This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cZbBNPVJzOkS8RpXH3G7o37vH1A.roa File: cZbBNPVJzOkS8RpXH3G7o37vH1A.roa (raw, json) Hash identifier: mNtvlpdYV1gXoLo59AB6dKIn/ITKz7SIcAKKKfIV6O8= Subject key identifier: 71:96:C1:34:F5:49:CC:E9:12:F1:1A:57:1F:71:BB:A3:7E:EF:1F:50 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346D00E63D6E16C06ADFFC6847F9A8 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cZbBNPVJzOkS8RpXH3G7o37vH1A.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51821 IP address blocks: 193.234.102.0/23 maxlen: 23 194.103.133.0/24 maxlen: 24 194.103.192.0/24 maxlen: 24 194.103.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6d:00:e6:3d:6e:16:c0:6a:df:fc:68:47:f9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7196c134f549cce912f11a571f71bba37eef1f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:d4:11:34:8c:b9:75:a2:58:0f:6c:22:25: 89:13:d7:33:f6:28:fa:1c:03:83:da:09:11:f6:7d: c1:3f:fa:5a:44:5e:a8:a8:f7:8d:9b:e1:49:e7:9c: 94:c3:f8:04:c9:77:ce:80:b7:02:3c:97:18:bd:06: 45:a3:a2:c5:34:c7:af:ea:80:21:36:78:76:bb:fb: bb:63:35:c0:40:eb:ab:dd:58:8c:8f:a8:42:88:0e: 1f:54:74:87:50:ac:4d:d5:56:9c:50:1d:ed:1a:73: 7c:a8:7a:03:be:df:bb:44:14:68:40:cc:df:6b:d0: 73:8a:07:94:1d:b4:eb:15:2e:05:a9:e1:94:01:c6: 7a:6a:29:08:de:0f:b3:ed:9c:e3:c9:94:65:ac:c4: 40:90:df:7b:11:cc:d5:a5:55:e7:2f:78:00:c9:fe: 8a:3f:9f:9d:e0:7c:80:1a:d2:92:1f:07:64:9d:62: 25:89:e8:7d:8e:ba:3f:60:89:40:09:f0:96:a5:04: a0:02:2e:c8:9e:66:5b:20:e1:27:36:da:80:8a:1d: 07:a2:2e:e5:10:39:f8:9b:a7:0a:25:3f:5b:37:43: b7:5b:81:77:10:da:51:98:f5:16:e0:12:bb:25:0f: 20:58:d2:81:77:9c:e1:e0:00:59:df:b5:ca:a7:42: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:96:C1:34:F5:49:CC:E9:12:F1:1A:57:1F:71:BB:A3:7E:EF:1F:50 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cZbBNPVJzOkS8RpXH3G7o37vH1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.234.102.0/23 194.103.133.0/24 194.103.192.0/24 194.103.198.0/23 Signature Algorithm: sha256WithRSAEncryption a9:be:ac:68:6a:05:8f:6f:a0:f8:93:fe:63:df:5f:b8:99:36: 2f:22:e9:58:50:c6:b6:73:5a:f0:dc:69:a5:b7:1f:a0:0f:e4: bc:20:95:f2:38:8b:a2:08:34:0d:2c:a4:0e:9d:89:94:97:ae: 4f:da:93:02:bb:b6:35:4e:c5:cf:00:06:f2:35:4d:d2:83:c7: 4b:31:05:94:d9:5f:4d:91:64:22:8a:3d:0a:8d:dc:92:66:30: da:5f:43:94:07:3e:56:6e:c8:fe:9b:d9:b5:d5:97:12:eb:1f: dc:6a:db:8d:fc:50:0a:78:b7:d4:de:f7:5a:01:7d:53:87:ed: 2b:19:f9:99:f1:ca:c0:d8:be:57:54:18:6f:3a:b3:fa:33:38: 25:5b:8f:56:76:bf:db:69:bd:71:7c:17:37:d6:4e:37:fb:27: 4a:a8:70:a9:8c:9f:01:93:40:44:0e:41:d0:12:9d:a1:79:cf: 7e:66:f1:9a:b0:f4:cb:a6:04:7c:b4:55:6e:90:40:5b:dc:78: de:f2:66:14:0a:b6:54:10:73:d9:72:b1:c0:8d:42:49:0f:60: 0a:fa:40:55:b0:46:80:59:16:52:f8:ce:00:fe:73:cb:11:75: e1:f9:f8:ad:cc:80:07:5c:c9:3d:1d:c9:36:f4:3f:8e:5b:5f: 98:b6:9d:29 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NG0A5j1uFsBq3/xoR/moMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTk2YzEzNGY1NDljY2U5MTJmMTFhNTcxZjcxYmJhMzdlZWYxZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6fUETSMuXWiWA9sIiWJE9cz9ij6 HAOD2gkR9n3BP/paRF6oqPeNm+FJ55yUw/gEyXfOgLcCPJcYvQZFo6LFNMev6oAh Nnh2u/u7YzXAQOur3ViMj6hCiA4fVHSHUKxN1VacUB3tGnN8qHoDvt+7RBRoQMzf a9BzigeUHbTrFS4FqeGUAcZ6aikI3g+z7ZzjyZRlrMRAkN97EczVpVXnL3gAyf6K P5+d4HyAGtKSHwdknWIlieh9jro/YIlACfCWpQSgAi7InmZbIOEnNtqAih0Hoi7l EDn4m6cKJT9bN0O3W4F3ENpRmPUW4BK7JQ8gWNKBd5zh4ABZ37XKp0KC8QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHGWwTT1SczpEvEaVx9xu6N+7x9QMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvY1piQk5QVkp6T2tTOFJwWEgzRzdvMzd2SDFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBwepmAwQA wmeFAwQAwmfAAwQBwmfGMA0GCSqGSIb3DQEBCwUAA4IBAQCpvqxoagWPb6D4k/5j 31+4mTYvIulYUMa2c1rw3Gmltx+gD+S8IJXyOIuiCDQNLKQOnYmUl65P2pMCu7Y1 TsXPAAbyNU3Sg8dLMQWU2V9NkWQiij0KjdySZjDaX0OUBz5Wbsj+m9m11ZcS6x/c atuN/FAKeLfU3vdaAX1Th+0rGfmZ8crA2L5XVBhvOrP6MzglW49Wdr/bab1xfBc3 1k43+ydKqHCpjJ8Bk0BEDkHQEp2hec9+ZvGasPTLpgR8tFVukEBb3Hje8mYUCrZU EHPZcrHAjUJJD2AK+kBVsEaAWRZS+M4A/nPLEXXh+fitzIAHXMk9Hck29D+OW1+Y tp0p -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:43 2026 by rpki-client