This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pBKkPTASbdBb5iXNbIMu5YcFsZg.roa File: pBKkPTASbdBb5iXNbIMu5YcFsZg.roa (raw, json) Hash identifier: WoXRMQv+B6irr2OE49VEAdd2gJsf5mdblPJOKY/h8j4= Subject key identifier: A4:12:A4:3D:30:12:6D:D0:5B:E6:25:CD:6C:83:2E:E5:87:05:B1:98 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348CF97C9CC6AF9524A538B0336F09 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pBKkPTASbdBb5iXNbIMu5YcFsZg.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208583 IP address blocks: 192.165.198.0/24 maxlen: 24 193.181.177.0/24 maxlen: 24 193.235.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8c:f9:7c:9c:c6:af:95:24:a5:38:b0:33:6f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a412a43d30126dd05be625cd6c832ee58705b198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:ae:f5:2f:9d:f7:e7:da:f9:a5:6a:c1:76: 90:24:ad:5e:4f:cb:fb:94:20:6b:f0:4a:f7:ca:43: da:33:fe:d1:e0:b3:b4:11:67:5f:30:32:7b:da:9f: 87:66:8d:8f:9e:38:eb:f7:d8:53:86:71:28:48:32: 04:ea:9b:fc:63:81:c9:98:4f:94:c4:bd:14:27:a6: 15:06:89:37:4a:44:0f:5a:a0:0e:94:f6:9e:40:5c: 4c:b3:47:9d:7d:f5:1e:37:2a:d3:23:0c:e7:4e:8d: 7e:10:dd:c9:67:16:79:b6:ff:82:2a:a0:60:a8:f5: 2f:d1:a6:e2:9e:9d:c3:7a:87:7a:a0:a0:7f:86:87: 36:9e:79:12:af:8d:82:55:50:40:15:25:7e:fc:41: 04:6d:00:9a:89:3b:08:51:b0:fa:75:0d:1a:20:9b: 37:95:66:f9:7a:39:63:0b:af:7b:25:e6:2d:d0:50: 61:a5:e7:08:aa:4e:40:ff:80:fb:84:01:d7:f8:4c: 6e:20:41:9b:31:dc:ee:3d:c5:9e:bf:f4:e1:b5:0c: a7:5d:f4:21:f9:75:85:66:99:17:0f:09:2a:a0:8a: b3:d4:e2:0b:b9:fc:42:86:ec:a3:5e:3d:be:b4:3c: 59:fd:e0:18:75:37:d6:31:83:0a:e7:97:25:df:b3: 07:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:12:A4:3D:30:12:6D:D0:5B:E6:25:CD:6C:83:2E:E5:87:05:B1:98 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pBKkPTASbdBb5iXNbIMu5YcFsZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.198.0/24 193.181.177.0/24 193.235.193.0/24 Signature Algorithm: sha256WithRSAEncryption 61:9c:8b:42:be:38:a6:9f:e4:55:b5:af:73:7a:1e:83:f3:7e: 0b:85:f9:51:e4:a2:8c:0f:e7:37:80:39:25:fb:48:45:ca:6b: bc:00:bb:a8:ec:af:4a:16:de:83:1a:31:16:40:a7:3a:37:62: 60:d7:00:fc:e3:a5:99:b4:24:0d:87:cc:ff:a2:12:0c:2a:93: dd:48:4f:a1:fd:be:4a:e4:ef:8e:da:5d:06:59:6c:16:f7:cb: 46:53:82:0a:c3:69:b6:4a:42:34:14:d5:bc:06:77:5a:54:bd: 7e:5e:c0:6e:c9:7f:42:43:b4:89:9d:84:aa:06:11:e3:58:c7: 24:53:3d:c4:fc:b3:47:fb:7a:84:95:96:1a:34:fc:36:22:23: e5:18:99:c6:9c:75:33:4e:9d:e1:ca:d3:1d:11:d8:c6:42:ab: 33:6c:9d:4b:4e:6a:d8:80:df:19:f3:37:5a:bd:bd:97:c8:0b: 91:4c:3a:86:67:60:9a:70:a3:90:ac:fd:10:cf:ce:c7:4e:27: f4:e5:67:4d:dd:22:ea:3f:72:18:a4:75:bd:ef:6f:81:59:63: 1a:f5:2a:b2:29:a7:5a:e7:88:bf:b5:51:1c:23:54:ae:07:2a: 15:86:64:a1:74:5c:ed:85:cf:57:64:f6:65:d7:dd:21:18:b2: f4:ca:60:7c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NIz5fJzGr5UkpTiwM28JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDEyYTQzZDMwMTI2ZGQwNWJlNjI1Y2Q2YzgzMmVlNTg3MDViMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhuu9S+d9+fa+aVqwXaQJK1eT8v7 lCBr8Er3ykPaM/7R4LO0EWdfMDJ72p+HZo2Pnjjr99hThnEoSDIE6pv8Y4HJmE+U xL0UJ6YVBok3SkQPWqAOlPaeQFxMs0edffUeNyrTIwznTo1+EN3JZxZ5tv+CKqBg qPUv0abinp3Deod6oKB/hoc2nnkSr42CVVBAFSV+/EEEbQCaiTsIUbD6dQ0aIJs3 lWb5ejljC697JeYt0FBhpecIqk5A/4D7hAHX+ExuIEGbMdzuPcWev/ThtQynXfQh +XWFZpkXDwkqoIqz1OILufxChuyjXj2+tDxZ/eAYdTfWMYMK55cl37MH2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKQSpD0wEm3QW+YlzWyDLuWHBbGYMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvcEJLa1BUQVNiZEJiNWlYTmJJTXU1WWNGc1pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwKXGAwQA wbWxAwQAwevBMA0GCSqGSIb3DQEBCwUAA4IBAQBhnItCvjimn+RVta9zeh6D834L hflR5KKMD+c3gDkl+0hFymu8ALuo7K9KFt6DGjEWQKc6N2Jg1wD846WZtCQNh8z/ ohIMKpPdSE+h/b5K5O+O2l0GWWwW98tGU4IKw2m2SkI0FNW8BndaVL1+XsBuyX9C Q7SJnYSqBhHjWMckUz3E/LNH+3qElZYaNPw2IiPlGJnGnHUzTp3hytMdEdjGQqsz bJ1LTmrYgN8Z8zdavb2XyAuRTDqGZ2CacKOQrP0Qz87HTif05WdN3SLqP3IYpHW9 72+BWWMa9SqyKada54i/tVEcI1SuByoVhmShdFzthc9XZPZl190hGLL0ymB8 -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:29 2026 by rpki-client