This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DcX2ICEfjCDmxrkYHm3qYJHdVBw.roa File: DcX2ICEfjCDmxrkYHm3qYJHdVBw.roa (raw, json) Hash identifier: 4gE0L8AdRq3zW2sQ8xwmFeJW+2gI066Qy7RUXxOlrGs= Subject key identifier: 0D:C5:F6:20:21:1F:8C:20:E6:C6:B9:18:1E:6D:EA:60:91:DD:54:1C Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783479560A7005B9B4B880665FAEDE4F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DcX2ICEfjCDmxrkYHm3qYJHdVBw.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199768 IP address blocks: 192.36.20.0/24 maxlen: 24 193.235.28.0/23 maxlen: 24 194.103.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:79:56:0a:70:05:b9:b4:b8:80:66:5f:ae:de:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dc5f620211f8c20e6c6b9181e6dea6091dd541c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:51:8f:80:01:22:0a:87:c8:cb:03:1a:f5: 5b:12:d3:1a:56:27:f0:1a:7a:8c:4e:f5:4d:f4:25: 86:1b:a0:82:77:b0:b5:a0:bb:05:fb:56:da:c6:34: 02:08:a7:e3:71:59:f0:6b:be:25:ea:12:4c:8f:c8: c7:49:1b:b8:f6:b7:09:e3:7b:c6:88:be:2b:42:01: f9:05:06:56:2e:61:4c:26:c3:4f:72:61:f8:20:b3: 2d:35:37:b1:38:fe:2f:96:5d:cf:75:42:81:21:14: e7:ec:8c:4d:53:b0:cf:04:7b:48:15:2f:6a:f9:bd: 85:0b:f0:2e:b1:71:75:ad:e2:bd:7a:52:e4:de:bc: 32:cb:34:f1:53:ca:2c:26:5b:92:e2:e5:fc:18:7a: db:d9:23:26:aa:b6:84:8c:93:d2:b4:48:6f:21:a1: e2:39:c5:b9:3e:a5:be:33:95:da:5a:f2:ab:27:c5: fc:2f:c1:08:4c:9c:a7:c8:1e:73:fe:53:cb:86:0f: 29:35:bf:1c:41:f9:e8:bb:8c:5c:9e:c2:2c:df:32: b3:3a:cc:3f:0b:4b:63:e3:2e:66:50:de:dd:14:31: 42:76:1e:2d:34:c0:ec:ef:99:02:a3:41:ef:59:f5: 48:62:e8:e8:80:67:9a:7b:35:6d:6f:0b:d0:fb:79: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:F6:20:21:1F:8C:20:E6:C6:B9:18:1E:6D:EA:60:91:DD:54:1C X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DcX2ICEfjCDmxrkYHm3qYJHdVBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.20.0/24 193.235.28.0/23 194.103.28.0/22 Signature Algorithm: sha256WithRSAEncryption 57:76:4e:52:3b:ee:5d:ce:60:b2:b4:e7:c7:1b:61:f9:c3:4f: 7e:a8:0e:14:c4:22:d4:7c:d0:07:65:9b:fe:d5:11:d5:5d:92: fd:86:52:55:09:cc:8c:13:34:43:b4:cb:1c:b8:4c:e8:e2:11: 94:05:b7:a1:59:80:2d:38:de:ee:51:e9:0c:0b:84:d1:b1:ee: 30:bc:d7:f1:81:d1:78:fc:3c:41:d0:99:40:1b:40:08:2c:35: a8:4c:e9:ae:eb:76:8f:d9:78:66:16:82:7c:8e:c2:63:df:04: 17:a9:78:db:43:e7:85:5f:70:82:54:0d:28:70:c0:64:4c:6c: 3b:88:45:05:34:06:fd:aa:e3:a5:49:e2:78:e2:e9:06:c1:10: 91:04:ef:7d:55:ab:ab:ab:2d:a9:3f:22:6d:17:4c:ca:f5:7f: 2b:44:23:cf:0a:97:76:2d:1c:ce:0b:ab:97:2d:9c:26:5c:93: d6:ab:d7:51:c4:1c:4c:7e:09:13:09:23:a9:69:db:b7:44:bb: 95:74:62:73:55:e0:b0:46:7f:cf:65:ce:8b:19:da:2d:78:74: 9e:f4:92:15:fc:e6:6f:f6:f6:72:49:f8:67:71:fc:42:79:83: 83:bb:68:71:44:80:4b:e8:24:ca:33:6a:dd:dc:d7:7f:0b:ca: 69:56:8f:9f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NHlWCnAFubS4gGZfrt5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGM1ZjYyMDIxMWY4YzIwZTZjNmI5MTgxZTZkZWE2MDkxZGQ1NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx1Rj4ABIgqHyMsDGvVbEtMaVifw GnqMTvVN9CWGG6CCd7C1oLsF+1baxjQCCKfjcVnwa74l6hJMj8jHSRu49rcJ43vG iL4rQgH5BQZWLmFMJsNPcmH4ILMtNTexOP4vll3PdUKBIRTn7IxNU7DPBHtIFS9q +b2FC/AusXF1reK9elLk3rwyyzTxU8osJluS4uX8GHrb2SMmqraEjJPStEhvIaHi OcW5PqW+M5XaWvKrJ8X8L8EITJynyB5z/lPLhg8pNb8cQfnou4xcnsIs3zKzOsw/ C0tj4y5mUN7dFDFCdh4tNMDs75kCo0HvWfVIYujogGeaezVtbwvQ+3kQmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA3F9iAhH4wg5sa5GB5t6mCR3VQcMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRGNYMklDRWZqQ0RteHJrWUhtM3FZSkhkVkJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwCQUAwQB wescAwQCwmccMA0GCSqGSIb3DQEBCwUAA4IBAQBXdk5SO+5dzmCytOfHG2H5w09+ qA4UxCLUfNAHZZv+1RHVXZL9hlJVCcyMEzRDtMscuEzo4hGUBbehWYAtON7uUekM C4TRse4wvNfxgdF4/DxB0JlAG0AILDWoTOmu63aP2XhmFoJ8jsJj3wQXqXjbQ+eF X3CCVA0ocMBkTGw7iEUFNAb9quOlSeJ44ukGwRCRBO99Vaurqy2pPyJtF0zK9X8r RCPPCpd2LRzOC6uXLZwmXJPWq9dRxBxMfgkTCSOpadu3RLuVdGJzVeCwRn/PZc6L GdoteHSe9JIV/OZv9vZySfhncfxCeYODu2hxRIBL6CTKM2rd3Nd/C8ppVo+f -----END CERTIFICATE-----Generated at Sun Jan 25 11:59:34 2026 by rpki-client