This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CIocKIlF94bkCHxQE_MAXK0Mpi8.roa File: CIocKIlF94bkCHxQE_MAXK0Mpi8.roa (raw, json) Hash identifier: LfoDLzN+6ln78B34LHwHmi4SsvRHI532PJ0h0dKcJnQ= Subject key identifier: 08:8A:1C:28:89:45:F7:86:E4:08:7C:50:13:F3:00:5C:AD:0C:A6:2F Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345A1F493112C7293A0F1A8D6F4941 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CIocKIlF94bkCHxQE_MAXK0Mpi8.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41884 IP address blocks: 192.121.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5a:1f:49:31:12:c7:29:3a:0f:1a:8d:6f:49:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=088a1c288945f786e4087c5013f3005cad0ca62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5a:5e:66:90:3a:8d:3c:ce:64:67:65:a1:82: 1c:e5:07:e0:cf:bd:22:52:90:4f:4c:70:03:21:1f: 50:a2:97:70:d1:48:ae:72:96:ff:1c:a1:6f:2b:2f: fc:70:66:37:0d:ef:d1:74:54:26:e6:ee:5a:30:9a: c2:54:91:cf:2f:31:c9:55:fb:f4:78:ed:b9:57:e7: 1c:48:9f:7a:ea:3a:f6:7c:49:5e:52:ba:7e:f6:4b: 7e:96:3b:b4:71:74:f1:24:fd:8b:07:81:17:f5:0b: f1:21:e6:a0:e5:aa:7b:a8:9a:59:9b:4d:c6:d1:62: 3b:bf:6b:68:6a:2c:35:71:15:76:57:c4:b4:97:af: 12:4b:8c:31:ab:40:ab:e3:ca:67:8c:49:34:b1:d4: 35:64:cf:d9:56:86:f9:72:28:cb:2d:8e:8e:9a:5a: c0:e2:a7:8a:83:14:ec:bf:86:df:8f:4c:7c:da:e2: e6:ea:b5:9c:01:2f:9f:43:b7:61:04:6c:b5:92:f4: c2:0d:02:7b:f6:b5:d8:88:92:75:43:93:72:1e:95: 3c:5c:64:a2:ee:15:49:04:f0:f7:a5:35:ec:19:3b: f1:48:09:05:34:9d:8c:94:b5:22:15:c1:5a:37:b2: ec:63:28:2f:fe:0d:82:4d:4a:e4:79:5e:59:1e:24: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8A:1C:28:89:45:F7:86:E4:08:7C:50:13:F3:00:5C:AD:0C:A6:2F X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CIocKIlF94bkCHxQE_MAXK0Mpi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.218.0/24 Signature Algorithm: sha256WithRSAEncryption 53:73:f7:b7:57:9a:82:d9:a6:9b:b3:d6:e0:d8:29:71:45:cb: 66:7f:8b:d6:44:b1:3d:56:8a:86:0a:b5:31:72:2b:57:7a:a8: 9d:8f:46:a8:de:46:b6:37:c6:37:71:36:e1:ac:72:51:a8:23: 98:ee:9d:77:c3:23:3a:b0:e3:df:68:c7:ca:5e:ed:3c:3f:b3: 98:84:54:bb:b1:9d:45:a5:c1:0b:83:e6:4e:d1:c2:b8:27:2d: 71:50:39:d3:21:ff:89:88:87:f8:a1:66:87:71:7a:90:7b:48: 5e:38:0a:b0:a7:4a:41:86:87:85:72:34:7a:de:a8:1d:a5:bb: f7:4d:dd:0b:cf:c4:ed:cf:47:f8:58:94:94:0b:44:a8:09:73: 7e:be:50:f0:e9:e5:39:fd:da:a4:e0:9f:bd:71:21:c0:1e:9f: 66:05:c1:da:29:a9:a8:60:19:51:26:f8:18:55:d7:87:fb:da: 15:67:35:3d:07:63:f5:3c:ee:e9:22:53:8e:9c:d3:2c:1e:f2: 3a:8b:79:37:54:fa:cb:0a:bb:64:13:21:bc:e3:16:9d:a3:bc: d3:ac:f0:23:fb:ea:47:d5:a1:69:48:77:51:b9:a5:f6:16:68: 46:c2:6f:f0:5a:b2:95:be:5a:06:ed:9c:40:eb:dc:14:9a:e8: f0:4f:c2:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFofSTESxyk6DxqNb0lBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODhhMWMyODg5NDVmNzg2ZTQwODdjNTAxM2YzMDA1Y2FkMGNhNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FpeZpA6jTzOZGdloYIc5Qfgz70i UpBPTHADIR9Qopdw0Uiucpb/HKFvKy/8cGY3De/RdFQm5u5aMJrCVJHPLzHJVfv0 eO25V+ccSJ966jr2fEleUrp+9kt+lju0cXTxJP2LB4EX9QvxIeag5ap7qJpZm03G 0WI7v2toaiw1cRV2V8S0l68SS4wxq0Cr48pnjEk0sdQ1ZM/ZVob5cijLLY6OmlrA 4qeKgxTsv4bfj0x82uLm6rWcAS+fQ7dhBGy1kvTCDQJ79rXYiJJ1Q5NyHpU8XGSi 7hVJBPD3pTXsGTvxSAkFNJ2MlLUiFcFaN7LsYygv/g2CTUrkeV5ZHiQE5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiKHCiJRfeG5Ah8UBPzAFytDKYvMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQ0lvY0tJbEY5NGJrQ0h4UUVfTUFYSzBNcGk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHnaMA0G CSqGSIb3DQEBCwUAA4IBAQBTc/e3V5qC2aabs9bg2ClxRctmf4vWRLE9VoqGCrUx citXeqidj0ao3ka2N8Y3cTbhrHJRqCOY7p13wyM6sOPfaMfKXu08P7OYhFS7sZ1F pcELg+ZO0cK4Jy1xUDnTIf+JiIf4oWaHcXqQe0heOAqwp0pBhoeFcjR63qgdpbv3 Td0Lz8Ttz0f4WJSUC0SoCXN+vlDw6eU5/dqk4J+9cSHAHp9mBcHaKamoYBlRJvgY VdeH+9oVZzU9B2P1PO7pIlOOnNMsHvI6i3k3VPrLCrtkEyG84xado7zTrPAj++pH 1aFpSHdRuaX2FmhGwm/wWrKVvloG7ZxA69wUmujwT8Jd -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:45 2026 by rpki-client