This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cnYqA3zBJzuAzzHeInxucg0qUek.roa File: cnYqA3zBJzuAzzHeInxucg0qUek.roa (raw, json) Hash identifier: LBdlg1jr+EfulnMK9kj5sE/IDNp5bV3icZY4YAV/dOY= Subject key identifier: 72:76:2A:03:7C:C1:27:3B:80:CF:31:DE:22:7C:6E:72:0D:2A:51:E9 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783496DEB8B6ADBC1C2307B735E69D56 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cnYqA3zBJzuAzzHeInxucg0qUek.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 192.121.82.0/24 maxlen: 24 192.121.247.0/24 maxlen: 24 193.234.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:96:de:b8:b6:ad:bc:1c:23:07:b7:35:e6:9d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72762a037cc1273b80cf31de227c6e720d2a51e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:1a:71:b6:29:1c:92:57:02:eb:91:cf:e8: c0:9a:6d:6c:07:44:f6:fe:63:96:d7:97:ad:96:bd: 5a:11:27:a2:6f:05:fc:cf:fa:7f:1b:f9:0f:4b:f6: ec:8f:e4:b6:82:89:68:95:a2:c3:09:1b:13:f7:09: 46:a6:6e:d3:ba:61:08:7b:c3:95:7c:6a:b3:4f:81: 53:58:66:dc:6d:09:62:7d:56:85:83:7e:de:51:03: be:0f:99:20:f2:37:6e:22:3b:a7:ee:96:a2:24:a0: ea:24:38:10:0d:06:a3:d2:15:25:ca:26:d8:bb:90: 72:d1:a2:a5:b1:5e:eb:a7:3c:ef:ca:5a:0d:8c:54: 08:73:16:9c:d6:4e:81:95:38:53:3e:0c:3b:9b:a6: e5:b8:81:f5:5a:ed:33:6e:ac:02:68:90:b8:b3:65: 51:3f:17:b1:fb:89:5f:ac:78:c4:ef:87:31:54:ce: b0:0f:53:c0:fe:19:41:61:79:63:20:93:31:8d:a6: b7:e4:ad:06:ab:b7:5f:b5:ff:18:da:b0:d5:d6:7c: 53:20:5f:ae:5d:5c:3a:d9:e5:84:cb:d6:79:f4:12: 0a:e4:10:c9:be:4b:07:f8:ce:58:bd:30:42:0b:72: 69:62:85:f9:5e:2e:ea:71:c4:d5:66:de:ee:dd:bb: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:2A:03:7C:C1:27:3B:80:CF:31:DE:22:7C:6E:72:0D:2A:51:E9 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cnYqA3zBJzuAzzHeInxucg0qUek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.82.0/24 192.121.247.0/24 193.234.55.0/24 Signature Algorithm: sha256WithRSAEncryption a5:75:18:5d:4c:61:6b:3d:39:2a:a1:47:ee:fd:04:b7:b5:0f: a8:f6:09:5a:8f:1d:45:5a:b5:30:ea:d8:5d:6d:b6:50:71:2b: 4b:9f:20:aa:8c:bd:69:5b:4b:57:4c:d4:e1:f3:f3:c3:75:85: c0:ca:49:b1:9b:b5:12:6f:e5:13:4e:94:79:72:cc:62:57:71: 7b:ac:87:e3:34:cf:95:83:58:7e:bb:98:f2:e8:24:22:d1:b2: e1:7d:5c:fa:da:7e:ac:38:f1:82:6b:28:82:19:98:54:30:3d: 54:69:5a:6b:32:37:37:d0:2e:a8:a3:4f:bc:f2:d9:ed:3e:88: af:53:a7:59:81:c5:72:47:9b:ba:82:64:97:19:4e:dd:32:83: e3:71:76:29:1a:a5:a5:ad:96:5a:34:a1:1e:8f:2d:e6:e0:b7: a3:65:14:16:1a:35:68:81:ef:a3:ba:38:d8:d1:9a:eb:fc:bd: 2b:7c:d9:15:b6:56:8a:5f:88:ef:f4:86:5a:72:d4:cc:17:d9: 4a:30:a8:22:cf:52:21:aa:b2:4a:16:78:ce:9d:4a:15:16:0a: b6:90:77:82:68:cc:09:26:07:a0:82:6d:ee:93:bc:ca:55:a0: 26:ab:08:dd:4d:f4:fb:c0:71:db:b9:51:23:83:7b:f5:1b:e2: fc:fb:c3:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NJbeuLatvBwjB7c15p1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjc2MmEwMzdjYzEyNzNiODBjZjMxZGUyMjdjNmU3MjBkMmE1MWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqygacbYpHJJXAuuRz+jAmm1sB0T2 /mOW15etlr1aESeibwX8z/p/G/kPS/bsj+S2gololaLDCRsT9wlGpm7TumEIe8OV fGqzT4FTWGbcbQlifVaFg37eUQO+D5kg8jduIjun7paiJKDqJDgQDQaj0hUlyibY u5By0aKlsV7rpzzvyloNjFQIcxac1k6BlThTPgw7m6bluIH1Wu0zbqwCaJC4s2VR Pxex+4lfrHjE74cxVM6wD1PA/hlBYXljIJMxjaa35K0Gq7dftf8Y2rDV1nxTIF+u XVw62eWEy9Z59BIK5BDJvksH+M5YvTBCC3JpYoX5Xi7qccTVZt7u3bvS7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHJ2KgN8wSc7gM8x3iJ8bnINKlHpMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvY25ZcUEzekJKenVBenpIZUlueHVjZzBxVWVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwHlSAwQA wHn3AwQAweo3MA0GCSqGSIb3DQEBCwUAA4IBAQCldRhdTGFrPTkqoUfu/QS3tQ+o 9glajx1FWrUw6thdbbZQcStLnyCqjL1pW0tXTNTh8/PDdYXAykmxm7USb+UTTpR5 csxiV3F7rIfjNM+Vg1h+u5jy6CQi0bLhfVz62n6sOPGCayiCGZhUMD1UaVprMjc3 0C6oo0+88tntPoivU6dZgcVyR5u6gmSXGU7dMoPjcXYpGqWlrZZaNKEejy3m4Lej ZRQWGjVoge+jujjY0Zrr/L0rfNkVtlaKX4jv9IZactTMF9lKMKgiz1IhqrJKFnjO nUoVFgq2kHeCaMwJJgeggm3uk7zKVaAmqwjdTfT7wHHbuVEjg3v1G+L8+8NW -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:56 2026 by rpki-client