This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IQl8KAEe74pXiVxPVOmq0NdZwAM.roa File: IQl8KAEe74pXiVxPVOmq0NdZwAM.roa (raw, json) Hash identifier: 3VbHAO9ORbxUjn24il/OY7e/UALb/DOYylknwBn81OY= Subject key identifier: 21:09:7C:28:01:1E:EF:8A:57:89:5C:4F:54:E9:AA:D0:D7:59:C0:03 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783458FB114E40DC86852D21846D130C Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IQl8KAEe74pXiVxPVOmq0NdZwAM.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39871 IP address blocks: 192.36.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:58:fb:11:4e:40:dc:86:85:2d:21:84:6d:13:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21097c28011eef8a57895c4f54e9aad0d759c003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:88:aa:98:8b:2e:d1:e7:51:40:fd:01:a0: 75:5e:c0:c0:68:69:6a:d0:4a:dd:d8:87:93:ea:e4: 8e:7a:11:cf:3f:22:9f:47:e6:91:08:97:18:b0:3d: 06:de:4a:dd:e5:53:03:93:56:63:60:f6:0c:8c:95: d6:c4:c1:dc:f9:9a:ea:89:7e:e9:08:19:28:4e:c6: ca:e8:f4:62:78:a4:be:a7:0f:ea:dc:24:60:f2:8b: f7:9b:0f:85:eb:3d:e7:38:71:92:67:2c:a4:ce:3d: 61:42:23:69:06:69:89:e0:ef:f2:4b:33:c7:44:56: 78:6d:39:76:83:5e:47:ea:75:23:41:c1:c4:70:91: 62:29:0c:e4:6d:05:48:f7:13:7e:4a:eb:39:bc:4b: 37:a5:58:d6:ed:92:26:6d:53:59:e2:14:07:f3:96: 0a:80:2c:9d:b2:bf:22:4b:e8:4c:28:92:4c:5c:56: 65:c7:b2:a8:58:f9:3f:f9:d9:38:51:d1:94:02:f8: 9c:84:2b:0f:66:f2:c4:6d:3e:ca:8a:cd:03:90:ed: 1b:15:fa:90:86:40:f2:dd:2d:ff:1e:0a:47:92:6a: 43:bd:30:0a:4a:b2:43:b3:55:79:79:e4:08:ca:79: 0d:a9:13:48:f8:e6:3c:2a:d5:0d:9b:e6:b0:22:aa: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:7C:28:01:1E:EF:8A:57:89:5C:4F:54:E9:AA:D0:D7:59:C0:03 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IQl8KAEe74pXiVxPVOmq0NdZwAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.133.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b5:a6:cb:82:39:a0:8b:85:d9:38:c9:11:c8:af:ca:d6:9d: d4:81:a3:c3:cc:bc:e3:9b:11:f3:07:e0:a3:b6:04:39:9c:ca: 75:ba:0f:42:41:cf:1d:12:11:0b:97:61:41:ba:29:02:4c:b9: 01:6c:95:98:06:f4:51:b7:5c:08:05:15:26:30:f0:fe:03:9d: c7:bf:58:d9:b4:1e:d0:02:0e:aa:93:36:73:92:04:3e:96:e6: 41:3a:c8:e5:af:fc:ce:1f:e3:6a:8e:52:d4:82:b2:43:8e:5c: b8:e5:de:59:56:fb:41:ca:6d:cd:2d:fe:7b:26:c4:6c:fd:24: f7:f0:07:da:6a:fb:59:68:84:23:b1:fb:0a:4b:b4:73:30:5f: 21:c5:6b:68:0f:aa:2f:ca:fb:61:9a:ae:ef:f9:63:1f:2b:e4: 19:ba:80:06:26:f8:6b:5d:e7:17:e0:9f:9a:20:93:b9:68:40: 1d:0e:68:17:80:9a:d9:f4:0c:e4:86:da:fb:45:9d:4b:22:c4: 5d:f8:06:57:76:74:87:89:5b:c0:46:37:9d:48:a5:50:3c:fd: 89:50:7f:8e:3f:0a:99:03:01:cf:c8:6d:87:7b:bb:0f:9f:12: f0:7a:c9:65:00:14:8f:df:11:a6:89:1b:99:77:6e:e3:c8:1b: a5:a3:56:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFj7EU5A3IaFLSGEbRMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTA5N2MyODAxMWVlZjhhNTc4OTVjNGY1NGU5YWFkMGQ3NTljMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1diIqpiLLtHnUUD9AaB1XsDAaGlq 0Erd2IeT6uSOehHPPyKfR+aRCJcYsD0G3krd5VMDk1ZjYPYMjJXWxMHc+ZrqiX7p CBkoTsbK6PRieKS+pw/q3CRg8ov3mw+F6z3nOHGSZyykzj1hQiNpBmmJ4O/ySzPH RFZ4bTl2g15H6nUjQcHEcJFiKQzkbQVI9xN+Sus5vEs3pVjW7ZImbVNZ4hQH85YK gCydsr8iS+hMKJJMXFZlx7KoWPk/+dk4UdGUAvichCsPZvLEbT7Kis0DkO0bFfqQ hkDy3S3/HgpHkmpDvTAKSrJDs1V5eeQIynkNqRNI+OY8KtUNm+awIqqa2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEJfCgBHu+KV4lcT1TpqtDXWcADMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvSVFsOEtBRWU3NHBYaVZ4UFZPbXEwTmRad0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCSFMA0G CSqGSIb3DQEBCwUAA4IBAQBntabLgjmgi4XZOMkRyK/K1p3UgaPDzLzjmxHzB+Cj tgQ5nMp1ug9CQc8dEhELl2FBuikCTLkBbJWYBvRRt1wIBRUmMPD+A53Hv1jZtB7Q Ag6qkzZzkgQ+luZBOsjlr/zOH+NqjlLUgrJDjly45d5ZVvtBym3NLf57JsRs/ST3 8AfaavtZaIQjsfsKS7RzMF8hxWtoD6ovyvthmq7v+WMfK+QZuoAGJvhrXecX4J+a IJO5aEAdDmgXgJrZ9Azkhtr7RZ1LIsRd+AZXdnSHiVvARjedSKVQPP2JUH+OPwqZ AwHPyG2He7sPnxLwesllABSP3xGmiRuZd27jyBulo1YN -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:52 2026 by rpki-client