This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k9ICXHZ2NYzKapmD1hJmiEwaY_Y.roa File: k9ICXHZ2NYzKapmD1hJmiEwaY_Y.roa (raw, json) Hash identifier: ZffVWy8GUUxaItLXrZk8ob8urY5G2uFiq5PGHb0nHP0= Subject key identifier: 93:D2:02:5C:76:76:35:8C:CA:6A:99:83:D6:12:66:88:4C:1A:63:F6 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348678D16227794408A2684825A754 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k9ICXHZ2NYzKapmD1hJmiEwaY_Y.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206774 IP address blocks: 192.36.155.0/24 maxlen: 24 194.103.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:86:78:d1:62:27:79:44:08:a2:68:48:25:a7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93d2025c7676358cca6a9983d61266884c1a63f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:ec:94:b5:97:1c:7b:52:ff:1a:65:c0:a0: 9a:ac:f0:06:93:1c:dd:f6:c6:98:4f:e9:b2:6a:31: 0f:d9:55:7a:d7:0d:7c:95:1d:c1:49:86:63:65:a6: 4c:cc:4c:6f:c6:fc:4f:71:03:2a:0c:ce:7c:5a:01: 1f:54:ab:50:78:a3:9b:4c:99:71:cd:ed:57:ff:c3: fc:a3:98:84:9e:9f:fa:9a:42:38:1d:f6:cd:1e:ef: bb:b1:8b:c4:cf:e6:1f:d3:96:04:16:22:19:57:63: d0:00:4b:a8:14:09:92:67:20:08:3e:22:1e:45:84: 20:96:16:c2:ef:1b:19:97:10:34:0f:d5:6e:f5:af: c9:24:09:5b:cc:4c:c7:81:bb:5e:e3:74:57:7f:95: c8:b0:d7:48:ca:c0:9c:3e:ba:a4:f2:8d:d3:82:65: 8a:1f:ce:2a:49:37:f0:1a:cc:5e:21:aa:56:1f:c4: 02:ae:58:ca:af:ba:19:36:88:94:13:17:b3:f7:d0: d0:21:b8:9e:d2:bc:7d:23:c3:6f:f8:23:49:a1:0a: 1d:cd:4c:e4:79:69:c8:c6:23:13:b5:82:a0:c3:45: a2:4b:28:ef:ed:3e:40:5e:29:0d:63:6b:b1:71:0f: 3b:41:da:3c:9d:52:b5:83:03:4a:d4:cc:2c:ca:ec: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D2:02:5C:76:76:35:8C:CA:6A:99:83:D6:12:66:88:4C:1A:63:F6 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k9ICXHZ2NYzKapmD1hJmiEwaY_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.155.0/24 194.103.157.0/24 Signature Algorithm: sha256WithRSAEncryption 80:76:8c:1a:fb:57:d4:8c:8c:3c:c3:0a:9d:f9:60:88:ff:17: 37:55:c9:fb:96:c0:53:dd:43:48:07:53:04:db:d7:f8:50:0c: a6:67:b6:15:61:1e:89:49:bb:2b:e0:7e:68:e6:70:b8:9d:17: fa:88:f3:3b:70:60:5c:ac:35:06:02:be:b2:50:1b:d5:79:e0: 20:f5:91:c3:9f:f3:bd:a3:13:17:be:c4:3a:04:ef:26:a7:cd: ab:29:fa:57:6e:db:58:34:75:99:b3:12:9f:a2:2d:e5:e9:cf: 04:e3:1a:66:8f:37:c4:67:2b:a4:54:df:9a:a1:d8:62:2e:7b: 01:3c:a2:35:39:c6:84:ad:92:65:68:e6:a0:a6:65:fb:ca:65: f8:26:40:8e:4b:85:5e:51:c4:fd:16:64:a8:98:88:1f:1b:6c: 26:f2:d2:77:67:d4:aa:d1:75:84:ad:73:1c:1e:0d:75:57:67: 12:64:98:2e:6f:24:0c:84:ec:bf:2c:64:2a:d5:cd:ce:19:a4: d3:04:ba:72:73:a5:28:9d:08:91:98:f0:15:18:b5:7c:3a:86: 9f:a3:59:57:62:ec:42:d8:45:04:da:4a:85:3f:1e:60:c4:a2: 62:ac:7e:bf:98:c6:50:34:ce:57:b1:83:d8:21:a8:89:24:82: a3:9c:29:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NIZ40WIneUQIomhIJadUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2QyMDI1Yzc2NzYzNThjY2E2YTk5ODNkNjEyNjY4ODRjMWE2M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCnslLWXHHtS/xplwKCarPAGkxzd 9saYT+myajEP2VV61w18lR3BSYZjZaZMzExvxvxPcQMqDM58WgEfVKtQeKObTJlx ze1X/8P8o5iEnp/6mkI4HfbNHu+7sYvEz+Yf05YEFiIZV2PQAEuoFAmSZyAIPiIe RYQglhbC7xsZlxA0D9Vu9a/JJAlbzEzHgbte43RXf5XIsNdIysCcPrqk8o3TgmWK H84qSTfwGsxeIapWH8QCrljKr7oZNoiUExez99DQIbie0rx9I8Nv+CNJoQodzUzk eWnIxiMTtYKgw0WiSyjv7T5AXikNY2uxcQ87Qdo8nVK1gwNK1MwsyuxX1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJPSAlx2djWMymqZg9YSZohMGmP2MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvazlJQ1hIWjJOWXpLYXBtRDFoSm1pRXdhWV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCSbAwQA wmedMA0GCSqGSIb3DQEBCwUAA4IBAQCAdowa+1fUjIw8wwqd+WCI/xc3Vcn7lsBT 3UNIB1ME29f4UAymZ7YVYR6JSbsr4H5o5nC4nRf6iPM7cGBcrDUGAr6yUBvVeeAg 9ZHDn/O9oxMXvsQ6BO8mp82rKfpXbttYNHWZsxKfoi3l6c8E4xpmjzfEZyukVN+a odhiLnsBPKI1OcaErZJlaOagpmX7ymX4JkCOS4VeUcT9FmSomIgfG2wm8tJ3Z9Sq 0XWErXMcHg11V2cSZJgubyQMhOy/LGQq1c3OGaTTBLpyc6UonQiRmPAVGLV8Ooaf o1lXYuxC2EUE2kqFPx5gxKJirH6/mMZQNM5XsYPYIaiJJIKjnClc -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:39 2026 by rpki-client