This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LpuVpNzIT5J8xrByaxdshtQafFU.roa File: LpuVpNzIT5J8xrByaxdshtQafFU.roa (raw, json) Hash identifier: u5yW0hohzCB+T0QWCJF1OdOeA3mGHzO3T8ZBcDJCjVo= Subject key identifier: 2E:9B:95:A4:DC:C8:4F:92:7C:C6:B0:72:6B:17:6C:86:D4:1A:7C:55 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78343DE434BFD9AB58C216D7BC0A3990 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LpuVpNzIT5J8xrByaxdshtQafFU.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1882 IP address blocks: 192.36.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3d:e4:34:bf:d9:ab:58:c2:16:d7:bc:0a:39:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e9b95a4dcc84f927cc6b0726b176c86d41a7c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:e7:ca:0d:76:aa:07:f1:a4:de:b8:3e:e9: 77:31:3b:91:78:6d:bc:e1:c9:49:69:fd:28:3b:68: e8:49:95:ba:a4:f4:fa:81:8a:50:7b:d7:39:73:37: f0:93:2e:c9:18:04:8c:fb:ac:12:89:70:45:c6:0e: bc:f6:30:28:86:14:45:72:b1:99:81:af:3f:27:b3: 04:76:8a:d9:d0:8d:e7:fc:97:be:a4:03:47:96:0c: 91:c8:62:55:d4:05:0a:b9:f9:08:03:e6:4f:ae:22: b5:6c:b4:e3:31:09:f5:0d:4f:79:a5:ba:8d:de:66: 3b:3e:37:3a:96:f4:47:df:29:be:42:b8:45:30:d0: 69:37:96:da:f3:50:e0:69:ca:d2:90:fd:c2:98:18: 9e:31:54:a6:ed:50:16:11:24:14:8c:8b:43:dc:f0: 46:fc:bf:0b:a6:db:bf:25:0e:15:ee:90:f8:9e:ae: 23:71:06:c8:8f:e5:47:d9:90:45:d9:3d:82:6b:48: 5a:63:3e:14:72:65:2c:94:3e:d9:8c:38:32:5b:0d: 44:fb:0f:7e:d7:77:f5:ec:de:36:27:31:b5:ed:0c: 06:ca:47:c1:fd:d4:f0:65:1f:5d:4e:43:52:37:02: 93:bc:de:95:65:9f:39:5f:95:72:31:89:ee:7d:46: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9B:95:A4:DC:C8:4F:92:7C:C6:B0:72:6B:17:6C:86:D4:1A:7C:55 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LpuVpNzIT5J8xrByaxdshtQafFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.42.0/24 Signature Algorithm: sha256WithRSAEncryption c2:ec:d1:82:4d:df:bc:81:cb:81:9e:63:d1:c4:85:fb:3d:cb: 09:0f:6e:50:6a:96:8c:63:1c:e2:63:b4:45:3f:0b:5a:04:1f: e7:b6:d7:bd:85:32:67:cc:f7:fd:d9:41:74:c0:f4:f9:14:42: 82:26:c9:78:13:b5:8f:82:cf:e8:c2:a2:47:ec:d7:a5:be:3c: 1d:c1:da:c2:32:05:ce:a7:c0:53:74:33:57:cb:6a:55:d6:eb: c9:21:21:14:81:c5:d7:18:23:79:d0:e2:fe:3a:ba:5c:b3:b8: 1f:71:7f:dd:32:49:30:4a:9c:f5:3b:fb:05:7c:d5:5f:d6:dc: e0:3c:b2:6a:27:92:f6:14:91:d0:4f:d4:39:22:07:49:e6:b1: e1:ec:6a:9b:55:1f:b2:8c:de:70:54:43:6f:0f:dd:d4:5e:23: 4b:07:75:e4:eb:9b:4b:30:b1:62:49:a2:6f:e7:fa:b1:56:ed: 03:ec:68:e1:74:29:36:95:7b:c5:80:2f:45:72:da:d4:c9:14: e9:5b:a4:f9:a1:1c:20:9a:f0:f8:45:ea:f9:96:fe:b0:91:3a: 35:f4:e9:99:ef:18:d0:85:f2:26:65:63:37:72:55:2e:30:cc: 2e:71:46:84:40:7e:2b:69:9a:00:60:af:ce:9b:50:0b:3b:03: 74:ef:ee:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ND3kNL/Zq1jCFte8CjmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTliOTVhNGRjYzg0ZjkyN2NjNmIwNzI2YjE3NmM4NmQ0MWE3YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS/nyg12qgfxpN64Pul3MTuReG28 4clJaf0oO2joSZW6pPT6gYpQe9c5czfwky7JGASM+6wSiXBFxg689jAohhRFcrGZ ga8/J7MEdorZ0I3n/Je+pANHlgyRyGJV1AUKufkIA+ZPriK1bLTjMQn1DU95pbqN 3mY7Pjc6lvRH3ym+QrhFMNBpN5ba81DgacrSkP3CmBieMVSm7VAWESQUjItD3PBG /L8Lptu/JQ4V7pD4nq4jcQbIj+VH2ZBF2T2Ca0haYz4UcmUslD7ZjDgyWw1E+w9+ 13f17N42JzG17QwGykfB/dTwZR9dTkNSNwKTvN6VZZ85X5VyMYnufUZrGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6blaTcyE+SfMawcmsXbIbUGnxVMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvTHB1VnBOeklUNUo4eHJCeWF4ZHNodFFhZkZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCQqMA0G CSqGSIb3DQEBCwUAA4IBAQDC7NGCTd+8gcuBnmPRxIX7PcsJD25QapaMYxziY7RF PwtaBB/ntte9hTJnzPf92UF0wPT5FEKCJsl4E7WPgs/owqJH7NelvjwdwdrCMgXO p8BTdDNXy2pV1uvJISEUgcXXGCN50OL+Orpcs7gfcX/dMkkwSpz1O/sFfNVf1tzg PLJqJ5L2FJHQT9Q5IgdJ5rHh7GqbVR+yjN5wVENvD93UXiNLB3Xk65tLMLFiSaJv 5/qxVu0D7GjhdCk2lXvFgC9FctrUyRTpW6T5oRwgmvD4Rer5lv6wkTo19OmZ7xjQ hfImZWM3clUuMMwucUaEQH4raZoAYK/Om1ALOwN07+5O -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:49 2026 by rpki-client