This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Q9O2VkID7Asse-207WrX_q7Yaps.roa File: Q9O2VkID7Asse-207WrX_q7Yaps.roa (raw, json) Hash identifier: An0knlgE8os688ahjqa3Zr0eOzxT4BY5+XnzBRc5onA= Subject key identifier: 43:D3:B6:56:42:03:EC:0B:2C:7B:ED:B4:ED:6A:D7:FE:AE:D8:6A:9B Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344CA4A3858469025EA89BC3DCCACF Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Q9O2VkID7Asse-207WrX_q7Yaps.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20836 IP address blocks: 192.121.46.0/24 maxlen: 24 192.121.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4c:a4:a3:85:84:69:02:5e:a8:9b:c3:dc:ca:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d3b6564203ec0b2c7bedb4ed6ad7feaed86a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:5f:21:1f:59:ad:db:71:98:62:78:fa:b6: 7a:91:e0:63:d2:37:55:d3:2a:cc:09:64:27:67:f8: be:ce:6a:d5:d8:66:54:31:98:c2:04:87:60:cc:18: 40:6c:6d:d7:7a:64:53:8f:1a:61:e5:7a:13:60:89: 36:65:ff:5d:7d:36:31:da:ca:e3:87:74:df:2a:cc: 44:fc:d6:3a:6a:4c:4c:e0:0d:0e:0c:72:a6:3a:2d: 2d:ac:33:ec:67:31:21:35:25:a1:18:c0:2a:1a:9a: 55:9f:c3:2f:9b:a0:0b:a0:04:c7:2a:47:33:21:4b: 5b:88:79:5c:94:57:3d:a5:38:be:38:80:bc:f1:ff: f7:26:d5:f5:95:f1:5d:00:cb:e3:d2:30:50:a1:41: 12:91:23:25:4e:50:81:0e:94:f8:b3:64:83:95:b8: ee:23:ff:2c:76:24:2e:42:de:c9:0e:f8:2f:61:b4: 4c:40:8a:e3:b1:2e:53:3c:b2:17:6e:b7:97:c1:3f: cb:a8:89:ff:07:da:a6:e4:9a:11:c2:6d:fb:1c:44: 46:47:23:18:6e:c8:82:af:4d:d0:55:f6:08:7b:17: 95:c2:22:da:ec:33:3d:7e:76:87:9d:1d:62:21:80: e6:c3:4a:43:f0:c9:7f:c9:fb:23:1d:f2:c6:af:00: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:B6:56:42:03:EC:0B:2C:7B:ED:B4:ED:6A:D7:FE:AE:D8:6A:9B X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Q9O2VkID7Asse-207WrX_q7Yaps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.46.0/23 Signature Algorithm: sha256WithRSAEncryption 14:f0:0d:e2:b4:09:d5:aa:39:fd:07:2a:0d:3b:ef:17:3d:3b: 8f:88:4b:85:85:98:f6:67:92:c0:fd:0b:e8:44:bd:41:25:e6: b9:59:83:c5:b3:6a:58:dd:7b:a4:59:ef:a3:94:12:3b:2d:0b: 2d:6c:31:41:e7:b3:e2:df:a2:0f:07:ac:5c:de:b0:5d:08:25: 02:cc:31:99:49:25:60:77:09:c5:7e:55:00:5c:8f:b4:6e:62: c8:a2:49:42:1e:5f:94:0f:46:fe:ed:dd:74:e5:73:36:2d:c7: 16:cf:ec:b3:44:3e:ab:a5:bd:06:d4:c4:74:34:7f:00:ce:8e: 86:94:23:cd:fa:8a:02:9d:cf:c1:9a:f8:91:85:62:ab:9b:37: 28:ee:84:14:b3:e3:29:16:01:74:72:d8:6d:30:ef:52:90:bf: 7b:f9:d7:2c:35:1a:df:f8:9e:1c:30:2a:2f:e9:5c:19:81:eb: 83:83:e7:e8:a0:e4:a3:b4:5d:cb:79:46:39:86:85:6f:28:0e: 25:28:a1:7a:9b:65:10:e2:2a:20:3e:b6:e7:76:9b:c0:6d:a7: 14:16:71:21:d6:46:0c:9b:2d:50:3b:6d:4a:9d:9f:e9:2b:ba: 52:18:7e:c8:83:f1:d8:ac:26:e2:76:15:3b:79:5a:1c:aa:f5: 1f:b6:b6:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEyko4WEaQJeqJvD3MrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2QzYjY1NjQyMDNlYzBiMmM3YmVkYjRlZDZhZDdmZWFlZDg2YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j1fIR9ZrdtxmGJ4+rZ6keBj0jdV 0yrMCWQnZ/i+zmrV2GZUMZjCBIdgzBhAbG3XemRTjxph5XoTYIk2Zf9dfTYx2srj h3TfKsxE/NY6akxM4A0ODHKmOi0trDPsZzEhNSWhGMAqGppVn8Mvm6ALoATHKkcz IUtbiHlclFc9pTi+OIC88f/3JtX1lfFdAMvj0jBQoUESkSMlTlCBDpT4s2SDlbju I/8sdiQuQt7JDvgvYbRMQIrjsS5TPLIXbreXwT/LqIn/B9qm5JoRwm37HERGRyMY bsiCr03QVfYIexeVwiLa7DM9fnaHnR1iIYDmw0pD8Ml/yfsjHfLGrwCTTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPTtlZCA+wLLHvttO1q1/6u2GqbMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUTlPMlZrSUQ3QXNzZS0yMDdXclhfcTdZYXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHkuMA0G CSqGSIb3DQEBCwUAA4IBAQAU8A3itAnVqjn9ByoNO+8XPTuPiEuFhZj2Z5LA/Qvo RL1BJea5WYPFs2pY3XukWe+jlBI7LQstbDFB57Pi36IPB6xc3rBdCCUCzDGZSSVg dwnFflUAXI+0bmLIoklCHl+UD0b+7d105XM2LccWz+yzRD6rpb0G1MR0NH8Azo6G lCPN+ooCnc/BmviRhWKrmzco7oQUs+MpFgF0cthtMO9SkL97+dcsNRrf+J4cMCov 6VwZgeuDg+fooOSjtF3LeUY5hoVvKA4lKKF6m2UQ4iogPrbndpvAbacUFnEh1kYM my1QO21KnZ/pK7pSGH7Ig/HYrCbidhU7eVocqvUftrZK -----END CERTIFICATE-----Generated at Sun Jan 25 11:55:38 2026 by rpki-client