This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/D8aqRyPmbdwSZAVSu0uQrlgfYHo.roa File: D8aqRyPmbdwSZAVSu0uQrlgfYHo.roa (raw, json) Hash identifier: o/zb2oO4L46oltIY6L2Am4TUm+F07vvY01e16ZYrzwI= Subject key identifier: 0F:C6:AA:47:23:E6:6D:DC:12:64:05:52:BB:4B:90:AE:58:1F:60:7A Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019BEA11C2EF1698781758B84ECFF98DF540 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/D8aqRyPmbdwSZAVSu0uQrlgfYHo.roa Signing time: Fri 23 Jan 2026 08:56:30 +0000 ROA not before: Fri 23 Jan 2026 08:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 192.36.247.0/24 maxlen: 24 192.71.84.0/24 maxlen: 24 192.71.254.0/23 maxlen: 24 192.176.43.0/24 maxlen: 24 193.182.113.0/24 maxlen: 24 193.234.120.0/22 maxlen: 24 194.103.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:11:c2:ef:16:98:78:17:58:b8:4e:cf:f9:8d:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 23 08:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fc6aa4723e66ddc12640552bb4b90ae581f607a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:66:44:4a:d1:d4:5c:36:4b:f2:23:55:92: ea:68:25:8c:bc:04:85:80:44:c9:5c:0b:50:e0:db: bc:3b:7c:b1:ba:12:4a:0f:77:14:ba:d9:fc:4a:84: 90:99:0e:f1:1a:1e:fb:b5:45:54:4a:a2:88:7f:ef: 20:f0:eb:d0:19:23:85:70:95:7c:fd:d7:fa:59:6e: 40:e6:ec:07:19:98:b4:7d:a6:9d:e8:3c:33:95:67: 7a:eb:5c:d8:ac:d2:1c:71:c5:10:dd:8c:63:0a:21: bb:31:7a:a8:5a:63:3d:62:c1:a2:99:92:1d:eb:fb: bb:24:26:90:ef:71:d8:84:2d:6d:d0:88:d3:42:f1: 5e:6a:68:3f:21:87:22:e2:df:45:6e:f2:6f:ec:e9: 51:15:33:a9:8c:51:72:4f:87:f6:f2:9e:72:43:c9: 18:f8:1b:c5:3a:fa:20:83:5d:2d:f2:9d:1c:93:60: 56:74:8f:c6:a2:50:fc:de:9d:e8:39:42:91:33:62: 5f:dc:92:a7:86:f0:a3:64:93:ee:a9:52:2d:9a:23: 03:5d:c2:53:a0:c9:23:78:cd:1b:c8:eb:fc:a7:20: bf:65:88:4c:a0:42:bb:72:93:a7:5a:13:d3:c0:88: d7:11:1c:e0:33:7f:fd:85:d0:26:0d:2e:89:55:1a: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C6:AA:47:23:E6:6D:DC:12:64:05:52:BB:4B:90:AE:58:1F:60:7A X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/D8aqRyPmbdwSZAVSu0uQrlgfYHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.247.0/24 192.71.84.0/24 192.71.254.0/23 192.176.43.0/24 193.182.113.0/24 193.234.120.0/22 194.103.8.0/24 Signature Algorithm: sha256WithRSAEncryption 56:36:f4:93:41:38:87:45:ae:1c:38:f2:6f:7c:eb:82:c7:76: 32:c2:98:df:bd:cd:81:35:ca:b9:33:da:90:c1:a3:5b:b1:eb: 9d:80:e0:dc:1c:8b:77:24:6d:2c:55:68:37:6b:d5:85:16:bc: 95:22:d8:90:d1:4b:10:d9:53:9c:e6:ad:d8:f1:9e:51:a7:5d: ae:ad:b1:e1:78:9b:a2:b0:90:9c:cc:3c:b8:b4:21:7e:20:01: 49:d8:cd:c6:20:4d:11:23:b3:7e:f1:7c:c4:32:aa:b4:eb:b2: 2a:1f:e3:56:40:4e:65:13:d5:19:9d:34:2f:11:52:cb:4a:9a: 47:75:de:19:60:83:4a:d6:06:f2:ad:f7:ef:0a:bf:be:8f:31: f3:5d:db:72:ec:fb:a7:88:fb:ff:01:16:a0:87:d3:90:84:d2: 2c:df:62:aa:cd:aa:b5:9f:b3:66:4c:8f:eb:68:49:f1:4a:ff: 05:7c:a8:07:0d:61:42:07:f4:aa:db:df:92:2e:66:32:09:02: b8:cc:d5:d6:26:2a:ac:48:4e:8a:4a:bc:e5:ba:4c:5d:95:aa: 53:df:97:05:fb:d7:21:65:b6:42:ab:52:af:6c:6e:f7:39:b2: a8:9a:c4:c0:95:fa:42:14:da:3b:bc:06:30:52:33:d0:49:ab: f8:2a:8c:15 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZvqEcLvFph4F1i4Ts/5jfVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTIzMDg1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmM2YWE0NzIzZTY2ZGRjMTI2NDA1NTJiYjRiOTBhZTU4MWY2MDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsJmRErR1Fw2S/IjVZLqaCWMvASF gETJXAtQ4Nu8O3yxuhJKD3cUutn8SoSQmQ7xGh77tUVUSqKIf+8g8OvQGSOFcJV8 /df6WW5A5uwHGZi0faad6DwzlWd661zYrNIcccUQ3YxjCiG7MXqoWmM9YsGimZId 6/u7JCaQ73HYhC1t0IjTQvFeamg/IYci4t9FbvJv7OlRFTOpjFFyT4f28p5yQ8kY +BvFOvogg10t8p0ck2BWdI/GolD83p3oOUKRM2Jf3JKnhvCjZJPuqVItmiMDXcJT oMkjeM0byOv8pyC/ZYhMoEK7cpOnWhPTwIjXERzgM3/9hdAmDS6JVRr8YwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFA/Gqkcj5m3cEmQFUrtLkK5YH2B6MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRDhhcVJ5UG1iZHdTWkFWU3UwdVFybGdmWUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAwCT3AwQA wEdUAwQBwEf+AwQAwLArAwQAwbZxAwQCwep4AwQAwmcIMA0GCSqGSIb3DQEBCwUA A4IBAQBWNvSTQTiHRa4cOPJvfOuCx3Yywpjfvc2BNcq5M9qQwaNbseudgODcHIt3 JG0sVWg3a9WFFryVItiQ0UsQ2VOc5q3Y8Z5Rp12urbHheJuisJCczDy4tCF+IAFJ 2M3GIE0RI7N+8XzEMqq067IqH+NWQE5lE9UZnTQvEVLLSppHdd4ZYINK1gbyrffv Cr++jzHzXdty7PuniPv/ARagh9OQhNIs32Kqzaq1n7NmTI/raEnxSv8FfKgHDWFC B/Sq29+SLmYyCQK4zNXWJiqsSE6KSrzlukxdlapT35cF+9chZbZCq1KvbG73ObKo msTAlfpCFNo7vAYwUjPQSav4KowV -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:55 2026 by rpki-client