This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FsJX9wpmIN9hPe1YPTQOwn4f1Co.roa File: FsJX9wpmIN9hPe1YPTQOwn4f1Co.roa (raw, json) Hash identifier: 7bhET4EG+FgQ7lq8fSZFue4yq2bJC5MVWq2rjBrpp6Q= Subject key identifier: 16:C2:57:F7:0A:66:20:DF:61:3D:ED:58:3D:34:0E:C2:7E:1F:D4:2A Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783475B4388D34D4403920CF82D93A37 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FsJX9wpmIN9hPe1YPTQOwn4f1Co.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198463 IP address blocks: 193.182.180.0/24 maxlen: 24 194.68.125.0/24 maxlen: 24 194.132.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:75:b4:38:8d:34:d4:40:39:20:cf:82:d9:3a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16c257f70a6620df613ded583d340ec27e1fd42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:5b:03:33:f1:3f:fc:f7:da:03:10:0d:57: 70:1f:04:c0:79:28:79:14:8f:53:96:39:63:fb:3e: 56:21:71:d9:f5:06:a1:ed:bf:15:ce:88:7a:5a:ac: ee:73:33:bd:6f:e7:b3:4c:16:6f:10:35:83:d3:5e: 45:3a:42:62:1f:ce:fe:dc:59:d7:9d:22:56:12:9c: 44:31:44:50:c8:23:90:30:38:e9:4c:53:1b:7f:22: 71:21:82:84:1b:02:33:fc:1a:99:b6:da:bf:ce:14: 57:aa:24:b9:07:21:b2:9e:54:57:9d:72:ed:6e:05: 41:34:00:03:88:e1:b8:98:ed:81:f1:99:45:ff:0d: 03:57:38:4e:61:dc:ab:ad:1b:ce:fe:6a:6a:7f:e4: 90:24:be:08:35:b6:51:c1:84:64:f2:7b:ae:28:44: 5c:d0:d7:d9:25:31:65:0b:cd:6d:c1:a9:da:cf:7b: 10:f3:7b:61:eb:09:d8:ff:0f:6f:f8:4b:25:be:ab: 55:e2:1c:da:d2:06:c3:4b:39:32:64:8e:8a:48:6e: 60:3c:9f:b5:27:db:3e:c3:4f:1d:8d:39:4d:0f:13: 4a:47:5b:e3:e1:b4:be:c7:b8:02:87:f6:21:70:f3: 1a:52:c5:2e:2a:94:53:3e:82:f0:ea:b6:63:be:d6: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:57:F7:0A:66:20:DF:61:3D:ED:58:3D:34:0E:C2:7E:1F:D4:2A X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FsJX9wpmIN9hPe1YPTQOwn4f1Co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.182.180.0/24 194.68.125.0/24 194.132.214.0/24 Signature Algorithm: sha256WithRSAEncryption 21:f9:d3:f7:1a:4d:fe:fa:6a:c5:50:fd:1c:c7:71:0f:24:f7: 37:de:40:f3:3f:65:e0:f2:37:7e:27:31:29:7c:34:5c:e4:13: df:8a:78:07:93:9f:65:15:e9:69:b0:8a:48:ac:b1:2d:23:60: 1e:2a:5d:9b:66:46:44:8d:4c:3c:eb:20:3c:f9:5b:7b:1f:ff: 9b:4f:c2:00:d3:27:25:18:66:2e:0f:4f:b6:5a:61:0c:31:2d: fc:65:88:fc:78:49:bf:b3:19:2e:6e:03:97:96:70:a0:39:c5: 31:11:82:e5:27:88:c8:d0:0f:40:20:71:82:80:ee:60:08:3a: 59:85:bb:ad:bf:d2:e1:45:f2:b8:6e:77:4a:68:58:bb:25:34: e8:98:02:23:09:b5:b7:d9:92:cc:bf:15:a0:6c:2a:85:a6:fb: f4:8f:7e:dc:6c:1b:a4:f1:4c:31:a3:1c:ae:2a:16:9b:f7:80: 81:d2:1c:a0:29:a9:ed:d5:f6:bd:b0:61:57:82:5a:f4:e9:5a: fe:87:26:a1:20:1b:6a:78:4a:c1:54:c9:56:95:84:d7:63:47: af:36:5e:d6:37:77:3d:16:79:fb:12:3b:7d:98:48:81:b7:ef: 33:cf:f1:ba:5e:40:28:c4:4f:56:e3:de:02:3b:9c:84:a5:d1: 60:d2:60:c0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NHW0OI001EA5IM+C2To3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmMyNTdmNzBhNjYyMGRmNjEzZGVkNTgzZDM0MGVjMjdlMWZkNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xtbAzPxP/z32gMQDVdwHwTAeSh5 FI9Tljlj+z5WIXHZ9Qah7b8Vzoh6WqzuczO9b+ezTBZvEDWD015FOkJiH87+3FnX nSJWEpxEMURQyCOQMDjpTFMbfyJxIYKEGwIz/BqZttq/zhRXqiS5ByGynlRXnXLt bgVBNAADiOG4mO2B8ZlF/w0DVzhOYdyrrRvO/mpqf+SQJL4INbZRwYRk8nuuKERc 0NfZJTFlC81twanaz3sQ83th6wnY/w9v+EslvqtV4hza0gbDSzkyZI6KSG5gPJ+1 J9s+w08djTlNDxNKR1vj4bS+x7gCh/YhcPMaUsUuKpRTPoLw6rZjvtbW2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBbCV/cKZiDfYT3tWD00DsJ+H9QqMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRnNKWDl3cG1JTjloUGUxWVBUUU93bjRmMUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwba0AwQA wkR9AwQAwoTWMA0GCSqGSIb3DQEBCwUAA4IBAQAh+dP3Gk3++mrFUP0cx3EPJPc3 3kDzP2Xg8jd+JzEpfDRc5BPfingHk59lFelpsIpIrLEtI2AeKl2bZkZEjUw86yA8 +Vt7H/+bT8IA0yclGGYuD0+2WmEMMS38ZYj8eEm/sxkubgOXlnCgOcUxEYLlJ4jI 0A9AIHGCgO5gCDpZhbutv9LhRfK4bndKaFi7JTTomAIjCbW32ZLMvxWgbCqFpvv0 j37cbBuk8UwxoxyuKhab94CB0hygKant1fa9sGFXglr06Vr+hyahIBtqeErBVMlW lYTXY0evNl7WN3c9Fnn7Ejt9mEiBt+8zz/G6XkAoxE9W494CO5yEpdFg0mDA -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:28 2026 by rpki-client