This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E6ABZ9hCLmkmMw3Q3RYz_PKQd1U.roa File: E6ABZ9hCLmkmMw3Q3RYz_PKQd1U.roa (raw, json) Hash identifier: jO2vKOqZYfta19zyBiYPTQSeHXinlCsoiGLuVCHfz0g= Subject key identifier: 13:A0:01:67:D8:42:2E:69:26:33:0D:D0:DD:16:33:FC:F2:90:77:55 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344B37690EABCA02410ED9AD0DFB19 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E6ABZ9hCLmkmMw3Q3RYz_PKQd1U.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19399 IP address blocks: 192.36.201.0/24 maxlen: 24 192.36.202.0/24 maxlen: 24 192.36.203.0/24 maxlen: 24 192.71.123.0/24 maxlen: 24 192.121.69.0/24 maxlen: 24 193.182.239.0/24 maxlen: 24 193.182.247.0/24 maxlen: 24 194.14.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4b:37:69:0e:ab:ca:02:41:0e:d9:ad:0d:fb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13a00167d8422e6926330dd0dd1633fcf2907755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:7b:51:9d:cd:57:af:fd:ed:41:7a:ca:43: 72:5e:78:90:1f:49:3d:a5:42:42:20:a6:dd:9f:b3: eb:42:28:a7:84:0f:6c:50:77:19:d5:4e:f1:de:e3: bf:8a:73:e6:9c:3c:31:01:8c:86:27:a4:07:34:0b: 04:32:01:0b:ca:89:54:57:76:49:2e:da:1d:23:18: 63:67:67:d8:57:56:13:82:f5:81:fc:52:2b:65:0b: 25:9b:47:0c:00:af:d6:c9:3b:6d:2a:a6:f4:06:98: f6:f5:83:1a:e7:ee:9e:f2:44:c6:1d:47:e4:39:d6: 6f:38:71:9a:ae:65:bd:f1:e8:ce:77:9f:a4:c2:36: a3:5c:0d:cf:e8:90:6f:db:9f:53:67:b9:fd:04:3b: 23:2d:15:33:4a:db:99:33:a2:f2:4c:13:86:b6:fe: 66:de:c3:2a:55:4b:f4:81:d1:60:00:6e:80:60:d6: c6:40:a3:32:df:78:03:cf:39:c7:36:aa:4c:3d:e5: 9e:3a:1f:a5:16:3e:e4:cf:f9:5d:e0:07:08:b0:69: 27:ad:df:c7:6a:b9:94:b9:47:44:5d:33:c4:ff:d9: db:36:39:48:53:f4:c3:19:ce:af:92:66:da:0e:ca: 8e:37:8f:1c:5f:f9:dc:71:39:ae:9a:3e:67:5f:1c: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A0:01:67:D8:42:2E:69:26:33:0D:D0:DD:16:33:FC:F2:90:77:55 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E6ABZ9hCLmkmMw3Q3RYz_PKQd1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.201.0-192.36.203.255 192.71.123.0/24 192.121.69.0/24 193.182.239.0/24 193.182.247.0/24 194.14.182.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:0f:62:4c:9d:4f:f2:a0:72:38:61:eb:2e:53:80:70:62:85: f0:9c:92:dc:a7:c5:7c:15:9a:2f:5b:f5:e7:75:2a:08:8f:8b: 22:c7:ee:93:9a:8e:8c:00:cf:ef:36:5c:36:97:2a:4e:0b:9e: 14:2d:19:cd:0f:f0:b1:eb:52:4b:14:a5:3d:87:cc:b9:65:f2: ae:89:9a:18:63:b6:f9:b6:77:5a:a8:29:26:b5:fc:dd:5d:ff: 20:90:a5:f0:e7:d4:fc:fd:95:aa:81:c7:49:25:3f:3f:a0:70: cc:9b:ff:79:41:4d:31:43:dd:e8:4f:b4:71:ef:10:fe:17:cf: 32:b9:cf:51:2f:15:29:9d:55:d3:b4:ef:fd:0f:0d:10:0f:97: 91:4a:cf:43:3b:d3:9d:6f:f7:92:7a:91:49:f1:0b:51:e2:76: 98:b2:34:b0:2a:4b:ab:34:88:86:3e:c0:2c:1e:3a:b7:5b:e3: 0d:8d:78:9d:0a:29:62:7e:e8:5c:ad:a9:d4:ea:e2:64:12:aa: 82:2d:86:9a:04:52:73:ae:db:06:ab:14:11:28:27:18:84:a1: c1:b2:c4:a1:7a:a8:7f:4d:38:3e:05:53:5f:14:3c:e6:9e:41: 92:aa:0d:ab:2e:09:27:f3:3d:3c:68:2c:ad:e3:aa:6d:5f:8c: 1a:24:0c:ae -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt4NEs3aQ6rygJBDtmtDfsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2EwMDE2N2Q4NDIyZTY5MjYzMzBkZDBkZDE2MzNmY2YyOTA3NzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe17UZ3NV6/97UF6ykNyXniQH0k9 pUJCIKbdn7PrQiinhA9sUHcZ1U7x3uO/inPmnDwxAYyGJ6QHNAsEMgELyolUV3ZJ LtodIxhjZ2fYV1YTgvWB/FIrZQslm0cMAK/WyTttKqb0Bpj29YMa5+6e8kTGHUfk OdZvOHGarmW98ejOd5+kwjajXA3P6JBv259TZ7n9BDsjLRUzStuZM6LyTBOGtv5m 3sMqVUv0gdFgAG6AYNbGQKMy33gDzznHNqpMPeWeOh+lFj7kz/ld4AcIsGknrd/H armUuUdEXTPE/9nbNjlIU/TDGc6vkmbaDsqON48cX/nccTmumj5nXxz/9wIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFBOgAWfYQi5pJjMN0N0WM/zykHdVMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRTZBQlo5aENMbWttTXczUTNSWXpfUEtRZDFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBADAJMkD BALAJMgDBADAR3sDBADAeUUDBADBtu8DBADBtvcDBAHCDrYwDQYJKoZIhvcNAQEL BQADggEBAFsPYkydT/Kgcjhh6y5TgHBihfCcktynxXwVmi9b9ed1KgiPiyLH7pOa jowAz+82XDaXKk4LnhQtGc0P8LHrUksUpT2HzLll8q6Jmhhjtvm2d1qoKSa1/N1d /yCQpfDn1Pz9laqBx0klPz+gcMyb/3lBTTFD3ehPtHHvEP4XzzK5z1EvFSmdVdO0 7/0PDRAPl5FKz0M7051v95J6kUnxC1HidpiyNLAqS6s0iIY+wCweOrdb4w2NeJ0K KWJ+6FytqdTq4mQSqoIthpoEUnOu2warFBEoJxiEocGyxKF6qH9NOD4FU18UPOae QZKqDasuCSfzPTxoLK3jqm1fjBokDK4= -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:08 2026 by rpki-client