This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FgVPxolj5h_q6IewJCSscAHfAe8.roa File: FgVPxolj5h_q6IewJCSscAHfAe8.roa (raw, json) Hash identifier: 84tvx4bCfCLaxgWi5cvT44b1WluTVQ55LjcTdoQf9KQ= Subject key identifier: 16:05:4F:C6:89:63:E6:1F:EA:E8:87:B0:24:24:AC:70:01:DF:01:EF Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783458B833FA8D2822A69BC48264CB07 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FgVPxolj5h_q6IewJCSscAHfAe8.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39870 IP address blocks: 192.36.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:58:b8:33:fa:8d:28:22:a6:9b:c4:82:64:cb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16054fc68963e61feae887b02424ac7001df01ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:e0:b0:29:c1:b2:bc:18:88:de:21:e6:c8: 96:3e:fa:03:5b:b9:3c:b5:df:cb:86:95:6b:72:1f: b2:26:92:49:80:b9:5c:b1:e7:57:aa:46:a3:9b:38: e3:4e:94:c4:16:1c:88:5b:af:c4:3a:97:21:ba:60: ea:1b:8b:91:89:9a:2b:9a:2d:23:cc:2f:c8:2a:df: c7:05:6a:20:4e:1f:ab:d2:1c:79:1b:5e:eb:e9:8b: ab:18:09:31:58:89:c7:d9:95:b7:91:84:ea:e8:11: cc:f9:8d:fb:18:ac:db:e3:c1:c3:71:65:73:d4:df: 79:d4:12:89:6d:ba:26:2a:52:bc:ef:32:e8:f4:52: 2c:6c:7b:73:60:3c:3c:f2:04:dd:c1:50:22:76:1b: 9a:1c:f8:c6:0e:09:40:03:3e:bf:cf:54:b0:7f:f8: ec:bf:e8:b5:ed:ce:58:c3:a3:58:8d:d5:7f:30:2e: 80:c3:e0:24:5a:50:32:93:d7:09:ee:bd:c5:2f:91: 86:2d:3d:2f:e9:a2:17:cb:6d:03:e4:7f:ce:97:76: 89:23:69:ff:e4:00:f9:cc:d7:7f:a0:e0:4a:4c:b8: 52:cf:2f:2f:c0:89:6a:fe:22:9c:db:23:04:c5:21: 83:bc:5c:31:67:b8:63:d6:d6:6a:27:02:04:8b:ee: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:05:4F:C6:89:63:E6:1F:EA:E8:87:B0:24:24:AC:70:01:DF:01:EF X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FgVPxolj5h_q6IewJCSscAHfAe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.134.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e8:c9:94:5a:51:4d:81:6e:8b:02:3a:6c:d6:29:12:a3:79: ea:5a:d9:74:9a:50:84:c3:e1:51:58:85:ac:41:ea:2a:a3:06: 17:ec:70:f0:db:dd:3b:dd:5b:73:b1:a7:1b:a7:1e:b5:97:70: 99:64:18:ea:79:97:cb:a8:12:8f:64:15:56:31:7e:dc:ee:29: 4e:d6:60:a3:6c:4a:07:95:1e:1f:00:11:71:ba:84:f6:42:52: 30:77:a4:cd:fe:af:68:b5:7d:70:ae:7a:83:e6:f1:09:79:af: b3:b0:41:32:a2:77:36:4c:88:98:cc:0a:dc:fa:fc:ef:ca:ef: 2e:e6:f0:9d:33:45:f8:35:c3:ef:9f:da:af:7e:2f:ff:8f:73: 4f:d3:98:53:cc:55:3b:74:25:28:9d:c1:5f:3a:d2:fd:07:95: c7:63:dd:9f:62:de:4e:ab:38:f7:f6:7f:17:f2:bf:d4:06:65: 64:cc:49:6d:2a:dc:e0:cb:09:53:b1:85:43:80:5c:17:a1:5f: 53:5e:6b:79:54:1d:9f:fc:73:9a:5a:87:e4:5c:81:59:8a:68: 84:53:5f:b9:0d:06:d5:8c:f1:fd:e2:09:47:86:12:8f:68:5d: e2:4e:7d:e7:a1:5c:a1:8e:48:2f:67:61:f2:14:b5:14:58:fd: cf:d1:74:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFi4M/qNKCKmm8SCZMsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjA1NGZjNjg5NjNlNjFmZWFlODg3YjAyNDI0YWM3MDAxZGYwMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEvgsCnBsrwYiN4h5siWPvoDW7k8 td/LhpVrch+yJpJJgLlcsedXqkajmzjjTpTEFhyIW6/EOpchumDqG4uRiZormi0j zC/IKt/HBWogTh+r0hx5G17r6YurGAkxWInH2ZW3kYTq6BHM+Y37GKzb48HDcWVz 1N951BKJbbomKlK87zLo9FIsbHtzYDw88gTdwVAidhuaHPjGDglAAz6/z1Swf/js v+i17c5Yw6NYjdV/MC6Aw+AkWlAyk9cJ7r3FL5GGLT0v6aIXy20D5H/Ol3aJI2n/ 5AD5zNd/oOBKTLhSzy8vwIlq/iKc2yMExSGDvFwxZ7hj1tZqJwIEi+7+/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYFT8aJY+Yf6uiHsCQkrHAB3wHvMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRmdWUHhvbGo1aF9xNklld0pDU3NjQUhmQWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCSGMA0G CSqGSIb3DQEBCwUAA4IBAQA16MmUWlFNgW6LAjps1ikSo3nqWtl0mlCEw+FRWIWs QeoqowYX7HDw29073Vtzsacbpx61l3CZZBjqeZfLqBKPZBVWMX7c7ilO1mCjbEoH lR4fABFxuoT2QlIwd6TN/q9otX1wrnqD5vEJea+zsEEyonc2TIiYzArc+vzvyu8u 5vCdM0X4NcPvn9qvfi//j3NP05hTzFU7dCUoncFfOtL9B5XHY92fYt5Oqzj39n8X 8r/UBmVkzEltKtzgywlTsYVDgFwXoV9TXmt5VB2f/HOaWofkXIFZimiEU1+5DQbV jPH94glHhhKPaF3iTn3noVyhjkgvZ2HyFLUUWP3P0XTe -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:45 2026 by rpki-client