This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hRhOYZ_od1rudLul9fSIXpGyApE.roa File: hRhOYZ_od1rudLul9fSIXpGyApE.roa (raw, json) Hash identifier: ycGmoB4+qkgMarz0+v26qSPG4ikjaae/YilHyof+VL4= Subject key identifier: 85:18:4E:61:9F:E8:77:5A:EE:74:BB:A5:F5:F4:88:5E:91:B2:02:91 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783484F7D3966D1A79DB6FD434A6581F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hRhOYZ_od1rudLul9fSIXpGyApE.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205574 IP address blocks: 192.71.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:f7:d3:96:6d:1a:79:db:6f:d4:34:a6:58:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85184e619fe8775aee74bba5f5f4885e91b20291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:bd:36:f4:8a:a6:ef:ed:03:af:be:c1:24: ae:05:11:21:34:70:2e:9b:ad:a9:d9:3e:b4:c7:6d: 34:88:63:81:38:8f:e2:16:88:74:55:9c:29:e0:b3: bb:a8:d1:72:c8:a2:26:4d:ca:02:72:c3:a8:56:7b: 9f:cb:49:4b:e1:a7:96:72:29:3c:8d:98:88:48:45: 03:57:36:9c:56:41:f6:ec:20:69:0a:46:98:bf:5d: 5c:a6:05:67:3c:59:c4:68:ca:9b:82:fd:07:69:35: 66:54:68:98:db:16:87:de:52:90:6e:05:2e:17:7d: 9d:4d:85:e2:71:c9:ca:5d:64:e5:66:29:37:aa:d0: 40:f2:ae:65:0c:74:fb:35:cb:18:ee:2e:64:e1:5d: 7b:55:7b:86:1e:28:75:26:d4:3c:49:ca:72:a3:9f: fd:6f:49:47:ad:54:05:64:a9:60:cd:5b:7a:09:cb: 77:02:90:5c:4d:96:73:6e:98:2a:73:d1:49:38:dc: 93:cc:ba:63:d1:19:3c:f1:16:4c:bd:4d:d6:76:cc: 8c:69:2e:f6:87:83:e0:0b:b3:dc:f1:a0:8e:55:c6: f6:34:27:47:36:e6:d9:44:ba:e1:1f:84:c9:07:a4: b2:b4:19:ca:49:f0:c1:b0:e9:7f:fd:33:ba:6c:d0: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:4E:61:9F:E8:77:5A:EE:74:BB:A5:F5:F4:88:5E:91:B2:02:91 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hRhOYZ_od1rudLul9fSIXpGyApE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.16.0/24 Signature Algorithm: sha256WithRSAEncryption 98:7f:4e:73:b0:b7:2c:b9:eb:be:18:24:a7:6e:17:44:45:81: e6:f2:81:db:7e:c8:83:69:41:c3:fb:5d:4e:1c:ee:72:98:39: c3:1b:1c:7a:11:5d:f4:95:01:d4:c6:ee:85:89:47:9d:db:04: 63:23:14:b5:7b:44:2a:b0:b5:6d:07:4e:67:f1:12:49:ec:24: 11:88:bb:d9:18:e8:67:d2:fb:f6:15:cc:74:de:2b:4d:0e:f6: 3f:ec:11:aa:c7:51:9b:a1:d1:53:bf:bb:41:fb:23:d8:a2:ef: 52:09:ea:85:a1:07:3d:f3:24:df:95:47:69:dd:df:f7:88:e7: 57:12:1d:60:13:10:ff:b1:79:bd:3f:8f:33:07:62:cb:89:fb: b9:0d:0c:35:62:ea:19:8b:5a:e1:5f:d8:85:dd:4d:eb:27:4a: 2e:60:e6:4a:25:92:56:15:ef:50:61:bb:6e:f5:a7:98:f9:46: ab:81:32:a5:8e:5d:4d:04:91:3f:00:be:63:87:10:f7:ea:f2: f0:9a:3e:81:6e:aa:5e:f7:64:79:d4:92:49:20:cc:a6:bc:ed: 2c:20:1a:e5:1c:27:ea:79:99:6c:b9:ff:d4:0a:e5:d3:04:ea: e1:a9:cf:cc:a0:0b:22:90:9c:6c:fd:81:8d:e8:85:2f:69:20: a4:9b:a1:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NIT305ZtGnnbb9Q0plgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTE4NGU2MTlmZTg3NzVhZWU3NGJiYTVmNWY0ODg1ZTkxYjIwMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+O9NvSKpu/tA6++wSSuBREhNHAu m62p2T60x200iGOBOI/iFoh0VZwp4LO7qNFyyKImTcoCcsOoVnufy0lL4aeWcik8 jZiISEUDVzacVkH27CBpCkaYv11cpgVnPFnEaMqbgv0HaTVmVGiY2xaH3lKQbgUu F32dTYXiccnKXWTlZik3qtBA8q5lDHT7NcsY7i5k4V17VXuGHih1JtQ8Scpyo5/9 b0lHrVQFZKlgzVt6Cct3ApBcTZZzbpgqc9FJONyTzLpj0Rk88RZMvU3WdsyMaS72 h4PgC7Pc8aCOVcb2NCdHNubZRLrhH4TJB6SytBnKSfDBsOl//TO6bNCCKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIUYTmGf6Hda7nS7pfX0iF6RsgKRMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvaFJoT1laX29kMXJ1ZEx1bDlmU0lYcEd5QXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEcQMA0G CSqGSIb3DQEBCwUAA4IBAQCYf05zsLcsueu+GCSnbhdERYHm8oHbfsiDaUHD+11O HO5ymDnDGxx6EV30lQHUxu6FiUed2wRjIxS1e0QqsLVtB05n8RJJ7CQRiLvZGOhn 0vv2Fcx03itNDvY/7BGqx1GbodFTv7tB+yPYou9SCeqFoQc98yTflUdp3d/3iOdX Eh1gExD/sXm9P48zB2LLifu5DQw1YuoZi1rhX9iF3U3rJ0ouYOZKJZJWFe9QYbtu 9aeY+UargTKljl1NBJE/AL5jhxD36vLwmj6Bbqpe92R51JJJIMymvO0sIBrlHCfq eZlsuf/UCuXTBOrhqc/MoAsikJxs/YGN6IUvaSCkm6Ez -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:17 2026 by rpki-client