This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dTaqEd1EhfukNVLnfgGwy9wr6EM.roa File: dTaqEd1EhfukNVLnfgGwy9wr6EM.roa (raw, json) Hash identifier: ciX3e96pXjpOh26K92dCh+OAGb41sE1P/OnMWdzv0qo= Subject key identifier: 75:36:AA:11:DD:44:85:FB:A4:35:52:E7:7E:01:B0:CB:DC:2B:E8:43 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834504857750518BC27A5C2096B9B42 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dTaqEd1EhfukNVLnfgGwy9wr6EM.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31800 IP address blocks: 194.14.236.0/24 maxlen: 24 194.68.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:50:48:57:75:05:18:bc:27:a5:c2:09:6b:9b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7536aa11dd4485fba43552e77e01b0cbdc2be843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:e3:6a:d8:5a:c5:99:33:f4:c9:dc:2d:72: 5d:93:dd:46:6f:b2:a3:16:7b:5e:ea:42:af:02:71: 8d:40:61:36:aa:62:69:0b:78:09:13:ee:64:2b:83: 3d:07:51:f1:b0:ab:5e:6a:f9:33:17:af:6a:d8:a2: 4e:a7:c7:23:ae:0e:bb:6b:00:d0:6b:97:da:5a:31: 99:de:70:fa:05:26:0d:ae:40:b1:3e:50:b0:4f:31: a0:4a:10:6e:9d:7f:7b:79:ec:93:f3:59:97:2f:59: c4:03:50:1d:74:4c:21:cd:ef:42:15:31:f0:7e:5a: ae:6b:a7:4c:c2:44:49:af:70:cf:39:05:73:bb:45: 55:d3:87:0b:31:20:0f:d6:22:ea:15:f2:d7:3f:52: d0:d4:08:92:1c:ef:c6:c5:dc:5a:b9:91:6c:a2:3f: 3c:4a:02:9b:e2:bf:12:35:32:9f:ec:ff:09:9c:8a: b3:dc:f8:e5:67:77:35:c4:83:03:a6:ae:f4:fe:8d: 5f:f4:64:bf:8f:8f:d3:1f:ad:fb:a2:ed:7b:42:3f: a5:a6:c2:89:b7:05:df:20:28:5c:3d:1a:b0:36:76: 2a:31:f6:91:f6:f4:37:84:e3:21:96:f2:06:52:59: 5f:60:d4:e9:f9:e5:d0:4d:33:11:a7:bf:a2:d0:83: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:36:AA:11:DD:44:85:FB:A4:35:52:E7:7E:01:B0:CB:DC:2B:E8:43 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dTaqEd1EhfukNVLnfgGwy9wr6EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.236.0/24 194.68.45.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ef:7d:55:18:fd:85:6f:a5:bf:49:c9:f8:d2:4a:ee:22:8a: c7:d8:74:0a:34:9c:28:52:26:e7:6c:4c:2c:32:4f:2f:ed:8b: 1b:45:80:50:fd:a5:fd:43:86:2b:83:49:78:53:93:2b:74:e9: 0e:e0:ad:97:6c:11:cc:5a:26:d2:08:33:d4:c4:9d:c5:8d:a3: 6b:84:6d:dd:f2:5a:af:d7:79:42:d2:e9:d3:e2:cd:a6:41:d7: 2c:a8:d9:88:64:7e:c7:20:fb:0b:57:a5:08:34:f7:c6:06:e0: 4d:35:f9:9e:95:b0:4a:c1:fe:5f:e0:24:a9:3f:88:6e:8b:ae: 00:22:da:92:74:ba:ed:15:b7:0a:e7:58:1b:2f:35:48:32:ce: f5:ab:6d:85:28:77:aa:ba:e6:e1:49:a5:19:8a:20:19:a4:be: 79:dc:03:be:95:f8:33:64:a5:d5:60:bd:d0:78:4b:14:f5:a6: db:09:c9:65:54:2c:13:e6:27:df:fa:83:fd:2f:d7:32:2a:7d: 3b:60:93:b1:a6:e7:d9:c5:fd:14:ff:63:82:a5:71:94:1e:37: 56:2e:4b:f4:19:a7:79:c2:ac:c3:9c:36:6b:3c:41:7d:90:5d: 46:44:59:97:e5:1f:c3:38:5e:86:90:dd:d1:ca:da:9b:b3:f0: 6d:9f:59:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NFBIV3UFGLwnpcIJa5tCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTM2YWExMWRkNDQ4NWZiYTQzNTUyZTc3ZTAxYjBjYmRjMmJlODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsADjathaxZkz9MncLXJdk91Gb7Kj Fnte6kKvAnGNQGE2qmJpC3gJE+5kK4M9B1HxsKteavkzF69q2KJOp8cjrg67awDQ a5faWjGZ3nD6BSYNrkCxPlCwTzGgShBunX97eeyT81mXL1nEA1AddEwhze9CFTHw flqua6dMwkRJr3DPOQVzu0VV04cLMSAP1iLqFfLXP1LQ1AiSHO/GxdxauZFsoj88 SgKb4r8SNTKf7P8JnIqz3PjlZ3c1xIMDpq70/o1f9GS/j4/TH637ou17Qj+lpsKJ twXfIChcPRqwNnYqMfaR9vQ3hOMhlvIGUllfYNTp+eXQTTMRp7+i0IN/ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHU2qhHdRIX7pDVS534BsMvcK+hDMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZFRhcUVkMUVoZnVrTlZMbmZnR3d5OXdyNkVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwg7sAwQA wkQtMA0GCSqGSIb3DQEBCwUAA4IBAQAp731VGP2Fb6W/Scn40kruIorH2HQKNJwo UibnbEwsMk8v7YsbRYBQ/aX9Q4Yrg0l4U5MrdOkO4K2XbBHMWibSCDPUxJ3FjaNr hG3d8lqv13lC0unT4s2mQdcsqNmIZH7HIPsLV6UINPfGBuBNNfmelbBKwf5f4CSp P4hui64AItqSdLrtFbcK51gbLzVIMs71q22FKHequubhSaUZiiAZpL553AO+lfgz ZKXVYL3QeEsU9abbCcllVCwT5iff+oP9L9cyKn07YJOxpufZxf0U/2OCpXGUHjdW Lkv0Gad5wqzDnDZrPEF9kF1GRFmX5R/DOF6GkN3Rytqbs/Btn1ls -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:50 2026 by rpki-client