This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j72PiUa4pNNQMf57WekmHJGFBt8.roa File: j72PiUa4pNNQMf57WekmHJGFBt8.roa (raw, json) Hash identifier: eV9Vikly/55AQI9rQrfMg9Q3o8qS8kNHEiadSM7VePA= Subject key identifier: 8F:BD:8F:89:46:B8:A4:D3:50:31:FE:7B:59:E9:26:1C:91:85:06:DF Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019BDB189ECF15A3841C1C25A89DB9EB8C95 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j72PiUa4pNNQMf57WekmHJGFBt8.roa Signing time: Tue 20 Jan 2026 11:09:42 +0000 ROA not before: Tue 20 Jan 2026 11:09:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60345 IP address blocks: 193.182.129.0/24 maxlen: 24 193.182.130.0/24 maxlen: 24 193.182.131.0/24 maxlen: 24 193.182.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:18:9e:cf:15:a3:84:1c:1c:25:a8:9d:b9:eb:8c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 20 11:09:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fbd8f8946b8a4d35031fe7b59e9261c918506df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:35:35:6b:1d:4c:2f:29:d7:7c:37:f0:7d: c3:1f:1d:44:f0:3e:cf:76:16:60:21:b1:40:c2:e0: fe:30:c3:17:c2:1c:72:74:8d:6a:28:42:fe:38:7e: 96:4d:9a:8e:ba:ab:d5:fd:a8:8d:4b:e6:2b:64:b4: f2:45:5b:22:3b:da:e3:98:79:68:66:b1:8b:86:24: 4b:da:73:db:83:76:2f:2e:e1:cf:09:f8:cc:8b:4e: a5:94:48:7a:1f:12:85:d4:45:af:6f:e4:2c:b7:73: d9:a9:03:0e:57:9b:5b:a5:74:57:42:fb:60:35:c1: 10:fe:e7:46:65:2e:cd:50:05:1a:41:90:1f:f8:91: 8a:1c:85:eb:e8:53:37:4c:cb:ca:dc:37:0b:e6:26: c0:a6:62:b1:92:a6:7f:9b:ab:a1:b4:9a:c8:69:68: 3f:4f:c6:d1:5c:07:e7:bb:dd:67:62:fe:c2:0a:43: f0:95:4e:6f:e2:d7:5f:9c:88:23:82:71:b3:9e:62: 1a:d7:70:88:61:66:b3:0a:19:de:0d:24:47:99:73: 8b:af:c5:58:6d:d2:93:a7:85:ec:74:b9:6c:7e:c0: a1:74:49:74:21:05:da:73:9e:e8:67:dc:7f:57:a9: a6:44:a7:b6:ae:46:24:31:17:c6:28:08:f6:26:b4: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BD:8F:89:46:B8:A4:D3:50:31:FE:7B:59:E9:26:1C:91:85:06:DF X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j72PiUa4pNNQMf57WekmHJGFBt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.182.129.0-193.182.132.255 Signature Algorithm: sha256WithRSAEncryption ad:13:96:3f:44:cc:79:8b:b9:34:91:43:97:0d:f2:92:4e:f4: 66:1b:40:2c:1d:57:c4:7b:8d:0f:95:03:99:fd:a5:74:02:07: 0a:e8:2d:c7:3b:75:20:46:31:86:03:60:87:1a:04:b0:9a:4a: 3f:8f:3d:d2:af:08:e3:f1:01:87:ad:ab:c8:79:9a:d2:63:53: 32:36:3e:ea:98:2e:53:a1:3e:4b:c5:4b:55:43:5b:1f:5f:16: f3:98:c9:ce:45:bc:2e:f5:d3:5b:0c:7e:cb:30:e0:09:f0:44: 50:1e:61:7a:dd:af:92:1c:0f:25:d9:76:64:a0:36:0d:de:5c: 3c:4c:f5:dc:da:c7:b1:d5:8a:88:81:56:3c:72:04:c6:87:33: 8e:f9:02:84:3e:14:af:99:e1:c8:9c:42:51:f2:63:e8:48:11: ba:a6:02:5a:86:4d:5f:d8:ca:bb:74:e8:6a:40:24:4f:69:0f: fd:88:ac:c1:59:8e:45:d0:56:44:3f:8b:8f:89:f7:c9:ab:a5: bc:ad:db:96:64:96:78:ed:36:b3:e4:a2:ea:72:a7:53:ba:6e: 89:de:67:3a:b2:1f:e5:f4:a6:8d:88:2a:a2:76:b4:de:9e:88: d1:58:19:42:0b:d9:54:81:85:9b:01:5c:f5:69:48:df:6a:58: d1:11:5c:ec -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZvbGJ7PFaOEHBwlqJ2564yVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTIwMTEwOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmJkOGY4OTQ2YjhhNGQzNTAzMWZlN2I1OWU5MjYxYzkxODUwNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHc1NWsdTC8p13w38H3DHx1E8D7P dhZgIbFAwuD+MMMXwhxydI1qKEL+OH6WTZqOuqvV/aiNS+YrZLTyRVsiO9rjmHlo ZrGLhiRL2nPbg3YvLuHPCfjMi06llEh6HxKF1EWvb+Qst3PZqQMOV5tbpXRXQvtg NcEQ/udGZS7NUAUaQZAf+JGKHIXr6FM3TMvK3DcL5ibApmKxkqZ/m6uhtJrIaWg/ T8bRXAfnu91nYv7CCkPwlU5v4tdfnIgjgnGznmIa13CIYWazChneDSRHmXOLr8VY bdKTp4XsdLlsfsChdEl0IQXac57oZ9x/V6mmRKe2rkYkMRfGKAj2JrRyDwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFI+9j4lGuKTTUDH+e1npJhyRhQbfMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvajcyUGlVYTRwTk5RTWY1N1dla21ISkdGQnQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBtoED BADBtoQwDQYJKoZIhvcNAQELBQADggEBAK0Tlj9EzHmLuTSRQ5cN8pJO9GYbQCwd V8R7jQ+VA5n9pXQCBwroLcc7dSBGMYYDYIcaBLCaSj+PPdKvCOPxAYetq8h5mtJj UzI2PuqYLlOhPkvFS1VDWx9fFvOYyc5FvC7101sMfssw4AnwRFAeYXrdr5IcDyXZ dmSgNg3eXDxM9dzax7HVioiBVjxyBMaHM475AoQ+FK+Z4cicQlHyY+hIEbqmAlqG TV/Yyrt06GpAJE9pD/2IrMFZjkXQVkQ/i4+J98mrpbyt25ZklnjtNrPkoupyp1O6 boneZzqyH+X0po2IKqJ2tN6eiNFYGUIL2VSBhZsBXPVpSN9qWNERXOw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:42 2026 by rpki-client