This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RHZ4h1ooLChG72JwO2UJZ7OMbow.roa File: RHZ4h1ooLChG72JwO2UJZ7OMbow.roa (raw, json) Hash identifier: 9jm32ihsFh7nKrtb0LWdtQ45ytJho/6kVNyySOJNHFA= Subject key identifier: 44:76:78:87:5A:28:2C:28:46:EF:62:70:3B:65:09:67:B3:8C:6E:8C Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783482D2AAFCD719B93E3910F2CE9F8F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RHZ4h1ooLChG72JwO2UJZ7OMbow.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204302 IP address blocks: 192.121.68.0/24 maxlen: 24 192.165.128.0/23 maxlen: 23 194.68.35.0/24 maxlen: 24 194.103.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:82:d2:aa:fc:d7:19:b9:3e:39:10:f2:ce:9f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=447678875a282c2846ef62703b650967b38c6e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:93:9c:28:f3:59:25:1c:75:61:96:a5:b5: 55:de:33:de:4f:a0:fe:d1:3c:75:d8:b5:37:31:d1: 3c:74:2a:7f:ca:05:5a:c4:fb:da:2b:2c:e3:72:9d: 00:43:c6:e8:13:88:a5:5e:0e:d1:9c:29:52:8f:f0: ab:99:b3:18:f6:67:ac:1d:1f:0b:06:b7:ef:4d:85: f8:40:c3:d9:ce:f1:b7:29:26:f9:f0:6e:5e:d4:ce: 46:ad:83:72:35:bf:79:7e:b4:6e:c2:0a:77:fb:a7: b0:ed:85:35:57:ad:0e:43:f1:65:42:8d:00:0f:36: 80:75:2a:eb:ff:4c:99:cf:3d:b1:71:7e:1a:46:bf: 74:51:56:9b:c0:de:c3:d3:d4:c9:63:b2:64:cf:b5: 41:79:e6:a9:60:0a:1b:bf:df:09:5e:54:ce:45:e9: fe:2b:af:52:9c:35:0b:d0:3c:49:45:24:16:81:6e: e2:b0:be:50:84:ad:7e:30:03:09:0d:af:d8:e8:46: ea:71:bd:27:02:1e:8d:b2:a0:68:ce:73:77:04:55: 90:95:f0:0e:ff:79:b7:4f:ca:d8:41:82:f2:4d:72: 81:05:42:93:ba:6d:5f:34:74:4a:bc:57:5a:1c:48: 51:ca:7d:ca:3d:26:38:f8:35:14:be:61:b8:cf:2b: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:76:78:87:5A:28:2C:28:46:EF:62:70:3B:65:09:67:B3:8C:6E:8C X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RHZ4h1ooLChG72JwO2UJZ7OMbow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.68.0/24 192.165.128.0/23 194.68.35.0/24 194.103.142.0/23 Signature Algorithm: sha256WithRSAEncryption 18:09:4e:29:4f:e4:b1:9b:83:fa:dc:91:99:2f:21:a4:0e:5b: 6e:75:4a:1d:14:52:d7:b0:12:57:a8:a8:0d:c5:8d:f6:4e:fc: e4:51:b8:7c:50:b2:e2:87:ca:89:10:5f:b6:0e:a9:e6:3f:78: 2c:c5:78:72:e4:1e:54:67:a7:18:f7:1a:da:bf:91:3f:9f:e8: 7b:2f:50:11:bc:02:c7:8b:43:35:a9:b7:f7:50:0f:e9:ac:44: 10:23:ff:61:78:7f:d7:e7:2b:c9:67:ca:d9:d2:1e:9b:9a:ba: 3b:8f:e5:0e:be:28:75:f6:d6:7d:bd:58:96:3a:49:c5:5b:e8: 9f:29:3d:7c:fd:2d:5c:3f:28:a4:d6:cf:1d:69:52:70:a3:05: 51:9d:5a:c6:f5:1a:e8:84:42:4d:93:26:b6:38:cc:cb:ef:b2: c6:2a:c2:0f:c7:73:42:cd:a3:32:16:7d:fc:22:db:09:88:e3: e8:21:78:3f:02:f7:72:42:35:ee:64:75:f6:17:da:00:fc:40: 7d:62:0b:61:4d:ce:f7:6a:f3:9a:b2:be:fe:b9:ec:d6:d8:31: 13:18:84:aa:a2:33:12:33:71:36:53:e0:f7:24:fd:d1:0c:36: c2:71:83:07:12:5d:63:70:5c:4d:36:87:06:db:ce:ed:a1:68: 5c:2b:f8:fc -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NILSqvzXGbk+ORDyzp+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDc2Nzg4NzVhMjgyYzI4NDZlZjYyNzAzYjY1MDk2N2IzOGM2ZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+aTnCjzWSUcdWGWpbVV3jPeT6D+ 0Tx12LU3MdE8dCp/ygVaxPvaKyzjcp0AQ8boE4ilXg7RnClSj/CrmbMY9mesHR8L BrfvTYX4QMPZzvG3KSb58G5e1M5GrYNyNb95frRuwgp3+6ew7YU1V60OQ/FlQo0A DzaAdSrr/0yZzz2xcX4aRr90UVabwN7D09TJY7Jkz7VBeeapYAobv98JXlTORen+ K69SnDUL0DxJRSQWgW7isL5QhK1+MAMJDa/Y6Ebqcb0nAh6NsqBoznN3BFWQlfAO /3m3T8rYQYLyTXKBBUKTum1fNHRKvFdaHEhRyn3KPSY4+DUUvmG4zyt42wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFER2eIdaKCwoRu9icDtlCWezjG6MMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUkhaNGgxb29MQ2hHNzJKd08yVUpaN09NYm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwHlEAwQB wKWAAwQAwkQjAwQBwmeOMA0GCSqGSIb3DQEBCwUAA4IBAQAYCU4pT+Sxm4P63JGZ LyGkDltudUodFFLXsBJXqKgNxY32TvzkUbh8ULLih8qJEF+2DqnmP3gsxXhy5B5U Z6cY9xrav5E/n+h7L1ARvALHi0M1qbf3UA/prEQQI/9heH/X5yvJZ8rZ0h6bmro7 j+UOvih19tZ9vViWOknFW+ifKT18/S1cPyik1s8daVJwowVRnVrG9RrohEJNkya2 OMzL77LGKsIPx3NCzaMyFn38ItsJiOPoIXg/AvdyQjXuZHX2F9oA/EB9YgthTc73 avOasr7+uezW2DETGISqojMSM3E2U+D3JP3RDDbCcYMHEl1jcFxNNocG287toWhc K/j8 -----END CERTIFICATE-----Generated at Sun Jan 25 11:55:37 2026 by rpki-client