This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/l0OLKuAPhRk72PypvoqT9-IUOrk.roa File: l0OLKuAPhRk72PypvoqT9-IUOrk.roa (raw, json) Hash identifier: QWXfVBzjipTGw2naNzsfxs1khIP2Zlrpi1MD+3IHyb8= Subject key identifier: 97:43:8B:2A:E0:0F:85:19:3B:D8:FC:A9:BE:8A:93:F7:E2:14:3A:B9 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783470CDD93D2DD28AE8A53197CC50BF Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/l0OLKuAPhRk72PypvoqT9-IUOrk.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57829 IP address blocks: 193.234.1.0/24 maxlen: 24 193.235.192.0/24 maxlen: 24 194.14.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:70:cd:d9:3d:2d:d2:8a:e8:a5:31:97:cc:50:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97438b2ae00f85193bd8fca9be8a93f7e2143ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:03:19:da:7d:69:76:93:ee:c8:18:99:11: 0d:5b:57:9c:c9:20:c3:c4:5d:3d:4f:ce:b6:c2:b2: 59:34:3c:de:cf:ae:a7:33:f7:e3:ca:bd:60:27:12: 36:f4:57:b9:b1:12:0b:84:51:4f:42:4e:cf:28:3a: a4:a8:30:cf:1f:64:b7:3a:09:ad:f4:64:4e:aa:e3: 2e:d9:f2:be:56:56:9d:3d:21:f0:56:1b:6e:0b:c7: e4:19:f6:15:91:28:e8:c0:61:d2:8a:b0:54:05:2d: da:2e:28:12:b1:a7:d7:d8:7c:9b:6e:e0:8e:92:54: c1:93:37:12:5c:f0:d5:34:23:ce:57:b1:fe:70:61: 19:fa:00:be:c3:2f:41:bb:b9:e0:b4:80:d4:f6:04: 76:9f:f1:14:f0:28:e6:72:e1:1b:3b:38:20:9d:f3: 2e:06:08:45:7c:7e:f3:db:48:fe:cc:3e:af:20:d9: 9c:59:5e:be:83:ae:8a:41:1f:65:0e:c8:45:ec:09: 24:c6:8b:4b:60:b3:f3:17:ce:01:f2:b3:73:ab:19: 25:f8:1c:6e:a4:09:fd:08:2d:f1:a1:69:5a:5e:2c: 40:96:09:18:be:1c:cf:00:dd:06:5f:e3:9a:de:46: e0:fc:9f:2d:40:7b:cd:a4:70:05:0d:55:87:d1:00: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:8B:2A:E0:0F:85:19:3B:D8:FC:A9:BE:8A:93:F7:E2:14:3A:B9 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/l0OLKuAPhRk72PypvoqT9-IUOrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.234.1.0/24 193.235.192.0/24 194.14.195.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:35:d2:dd:ce:79:19:c3:67:8f:00:c5:85:07:8c:15:65:47: ef:fd:76:47:81:7c:a8:f9:8b:ac:c4:de:06:93:98:dd:0a:bd: af:1e:d8:d6:80:f6:45:d6:93:f7:82:61:8e:65:6a:7f:86:4a: eb:65:a4:22:41:0a:6f:e9:4d:b8:d2:f7:92:69:13:8e:00:1e: e6:72:03:02:1e:0a:60:f1:74:af:47:64:a8:2f:04:55:be:2d: bb:1b:98:63:60:9f:42:eb:e5:b1:db:ba:bb:06:bd:51:be:84: cf:00:94:4b:65:2b:3b:e8:9d:68:69:53:c0:40:c1:8c:77:a0: 74:7c:f9:11:bd:a0:c3:b3:ef:a7:81:5f:4a:65:d8:98:72:f7: bb:38:3b:d1:98:1d:ac:cf:54:24:d2:bd:70:46:ab:27:eb:dc: 2d:ca:c6:e9:28:3a:e9:31:c2:ec:a9:09:c6:35:44:14:73:fd: 1f:67:1c:46:ad:ae:89:c8:99:1e:7c:41:56:14:cd:85:55:bc: cd:b4:71:4d:6a:dc:2c:bc:d9:dd:f8:b5:3e:af:c9:66:ca:dd: e7:36:9e:54:06:4a:e8:8b:5d:92:2a:0d:7e:76:71:86:8c:ee: 74:03:6a:b5:db:18:f0:94:9c:63:e6:1d:a1:1c:01:01:20:cc: d4:b3:5d:f1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NHDN2T0t0oropTGXzFC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzQzOGIyYWUwMGY4NTE5M2JkOGZjYTliZThhOTNmN2UyMTQzYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmEDGdp9aXaT7sgYmRENW1ecySDD xF09T862wrJZNDzez66nM/fjyr1gJxI29Fe5sRILhFFPQk7PKDqkqDDPH2S3Ogmt 9GROquMu2fK+VladPSHwVhtuC8fkGfYVkSjowGHSirBUBS3aLigSsafX2HybbuCO klTBkzcSXPDVNCPOV7H+cGEZ+gC+wy9Bu7ngtIDU9gR2n/EU8CjmcuEbOzggnfMu BghFfH7z20j+zD6vINmcWV6+g66KQR9lDshF7AkkxotLYLPzF84B8rNzqxkl+Bxu pAn9CC3xoWlaXixAlgkYvhzPAN0GX+Oa3kbg/J8tQHvNpHAFDVWH0QBrEQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJdDiyrgD4UZO9j8qb6Kk/fiFDq5MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvbDBPTEt1QVBoUms3MlB5cHZvcVQ5LUlVT3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAweoBAwQA wevAAwQAwg7DMA0GCSqGSIb3DQEBCwUAA4IBAQAfNdLdznkZw2ePAMWFB4wVZUfv /XZHgXyo+YusxN4Gk5jdCr2vHtjWgPZF1pP3gmGOZWp/hkrrZaQiQQpv6U240veS aROOAB7mcgMCHgpg8XSvR2SoLwRVvi27G5hjYJ9C6+Wx27q7Br1RvoTPAJRLZSs7 6J1oaVPAQMGMd6B0fPkRvaDDs++ngV9KZdiYcve7ODvRmB2sz1Qk0r1wRqsn69wt ysbpKDrpMcLsqQnGNUQUc/0fZxxGra6JyJkefEFWFM2FVbzNtHFNatwsvNnd+LU+ r8lmyt3nNp5UBkroi12SKg1+dnGGjO50A2q12xjwlJxj5h2hHAEBIMzUs13x -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:17 2026 by rpki-client