This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/niJORlIkGfr-V4xU3IBMvMpccWY.roa File: niJORlIkGfr-V4xU3IBMvMpccWY.roa (raw, json) Hash identifier: zgYiW5vs/a2NYJ08QxsoRG7GlN4a5oNt3BRfl7nceIU= Subject key identifier: 9E:22:4E:46:52:24:19:FA:FE:57:8C:54:DC:80:4C:BC:CA:5C:71:66 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349723F4DADC7E437F9DF435BFAFA5 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/niJORlIkGfr-V4xU3IBMvMpccWY.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212725 IP address blocks: 193.181.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:97:23:f4:da:dc:7e:43:7f:9d:f4:35:bf:af:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e224e46522419fafe578c54dc804cbcca5c7166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:5d:10:6b:e7:7f:5c:87:43:26:8c:2f:f6: 47:40:88:74:c5:3f:75:6c:3a:5f:b0:03:e5:d9:8d: ef:28:26:cf:59:ba:a4:68:66:a4:43:e6:d6:dc:7e: 29:77:f3:95:b6:9c:d2:87:06:c2:b8:f8:e9:20:1e: ce:02:33:6c:d2:f9:01:ef:46:fa:64:52:19:94:c4: 7d:60:00:1e:7d:56:45:c5:7a:0d:06:f1:82:97:35: a6:c9:76:2f:60:62:18:1f:ab:41:3a:43:f6:f2:0d: 28:db:97:f2:f2:fb:31:8a:6a:3e:d0:1a:1a:de:6d: 20:0d:53:d2:48:05:7f:50:8a:09:78:c0:6a:16:3b: d4:8a:1b:70:74:b2:62:ee:e3:aa:60:51:f7:41:1a: 42:c2:4c:4d:8a:ae:ca:5d:0f:f6:6f:42:05:13:88: af:9d:d8:c6:79:18:3e:a8:c7:bb:08:c6:57:b6:f0: 71:e7:25:c5:a2:48:6e:fa:9b:7f:5c:92:00:f3:70: 2d:41:f5:89:35:08:af:62:71:bd:08:2d:7c:45:51: b2:cf:cb:55:75:51:06:46:e3:6e:29:6e:65:8a:9b: 41:87:0d:e2:0c:87:b8:20:c3:70:0a:cc:dc:f1:2c: 43:5e:da:e8:18:27:99:0d:5f:37:65:be:18:fc:ec: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:4E:46:52:24:19:FA:FE:57:8C:54:DC:80:4C:BC:CA:5C:71:66 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/niJORlIkGfr-V4xU3IBMvMpccWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.181.160.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:9b:33:f8:0f:d2:c6:ff:77:f0:d5:52:12:ba:e8:80:70:90: d3:3e:c9:d0:25:ee:7e:10:55:06:16:84:86:dd:6c:70:50:6b: a9:4d:1d:b6:af:8f:95:2a:10:c9:f4:2c:ae:47:5b:44:26:e0: 28:49:47:ad:d4:57:63:32:7c:c5:8a:37:16:da:90:61:8e:2a: 07:f1:95:61:65:13:0d:71:b6:24:4a:35:49:d0:cb:73:99:78: 7c:a5:75:29:cd:6d:08:c8:39:99:d3:e3:0f:f2:57:d3:87:6f: c7:f9:66:f2:05:d5:87:c4:7e:18:ec:af:bf:a1:b1:48:9c:55: af:34:54:e6:66:c7:b2:33:08:91:a8:9e:63:32:c8:8a:78:5c: 66:87:e5:ee:af:f3:60:e5:38:a4:86:55:39:f6:a3:1a:fc:80: 05:27:5a:3a:b0:9e:07:de:2b:67:bd:d2:37:88:99:b7:5a:fb: 8b:35:67:66:73:07:35:11:7c:aa:a2:f5:18:33:b1:80:bf:65: 5e:e0:26:b8:e9:51:88:33:f5:5b:ca:70:fa:93:ea:1b:b3:b2: 6d:7e:49:a5:a9:0e:c0:ea:31:d9:46:2b:a8:29:b4:a1:1b:ba: ea:37:c1:73:ec:4b:8a:9b:b0:16:5c:29:f5:57:f0:22:a8:6b: 76:2b:54:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJcj9NrcfkN/nfQ1v6+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTIyNGU0NjUyMjQxOWZhZmU1NzhjNTRkYzgwNGNiY2NhNWM3MTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGpdEGvnf1yHQyaML/ZHQIh0xT91 bDpfsAPl2Y3vKCbPWbqkaGakQ+bW3H4pd/OVtpzShwbCuPjpIB7OAjNs0vkB70b6 ZFIZlMR9YAAefVZFxXoNBvGClzWmyXYvYGIYH6tBOkP28g0o25fy8vsximo+0Boa 3m0gDVPSSAV/UIoJeMBqFjvUihtwdLJi7uOqYFH3QRpCwkxNiq7KXQ/2b0IFE4iv ndjGeRg+qMe7CMZXtvBx5yXFokhu+pt/XJIA83AtQfWJNQivYnG9CC18RVGyz8tV dVEGRuNuKW5liptBhw3iDIe4IMNwCszc8SxDXtroGCeZDV83Zb4Y/OytLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4iTkZSJBn6/leMVNyATLzKXHFmMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvbmlKT1JsSWtHZnItVjR4VTNJQk12TXBjY1dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbWgMA0G CSqGSIb3DQEBCwUAA4IBAQA6mzP4D9LG/3fw1VISuuiAcJDTPsnQJe5+EFUGFoSG 3WxwUGupTR22r4+VKhDJ9CyuR1tEJuAoSUet1FdjMnzFijcW2pBhjioH8ZVhZRMN cbYkSjVJ0MtzmXh8pXUpzW0IyDmZ0+MP8lfTh2/H+WbyBdWHxH4Y7K+/obFInFWv NFTmZseyMwiRqJ5jMsiKeFxmh+Xur/Ng5TikhlU59qMa/IAFJ1o6sJ4H3itnvdI3 iJm3WvuLNWdmcwc1EXyqovUYM7GAv2Ve4Ca46VGIM/VbynD6k+obs7JtfkmlqQ7A 6jHZRiuoKbShG7rqN8Fz7EuKm7AWXCn1V/AiqGt2K1R3 -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:13 2026 by rpki-client