This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oO0Hjv-4e3NbUhT-59zDD8u6hoY.roa File: oO0Hjv-4e3NbUhT-59zDD8u6hoY.roa (raw, json) Hash identifier: U0tNODkb099SemCRhk3o8e5lHjMaLISfxhQXmxX9joM= Subject key identifier: A0:ED:07:8E:FF:B8:7B:73:5B:52:14:FE:E7:DC:C3:0F:CB:BA:86:86 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344D46F14C7E073C2B7F6F4937D851 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oO0Hjv-4e3NbUhT-59zDD8u6hoY.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25252 IP address blocks: 192.165.12.0/24 maxlen: 24 193.183.228.0/23 maxlen: 23 193.183.230.0/23 maxlen: 23 193.183.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4d:46:f1:4c:7e:07:3c:2b:7f:6f:49:37:d8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0ed078effb87b735b5214fee7dcc30fcbba8686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d1:9d:2b:32:ec:4f:8f:e8:09:77:37:38:e2: 8c:64:d8:f6:43:e5:df:ac:6c:97:61:53:ae:65:6f: 88:93:1c:c7:a3:78:94:f1:04:21:e7:98:00:d0:cc: e0:a1:7b:6e:40:c0:2a:bd:aa:ba:77:99:b3:04:aa: 36:9f:77:5c:7d:9d:b4:93:d7:96:3c:17:d0:01:83: 76:77:d4:4b:cc:46:72:23:e9:4f:2e:9a:3e:72:8a: 95:30:1c:e5:50:31:ae:c4:fb:74:b5:75:a1:2e:56: 36:e9:b8:f9:55:fa:c6:50:1d:a8:29:66:e1:2c:5d: 8d:8f:07:f3:cf:66:bd:bc:17:3f:5f:85:fa:03:4d: 51:bc:e1:ee:8c:57:cd:02:eb:fb:21:bc:8c:87:c1: 66:45:87:a3:34:0e:d5:3c:a5:47:ab:c6:63:fe:75: 26:68:58:ba:d8:97:66:95:1f:84:c8:43:76:27:aa: bf:2f:69:66:04:e6:bc:f6:3a:b4:38:1a:98:c2:87: a4:cf:4e:aa:43:ab:7b:ab:ca:9e:1d:f9:f5:f6:37: 1c:14:5d:dd:28:93:8c:ec:6c:9e:24:e3:aa:2c:ff: a3:5d:21:95:41:a7:33:4f:a0:c7:a6:47:b1:47:bb: 09:c0:25:09:de:fe:2f:36:d2:ee:40:9f:79:6b:2f: 13:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:07:8E:FF:B8:7B:73:5B:52:14:FE:E7:DC:C3:0F:CB:BA:86:86 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oO0Hjv-4e3NbUhT-59zDD8u6hoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.12.0/24 193.183.228.0/22 193.183.236.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:de:15:63:77:e9:8e:b1:da:04:e4:3e:ea:ce:70:ad:36:a6: 92:ef:33:2e:15:09:68:69:a9:dc:6f:00:5d:62:b2:52:d1:85: 95:df:9c:94:84:e2:d8:cb:dc:1a:98:66:a0:90:08:92:4a:cb: d6:01:fc:50:2b:4e:12:ec:04:f3:ba:a9:0b:dc:e9:46:b5:cf: 09:69:6c:ae:c0:26:bf:ba:60:39:9c:5b:7a:ed:32:f4:d5:81: cc:5e:10:85:b8:cc:a1:38:2c:a1:f7:55:e7:58:10:9d:7f:ed: fa:c3:f6:da:d6:8c:bf:a8:8b:49:0d:e8:39:38:2d:33:56:6c: 0c:71:7e:0e:3e:b2:93:44:27:4a:0c:b0:5b:65:04:c0:21:f2: dd:56:2b:fa:b1:6c:58:64:20:98:4d:5c:47:e1:23:d2:b6:6e: 27:68:73:25:d1:2b:81:4e:91:13:d4:2f:8e:ac:f3:ea:5f:e9: b9:32:86:ec:bd:1b:3f:7e:b6:ce:a9:5b:55:68:0d:a4:6b:88: d0:56:78:35:e0:25:ca:ae:2a:df:bc:82:33:34:c3:b6:8f:82: 9e:9c:f7:cf:b9:4b:ee:c0:f8:be:33:16:5d:6e:64:31:11:92: e9:11:2d:61:10:55:bc:91:7e:df:97:ea:99:15:2c:56:ed:b9: 40:22:f9:39 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NE1G8Ux+Bzwrf29JN9hRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGVkMDc4ZWZmYjg3YjczNWI1MjE0ZmVlN2RjYzMwZmNiYmE4Njg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tGdKzLsT4/oCXc3OOKMZNj2Q+Xf rGyXYVOuZW+IkxzHo3iU8QQh55gA0MzgoXtuQMAqvaq6d5mzBKo2n3dcfZ20k9eW PBfQAYN2d9RLzEZyI+lPLpo+coqVMBzlUDGuxPt0tXWhLlY26bj5VfrGUB2oKWbh LF2Njwfzz2a9vBc/X4X6A01RvOHujFfNAuv7IbyMh8FmRYejNA7VPKVHq8Zj/nUm aFi62JdmlR+EyEN2J6q/L2lmBOa89jq0OBqYwoekz06qQ6t7q8qeHfn19jccFF3d KJOM7GyeJOOqLP+jXSGVQaczT6DHpkexR7sJwCUJ3v4vNtLuQJ95ay8TgQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKDtB47/uHtzW1IU/ufcww/LuoaGMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvb08wSGp2LTRlM05iVWhULTU5ekREOHU2aG9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwKUMAwQC wbfkAwQBwbfsMA0GCSqGSIb3DQEBCwUAA4IBAQBP3hVjd+mOsdoE5D7qznCtNqaS 7zMuFQloaancbwBdYrJS0YWV35yUhOLYy9wamGagkAiSSsvWAfxQK04S7ATzuqkL 3OlGtc8JaWyuwCa/umA5nFt67TL01YHMXhCFuMyhOCyh91XnWBCdf+36w/ba1oy/ qItJDeg5OC0zVmwMcX4OPrKTRCdKDLBbZQTAIfLdViv6sWxYZCCYTVxH4SPStm4n aHMl0SuBTpET1C+OrPPqX+m5MobsvRs/frbOqVtVaA2ka4jQVng14CXKrirfvIIz NMO2j4KenPfPuUvuwPi+MxZdbmQxEZLpES1hEFW8kX7fl+qZFSxW7blAIvk5 -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:29 2026 by rpki-client