This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cGVOPAONe7XYJdl5cK-5pBQu25U.roa File: cGVOPAONe7XYJdl5cK-5pBQu25U.roa (raw, json) Hash identifier: jXKgtKOtSXVv0qmWkVHOOHfnf0TsB8RCiaX4ZGAuWoU= Subject key identifier: 70:65:4E:3C:03:8D:7B:B5:D8:25:D9:79:70:AF:B9:A4:14:2E:DB:95 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78347BC29666D82555A20B6C0F440670 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cGVOPAONe7XYJdl5cK-5pBQu25U.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200606 IP address blocks: 192.36.31.0/24 maxlen: 24 192.121.226.0/24 maxlen: 24 192.165.131.0/24 maxlen: 24 193.182.110.0/24 maxlen: 24 193.234.76.0/24 maxlen: 24 193.234.77.0/24 maxlen: 24 193.235.51.0/24 maxlen: 24 194.14.135.0/24 maxlen: 24 194.71.245.0/24 maxlen: 24 194.103.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7b:c2:96:66:d8:25:55:a2:0b:6c:0f:44:06:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70654e3c038d7bb5d825d97970afb9a4142edb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:6d:36:bb:59:c2:55:b5:4d:2a:fc:8b:21: 6c:e1:7d:ed:83:69:45:e2:38:74:3f:47:40:96:34: f6:31:ed:d5:d6:17:72:d2:35:61:40:d2:6e:31:17: 83:9a:4e:a4:c7:9f:ba:d4:94:fc:94:6a:78:e3:19: 06:6e:fb:bc:1d:77:cb:57:99:80:03:b1:77:2b:df: 67:87:58:82:76:7a:7d:3e:1c:88:5f:a1:77:02:27: 81:0b:ae:44:52:1a:29:d9:12:12:a0:44:03:35:04: 35:5f:8d:f9:e3:e8:10:a4:c7:9a:fe:f9:31:9b:96: 05:9a:b2:e8:ab:7f:8b:6b:5b:ee:00:b4:1a:96:87: 0d:0f:ca:20:95:91:4f:47:a2:4b:aa:90:29:85:7a: 7f:b5:ba:3d:f2:76:df:4d:5b:76:19:c3:f2:13:71: 8e:5e:63:92:bb:f4:09:7d:e7:1e:52:32:71:01:9a: 93:01:6f:86:a4:d5:88:54:da:af:7e:23:23:e1:1b: a8:5b:22:e6:d8:4d:24:91:f4:f6:95:26:18:c5:c2: 0c:40:42:23:37:54:9b:b5:a0:73:18:3c:08:35:87: 6c:94:f6:4e:13:aa:a7:5d:25:3c:b2:06:fe:f4:2c: 6a:94:16:cf:10:0a:a4:a3:f9:91:bf:65:b8:82:f0: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:4E:3C:03:8D:7B:B5:D8:25:D9:79:70:AF:B9:A4:14:2E:DB:95 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cGVOPAONe7XYJdl5cK-5pBQu25U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.31.0/24 192.121.226.0/24 192.165.131.0/24 193.182.110.0/24 193.234.76.0/23 193.235.51.0/24 194.14.135.0/24 194.71.245.0/24 194.103.43.0/24 Signature Algorithm: sha256WithRSAEncryption 80:04:e9:2f:e0:eb:8b:6b:87:23:da:e9:aa:bf:51:f0:e9:aa: 94:11:f9:bc:5b:e4:c5:8e:68:34:cb:61:2c:fa:63:47:71:40: 9f:3d:be:ee:07:93:5f:df:8e:4c:4c:12:88:13:a8:6e:60:09: 0a:84:ff:c1:b5:13:41:10:be:78:7e:97:8b:6d:82:d8:74:f4: 59:16:cc:28:ff:22:cb:af:68:ca:ba:2c:0e:43:cb:5b:bf:94: 54:c8:6b:b7:1c:77:b7:b9:a9:6c:46:e9:c5:c5:46:db:8b:67: 21:3b:6c:64:64:34:9d:aa:80:b0:2e:7c:b7:3b:af:d2:ab:dd: b2:6f:8a:ce:60:2d:c2:31:9f:ab:44:63:d3:8e:77:de:42:27: ff:b1:42:4c:d6:16:0d:3f:77:67:18:53:3c:49:00:22:bc:ec: 30:89:9f:f9:91:74:c8:7d:6b:6a:2e:7d:2d:d4:bd:5c:78:ba: bd:7a:33:a0:02:ad:4e:67:39:10:2f:19:48:e9:5c:d1:0e:82: 6f:75:b4:b6:19:7a:dc:b9:55:f2:8f:c6:a9:94:0e:b2:52:1d: 6b:00:fe:4b:1a:a8:66:54:85:13:d7:f3:eb:6e:c7:d3:40:51: 2d:ef:72:e0:af:81:bb:a4:1b:40:f2:4a:e0:1e:8b:da:38:74: 9a:a4:92:ab -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt4NHvClmbYJVWiC2wPRAZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDY1NGUzYzAzOGQ3YmI1ZDgyNWQ5Nzk3MGFmYjlhNDE0MmVkYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkdtNrtZwlW1TSr8iyFs4X3tg2lF 4jh0P0dAljT2Me3V1hdy0jVhQNJuMReDmk6kx5+61JT8lGp44xkGbvu8HXfLV5mA A7F3K99nh1iCdnp9PhyIX6F3AieBC65EUhop2RISoEQDNQQ1X4354+gQpMea/vkx m5YFmrLoq3+La1vuALQalocND8oglZFPR6JLqpAphXp/tbo98nbfTVt2GcPyE3GO XmOSu/QJfeceUjJxAZqTAW+GpNWIVNqvfiMj4RuoWyLm2E0kkfT2lSYYxcIMQEIj N1SbtaBzGDwINYdslPZOE6qnXSU8sgb+9CxqlBbPEAqko/mRv2W4gvDMeQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFHBlTjwDjXu12CXZeXCvuaQULtuVMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvY0dWT1BBT05lN1hZSmRsNWNLLTVwQlF1MjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwCQfAwQA wHniAwQAwKWDAwQAwbZuAwQBwepMAwQAweszAwQAwg6HAwQAwkf1AwQAwmcrMA0G CSqGSIb3DQEBCwUAA4IBAQCABOkv4OuLa4cj2umqv1Hw6aqUEfm8W+TFjmg0y2Es +mNHcUCfPb7uB5Nf345MTBKIE6huYAkKhP/BtRNBEL54fpeLbYLYdPRZFswo/yLL r2jKuiwOQ8tbv5RUyGu3HHe3ualsRunFxUbbi2chO2xkZDSdqoCwLny3O6/Sq92y b4rOYC3CMZ+rRGPTjnfeQif/sUJM1hYNP3dnGFM8SQAivOwwiZ/5kXTIfWtqLn0t 1L1ceLq9ejOgAq1OZzkQLxlI6VzRDoJvdbS2GXrcuVXyj8aplA6yUh1rAP5LGqhm VIUT1/PrbsfTQFEt73Lgr4G7pBtA8krgHovaOHSapJKr -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:10 2026 by rpki-client