This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SdJJU4yHcJoIch3jw9u3BbW4_og.roa File: SdJJU4yHcJoIch3jw9u3BbW4_og.roa (raw, json) Hash identifier: 8+wXfi3n+5fD1vprnvnT+9sFyr6dSYQsPwMGzRtZBMo= Subject key identifier: 49:D2:49:53:8C:87:70:9A:08:72:1D:E3:C3:DB:B7:05:B5:B8:FE:88 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349E564DD8B6C3F34561FF038C708C Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SdJJU4yHcJoIch3jw9u3BbW4_og.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395189 IP address blocks: 193.234.128.0/21 maxlen: 24 194.68.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9e:56:4d:d8:b6:c3:f3:45:61:ff:03:8c:70:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49d249538c87709a08721de3c3dbb705b5b8fe88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:e3:17:b5:2a:82:23:07:19:75:9a:80:1b: e5:11:90:0b:42:de:4a:b4:e2:a4:80:01:95:ea:c4: f9:03:66:68:4e:b0:ac:08:af:d9:5c:77:4b:04:12: e9:3f:b4:5d:36:50:86:0f:2c:55:ed:6d:d8:86:77: a5:09:b1:cf:e7:a2:1f:62:ff:06:d1:5f:a4:5f:23: d4:ef:2d:b0:84:f5:78:54:1d:f5:90:45:ff:79:6f: 6b:f8:b9:42:71:1b:7d:52:60:d6:ed:8f:61:af:e0: f5:50:cf:87:df:ea:34:55:4c:8f:2f:01:2c:bf:e3: 87:ea:21:72:fe:5e:f3:b9:0e:99:5c:3f:99:23:7a: f7:bc:74:f4:19:6a:81:a9:1c:b7:e1:c3:af:db:db: 5a:17:23:0c:1b:85:34:4c:36:02:ab:9c:07:dd:a5: 25:84:24:98:25:2b:92:6e:ac:78:cc:5b:2d:98:1a: 43:e0:ba:da:61:5c:90:32:81:d8:be:52:56:f3:b3: 76:18:0f:e4:93:af:37:7d:6f:b1:48:ed:33:dd:37: 7d:ac:34:0b:59:7e:8f:3d:88:7c:05:8b:94:51:cf: 92:8e:4b:8c:27:a2:38:2e:c9:ba:71:e7:00:c2:9c: 53:15:8a:cd:f9:c8:0f:90:13:9f:25:69:8a:e5:dc: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:49:53:8C:87:70:9A:08:72:1D:E3:C3:DB:B7:05:B5:B8:FE:88 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SdJJU4yHcJoIch3jw9u3BbW4_og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.234.128.0/21 194.68.36.0/24 Signature Algorithm: sha256WithRSAEncryption 12:d6:2b:c4:71:d8:6d:35:d1:51:12:0e:96:28:ef:db:00:22: 8a:9f:bd:d8:6d:fb:6a:14:81:46:23:6d:66:03:d9:d5:41:29: ee:6c:cf:a5:12:2f:fb:93:57:72:93:25:43:c7:a1:e5:37:7d: da:d7:ac:10:f3:7e:05:25:ea:78:5a:ce:19:a7:01:c8:e8:68: a2:03:b2:81:25:44:fc:f0:18:d9:b8:86:f6:80:82:c5:6f:0c: 69:f4:b2:56:ec:11:e3:fc:8c:6a:8a:62:29:20:9f:7e:df:6d: 05:0b:d4:9b:bf:87:aa:49:59:aa:44:d1:1b:f1:3b:dd:3d:02: 64:ce:cc:c5:71:45:dd:1a:f1:38:9c:a1:28:12:a5:70:09:d0: 2c:9e:c7:7b:25:dc:bb:71:dc:1f:59:89:a0:47:33:76:f4:88: 09:ac:bb:b0:79:11:d4:44:06:c4:17:f4:a4:06:8e:c6:52:91: 84:9f:95:90:f6:58:3a:34:72:9a:68:73:e3:36:d0:7e:29:87: 54:27:e6:01:f4:ff:74:fb:fe:52:89:54:ea:b4:7b:d5:58:c1: 21:bd:36:9d:86:57:85:16:c1:91:8c:51:01:37:f3:1b:14:7e: 4d:2f:5e:9c:9f:1c:ac:0c:af:cc:93:e0:b5:13:17:69:4c:bc: f9:89:8b:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NJ5WTdi2w/NFYf8DjHCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWQyNDk1MzhjODc3MDlhMDg3MjFkZTNjM2RiYjcwNWI1YjhmZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+njF7UqgiMHGXWagBvlEZALQt5K tOKkgAGV6sT5A2ZoTrCsCK/ZXHdLBBLpP7RdNlCGDyxV7W3YhnelCbHP56IfYv8G 0V+kXyPU7y2whPV4VB31kEX/eW9r+LlCcRt9UmDW7Y9hr+D1UM+H3+o0VUyPLwEs v+OH6iFy/l7zuQ6ZXD+ZI3r3vHT0GWqBqRy34cOv29taFyMMG4U0TDYCq5wH3aUl hCSYJSuSbqx4zFstmBpD4LraYVyQMoHYvlJW87N2GA/kk683fW+xSO0z3Td9rDQL WX6PPYh8BYuUUc+SjkuMJ6I4Lsm6cecAwpxTFYrN+cgPkBOfJWmK5dyzMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEnSSVOMh3CaCHId48PbtwW1uP6IMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvU2RKSlU0eUhjSm9JY2gzanc5dTNCYlc0X29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDweqAAwQA wkQkMA0GCSqGSIb3DQEBCwUAA4IBAQAS1ivEcdhtNdFREg6WKO/bACKKn73Ybftq FIFGI21mA9nVQSnubM+lEi/7k1dykyVDx6HlN33a16wQ834FJep4Ws4ZpwHI6Gii A7KBJUT88BjZuIb2gILFbwxp9LJW7BHj/IxqimIpIJ9+320FC9Sbv4eqSVmqRNEb 8TvdPQJkzszFcUXdGvE4nKEoEqVwCdAsnsd7Jdy7cdwfWYmgRzN29IgJrLuweRHU RAbEF/SkBo7GUpGEn5WQ9lg6NHKaaHPjNtB+KYdUJ+YB9P90+/5SiVTqtHvVWMEh vTadhleFFsGRjFEBN/MbFH5NL16cnxysDK/Mk+C1ExdpTLz5iYtX -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:55 2026 by rpki-client