:7b:12:c4:3b:ec:cc:22:37:3b:72:5f:35:7a:96: 54:74:6c:ef:4f:b3:c3:54:10:87:3e:5a:1c:cc:36: 08:c3:a3:38:fc:b4:73:f8:1f:e5:2d:cd:99:54:1a: c8:cf:b4:cf:87:ab:09:d1:86:15:dd:8a:8c:ad:c5: 18:73:57:e1:4c:d9:38:50:8e:91:4a:bc:cb:9b:ae: 88:c1:a3:aa:70:c5:67:d2:5b:74:3b:38:b4:73:7d: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:09:5C:F2:F9:A0:2D:57:C2:7E:CA:95:92:FA:BB:F7:49:91:1D:56 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Awlc8vmgLVfCfsqVkvq790mRHVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.236.0/24 Signature Algorithm: sha256WithRSAEncryption 47:61:51:90:49:33:18:0e:c3:00:2d:22:96:69:f4:0d:8a:c8: 97:88:03:26:ce:24:7a:94:97:a6:76:6b:cc:c9:73:b0:70:b8: e2:23:e8:d0:84:83:9b:35:a1:b6:0b:ae:cb:a5:3e:5f:15:6b: 0d:22:cd:18:e1:69:9c:35:9d:13:09:4c:73:30:05:96:a6:cf: 53:04:55:ba:0f:c5:06:10:b0:b7:fd:ae:e1:09:43:37:31:7a: 42:e1:46:49:bb:73:bd:f8:2a:ca:c3:73:4b:6b:98:8f:c5:03: e3:b0:2b:55:22:ad:a8:14:4e:af:aa:fc:c4:4f:01:8d:58:30: 42:e6:cd:ea:82:f3:83:ad:72:58:0a:db:e5:4b:b2:d8:d5:cc: f8:ce:d1:12:5e:b1:57:19:90:04:10:91:df:db:61:8e:c2:f3: 03:e1:6b:3c:f1:fa:bb:51:83:25:1a:b7:ca:ba:62:3e:a7:c6: 5b:2d:d9:c2:f5:8f:08:da:0d:5c:39:04:c4:64:fc:21:d7:29: f0:70:ac:d2:11:6f:3d:90:e5:bf:00:45:e8:77:39:2a:8c:e7: 30:cd:ea:5c:39:fa:55:2b:7b:b4:cd:c0:fe:72:1d:3e:0b:a7: 58:33:dd:1d:35:e1:52:37:52:42:18:3f:fd:fa:b5:2f:22:e2: 29:b8:43:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGIG8R0PnF4Wg3ksBTsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzA5NWNmMmY5YTAyZDU3YzI3ZWNhOTU5MmZhYmJmNzQ5OTExZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEOEOszTB2VZEHBVvKOwSIn5UsK5 UCW6B6vuOQaLi8ZyTUHYwpzrS6MlUtCIM5zaP2dtlyYAC0WN9SboNbZx+iJaWpKW l7kVoMNmftW0czFrfy9eR1FU8QJNjm84wkBIn+YESS+bDBbc060LTXFYiaJmAQ9N 1nseEQljPC2GVV0IfV8+5w6COXj+Y7y30GetIT2Njf6nXRfln3ghLzLD27qCYLyM exLEO+zMIjc7cl81epZUdGzvT7PDVBCHPloczDYIw6M4/LRz+B/lLc2ZVBrIz7TP h6sJ0YYV3YqMrcUYc1fhTNk4UI6RSrzLm66IwaOqcMVn0lt0Ozi0c31uNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAMJXPL5oC1Xwn7KlZL6u/dJkR1WMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQXdsYzh2bWdMVmZDZnNxVmt2cTc5MG1SSFZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHnsMA0G CSqGSIb3DQEBCwUAA4IBAQBHYVGQSTMYDsMALSKWafQNisiXiAMmziR6lJemdmvM yXOwcLjiI+jQhIObNaG2C67LpT5fFWsNIs0Y4WmcNZ0TCUxzMAWWps9TBFW6D8UG ELC3/a7hCUM3MXpC4UZJu3O9+CrKw3NLa5iPxQPjsCtVIq2oFE6vqvzETwGNWDBC 5s3qgvODrXJYCtvlS7LY1cz4ztESXrFXGZAEEJHf22GOwvMD4Ws88fq7UYMlGrfK umI+p8ZbLdnC9Y8I2g1cOQTEZPwh1ynwcKzSEW89kOW/AEXodzkqjOcwzepcOfpV K3u0zcD+ch0+C6dYM90dNeFSN1JCGD/9+rUvIuIpuEP5 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:40 2026 by rpki-client