This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C7VbZg2rg3G9sdz6_FZbRxbXebY.roa File: C7VbZg2rg3G9sdz6_FZbRxbXebY.roa (raw, json) Hash identifier: g7c+0GZyNrkENxCbqVzffQqoo9qkn2jpjtSNrzOqtFE= Subject key identifier: 0B:B5:5B:66:0D:AB:83:71:BD:B1:DC:FA:FC:56:5B:47:16:D7:79:B6 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346A72E31F4E01524D2558EB143F93 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C7VbZg2rg3G9sdz6_FZbRxbXebY.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50613 IP address blocks: 192.36.57.0/24 maxlen: 24 192.71.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6a:72:e3:1f:4e:01:52:4d:25:58:eb:14:3f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bb55b660dab8371bdb1dcfafc565b4716d779b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:8b:c2:4c:da:5d:18:66:3e:a7:d7:fc:aa: 8d:f7:5b:4e:88:99:1f:24:36:89:24:53:ce:e4:0c: 14:d6:ed:62:65:63:7b:20:b0:09:12:90:3e:19:f5: bd:f9:34:10:33:2b:c0:3b:8f:83:2e:10:a6:16:ea: 51:bf:ca:01:1c:8f:8d:4e:80:bd:11:ec:c1:e8:f9: d6:01:d6:47:a5:b0:0a:6d:ab:ed:b3:d1:b4:c0:19: ed:8a:7b:5d:b8:49:d6:0a:ff:e3:3a:55:8d:e4:ca: 9f:e4:6e:c9:31:63:ec:5f:83:3c:90:f0:96:ba:bc: fa:b3:f8:93:87:dd:ff:34:85:53:8f:11:a8:44:eb: ae:82:9e:79:37:39:60:b0:f5:1a:f2:57:9b:60:ef: da:08:f2:26:ff:a1:87:d4:65:3b:7c:44:a8:d5:63: 7c:bf:11:68:c1:bc:82:21:61:7f:8a:fb:47:47:0d: 28:d5:50:3a:b4:f1:e4:60:af:55:a4:da:b2:3e:ba: ad:cf:c7:c7:6e:7f:87:a6:b1:cc:73:89:3f:fb:cd: f4:28:06:96:a6:4c:b4:20:46:13:44:57:07:50:73: 62:a0:a0:12:94:80:78:53:3e:db:e8:af:39:90:ba: dc:9c:a7:19:0a:84:7c:2d:60:fe:eb:60:d3:3d:43: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:5B:66:0D:AB:83:71:BD:B1:DC:FA:FC:56:5B:47:16:D7:79:B6 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C7VbZg2rg3G9sdz6_FZbRxbXebY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.57.0/24 192.71.218.0/24 Signature Algorithm: sha256WithRSAEncryption a4:40:11:89:e1:5b:a0:e5:8a:5a:f7:9c:0b:c0:81:a7:65:45: c0:91:07:43:24:31:af:03:30:82:54:d1:39:72:53:2b:ad:de: 0d:fc:db:77:a1:db:a9:21:3b:53:40:6d:6e:9b:9f:6f:a7:99: 37:ec:aa:f9:25:ad:d1:ca:87:66:07:5d:9c:37:a3:c1:e6:bd: de:46:5e:98:9d:3b:ff:6b:29:f8:bb:c7:f5:72:92:9d:93:f3: 45:70:75:4d:a3:b5:c7:3f:32:0d:4c:bd:c6:fd:a8:87:75:c3: c5:15:ef:78:21:1e:b7:e2:b3:61:b3:64:d4:da:e8:c3:74:68: e1:7b:0b:95:76:56:86:9f:a3:3f:ea:a7:32:81:37:1f:79:c9: ff:91:e0:71:ee:ca:97:d8:d5:fb:fd:cc:77:17:46:e9:4c:dc: ea:be:a7:e0:66:3d:36:2d:1f:5a:03:d4:63:64:10:93:10:59: 34:17:fe:3f:ed:6e:89:df:42:d1:fc:40:d8:0a:28:4e:a8:dc: 1a:8b:d9:23:99:63:aa:91:da:22:66:9c:7d:9b:a3:f5:fe:f9: b7:55:ae:f5:62:ee:3a:a1:b9:c6:c9:75:99:ac:53:fb:84:6a: 75:b5:a0:8b:e4:28:03:ce:cd:3a:6e:6b:9f:e7:a7:bc:8a:6c: b1:73:92:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NGpy4x9OAVJNJVjrFD+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmI1NWI2NjBkYWI4MzcxYmRiMWRjZmFmYzU2NWI0NzE2ZDc3OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL+LwkzaXRhmPqfX/KqN91tOiJkf JDaJJFPO5AwU1u1iZWN7ILAJEpA+GfW9+TQQMyvAO4+DLhCmFupRv8oBHI+NToC9 EezB6PnWAdZHpbAKbavts9G0wBntintduEnWCv/jOlWN5Mqf5G7JMWPsX4M8kPCW urz6s/iTh93/NIVTjxGoROuugp55NzlgsPUa8lebYO/aCPIm/6GH1GU7fESo1WN8 vxFowbyCIWF/ivtHRw0o1VA6tPHkYK9VpNqyPrqtz8fHbn+HprHMc4k/+830KAaW pky0IEYTRFcHUHNioKASlIB4Uz7b6K85kLrcnKcZCoR8LWD+62DTPUNm2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAu1W2YNq4NxvbHc+vxWW0cW13m2MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQzdWYlpnMnJnM0c5c2R6Nl9GWmJSeGJYZWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCQ5AwQA wEfaMA0GCSqGSIb3DQEBCwUAA4IBAQCkQBGJ4Vug5Ypa95wLwIGnZUXAkQdDJDGv AzCCVNE5clMrrd4N/Nt3odupITtTQG1um59vp5k37Kr5Ja3RyodmB12cN6PB5r3e Rl6YnTv/ayn4u8f1cpKdk/NFcHVNo7XHPzINTL3G/aiHdcPFFe94IR634rNhs2TU 2ujDdGjhewuVdlaGn6M/6qcygTcfecn/keBx7sqX2NX7/cx3F0bpTNzqvqfgZj02 LR9aA9RjZBCTEFk0F/4/7W6J30LR/EDYCihOqNwai9kjmWOqkdoiZpx9m6P1/vm3 Va71Yu46obnGyXWZrFP7hGp1taCL5CgDzs06bmuf56e8imyxc5K4 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:30 2026 by rpki-client