This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BZuBEqHikCz6Bvq7yQRi3HAxgPo.roa File: BZuBEqHikCz6Bvq7yQRi3HAxgPo.roa (raw, json) Hash identifier: UtHdXCIAo6v2HjEWJm7xwZTEDw1zMXOnmEpytlq4TUI= Subject key identifier: 05:9B:81:12:A1:E2:90:2C:FA:06:FA:BB:C9:04:62:DC:70:31:80:FA Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345A84031A49B7614F40BA3D2FED0B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BZuBEqHikCz6Bvq7yQRi3HAxgPo.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42201 IP address blocks: 192.121.245.0/24 maxlen: 24 192.121.246.0/24 maxlen: 24 193.181.35.0/24 maxlen: 24 194.132.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5a:84:03:1a:49:b7:61:4f:40:ba:3d:2f:ed:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=059b8112a1e2902cfa06fabbc90462dc703180fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:9c:6f:e7:50:4a:83:46:68:02:15:2a:8d: cc:b5:6b:e8:2e:b0:dc:1d:e2:e8:40:aa:b6:22:d8: 63:cf:16:73:f9:af:68:ba:bc:9b:f1:68:e1:e8:bc: 26:f2:27:0b:07:77:7f:5a:bc:e3:8e:43:0f:c5:4b: b6:e7:49:71:41:54:24:f9:3c:e2:d7:b3:2d:5e:99: 22:5c:1d:ef:bb:38:4c:e4:cf:91:e6:89:a4:90:40: 44:96:86:b8:8a:08:4b:74:9b:db:3c:dd:95:b0:8e: 15:ac:85:83:c9:e5:36:9a:3e:eb:ef:6a:58:e2:72: 76:50:2b:bb:46:b5:44:ab:be:ac:85:f1:0b:4b:af: ca:d9:54:ed:e1:f0:9a:bf:76:f1:2e:24:3f:e1:48: c5:30:fd:a3:89:5f:f6:e4:3f:c8:a9:c6:4c:d5:4f: d2:77:02:cd:44:40:66:f7:80:f4:de:db:d3:0c:48: 35:fd:0a:d7:7d:ee:fa:04:fc:02:c4:a5:7b:4d:87: 8e:9e:bc:36:a3:dd:0e:cd:10:c0:68:ef:c9:cc:b7: ea:3f:ac:18:2d:e7:5e:02:b8:19:61:b4:5c:a4:49: 51:a9:d9:38:7e:e7:83:35:e8:1f:97:ce:37:9b:bb: 97:d6:c9:10:cd:86:0f:a4:03:f4:29:a3:7c:64:3d: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:81:12:A1:E2:90:2C:FA:06:FA:BB:C9:04:62:DC:70:31:80:FA X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BZuBEqHikCz6Bvq7yQRi3HAxgPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.245.0-192.121.246.255 193.181.35.0/24 194.132.123.0/24 Signature Algorithm: sha256WithRSAEncryption 85:3d:8e:6f:7d:7f:c7:4c:df:42:6f:00:9b:2a:e6:55:df:f2: 8f:3a:31:3c:04:73:4a:1b:62:51:fb:d9:14:16:ab:0a:c3:48: 38:86:42:38:4e:ef:e2:15:ce:87:bb:f6:da:72:11:0d:fd:47: d3:be:0b:1b:5d:1b:57:96:ba:a0:80:11:65:7b:1f:c8:75:eb: 6a:63:d6:b3:e9:2b:9d:40:ae:85:22:31:f7:2a:1b:8d:f9:69: 19:a8:cb:22:b3:a3:3a:b7:45:9f:7b:ab:94:17:af:29:4d:c5: cb:0b:73:e1:f7:0c:bc:b9:57:cc:35:7a:b7:27:f7:68:83:0b: 2b:9f:7e:13:5a:d8:e3:67:f1:b6:41:ad:67:2c:71:e2:c8:95: f4:b0:d1:3d:9c:1a:a6:6f:e2:44:19:bd:c2:51:9d:fd:81:93: 0a:be:72:3d:29:52:5e:06:74:0a:4a:20:a1:90:97:20:45:6f: f5:dc:f2:a0:b2:81:d0:6d:44:d5:65:4c:af:15:b9:99:c8:ec: 21:33:80:b8:e8:f9:68:00:5d:47:c0:98:a7:0f:b7:61:98:3e: 87:be:56:18:af:2a:34:a4:4c:67:8e:46:b9:fb:7d:b8:c7:f7: c0:bd:5e:7a:11:52:ba:4c:73:a0:d6:55:3f:7b:c8:b8:a2:fd: b4:74:0f:7f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NFqEAxpJt2FPQLo9L+0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTliODExMmExZTI5MDJjZmEwNmZhYmJjOTA0NjJkYzcwMzE4MGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouWcb+dQSoNGaAIVKo3MtWvoLrDc HeLoQKq2IthjzxZz+a9ouryb8Wjh6Lwm8icLB3d/WrzjjkMPxUu250lxQVQk+Tzi 17MtXpkiXB3vuzhM5M+R5omkkEBEloa4ighLdJvbPN2VsI4VrIWDyeU2mj7r72pY 4nJ2UCu7RrVEq76shfELS6/K2VTt4fCav3bxLiQ/4UjFMP2jiV/25D/IqcZM1U/S dwLNREBm94D03tvTDEg1/QrXfe76BPwCxKV7TYeOnrw2o90OzRDAaO/JzLfqP6wY LedeArgZYbRcpElRqdk4fueDNegfl843m7uX1skQzYYPpAP0KaN8ZD0FfwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFAWbgRKh4pAs+gb6u8kEYtxwMYD6MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQlp1QkVxSGlrQ3o2QnZxN3lRUmkzSEF4Z1BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADAefUD BADAefYDBADBtSMDBADChHswDQYJKoZIhvcNAQELBQADggEBAIU9jm99f8dM30Jv AJsq5lXf8o86MTwEc0obYlH72RQWqwrDSDiGQjhO7+IVzoe79tpyEQ39R9O+Cxtd G1eWuqCAEWV7H8h162pj1rPpK51AroUiMfcqG435aRmoyyKzozq3RZ97q5QXrylN xcsLc+H3DLy5V8w1ercn92iDCyuffhNa2ONn8bZBrWcsceLIlfSw0T2cGqZv4kQZ vcJRnf2Bkwq+cj0pUl4GdApKIKGQlyBFb/Xc8qCygdBtRNVlTK8VuZnI7CEzgLjo +WgAXUfAmKcPt2GYPoe+VhivKjSkTGeORrn7fbjH98C9XnoRUrpMc6DWVT97yLii /bR0D38= -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:05 2026 by rpki-client