This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aiwDSer_njfadGDekoFbiUWhnRo.roa File: aiwDSer_njfadGDekoFbiUWhnRo.roa (raw, json) Hash identifier: pIYrpxNQOUL/jBnPm1P5x4s0e90QJnXyOUs6b2JVtgI= Subject key identifier: 6A:2C:03:49:EA:FF:9E:37:DA:74:60:DE:92:81:5B:89:45:A1:9D:1A Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019BC10095AD8BC8EC57AA3DB2BFA797A854 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aiwDSer_njfadGDekoFbiUWhnRo.roa Signing time: Thu 15 Jan 2026 09:33:19 +0000 ROA not before: Thu 15 Jan 2026 09:33:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 192.121.21.0/24 maxlen: 24 192.165.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:00:95:ad:8b:c8:ec:57:aa:3d:b2:bf:a7:97:a8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 15 09:33:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a2c0349eaff9e37da7460de92815b8945a19d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:11:f2:fe:62:2d:e5:25:ec:45:81:20:87: 0a:92:4a:ea:e4:7a:01:7f:31:9c:9c:f4:de:19:f4: 8b:23:75:09:9e:74:ee:af:45:64:60:02:58:40:14: 30:d1:21:4d:65:f7:19:66:a1:55:26:1f:8d:c3:6f: f9:15:89:ce:07:1a:8d:5c:b5:56:7b:b0:90:59:60: 6b:cd:2a:b2:3d:af:dc:c3:07:1c:94:36:b1:4c:5e: db:39:43:03:b6:19:6c:77:21:74:5b:33:85:40:66: 4e:4a:bb:1f:87:84:73:b7:6b:f1:9a:4b:16:66:30: 90:f7:c7:21:e1:17:63:1d:41:33:d3:f3:51:c4:48: 97:ee:6b:ca:fe:a1:a6:bc:2a:1c:d2:28:26:57:9b: 59:37:cc:6c:8b:9a:62:0b:77:dd:cd:43:94:34:a9: 3b:99:05:fa:67:aa:68:88:3c:d7:c1:60:3a:b2:96: 69:c1:2e:c4:3d:1e:48:45:3e:b5:4f:fc:35:4f:5b: d9:24:75:5b:19:bd:d9:98:ad:f0:dc:58:42:dd:b8: 1b:8d:30:ef:47:44:02:8d:24:b7:b5:ae:9a:40:dc: 73:1c:41:68:e1:93:dc:c0:14:cb:06:2c:2d:46:1f: 93:5c:de:e2:c9:ab:74:5b:45:2f:04:38:f7:2c:df: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:03:49:EA:FF:9E:37:DA:74:60:DE:92:81:5B:89:45:A1:9D:1A X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aiwDSer_njfadGDekoFbiUWhnRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.21.0/24 192.165.86.0/24 Signature Algorithm: sha256WithRSAEncryption 14:40:13:b9:06:22:24:74:82:13:33:27:06:1d:bd:25:91:98: a2:9a:18:06:07:9e:62:5f:61:56:0f:a3:3e:2e:d6:6a:07:52: ec:ab:1e:28:d2:0f:b8:b4:25:3a:48:3f:93:cf:3c:e1:e7:58: 94:f7:18:cc:d5:e6:81:64:8e:1a:74:85:b6:0e:e6:ca:67:66: 70:36:b1:eb:18:3e:ab:5b:a5:a8:f2:2c:7e:4b:f5:63:b2:03: ba:93:32:1d:be:a7:05:ec:fd:48:33:4f:5d:f2:86:da:b7:9c: f8:34:2f:80:5c:df:db:b7:92:92:cd:ac:ea:8b:0b:73:a4:cf: 1f:28:e1:f3:82:26:44:e4:ad:b3:a7:5a:7c:32:c5:8f:db:6b: a0:87:31:96:42:16:38:1f:2b:58:8a:eb:82:c3:d6:52:4f:e5: 55:c2:73:c4:0a:2c:2d:a8:47:f1:e9:69:23:bf:a8:a9:f5:2b: 37:45:1f:34:f6:e4:07:bd:9a:f6:60:ef:5d:10:ac:79:7b:62: 40:20:5a:7c:31:c9:2c:bd:2a:f8:29:44:cd:86:c3:bc:9d:85: 2c:b2:34:ac:a4:bf:7b:ac:15:6d:59:d8:b7:e8:33:60:a7:b0: cc:3c:7b:36:a5:26:8b:7e:6c:5e:b3:1d:38:6b:eb:d8:96:a2: 34:f2:60:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvBAJWti8jsV6o9sr+nl6hUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTE1MDkzMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTJjMDM0OWVhZmY5ZTM3ZGE3NDYwZGU5MjgxNWI4OTQ1YTE5ZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j0R8v5iLeUl7EWBIIcKkkrq5HoB fzGcnPTeGfSLI3UJnnTur0VkYAJYQBQw0SFNZfcZZqFVJh+Nw2/5FYnOBxqNXLVW e7CQWWBrzSqyPa/cwwcclDaxTF7bOUMDthlsdyF0WzOFQGZOSrsfh4Rzt2vxmksW ZjCQ98ch4RdjHUEz0/NRxEiX7mvK/qGmvCoc0igmV5tZN8xsi5piC3fdzUOUNKk7 mQX6Z6poiDzXwWA6spZpwS7EPR5IRT61T/w1T1vZJHVbGb3ZmK3w3FhC3bgbjTDv R0QCjSS3ta6aQNxzHEFo4ZPcwBTLBiwtRh+TXN7iyat0W0UvBDj3LN9w0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGosA0nq/5432nRg3pKBW4lFoZ0aMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvYWl3RFNlcl9uamZhZEdEZWtvRmJpVVdoblJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHkVAwQA wKVWMA0GCSqGSIb3DQEBCwUAA4IBAQAUQBO5BiIkdIITMycGHb0lkZiimhgGB55i X2FWD6M+LtZqB1Lsqx4o0g+4tCU6SD+Tzzzh51iU9xjM1eaBZI4adIW2DubKZ2Zw NrHrGD6rW6Wo8ix+S/VjsgO6kzIdvqcF7P1IM09d8obat5z4NC+AXN/bt5KSzazq iwtzpM8fKOHzgiZE5K2zp1p8MsWP22ughzGWQhY4HytYiuuCw9ZST+VVwnPECiwt qEfx6Wkjv6ip9Ss3RR809uQHvZr2YO9dEKx5e2JAIFp8McksvSr4KUTNhsO8nYUs sjSspL97rBVtWdi36DNgp7DMPHs2pSaLfmxesx04a+vYlqI08mAs -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:09 2026 by rpki-client