This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ri7xqN4TlKCgCFw-9v6c6XLlOoM.roa File: Ri7xqN4TlKCgCFw-9v6c6XLlOoM.roa (raw, json) Hash identifier: +87YdypZ4J0DiOhRkhc1nVaobW0C1pLpJrrmZUqcEhM= Subject key identifier: 46:2E:F1:A8:DE:13:94:A0:A0:08:5C:3E:F6:FE:9C:E9:72:E5:3A:83 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783464AB898A6DE357E6AEE20F9C54FE Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ri7xqN4TlKCgCFw-9v6c6XLlOoM.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48894 IP address blocks: 192.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:64:ab:89:8a:6d:e3:57:e6:ae:e2:0f:9c:54:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=462ef1a8de1394a0a0085c3ef6fe9ce972e53a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:47:ff:23:33:64:ec:b2:f4:ce:c9:7b:24:5a: 64:e8:0e:e5:06:ea:76:ba:5b:dd:cd:ad:1d:4e:f0: 84:d2:de:cc:bf:f3:75:04:a9:6d:11:be:7d:18:c9: dc:84:aa:c1:79:a1:7a:b1:dc:fb:44:7b:eb:18:94: 64:cb:66:00:bf:13:6c:90:21:60:8c:d1:e7:f4:89: ec:67:ec:ee:22:28:21:f7:dd:b3:72:dd:12:31:a3: 96:c5:75:2a:71:6e:fa:04:63:8d:73:30:8a:ab:89: eb:5d:1a:0d:85:31:e9:14:ec:24:1a:1c:e1:8a:db: 88:89:41:2d:e2:2a:2b:0b:69:39:34:d8:17:b9:b9: 85:80:df:3c:df:a1:1f:ea:a6:c4:e7:ab:bc:7b:8e: 3b:12:78:0c:2b:17:34:65:d2:a3:30:18:3b:f6:37: 93:93:21:bd:6a:d9:fb:7e:fd:b9:52:d8:37:0f:5d: a7:30:26:d7:f7:8e:ab:27:91:84:bd:8e:45:68:97: ee:12:28:70:e5:79:4b:77:8c:b4:37:16:7d:1c:f2: 56:7c:f8:00:5e:62:7f:b2:ef:18:a2:89:84:f1:d4: 5e:82:84:0f:a7:90:21:66:19:49:00:a1:41:59:5b: 5b:bf:4e:f8:22:4c:f1:3d:07:7c:cf:50:db:8c:96: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2E:F1:A8:DE:13:94:A0:A0:08:5C:3E:F6:FE:9C:E9:72:E5:3A:83 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ri7xqN4TlKCgCFw-9v6c6XLlOoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.244.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c1:54:4b:f6:88:cb:db:15:e6:10:f8:ca:8b:df:47:3d:47: 56:98:c6:17:ac:48:de:0b:23:da:25:3a:00:90:27:31:7e:de: a9:c0:14:51:5d:e0:82:0e:bf:c1:9d:aa:d4:4c:90:8a:bb:73: 9a:54:ba:4e:33:ac:6a:45:dc:e5:05:11:c3:b8:ac:9e:b8:20: aa:9a:bc:96:02:19:0b:3e:1f:dd:a7:fc:a3:3b:bc:62:25:88: 94:3e:29:f7:6c:88:5a:44:aa:26:61:30:87:cb:48:c2:85:d9: 35:8e:5e:e7:2a:c2:59:cd:25:49:3f:05:25:69:5c:51:73:16: 15:b4:41:5a:a1:a4:d7:c9:33:d7:1b:27:38:43:05:b2:60:d6: 68:b2:8a:49:3e:26:cc:2b:89:26:4e:5b:43:cd:08:5a:b7:d7: 70:66:25:92:28:66:3a:57:a5:e0:a1:8e:76:59:fb:2a:20:e5: c9:55:91:0b:5c:60:8d:d4:49:83:eb:70:ad:46:55:7d:19:8f: 11:1d:55:14:79:6a:95:3f:34:85:05:cf:a3:4d:e8:0d:b0:47: 81:5e:9e:58:53:c7:a9:0f:a6:4e:17:59:d7:59:2b:09:6d:18: 96:31:67:d2:96:69:78:9c:b2:1c:26:40:7d:f6:df:c2:e0:6b: ed:0c:fe:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGSriYpt41fmruIPnFT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjJlZjFhOGRlMTM5NGEwYTAwODVjM2VmNmZlOWNlOTcyZTUzYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kf/IzNk7LL0zsl7JFpk6A7lBup2 ulvdza0dTvCE0t7Mv/N1BKltEb59GMnchKrBeaF6sdz7RHvrGJRky2YAvxNskCFg jNHn9InsZ+zuIigh992zct0SMaOWxXUqcW76BGONczCKq4nrXRoNhTHpFOwkGhzh ituIiUEt4iorC2k5NNgXubmFgN8836Ef6qbE56u8e447EngMKxc0ZdKjMBg79jeT kyG9atn7fv25Utg3D12nMCbX946rJ5GEvY5FaJfuEihw5XlLd4y0NxZ9HPJWfPgA XmJ/su8YoomE8dRegoQPp5AhZhlJAKFBWVtbv074IkzxPQd8z1DbjJbPNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYu8ajeE5SgoAhcPvb+nOly5TqDMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUmk3eHFONFRsS0NnQ0Z3LTl2NmM2WExsT29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEf0MA0G CSqGSIb3DQEBCwUAA4IBAQBJwVRL9ojL2xXmEPjKi99HPUdWmMYXrEjeCyPaJToA kCcxft6pwBRRXeCCDr/BnarUTJCKu3OaVLpOM6xqRdzlBRHDuKyeuCCqmryWAhkL Ph/dp/yjO7xiJYiUPin3bIhaRKomYTCHy0jChdk1jl7nKsJZzSVJPwUlaVxRcxYV tEFaoaTXyTPXGyc4QwWyYNZosopJPibMK4kmTltDzQhat9dwZiWSKGY6V6XgoY52 WfsqIOXJVZELXGCN1EmD63CtRlV9GY8RHVUUeWqVPzSFBc+jTegNsEeBXp5YU8ep D6ZOF1nXWSsJbRiWMWfSlml4nLIcJkB99t/C4GvtDP6a -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:34 2026 by rpki-client