This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IgL4ks_B7Jsu4LrLIBlfZBWCnY0.roa File: IgL4ks_B7Jsu4LrLIBlfZBWCnY0.roa (raw, json) Hash identifier: BAYOIJKuYhD+P4y17bPxSiNT1O79hFt4RzUaPHHhCHg= Subject key identifier: 22:02:F8:92:CF:C1:EC:9B:2E:E0:BA:CB:20:19:5F:64:15:82:9D:8D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783457EB8EAEAC93532AC61BEA78309F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IgL4ks_B7Jsu4LrLIBlfZBWCnY0.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39658 IP address blocks: 193.180.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:57:eb:8e:ae:ac:93:53:2a:c6:1b:ea:78:30:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2202f892cfc1ec9b2ee0bacb20195f6415829d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:ab:fe:84:3b:09:93:b9:04:02:c8:86:f4: a5:04:2e:1a:13:b2:94:97:b1:a9:b3:a8:94:8e:98: ed:81:de:33:b4:67:39:db:f7:f5:55:95:82:03:53: 3a:47:24:ab:2e:2e:87:73:69:e3:01:cb:f1:ff:a2: 9c:3e:4d:58:05:53:f9:bc:80:82:6c:a0:63:4c:35: ab:49:79:36:65:bb:1d:de:a3:83:c3:da:52:3b:fb: d1:6a:7a:f6:37:0d:96:62:e3:4b:07:4f:fc:df:82: 7a:c5:cd:1c:aa:bf:28:72:ee:5c:21:30:10:69:29: 2b:29:74:97:ec:e4:e2:f5:66:a0:4a:bd:56:20:8a: 47:d4:f9:b2:51:87:e8:60:60:e8:40:0a:a3:b4:5a: 26:06:97:3c:ff:07:e9:10:43:1c:df:f4:89:b5:2e: 26:a3:67:7b:e3:b6:6e:0b:7a:4d:52:38:e1:65:3f: e3:2c:f9:a1:9f:27:2b:26:8f:11:89:f6:27:ea:38: bf:3b:36:d1:00:9a:b3:18:e5:d9:af:b1:8c:5d:e7: ef:9c:e8:d5:35:6c:95:33:e3:e5:9e:b2:30:5e:14: 3f:1a:f2:35:00:63:cf:49:dc:e7:86:a9:d3:10:11: fd:d7:a3:a6:f1:04:58:e3:4b:4f:60:54:a3:e9:c3: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:02:F8:92:CF:C1:EC:9B:2E:E0:BA:CB:20:19:5F:64:15:82:9D:8D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IgL4ks_B7Jsu4LrLIBlfZBWCnY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.124.0/24 Signature Algorithm: sha256WithRSAEncryption 17:9c:e3:f2:24:a7:22:fa:53:ce:49:b6:c2:ff:a6:99:a1:56: e9:85:90:dc:4c:a4:89:c6:48:dc:a0:ba:98:9c:7b:24:1b:c2: 5f:2c:b4:28:37:13:9d:ef:89:e0:9d:2d:f4:c4:37:84:0f:bf: f2:e3:48:2e:e3:94:f2:f6:6b:b4:fc:e2:e8:a8:8b:b3:25:32: 59:69:90:66:b5:22:d9:b3:42:ca:79:cd:e7:c3:01:b5:49:7e: 03:e5:7a:ae:7a:62:35:95:ed:96:d6:08:d9:9a:48:01:5a:7a: e6:33:06:f8:ec:7a:73:f7:46:9a:2b:bf:00:d0:b2:b8:c4:fc: e2:fe:3b:73:4a:26:e9:e2:03:bc:ee:82:11:b5:5c:ad:76:4e: 42:2e:06:05:b6:49:3c:dc:cf:d4:7b:2d:a4:c7:6e:46:6f:18: df:2b:97:98:d3:65:c8:33:8f:d1:8f:bb:5f:a2:c1:13:bd:44: 9e:65:6b:db:de:91:68:97:7e:23:26:c5:47:9f:fc:6b:1f:f0: cf:d6:4b:16:b1:63:97:3b:18:1b:33:55:8b:b7:ec:05:2f:41: 09:1d:39:34:37:34:f7:4b:a0:1e:6b:81:82:cd:89:c8:31:d2: a5:d1:6a:ab:83:aa:5f:42:ef:d3:a2:39:49:72:74:03:0f:df: b5:80:8a:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFfrjq6sk1MqxhvqeDCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjAyZjg5MmNmYzFlYzliMmVlMGJhY2IyMDE5NWY2NDE1ODI5ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn6r/oQ7CZO5BALIhvSlBC4aE7KU l7Gps6iUjpjtgd4ztGc52/f1VZWCA1M6RySrLi6Hc2njAcvx/6KcPk1YBVP5vICC bKBjTDWrSXk2Zbsd3qODw9pSO/vRanr2Nw2WYuNLB0/834J6xc0cqr8ocu5cITAQ aSkrKXSX7OTi9WagSr1WIIpH1PmyUYfoYGDoQAqjtFomBpc8/wfpEEMc3/SJtS4m o2d747ZuC3pNUjjhZT/jLPmhnycrJo8RifYn6ji/OzbRAJqzGOXZr7GMXefvnOjV NWyVM+PlnrIwXhQ/GvI1AGPPSdznhqnTEBH916Om8QRY40tPYFSj6cOqawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIC+JLPweybLuC6yyAZX2QVgp2NMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvSWdMNGtzX0I3SnN1NExyTElCbGZaQldDblkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbR8MA0G CSqGSIb3DQEBCwUAA4IBAQAXnOPyJKci+lPOSbbC/6aZoVbphZDcTKSJxkjcoLqY nHskG8JfLLQoNxOd74ngnS30xDeED7/y40gu45Ty9mu0/OLoqIuzJTJZaZBmtSLZ s0LKec3nwwG1SX4D5XquemI1le2W1gjZmkgBWnrmMwb47Hpz90aaK78A0LK4xPzi /jtzSibp4gO87oIRtVytdk5CLgYFtkk83M/Uey2kx25GbxjfK5eY02XIM4/Rj7tf osETvUSeZWvb3pFol34jJsVHn/xrH/DP1ksWsWOXOxgbM1WLt+wFL0EJHTk0NzT3 S6Aea4GCzYnIMdKl0Wqrg6pfQu/TojlJcnQDD9+1gIrV -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:55 2026 by rpki-client