This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/myEBVHYufl7Ql9bML0GsEzr1c24.roa File: myEBVHYufl7Ql9bML0GsEzr1c24.roa (raw, json) Hash identifier: 9Kv88rT1qRecTiKinOAXxOxQW2nkeoG/NXkHUb8Y0yE= Subject key identifier: 9B:21:01:54:76:2E:7E:5E:D0:97:D6:CC:2F:41:AC:13:3A:F5:73:6E Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345DCBF81E0AC4E8D69910241F6A2E Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/myEBVHYufl7Ql9bML0GsEzr1c24.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43065 IP address blocks: 192.71.21.0/24 maxlen: 24 193.183.196.0/22 maxlen: 22 194.14.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5d:cb:f8:1e:0a:c4:e8:d6:99:10:24:1f:6a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b210154762e7e5ed097d6cc2f41ac133af5736e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:69:6e:03:6d:b1:ba:3f:af:b4:b0:95:84: b9:ce:0d:e2:27:83:09:37:e9:cb:cf:47:e2:df:17: 5f:81:99:a4:6a:11:b1:2c:a9:b9:a8:f6:1c:c7:0f: 9f:0e:cc:13:02:d0:da:b1:8c:c2:ca:81:7f:66:e2: a7:d8:01:af:a9:1d:ca:f6:7e:de:b3:67:30:c4:fa: 4f:78:4e:71:8f:0b:34:65:f9:f3:23:52:5a:5c:97: 6e:98:ec:94:cb:91:de:16:60:87:b2:f6:27:35:63: 42:cf:5c:8e:7f:c5:47:3c:e4:06:75:9d:b4:83:20: 11:01:67:b5:ac:36:f5:72:fa:b4:2b:88:7c:35:ed: 72:0a:d0:f2:f7:a8:ba:1b:a7:fb:88:11:d7:99:a4: 6f:f1:f9:45:cb:b4:7a:02:25:62:b2:54:67:61:0e: a9:cb:7b:87:19:eb:45:a8:f2:3a:c4:4b:cb:ef:94: 9f:7f:f0:1e:91:ec:c5:95:6d:e2:1f:24:ce:57:4c: aa:cd:d3:c0:7c:cb:db:af:f1:f4:c2:8b:32:6b:7d: 1a:76:5d:d2:5e:40:3f:02:9b:cd:1d:12:45:cc:17: 73:f0:94:17:86:07:61:f6:de:22:2b:48:9e:89:d2: 8a:5a:7f:90:48:9c:67:a7:66:f8:82:07:51:58:94: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:21:01:54:76:2E:7E:5E:D0:97:D6:CC:2F:41:AC:13:3A:F5:73:6E X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/myEBVHYufl7Ql9bML0GsEzr1c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.21.0/24 193.183.196.0/22 194.14.132.0/24 Signature Algorithm: sha256WithRSAEncryption a0:e5:a3:16:50:ae:aa:6a:92:51:9e:ea:f1:2b:38:00:44:7e: 1d:85:b9:99:ee:aa:92:1b:b5:88:d1:2f:88:5e:d7:42:a7:43: 85:f6:68:b0:4c:9d:59:9e:ae:ea:e4:ac:a5:42:06:e6:b0:62: e8:3c:22:16:95:5e:c5:1c:37:24:05:3c:77:5b:03:7c:b5:ff: c6:7c:bc:10:66:00:5f:4b:90:bf:be:ab:59:1c:f3:36:bd:dc: a3:86:d8:ba:37:c2:73:6c:af:52:29:45:6c:41:2d:dd:ac:79: 51:c8:d9:3b:e7:c5:21:f5:fe:d8:f7:82:5a:fa:09:64:e7:43: 23:ed:ec:1b:f4:73:1f:c3:06:75:92:de:53:9f:8b:81:a2:42: 85:85:a6:a6:e3:75:04:48:24:14:01:c5:b6:e8:f2:5e:9d:87: b7:82:f2:1d:d2:dc:21:55:3a:59:c7:a6:32:5d:f6:77:03:44: 85:0c:9b:09:aa:bb:c5:f3:1f:eb:f0:63:29:47:81:95:a8:17: 6d:76:fa:0d:63:6d:65:c2:1a:35:dd:fc:f5:ca:8e:c2:e9:41: 2d:b7:57:ba:f4:b3:01:f1:4a:dc:41:13:53:84:f0:4a:d8:98: 12:db:48:6b:78:92:65:19:4e:d2:c9:68:c9:c8:90:e8:ea:42: 8f:85:29:0f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NF3L+B4KxOjWmRAkH2ouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjIxMDE1NDc2MmU3ZTVlZDA5N2Q2Y2MyZjQxYWMxMzNhZjU3MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlldpbgNtsbo/r7SwlYS5zg3iJ4MJ N+nLz0fi3xdfgZmkahGxLKm5qPYcxw+fDswTAtDasYzCyoF/ZuKn2AGvqR3K9n7e s2cwxPpPeE5xjws0ZfnzI1JaXJdumOyUy5HeFmCHsvYnNWNCz1yOf8VHPOQGdZ20 gyARAWe1rDb1cvq0K4h8Ne1yCtDy96i6G6f7iBHXmaRv8flFy7R6AiVislRnYQ6p y3uHGetFqPI6xEvL75Sff/AekezFlW3iHyTOV0yqzdPAfMvbr/H0wosya30adl3S XkA/ApvNHRJFzBdz8JQXhgdh9t4iK0ieidKKWn+QSJxnp2b4ggdRWJTtHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJshAVR2Ln5e0JfWzC9BrBM69XNuMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvbXlFQlZIWXVmbDdRbDliTUwwR3NFenIxYzI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwEcVAwQC wbfEAwQAwg6EMA0GCSqGSIb3DQEBCwUAA4IBAQCg5aMWUK6qapJRnurxKzgARH4d hbmZ7qqSG7WI0S+IXtdCp0OF9miwTJ1Znq7q5KylQgbmsGLoPCIWlV7FHDckBTx3 WwN8tf/GfLwQZgBfS5C/vqtZHPM2vdyjhti6N8JzbK9SKUVsQS3drHlRyNk758Uh 9f7Y94Ja+glk50Mj7ewb9HMfwwZ1kt5Tn4uBokKFhaam43UESCQUAcW26PJenYe3 gvId0twhVTpZx6YyXfZ3A0SFDJsJqrvF8x/r8GMpR4GVqBdtdvoNY21lwho13fz1 yo7C6UEtt1e69LMB8UrcQRNThPBK2JgS20hreJJlGU7SyWjJyJDo6kKPhSkP -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:40 2026 by rpki-client