This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/d3cKPCszrjomo6WMK324xHZdAJg.roa File: d3cKPCszrjomo6WMK324xHZdAJg.roa (raw, json) Hash identifier: fyri8g2k8lYG26X7vmm6yZoTEAXEY+6KdwB9LuZWCoY= Subject key identifier: 77:77:0A:3C:2B:33:AE:3A:26:A3:A5:8C:2B:7D:B8:C4:76:5D:00:98 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344E5B94375D60C5FCBD21C7B455F8 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/d3cKPCszrjomo6WMK324xHZdAJg.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29216 IP address blocks: 192.36.148.0/23 maxlen: 23 192.36.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4e:5b:94:37:5d:60:c5:fc:bd:21:c7:b4:55:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77770a3c2b33ae3a26a3a58c2b7db8c4765d0098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:fa:5f:d8:34:16:cc:d6:f9:18:a2:07:f4: 38:e9:87:80:a9:6c:91:05:cd:3c:74:b9:ff:43:03: 89:e3:6d:a0:39:c7:f9:a7:12:7a:f5:0a:fd:e9:9a: 44:bb:e5:9a:9c:b6:86:8c:e4:a4:ae:15:b6:47:f3: 37:b0:50:e5:9c:a2:f9:ac:f7:73:2e:1c:3d:cd:7b: 77:bc:71:d2:b5:ae:61:9c:8f:c3:62:45:af:d1:43: 3f:7a:03:0a:35:23:c5:2e:15:cd:97:f8:5c:99:d6: 52:2d:09:f2:f5:1a:a2:33:c6:77:e4:a4:07:14:7b: 7e:ec:49:42:74:8e:f1:83:bc:50:67:8a:72:0d:00: 8b:cf:b3:99:e5:82:53:c4:a9:7f:52:65:48:06:87: 92:c2:03:8f:b1:45:8b:c0:82:52:57:da:6a:8f:f3: a7:f7:01:cc:af:e1:e8:da:7c:55:17:bc:9b:a1:f1: 3e:d0:e3:66:fd:73:bd:c8:92:65:ec:0b:2f:41:cf: d2:3a:87:a1:1e:c6:b1:db:6a:78:a3:b9:5d:47:36: d1:3f:6d:b6:ea:f7:ea:76:1f:c2:d8:5d:a4:ae:9b: aa:d2:e4:e7:8b:e5:69:ef:ec:9f:81:61:2c:d5:a6: de:29:b3:cc:d9:02:d6:2b:26:e8:60:6a:e7:59:4e: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:77:0A:3C:2B:33:AE:3A:26:A3:A5:8C:2B:7D:B8:C4:76:5D:00:98 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/d3cKPCszrjomo6WMK324xHZdAJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.148.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:e3:7d:83:e0:2b:14:5d:ce:64:f2:ec:74:6b:ad:37:c7:63: fc:88:46:fb:4c:18:00:2e:d3:c6:6b:a7:eb:4a:74:f3:9e:21: e2:ad:98:d1:e5:2d:45:d8:29:e2:a8:09:3d:46:01:a1:1d:2d: e3:3c:e0:80:06:21:ba:4e:1a:56:97:ac:cb:bb:a0:46:a1:e1: 78:50:44:c9:7b:28:ec:59:f9:33:df:38:bf:a2:21:cf:85:47: 2b:69:43:f1:a1:49:f4:27:cd:6d:f9:dd:1f:19:8b:c0:96:b8: 8a:c0:de:f5:b6:af:0e:c4:a5:5a:8e:9a:d1:4e:a5:af:9a:01: ed:0e:7e:4e:9c:93:1a:5b:3b:44:49:74:9d:10:c7:5f:99:26: 2d:71:23:0b:82:a4:c3:c1:e8:33:3a:a6:65:ed:51:bf:5c:69: 62:20:5c:81:59:21:f1:d2:4c:c8:70:32:8b:42:05:f1:c7:37: c2:7a:70:2c:e0:8c:86:6c:bf:cb:ff:72:71:ed:58:be:a3:f9: 04:81:c5:c5:e6:e4:b9:0e:e7:75:c0:db:8f:07:4e:a4:1c:9a: b6:4c:3a:5f:06:27:87:1d:b1:fe:fb:f1:3d:a1:18:44:21:fc: 43:ec:9a:63:6c:71:34:80:ac:1c:2a:e4:49:51:1d:ec:c5:db: f8:56:c2:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NE5blDddYMX8vSHHtFX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Nzc3MGEzYzJiMzNhZTNhMjZhM2E1OGMyYjdkYjhjNDc2NWQwMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmn6X9g0FszW+RiiB/Q46YeAqWyR Bc08dLn/QwOJ422gOcf5pxJ69Qr96ZpEu+WanLaGjOSkrhW2R/M3sFDlnKL5rPdz Lhw9zXt3vHHSta5hnI/DYkWv0UM/egMKNSPFLhXNl/hcmdZSLQny9RqiM8Z35KQH FHt+7ElCdI7xg7xQZ4pyDQCLz7OZ5YJTxKl/UmVIBoeSwgOPsUWLwIJSV9pqj/On 9wHMr+Ho2nxVF7ybofE+0ONm/XO9yJJl7AsvQc/SOoehHsax22p4o7ldRzbRP222 6vfqdh/C2F2krpuq0uTni+Vp7+yfgWEs1abeKbPM2QLWKyboYGrnWU74TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHd3CjwrM646JqOljCt9uMR2XQCYMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZDNjS1BDc3pyam9tbzZXTUszMjR4SFpkQUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwCSUMA0G CSqGSIb3DQEBCwUAA4IBAQCM432D4CsUXc5k8ux0a603x2P8iEb7TBgALtPGa6fr SnTzniHirZjR5S1F2CniqAk9RgGhHS3jPOCABiG6ThpWl6zLu6BGoeF4UETJeyjs Wfkz3zi/oiHPhUcraUPxoUn0J81t+d0fGYvAlriKwN71tq8OxKVajprRTqWvmgHt Dn5OnJMaWztESXSdEMdfmSYtcSMLgqTDwegzOqZl7VG/XGliIFyBWSHx0kzIcDKL QgXxxzfCenAs4IyGbL/L/3Jx7Vi+o/kEgcXF5uS5Dud1wNuPB06kHJq2TDpfBieH HbH++/E9oRhEIfxD7JpjbHE0gKwcKuRJUR3sxdv4VsKZ -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:22 2026 by rpki-client