This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bnBTjB2I9ggeV_z2a10fBIOHRFc.roa File: bnBTjB2I9ggeV_z2a10fBIOHRFc.roa (raw, json) Hash identifier: x8yuJwDQCB4V7ISQHClMRxOYKUY8SYWXrfpoN0Jkl/4= Subject key identifier: 6E:70:53:8C:1D:88:F6:08:1E:57:FC:F6:6B:5D:1F:04:83:87:44:57 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346B75971F974A06BFF9BEB6B1386B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bnBTjB2I9ggeV_z2a10fBIOHRFc.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51019 IP address blocks: 194.68.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6b:75:97:1f:97:4a:06:bf:f9:be:b6:b1:38:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e70538c1d88f6081e57fcf66b5d1f0483874457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:6a:73:f1:e5:30:ef:6c:9a:bf:69:48:d3: 50:2e:bf:cb:56:6b:71:3d:6d:e1:87:cc:d0:00:a4: 0d:46:9b:2f:93:88:cf:44:2c:25:96:00:15:11:2d: c7:04:8d:f7:f1:65:01:ee:22:a4:2d:24:d4:a3:07: fe:59:e2:e0:61:a5:6a:de:9a:b6:fe:9c:ec:e9:8e: 9c:2c:89:9b:e3:74:f8:84:73:4d:c0:99:c2:d7:61: e2:f5:c4:9c:1d:94:1a:86:cf:83:51:01:28:88:36: a7:2d:11:e1:0b:39:7d:cf:c8:d8:05:99:60:e6:b9: c7:3c:77:f6:ad:ab:08:ed:2a:23:89:a4:b7:ef:30: e9:d6:d2:c1:c6:c2:a6:a7:9c:ae:fb:26:a6:e0:8f: 38:8f:33:85:21:74:7e:e6:d7:bb:de:ac:a0:aa:4b: fe:d2:d1:7b:d9:62:bc:a8:03:01:02:10:bc:06:7b: f9:94:2b:73:f5:b7:e2:61:cb:97:e3:67:c7:78:97: a3:4d:5f:61:1b:4a:98:76:80:ba:6c:70:41:2b:61: b8:c0:94:b6:4e:60:ea:98:b4:f5:4b:75:66:2b:69: 5c:a3:14:21:a0:02:10:ee:67:f7:01:d7:35:f1:78: 2c:24:3b:ae:6c:a2:28:f5:cd:df:86:86:ea:bb:bc: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:70:53:8C:1D:88:F6:08:1E:57:FC:F6:6B:5D:1F:04:83:87:44:57 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bnBTjB2I9ggeV_z2a10fBIOHRFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.68.14.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:44:f9:22:f6:4f:c9:cf:55:4a:1c:45:84:c6:60:92:70:a8: c9:85:c3:12:d3:51:27:e4:a1:14:43:5e:40:6b:3f:85:ea:70: be:cf:f8:af:c7:a1:0e:ce:d9:c3:d3:ae:57:f4:67:24:e7:23: fb:26:fc:70:59:9f:be:c5:ef:ca:a3:45:f4:0d:26:9f:2e:73: b9:ca:09:c2:34:23:9b:b9:e1:bf:c1:a3:36:91:73:97:43:4f: 38:4c:81:73:3a:fe:c5:ea:d9:35:42:20:05:31:d0:b4:f6:18: 82:5e:07:c7:7b:c7:27:1f:2f:53:4e:75:05:17:f3:d9:77:6b: 94:8b:ca:9c:6f:2c:ef:a9:3b:5f:9f:59:6f:77:7a:57:f9:5d: a3:63:1c:9e:3a:01:33:82:41:b4:b6:16:ff:b8:e5:3c:a6:08: c3:e7:93:c8:50:fa:45:55:1a:4a:70:b8:02:f7:90:a5:df:64: 26:09:88:ea:ab:2f:ee:08:f8:a3:c3:12:b5:7c:61:14:c8:ce: 52:c2:f6:c3:03:b5:1d:53:ab:21:da:4d:fd:5d:20:d1:1a:30: 6c:ec:e8:1f:99:7e:6c:40:8a:39:50:7b:ff:24:c5:b9:4b:7e: 9c:cd:35:ca:5d:28:f0:48:d0:29:b6:1e:f4:3b:8e:6e:27:e1: 0f:4c:0a:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGt1lx+XSga/+b62sThrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTcwNTM4YzFkODhmNjA4MWU1N2ZjZjY2YjVkMWYwNDgzODc0NDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNRqc/HlMO9smr9pSNNQLr/LVmtx PW3hh8zQAKQNRpsvk4jPRCwllgAVES3HBI338WUB7iKkLSTUowf+WeLgYaVq3pq2 /pzs6Y6cLImb43T4hHNNwJnC12Hi9cScHZQahs+DUQEoiDanLRHhCzl9z8jYBZlg 5rnHPHf2rasI7SojiaS37zDp1tLBxsKmp5yu+yam4I84jzOFIXR+5te73qygqkv+ 0tF72WK8qAMBAhC8Bnv5lCtz9bfiYcuX42fHeJejTV9hG0qYdoC6bHBBK2G4wJS2 TmDqmLT1S3VmK2lcoxQhoAIQ7mf3Adc18XgsJDuubKIo9c3fhobqu7xEnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5wU4wdiPYIHlf89mtdHwSDh0RXMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvYm5CVGpCMkk5Z2dlVl96MmExMGZCSU9IUkZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkQOMA0G CSqGSIb3DQEBCwUAA4IBAQBaRPki9k/Jz1VKHEWExmCScKjJhcMS01En5KEUQ15A az+F6nC+z/ivx6EOztnD065X9Gck5yP7JvxwWZ++xe/Ko0X0DSafLnO5ygnCNCOb ueG/waM2kXOXQ084TIFzOv7F6tk1QiAFMdC09hiCXgfHe8cnHy9TTnUFF/PZd2uU i8qcbyzvqTtfn1lvd3pX+V2jYxyeOgEzgkG0thb/uOU8pgjD55PIUPpFVRpKcLgC 95Cl32QmCYjqqy/uCPijwxK1fGEUyM5SwvbDA7UdU6sh2k39XSDRGjBs7OgfmX5s QIo5UHv/JMW5S36czTXKXSjwSNApth70O45uJ+EPTAor -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:31 2026 by rpki-client