This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pTu67B7XRpoLFez0foC3xsTsiQ8.roa File: pTu67B7XRpoLFez0foC3xsTsiQ8.roa (raw, json) Hash identifier: W/EoFTQn+xvFhqu7LMBtpxaWZmvNHvdetNGscBw1VrY= Subject key identifier: A5:3B:BA:EC:1E:D7:46:9A:0B:15:EC:F4:7E:80:B7:C6:C4:EC:89:0F Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344C15067C3F38FCCA8F164ECD79F2 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pTu67B7XRpoLFez0foC3xsTsiQ8.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20625 IP address blocks: 194.14.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4c:15:06:7c:3f:38:fc:ca:8f:16:4e:cd:79:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53bbaec1ed7469a0b15ecf47e80b7c6c4ec890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:de:e1:b1:7a:36:68:09:77:18:8b:53:a4: 5c:86:9b:a5:45:38:7f:78:ed:0c:6a:9f:c4:0a:4b: 7d:c7:cf:6d:73:7e:05:37:68:c4:13:38:e9:a7:0d: 75:b0:ce:b0:c9:cf:f6:ca:a8:d4:81:7a:27:1b:b3: f6:be:49:fc:5a:50:e2:4a:3f:2a:85:3f:51:b0:2c: 43:95:52:5a:fb:71:62:e2:30:db:02:5f:bb:00:7d: ac:38:f3:e4:ff:ac:42:82:0e:e5:2a:c3:ba:f8:c0: 8e:d9:9a:2f:3b:51:ce:23:8e:63:26:5d:fa:63:35: ed:6b:87:18:4b:5b:88:6f:31:ed:2f:36:84:ff:01: 80:75:a5:99:eb:ef:71:54:36:10:bf:bc:fa:99:70: 6f:44:28:fb:1c:de:8b:c6:91:70:00:a1:69:56:5d: eb:5b:02:e4:5e:3f:c6:a1:7b:14:53:84:48:e7:93: 0d:cd:4c:ed:a2:73:bb:f3:b3:c2:41:41:96:2c:30: 69:55:93:a8:52:4f:ec:6f:2d:a2:fc:05:f1:0c:24: bf:e3:13:ad:b1:3b:06:7c:0c:0f:14:cf:ac:ee:cc: b4:8f:a0:5e:86:d0:ac:24:28:62:c5:d4:b8:82:a1: 57:d3:fb:53:88:ab:e1:26:6a:ef:5a:a9:42:24:c6: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:BA:EC:1E:D7:46:9A:0B:15:EC:F4:7E:80:B7:C6:C4:EC:89:0F X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pTu67B7XRpoLFez0foC3xsTsiQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.103.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:36:22:4d:b0:8c:68:7e:47:b0:a4:df:fd:27:34:f8:42:1c: 14:7f:e0:6b:14:bc:64:0d:9f:bc:81:ba:9a:07:24:6f:3f:af: c1:8d:b7:ca:2e:cd:8c:34:21:23:0d:d0:d6:69:e2:7c:42:8f: 8b:aa:43:f0:dc:b2:69:20:bd:8b:74:3e:48:d1:b1:53:2b:5f: 05:c5:a7:b9:bd:fd:eb:2c:4d:7b:7e:7b:c8:4e:b4:a4:f6:58: ea:17:93:80:5f:54:5f:51:ac:5d:46:c0:f7:32:9e:61:b6:a6: 83:ce:e4:b8:27:b9:0b:4a:c4:86:70:64:d9:f0:d8:81:4e:de: 69:20:5f:98:f0:46:f1:7f:bd:2b:17:a9:c1:fb:6e:64:dd:2c: d6:45:09:4b:bb:76:d2:7b:f3:a9:7e:63:41:64:75:48:5e:2f: b2:f9:18:d2:14:2b:ea:6f:43:8e:a6:65:d3:39:24:e4:92:fb: c2:72:f6:bb:61:79:c9:1e:37:f3:e7:93:20:ce:ac:28:33:08: 94:37:fe:74:c6:83:1f:3b:ff:34:2d:e9:4b:42:8e:cd:57:5f: cf:aa:0f:94:2b:e8:21:29:35:8d:18:0e:e0:2c:86:43:41:30: 5c:f8:e0:8c:24:66:03:66:09:29:26:4e:5e:b1:c7:8b:eb:23: 59:ec:a1:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEwVBnw/OPzKjxZOzXnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTNiYmFlYzFlZDc0NjlhMGIxNWVjZjQ3ZTgwYjdjNmM0ZWM4OTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHPe4bF6NmgJdxiLU6RchpulRTh/ eO0Map/ECkt9x89tc34FN2jEEzjppw11sM6wyc/2yqjUgXonG7P2vkn8WlDiSj8q hT9RsCxDlVJa+3Fi4jDbAl+7AH2sOPPk/6xCgg7lKsO6+MCO2ZovO1HOI45jJl36 YzXta4cYS1uIbzHtLzaE/wGAdaWZ6+9xVDYQv7z6mXBvRCj7HN6LxpFwAKFpVl3r WwLkXj/GoXsUU4RI55MNzUztonO787PCQUGWLDBpVZOoUk/sby2i/AXxDCS/4xOt sTsGfAwPFM+s7sy0j6BehtCsJChixdS4gqFX0/tTiKvhJmrvWqlCJMahDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKU7uuwe10aaCxXs9H6At8bE7IkPMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvcFR1NjdCN1hScG9MRmV6MGZvQzN4c1RzaVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg5nMA0G CSqGSIb3DQEBCwUAA4IBAQBKNiJNsIxofkewpN/9JzT4QhwUf+BrFLxkDZ+8gbqa ByRvP6/BjbfKLs2MNCEjDdDWaeJ8Qo+LqkPw3LJpIL2LdD5I0bFTK18Fxae5vf3r LE17fnvITrSk9ljqF5OAX1RfUaxdRsD3Mp5htqaDzuS4J7kLSsSGcGTZ8NiBTt5p IF+Y8Ebxf70rF6nB+25k3SzWRQlLu3bSe/OpfmNBZHVIXi+y+RjSFCvqb0OOpmXT OSTkkvvCcva7YXnJHjfz55MgzqwoMwiUN/50xoMfO/80LelLQo7NV1/Pqg+UK+gh KTWNGA7gLIZDQTBc+OCMJGYDZgkpJk5esceL6yNZ7KGn -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:47 2026 by rpki-client