This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IjXZ-QSRu3Cjdyd_1gUn15CUHQs.roa File: IjXZ-QSRu3Cjdyd_1gUn15CUHQs.roa (raw, json) Hash identifier: q8NSwAY0g0OEJfJRLBHUqWKAL7fGL3E1mSv5nca6LjU= Subject key identifier: 22:35:D9:F9:04:91:BB:70:A3:77:27:7F:D6:05:27:D7:90:94:1D:0B Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834629BFEEAB38B352941CB28CE2F23 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IjXZ-QSRu3Cjdyd_1gUn15CUHQs.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47957 IP address blocks: 193.183.113.0/24 maxlen: 24 193.183.114.0/24 maxlen: 24 194.71.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:62:9b:fe:ea:b3:8b:35:29:41:cb:28:ce:2f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2235d9f90491bb70a377277fd60527d790941d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f3:a9:7c:95:fb:51:13:c7:68:17:84:58:2b: 7c:14:ab:24:0f:5a:7d:47:f1:e6:e3:c3:c7:4b:20: 8f:d8:9e:00:f3:dd:5d:ed:c1:5c:45:f2:88:ea:ce: f4:8c:9a:3e:2a:6c:88:be:f4:69:0b:dc:5d:e4:19: 6d:5a:a4:eb:57:9a:0d:cd:21:69:45:d2:b3:3e:c7: b9:6c:ba:96:d6:02:ed:5e:56:bd:15:dd:a5:27:46: ec:b7:f7:39:77:aa:a6:9e:32:f6:9b:9e:1a:4b:34: 06:19:00:20:8a:d4:59:b6:8f:f0:5d:1a:58:17:5d: 82:6b:ad:8c:6b:cf:3b:4c:90:98:d1:f3:7f:7b:e3: 71:c5:c5:fb:be:d9:a3:51:07:1e:3a:5a:b6:6f:01: a8:da:46:9b:82:d9:03:34:e3:55:5b:fe:eb:61:f5: c6:1b:93:0f:fd:c3:61:0e:42:f2:a8:a4:57:82:b2: bf:40:37:7a:d9:5e:46:78:bc:9c:bd:63:5c:c9:fd: fd:b3:fe:01:e1:58:f7:97:18:83:0c:8e:d0:fc:26: e3:cf:97:6c:e7:23:bf:3c:fa:a7:de:77:32:d1:29: 84:71:48:05:6a:80:06:44:a9:70:5e:2c:41:c1:2c: 6f:72:cd:96:d9:53:5e:69:1e:4d:8c:53:81:5e:80: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:D9:F9:04:91:BB:70:A3:77:27:7F:D6:05:27:D7:90:94:1D:0B X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IjXZ-QSRu3Cjdyd_1gUn15CUHQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.113.0-193.183.114.255 194.71.146.0/23 Signature Algorithm: sha256WithRSAEncryption c0:42:01:14:aa:2e:c9:cb:db:9c:f0:e0:32:e8:8a:aa:ca:f0: 01:0d:d3:92:1f:9f:2d:32:21:20:6e:84:bc:38:04:1d:27:fc: be:a3:53:07:d5:a1:16:13:c5:07:64:4f:92:20:c0:97:ea:71: 84:dc:0e:69:da:9c:84:00:e4:a3:76:9e:6b:fa:ed:7b:76:4e: c5:2f:c3:51:7b:fb:5d:d5:f0:37:37:7a:16:a8:3a:2c:64:e7: 38:ae:2d:c2:1f:f3:03:69:75:9c:e6:c5:3d:e6:43:f5:37:57: 46:31:8e:af:eb:cf:63:bd:53:5a:88:de:ee:62:4a:23:f1:10: 57:9e:08:d8:63:09:65:d7:6d:ea:de:60:53:45:4c:2d:06:04: 5e:56:59:b7:af:44:39:eb:a0:aa:6b:30:3a:24:2b:b9:41:8e: 6f:67:a5:05:3a:55:bf:c3:1a:69:8c:ca:16:b8:1b:9d:0b:0d: c3:06:bb:c2:43:9a:8f:ab:d1:cc:4a:38:69:b5:f2:cf:b9:4e: 0f:09:e4:73:a6:9b:69:58:93:b0:7e:2f:0a:69:52:a7:3e:c8: 48:8e:57:46:c2:59:56:88:c9:be:7e:d4:29:fa:ea:e2:f9:91: 79:2d:66:8d:d4:0c:b3:07:6c:9b:7e:5a:db:63:2b:ef:c0:ce: db:fe:d7:69 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NGKb/uqzizUpQcsozi8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjM1ZDlmOTA0OTFiYjcwYTM3NzI3N2ZkNjA1MjdkNzkwOTQxZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/OpfJX7URPHaBeEWCt8FKskD1p9 R/Hm48PHSyCP2J4A891d7cFcRfKI6s70jJo+KmyIvvRpC9xd5BltWqTrV5oNzSFp RdKzPse5bLqW1gLtXla9Fd2lJ0bst/c5d6qmnjL2m54aSzQGGQAgitRZto/wXRpY F12Ca62Ma887TJCY0fN/e+NxxcX7vtmjUQceOlq2bwGo2kabgtkDNONVW/7rYfXG G5MP/cNhDkLyqKRXgrK/QDd62V5GeLycvWNcyf39s/4B4Vj3lxiDDI7Q/Cbjz5ds 5yO/PPqn3ncy0SmEcUgFaoAGRKlwXixBwSxvcs2W2VNeaR5NjFOBXoAbXwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCI12fkEkbtwo3cnf9YFJ9eQlB0LMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvSWpYWi1RU1J1M0NqZHlkXzFnVW4xNUNVSFFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADBt3ED BADBt3IDBAHCR5IwDQYJKoZIhvcNAQELBQADggEBAMBCARSqLsnL25zw4DLoiqrK 8AEN05Ifny0yISBuhLw4BB0n/L6jUwfVoRYTxQdkT5IgwJfqcYTcDmnanIQA5KN2 nmv67Xt2TsUvw1F7+13V8Dc3ehaoOixk5ziuLcIf8wNpdZzmxT3mQ/U3V0Yxjq/r z2O9U1qI3u5iSiPxEFeeCNhjCWXXbereYFNFTC0GBF5WWbevRDnroKprMDokK7lB jm9npQU6Vb/DGmmMyha4G50LDcMGu8JDmo+r0cxKOGm18s+5Tg8J5HOmm2lYk7B+ LwppUqc+yEiOV0bCWVaIyb5+1Cn66uL5kXktZo3UDLMHbJt+WttjK+/Aztv+12k= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:38 2026 by rpki-client