This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TjFqlr6cLn6uwMaGlIitPbc7r80.roa File: TjFqlr6cLn6uwMaGlIitPbc7r80.roa (raw, json) Hash identifier: ClFPAf8Jy6EkWf3euDrv/pKwfNTL09LkRghEUoX0/Ts= Subject key identifier: 4E:31:6A:96:BE:9C:2E:7E:AE:C0:C6:86:94:88:AD:3D:B7:3B:AF:CD Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344F82D502E0702F22BF82EEDFC467 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TjFqlr6cLn6uwMaGlIitPbc7r80.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30821 IP address blocks: 192.121.168.0/24 maxlen: 24 193.183.144.0/24 maxlen: 24 193.234.233.0/24 maxlen: 24 194.103.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4f:82:d5:02:e0:70:2f:22:bf:82:ee:df:c4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e316a96be9c2e7eaec0c6869488ad3db73bafcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:aa:fd:00:61:4e:8c:c9:36:12:00:27:59: 55:c9:a5:e0:1f:6a:bf:d6:41:84:33:c5:09:ad:7d: 10:5b:72:93:b0:6f:6f:a9:26:4b:1a:6d:2b:12:85: 2d:4d:41:60:3d:49:10:85:6b:12:78:3a:e9:ac:51: 84:90:0d:50:f8:83:e7:ed:33:4c:92:8e:f3:91:67: 4e:a8:14:07:17:af:f1:ae:2c:a1:1f:f4:39:b4:da: 8c:9e:c8:77:36:ec:d7:d7:87:e0:b9:32:2e:1c:b9: 14:24:d2:c7:c6:6b:56:81:ed:85:d4:e7:4f:4c:c5: 98:5a:68:b9:85:28:fc:59:e0:89:66:bb:54:8b:cf: 47:3d:c7:f6:ed:b1:06:2c:03:ee:c5:21:1b:88:2c: c0:37:f0:3c:d4:b0:9e:25:de:cd:70:03:7f:70:77: da:e6:71:2f:4e:53:60:0d:d3:87:c1:c7:c8:56:a4: b8:5f:14:f0:a2:d1:b3:8e:36:0a:1a:0d:63:97:e8: 5e:42:52:b5:ec:5e:3e:a3:1f:58:74:03:a4:eb:bc: be:de:c3:31:61:39:4a:69:1d:a6:21:48:16:c6:ce: 7e:e1:a6:98:e8:0e:e1:37:17:72:a8:f0:89:7b:c1: 9b:84:1b:ad:64:33:52:7b:b8:e7:82:8d:06:44:9e: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:31:6A:96:BE:9C:2E:7E:AE:C0:C6:86:94:88:AD:3D:B7:3B:AF:CD X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TjFqlr6cLn6uwMaGlIitPbc7r80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.168.0/24 193.183.144.0/24 193.234.233.0/24 194.103.63.0/24 Signature Algorithm: sha256WithRSAEncryption 14:46:ee:03:35:f2:11:57:e9:a6:ea:43:0b:f2:fa:35:95:d6: 0b:25:7c:d6:ad:09:ec:00:9c:af:77:43:32:71:fe:b4:fe:17: 8e:85:c7:bb:3e:bf:8a:78:e1:5f:9b:d8:ef:ea:ee:91:e8:40: 24:cf:5e:60:6a:c3:e7:be:c0:48:15:89:0f:60:4b:b1:ff:9d: 32:5c:c8:e1:71:e9:4f:d8:22:5c:12:57:c2:3c:d2:76:2d:ca: 5f:67:1d:aa:b9:48:59:09:f9:05:fa:31:a8:b0:a2:72:51:34: b0:d6:d9:26:f8:81:bd:cf:f0:07:91:f0:9b:e1:21:9e:88:f0: a0:59:8f:d4:8a:35:90:83:40:28:ff:9b:2e:4c:76:4e:47:3a: d1:f2:59:45:09:87:08:89:bb:e8:8c:26:38:13:5b:22:1c:f1: 91:61:e7:87:c0:a1:fd:83:d9:36:36:32:7c:ad:59:0e:8a:01: 47:83:86:56:69:c5:f8:c2:5b:10:bc:e2:5f:94:30:2a:1d:da: 07:06:6a:b2:6e:c1:d2:90:2f:75:02:a8:3f:02:5c:2e:bd:db: 84:6d:49:00:45:1d:d5:bf:e0:a1:29:cd:24:f9:28:f2:59:b4: bc:2c:44:b6:e3:49:42:cd:20:b6:8d:ce:96:f2:9a:11:c6:80: d4:8c:c6:d8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NE+C1QLgcC8iv4Lu38RnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTMxNmE5NmJlOWMyZTdlYWVjMGM2ODY5NDg4YWQzZGI3M2JhZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5mq/QBhTozJNhIAJ1lVyaXgH2q/ 1kGEM8UJrX0QW3KTsG9vqSZLGm0rEoUtTUFgPUkQhWsSeDrprFGEkA1Q+IPn7TNM ko7zkWdOqBQHF6/xriyhH/Q5tNqMnsh3NuzX14fguTIuHLkUJNLHxmtWge2F1OdP TMWYWmi5hSj8WeCJZrtUi89HPcf27bEGLAPuxSEbiCzAN/A81LCeJd7NcAN/cHfa 5nEvTlNgDdOHwcfIVqS4XxTwotGzjjYKGg1jl+heQlK17F4+ox9YdAOk67y+3sMx YTlKaR2mIUgWxs5+4aaY6A7hNxdyqPCJe8GbhButZDNSe7jngo0GRJ78oQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFE4xapa+nC5+rsDGhpSIrT23O6/NMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvVGpGcWxyNmNMbjZ1d01hR2xJaXRQYmM3cjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwHmoAwQA wbeQAwQAwerpAwQAwmc/MA0GCSqGSIb3DQEBCwUAA4IBAQAURu4DNfIRV+mm6kML 8vo1ldYLJXzWrQnsAJyvd0Mycf60/heOhce7Pr+KeOFfm9jv6u6R6EAkz15gasPn vsBIFYkPYEux/50yXMjhcelP2CJcElfCPNJ2LcpfZx2quUhZCfkF+jGosKJyUTSw 1tkm+IG9z/AHkfCb4SGeiPCgWY/UijWQg0Ao/5suTHZORzrR8llFCYcIibvojCY4 E1siHPGRYeeHwKH9g9k2NjJ8rVkOigFHg4ZWacX4wlsQvOJflDAqHdoHBmqybsHS kC91Aqg/AlwuvduEbUkARR3Vv+ChKc0k+SjyWbS8LES240lCzSC2jc6W8poRxoDU jMbY -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:15 2026 by rpki-client