This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gokNpUlbeymKgdpet4YhSLEA5u8.roa File: gokNpUlbeymKgdpet4YhSLEA5u8.roa (raw, json) Hash identifier: Ys6gTAAO2KcpdmbzqA3dMNtmgKErdYYf00RYIbt7pQY= Subject key identifier: 82:89:0D:A5:49:5B:7B:29:8A:81:DA:5E:B7:86:21:48:B1:00:E6:EF Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834845269478526D1E3D37121E3A2EB Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gokNpUlbeymKgdpet4YhSLEA5u8.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205199 IP address blocks: 192.36.246.0/24 maxlen: 24 192.121.11.0/24 maxlen: 24 192.121.128.0/22 maxlen: 24 193.180.192.0/23 maxlen: 24 193.181.36.0/24 maxlen: 24 193.181.44.0/24 maxlen: 24 193.234.6.0/24 maxlen: 24 193.234.97.0/24 maxlen: 24 193.234.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:52:69:47:85:26:d1:e3:d3:71:21:e3:a2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82890da5495b7b298a81da5eb7862148b100e6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:36:71:4e:e5:3e:bb:35:30:4f:f2:4e:b1: 75:bb:1b:89:2c:f0:7a:58:bb:10:41:cd:49:6b:ec: 0c:a2:57:29:b5:f5:bc:52:08:ff:9c:62:61:07:e3: 52:fb:45:9f:ca:47:0f:c8:ba:26:d2:b5:53:07:f1: 65:a2:1f:70:32:2f:c5:21:42:1f:81:3f:06:a0:e5: 4c:8d:80:3f:56:7a:fd:2f:95:ab:93:5d:b4:b1:66: 6f:99:94:54:bb:81:d1:2f:e0:aa:7d:32:c1:ed:b7: ab:de:29:08:d8:82:f0:42:16:d6:80:99:03:f2:8a: 9b:c3:ea:17:20:64:19:18:0a:68:f0:6b:66:e8:84: 41:b0:33:91:c5:27:2d:40:27:22:3a:2b:ab:bc:7e: 95:ae:50:f8:44:ff:62:b6:47:15:b9:ff:31:6a:dc: 93:f5:9a:b3:f6:f2:b1:97:7d:3d:68:19:75:63:32: 20:d6:81:a9:54:70:da:b4:e3:8c:bc:0a:87:38:6b: fd:23:13:a1:0e:46:53:f6:ac:ce:79:46:fc:42:0f: f3:fe:cf:08:fe:aa:a7:b5:3a:56:91:14:0d:79:5b: 1a:a2:f1:ec:f5:9d:78:8b:55:d5:3d:5e:36:0e:d3: 4a:9e:b8:18:8c:c4:e7:39:29:4a:65:b8:20:89:04: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:89:0D:A5:49:5B:7B:29:8A:81:DA:5E:B7:86:21:48:B1:00:E6:EF X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gokNpUlbeymKgdpet4YhSLEA5u8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.246.0/24 192.121.11.0/24 192.121.128.0/22 193.180.192.0/23 193.181.36.0/24 193.181.44.0/24 193.234.6.0/24 193.234.97.0/24 193.234.112.0/22 Signature Algorithm: sha256WithRSAEncryption 31:60:61:cb:92:23:74:4f:56:f7:5c:43:8f:dd:c8:41:4f:b3: 2c:dd:fc:30:81:af:d7:3f:b0:31:d4:46:4e:c6:1f:2a:43:e1: 10:39:05:83:a1:52:47:ab:12:34:f4:65:a1:e5:42:de:b0:00: fe:26:66:53:3e:d6:f5:b8:e3:1c:01:6a:9c:d7:b0:8b:bf:27: a3:9e:8c:86:05:64:4c:30:8b:c5:fa:6f:d4:93:43:c4:de:a9: fa:64:75:37:26:9c:8b:42:dc:d2:ce:61:bb:cf:43:9e:ae:21: 7e:34:10:e4:e3:70:5f:0c:b7:f1:8f:fe:05:30:b7:62:40:5e: 99:d6:86:f2:a3:08:e2:46:59:62:98:bf:da:8b:b9:21:f3:e6: 57:bc:54:b3:22:9e:2f:f4:60:dd:02:ab:ed:72:6c:0b:61:f6: 3c:73:70:00:e4:12:01:3b:eb:ba:28:48:45:07:33:2c:28:4c: ae:4b:f6:99:b1:79:27:be:38:3e:b6:6a:00:55:35:91:9c:90: 20:f9:c4:70:f2:1f:e3:cd:07:bc:60:c8:12:d7:1a:17:2b:37: 76:8e:df:4e:fa:2f:0d:8e:42:10:af:25:c9:df:ee:b5:58:01: a7:b8:a4:86:75:b7:ab:a2:98:08:99:b5:d1:fb:fa:80:26:1c: 7d:a8:dc:79 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt4NIRSaUeFJtHj03Eh46LrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjg5MGRhNTQ5NWI3YjI5OGE4MWRhNWViNzg2MjE0OGIxMDBlNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RQ2cU7lPrs1ME/yTrF1uxuJLPB6 WLsQQc1Ja+wMolcptfW8Ugj/nGJhB+NS+0WfykcPyLom0rVTB/Floh9wMi/FIUIf gT8GoOVMjYA/Vnr9L5Wrk120sWZvmZRUu4HRL+CqfTLB7ber3ikI2ILwQhbWgJkD 8oqbw+oXIGQZGApo8Gtm6IRBsDORxSctQCciOiurvH6VrlD4RP9itkcVuf8xatyT 9Zqz9vKxl309aBl1YzIg1oGpVHDatOOMvAqHOGv9IxOhDkZT9qzOeUb8Qg/z/s8I /qqntTpWkRQNeVsaovHs9Z14i1XVPV42DtNKnrgYjMTnOSlKZbggiQQIdwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFIKJDaVJW3spioHaXreGIUixAObvMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZ29rTnBVbGJleW1LZ2RwZXQ0WWhTTEVBNXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwCT2AwQA wHkLAwQCwHmAAwQBwbTAAwQAwbUkAwQAwbUsAwQAweoGAwQAwephAwQCwepwMA0G CSqGSIb3DQEBCwUAA4IBAQAxYGHLkiN0T1b3XEOP3chBT7Ms3fwwga/XP7Ax1EZO xh8qQ+EQOQWDoVJHqxI09GWh5ULesAD+JmZTPtb1uOMcAWqc17CLvyejnoyGBWRM MIvF+m/Uk0PE3qn6ZHU3JpyLQtzSzmG7z0OeriF+NBDk43BfDLfxj/4FMLdiQF6Z 1obyowjiRllimL/ai7kh8+ZXvFSzIp4v9GDdAqvtcmwLYfY8c3AA5BIBO+u6KEhF BzMsKEyuS/aZsXknvjg+tmoAVTWRnJAg+cRw8h/jzQe8YMgS1xoXKzd2jt9O+i8N jkIQryXJ3+61WAGnuKSGdberopgImbXR+/qAJhx9qNx5 -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:57 2026 by rpki-client