This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gPqx3865JfJeflVi5s92fWYxJmU.roa File: gPqx3865JfJeflVi5s92fWYxJmU.roa (raw, json) Hash identifier: Cf/nCEcbD2jEnKQpuZuJ0fFLDC3SFkyn/Dc/yFg5Kww= Subject key identifier: 80:FA:B1:DF:CE:B9:25:F2:5E:7E:55:62:E6:CF:76:7D:66:31:26:65 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78343B4041A49ED599FF5B103BB095B8 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gPqx3865JfJeflVi5s92fWYxJmU.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1234 IP address blocks: 192.176.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3b:40:41:a4:9e:d5:99:ff:5b:10:3b:b0:95:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80fab1dfceb925f25e7e5562e6cf767d66312665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:3e:40:9e:76:b4:48:90:fe:71:2e:1d:92: 81:8a:5a:c4:7f:d9:b8:0a:eb:1f:63:2b:8e:97:59: 8a:aa:7d:95:06:3c:a7:cb:14:78:3d:f3:0e:e0:50: 2f:63:ce:e5:0a:df:02:e7:6f:2a:34:92:d3:d2:e7: 76:b9:e6:6f:86:ad:78:8d:a7:67:bb:9e:00:cb:68: a5:d7:1e:26:26:a1:49:6a:08:51:7d:44:2f:f1:03: ef:8c:95:3d:7d:37:fb:14:93:61:d1:2a:35:00:f0: c5:0a:9d:82:65:58:9f:ed:f5:d0:aa:7a:cd:e4:09: bd:9c:69:72:42:3b:5f:a4:cc:1c:dd:19:0e:9c:0d: 87:a3:32:67:05:e5:62:d8:5d:9e:04:ff:18:59:26: c1:41:cb:3d:f1:5f:1c:c4:71:17:ca:48:5b:2e:26: 89:24:ba:cc:1b:b3:2a:a0:5b:99:ef:4f:65:47:14: 76:67:6e:f1:fd:16:07:f5:f0:30:fc:d1:1d:e6:bc: 50:55:f3:b9:29:75:dd:ff:4c:47:8e:83:e0:0f:74: 22:c4:45:2e:43:44:a7:36:b2:a7:ae:60:02:74:d2: 75:02:16:7b:91:e2:26:ff:96:a7:20:1c:b2:77:18: dc:30:ea:96:5f:b6:5c:3a:11:dd:b5:5d:67:fa:ae: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FA:B1:DF:CE:B9:25:F2:5E:7E:55:62:E6:CF:76:7D:66:31:26:65 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gPqx3865JfJeflVi5s92fWYxJmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.176.176.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:98:d7:4a:ff:30:06:55:15:c8:b7:9f:8f:72:f2:42:cb:27: e0:45:18:92:e0:20:cd:cf:3e:7c:25:f0:f6:10:c5:3f:a6:a8: f4:ea:d2:98:ae:f8:08:6b:c7:5c:89:bd:41:65:88:9d:a6:7e: 86:c2:ed:1c:6c:5a:e8:cb:eb:d4:89:a5:ee:59:77:63:b7:b4: e1:b2:71:04:0d:d1:52:50:c0:27:36:9a:c6:71:5e:56:43:bd: c0:bb:50:d1:59:da:60:f1:50:c5:a7:83:ee:df:57:8c:93:81: 47:1b:1a:d3:4c:24:f0:6f:31:cc:9f:46:32:35:5f:fd:77:2e: fc:c9:7b:2c:28:90:fb:ec:e3:b3:86:c1:d2:4b:3e:b2:ae:1c: ce:f1:1c:35:29:4a:a7:cb:8e:fa:e8:47:83:ec:fe:76:99:6c: f7:c7:83:1d:1f:f3:f2:7e:f2:00:4b:79:73:cb:04:76:73:a5: 66:3c:b5:10:a8:f4:7a:c0:18:1d:66:e5:c8:41:6f:43:45:7b: a4:7f:88:66:be:f8:8d:11:7d:00:80:50:30:79:73:3a:e3:30: 9c:50:67:e1:98:84:69:da:41:44:1c:99:71:cb:23:9b:e4:88: b2:e7:a2:c7:1b:1a:3b:25:3d:4c:96:d0:17:5c:26:5a:e1:85: 4c:76:ea:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDtAQaSe1Zn/WxA7sJW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGZhYjFkZmNlYjkyNWYyNWU3ZTU1NjJlNmNmNzY3ZDY2MzEyNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobg+QJ52tEiQ/nEuHZKBilrEf9m4 CusfYyuOl1mKqn2VBjynyxR4PfMO4FAvY87lCt8C528qNJLT0ud2ueZvhq14jadn u54Ay2il1x4mJqFJaghRfUQv8QPvjJU9fTf7FJNh0So1APDFCp2CZVif7fXQqnrN 5Am9nGlyQjtfpMwc3RkOnA2HozJnBeVi2F2eBP8YWSbBQcs98V8cxHEXykhbLiaJ JLrMG7MqoFuZ709lRxR2Z27x/RYH9fAw/NEd5rxQVfO5KXXd/0xHjoPgD3QixEUu Q0SnNrKnrmACdNJ1AhZ7keIm/5anIByydxjcMOqWX7ZcOhHdtV1n+q4obQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFID6sd/OuSXyXn5VYubPdn1mMSZlMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZ1BxeDM4NjVKZkplZmxWaTVzOTJmV1l4Sm1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwLCwMA0G CSqGSIb3DQEBCwUAA4IBAQCNmNdK/zAGVRXIt5+PcvJCyyfgRRiS4CDNzz58JfD2 EMU/pqj06tKYrvgIa8dcib1BZYidpn6Gwu0cbFroy+vUiaXuWXdjt7ThsnEEDdFS UMAnNprGcV5WQ73Au1DRWdpg8VDFp4Pu31eMk4FHGxrTTCTwbzHMn0YyNV/9dy78 yXssKJD77OOzhsHSSz6yrhzO8Rw1KUqny4766EeD7P52mWz3x4MdH/PyfvIAS3lz ywR2c6VmPLUQqPR6wBgdZuXIQW9DRXukf4hmvviNEX0AgFAweXM64zCcUGfhmIRp 2kFEHJlxyyOb5Iiy56LHGxo7JT1MltAXXCZa4YVMdupN -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:37 2026 by rpki-client