This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QbYpHrh_Di664aD_EE6arh8uSBI.roa File: QbYpHrh_Di664aD_EE6arh8uSBI.roa (raw, json) Hash identifier: IXGimMt5PMGWsuUDRJxDyKneBMm80X+FuXUSrixejDY= Subject key identifier: 41:B6:29:1E:B8:7F:0E:2E:BA:E1:A0:FF:10:4E:9A:AE:1F:2E:48:12 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349A5B21A6F44DD79F0F949194C55B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QbYpHrh_Di664aD_EE6arh8uSBI.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213976 IP address blocks: 192.121.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9a:5b:21:a6:f4:4d:d7:9f:0f:94:91:94:c5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41b6291eb87f0e2ebae1a0ff104e9aae1f2e4812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:2e:0c:2a:1e:a9:9d:f1:e0:aa:09:d1:61: c8:be:72:08:28:27:d7:44:6e:1c:25:d8:ac:d3:74: 2e:52:e2:2f:23:7e:80:79:6e:da:4f:a9:9f:18:1f: b6:38:71:ff:5b:e2:71:a7:7b:2d:d5:9a:1f:39:64: 13:2d:c4:8d:47:bb:4c:4e:b1:31:d5:e2:e1:7a:07: bd:7f:a7:3d:a2:a7:a0:56:6a:c4:07:f1:43:f3:33: e8:1f:b2:3c:71:fd:fd:01:45:e9:0b:67:38:85:d1: 79:f8:14:5d:db:82:b2:0d:8c:d7:e5:57:cc:5c:8d: 30:3c:a4:b6:89:ed:f5:fc:60:7c:fa:64:2b:3e:15: c6:4e:01:79:f8:0e:b6:6b:c8:56:31:26:24:c4:ad: b2:32:fc:4a:7b:d7:dd:73:15:80:d2:ae:c7:c5:6c: b5:85:7c:b0:b7:49:25:3d:5d:c6:7d:fb:07:4f:a2: 18:eb:57:97:f5:75:12:cc:41:96:0e:e1:66:31:6e: 3d:23:6e:b1:95:8f:7d:08:85:77:36:2a:6f:bd:f7: ea:e6:fd:d3:ff:f4:62:fa:7f:84:23:3b:40:87:d8: 59:0c:03:86:ed:e4:12:3a:4d:cc:a9:bd:0f:6d:f6: d5:dd:a0:08:8b:b8:ca:67:db:2b:4d:58:20:51:32: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B6:29:1E:B8:7F:0E:2E:BA:E1:A0:FF:10:4E:9A:AE:1F:2E:48:12 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QbYpHrh_Di664aD_EE6arh8uSBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.58.0/24 Signature Algorithm: sha256WithRSAEncryption c1:a8:b4:02:2f:a2:28:8c:5a:8e:f9:06:05:bc:8f:06:b6:cb: eb:e6:60:ee:b3:6d:7c:65:ee:e9:71:6f:bb:6d:43:71:9a:85: fa:f7:c1:f9:e4:df:7a:4a:8a:15:26:3c:87:36:28:68:b4:71: d9:87:fb:b0:6d:0a:63:df:23:b7:8d:3e:79:57:37:99:db:06: a3:a8:a5:8b:4e:ff:45:8c:67:d5:8a:a0:54:69:17:79:d8:05: cd:06:d0:31:2c:17:87:32:c4:45:a0:2c:f0:8b:0d:18:6e:22: a3:d0:0a:49:64:92:41:1d:3f:8c:9c:f0:24:ea:76:12:f1:ad: 33:f9:80:d6:3f:bf:c8:f4:43:5a:12:1e:1b:7e:11:2c:b5:4a: 26:ac:06:44:8b:45:94:d4:88:cb:0d:0c:49:08:7a:05:99:b1: a3:f8:c3:d0:b0:25:dc:d3:97:8b:76:ff:db:2a:e8:fa:55:7d: f9:b2:ca:af:7c:f3:cc:56:8d:40:78:f2:d4:a5:db:d2:77:0a: 0a:be:c9:fc:fb:ae:db:cb:bb:72:ae:33:53:27:fd:07:55:c3: 99:f7:c3:7b:bf:c9:e0:61:30:18:35:54:35:d7:96:0b:9a:fb: af:90:39:bc:b8:b9:79:1c:1f:33:8e:01:d9:06:8b:12:d7:4f: be:58:95:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJpbIab0TdefD5SRlMVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWI2MjkxZWI4N2YwZTJlYmFlMWEwZmYxMDRlOWFhZTFmMmU0ODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AEuDCoeqZ3x4KoJ0WHIvnIIKCfX RG4cJdis03QuUuIvI36AeW7aT6mfGB+2OHH/W+Jxp3st1ZofOWQTLcSNR7tMTrEx 1eLhege9f6c9oqegVmrEB/FD8zPoH7I8cf39AUXpC2c4hdF5+BRd24KyDYzX5VfM XI0wPKS2ie31/GB8+mQrPhXGTgF5+A62a8hWMSYkxK2yMvxKe9fdcxWA0q7HxWy1 hXywt0klPV3GffsHT6IY61eX9XUSzEGWDuFmMW49I26xlY99CIV3Nipvvffq5v3T //Ri+n+EIztAh9hZDAOG7eQSOk3Mqb0PbfbV3aAIi7jKZ9srTVggUTJ6BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEG2KR64fw4uuuGg/xBOmq4fLkgSMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUWJZcEhyaF9EaTY2NGFEX0VFNmFyaDh1U0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHk6MA0G CSqGSIb3DQEBCwUAA4IBAQDBqLQCL6IojFqO+QYFvI8Gtsvr5mDus218Ze7pcW+7 bUNxmoX698H55N96SooVJjyHNihotHHZh/uwbQpj3yO3jT55VzeZ2wajqKWLTv9F jGfViqBUaRd52AXNBtAxLBeHMsRFoCzwiw0YbiKj0ApJZJJBHT+MnPAk6nYS8a0z +YDWP7/I9ENaEh4bfhEstUomrAZEi0WU1IjLDQxJCHoFmbGj+MPQsCXc05eLdv/b Kuj6VX35ssqvfPPMVo1AePLUpdvSdwoKvsn8+67by7tyrjNTJ/0HVcOZ98N7v8ng YTAYNVQ115YLmvuvkDm8uLl5HB8zjgHZBosS10++WJVH -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:50 2026 by rpki-client