This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ia6MYmT4I1faOUFGxqTM59xng48.roa File: ia6MYmT4I1faOUFGxqTM59xng48.roa (raw, json) Hash identifier: y9hZrZ4slWUGVdtDlt4C8PoSCVh+NiXo29etYqn/9i4= Subject key identifier: 89:AE:8C:62:64:F8:23:57:DA:39:41:46:C6:A4:CC:E7:DC:67:83:8F Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834861CEDBC7D3240668F80BFD30677 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ia6MYmT4I1faOUFGxqTM59xng48.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206320 IP address blocks: 192.71.186.0/24 maxlen: 24 193.235.205.0/24 maxlen: 24 194.68.182.0/24 maxlen: 24 194.68.184.0/24 maxlen: 24 2a01:280:318::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:86:1c:ed:bc:7d:32:40:66:8f:80:bf:d3:06:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89ae8c6264f82357da394146c6a4cce7dc67838f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bd:96:f8:6b:ca:d7:65:cc:90:d1:21:55:cc: d2:fe:04:3b:a9:36:fd:87:01:c4:e5:01:06:11:9d: dc:e1:71:fc:01:94:b5:78:09:31:9a:5b:94:5c:8e: 68:99:f4:52:41:64:ea:24:08:14:76:32:6b:b5:57: 6e:b8:f7:63:65:f6:dc:06:7c:cc:3b:c7:6b:92:1e: ae:99:dd:47:88:43:eb:34:98:b4:f1:5e:e3:ae:b1: d3:e1:30:a5:2e:b6:69:42:9a:66:4d:ef:cc:6a:86: 05:83:d2:fc:90:58:36:8b:7e:63:28:e6:b0:20:3c: df:ba:cd:ce:ac:95:b6:cf:c4:fd:c8:17:c2:98:43: c2:fd:af:22:5f:57:a9:f3:15:b5:e8:ec:12:1a:34: e6:d4:ef:e3:37:45:81:85:ea:7b:02:b5:86:9f:8b: fe:e0:8e:b3:9b:4d:63:8d:4d:fb:23:ee:cc:bb:4c: 54:1a:38:7f:56:61:5b:02:13:9a:12:cf:78:b7:60: 73:92:0d:00:1f:7e:3f:85:d6:a4:56:b2:37:0e:c9: 4b:46:46:fd:b7:fa:38:a6:70:8f:e1:fc:ca:60:0a: 7f:5d:29:72:d0:c2:c5:d3:c2:e9:de:0a:68:e0:7a: b6:a4:c6:12:78:62:bd:0d:bb:41:3a:31:8f:f1:52: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AE:8C:62:64:F8:23:57:DA:39:41:46:C6:A4:CC:E7:DC:67:83:8F X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ia6MYmT4I1faOUFGxqTM59xng48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.186.0/24 193.235.205.0/24 194.68.182.0/24 194.68.184.0/24 IPv6: 2a01:280:318::/48 Signature Algorithm: sha256WithRSAEncryption 79:f8:7d:cc:33:0b:f9:3d:41:0a:9c:3a:39:05:48:3c:ac:83: 26:52:15:80:3d:ee:09:80:00:e4:07:74:92:04:56:5f:2a:61: 60:ce:73:85:26:cd:a7:e7:af:ea:c7:71:9b:62:d1:f0:6a:cd: fd:9b:0f:ce:0a:c0:e4:bb:8c:70:50:2d:d0:8a:8c:96:89:fb: cb:b1:8d:59:65:35:d2:15:d8:42:aa:6b:d0:f6:0e:e7:fd:20: ee:69:2d:b2:86:0a:88:0a:d2:e1:5f:52:a2:a1:2c:c9:d3:a6: 19:39:7c:c0:2b:c9:cb:9e:ac:fe:20:be:9e:62:ab:e4:a2:91: 2d:c2:aa:fc:ad:09:77:ad:c1:c4:7b:53:93:63:d6:d5:35:38: 24:2a:c5:ac:e8:22:50:59:60:15:95:b3:6f:d6:87:ae:a3:ca: 00:7b:77:d1:a0:20:db:ea:aa:f3:4c:25:71:45:2d:90:f0:7a: 17:06:6d:fc:8b:b6:a0:85:98:6f:7b:91:e4:27:85:23:53:b5: dd:b1:1d:b6:7e:ff:8b:dd:bc:df:db:1c:a4:e8:7b:56:42:f1: 25:8f:a4:cd:e8:c1:67:51:15:9c:c5:b9:82:2b:c9:b4:4f:75: 77:36:80:5d:3a:e1:57:35:7d:4a:d5:91:d2:fa:c3:ae:82:b6: 41:72:d6:33 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt4NIYc7bx9MkBmj4C/0wZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWFlOGM2MjY0ZjgyMzU3ZGEzOTQxNDZjNmE0Y2NlN2RjNjc4MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL2W+GvK12XMkNEhVczS/gQ7qTb9 hwHE5QEGEZ3c4XH8AZS1eAkxmluUXI5omfRSQWTqJAgUdjJrtVduuPdjZfbcBnzM O8drkh6umd1HiEPrNJi08V7jrrHT4TClLrZpQppmTe/MaoYFg9L8kFg2i35jKOaw IDzfus3OrJW2z8T9yBfCmEPC/a8iX1ep8xW16OwSGjTm1O/jN0WBhep7ArWGn4v+ 4I6zm01jjU37I+7Mu0xUGjh/VmFbAhOaEs94t2Bzkg0AH34/hdakVrI3DslLRkb9 t/o4pnCP4fzKYAp/XSly0MLF08Lp3gpo4Hq2pMYSeGK9DbtBOjGP8VKpewIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFImujGJk+CNX2jlBRsakzOfcZ4OPMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvaWE2TVltVDRJMWZhT1VGR3hxVE01OXhuZzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAwEe6AwQA wevNAwQAwkS2AwQAwkS4MA8EAgACMAkDBwAqAQKAAxgwDQYJKoZIhvcNAQELBQAD ggEBAHn4fcwzC/k9QQqcOjkFSDysgyZSFYA97gmAAOQHdJIEVl8qYWDOc4Umzafn r+rHcZti0fBqzf2bD84KwOS7jHBQLdCKjJaJ+8uxjVllNdIV2EKqa9D2Duf9IO5p LbKGCogK0uFfUqKhLMnTphk5fMArycuerP4gvp5iq+SikS3CqvytCXetwcR7U5Nj 1tU1OCQqxazoIlBZYBWVs2/Wh66jygB7d9GgINvqqvNMJXFFLZDwehcGbfyLtqCF mG97keQnhSNTtd2xHbZ+/4vdvN/bHKToe1ZC8SWPpM3owWdRFZzFuYIrybRPdXc2 gF064Vc1fUrVkdL6w66CtkFy1jM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:29 2026 by rpki-client