This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pUJp5uv4v7Qmx3Bk_J_DyS1m_yQ.roa File: pUJp5uv4v7Qmx3Bk_J_DyS1m_yQ.roa (raw, json) Hash identifier: 7CCiL22GflWb4HxN/1t0vf13CdXYHjAhgWWsHoKVGBA= Subject key identifier: A5:42:69:E6:EB:F8:BF:B4:26:C7:70:64:FC:9F:C3:C9:2D:66:FF:24 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834463D05401A7D08A9DE40AD9C5B09 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pUJp5uv4v7Qmx3Bk_J_DyS1m_yQ.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8642 IP address blocks: 192.165.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:3d:05:40:1a:7d:08:a9:de:40:ad:9c:5b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a54269e6ebf8bfb426c77064fc9fc3c92d66ff24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8d:7a:22:a3:74:11:aa:cd:26:86:09:1a:38: cb:51:38:04:cd:21:80:49:c7:b5:19:80:7b:7c:24: fd:08:d9:31:d3:76:e8:eb:78:6e:16:d6:3d:1a:df: 3f:94:6c:3c:d0:7b:0f:18:11:bd:cc:05:28:e8:11: 63:da:97:84:9a:8e:73:2b:24:3f:2a:44:f4:15:d4: 36:b3:bb:db:f2:56:2c:6c:01:0e:cf:37:d1:6a:ad: 30:82:89:69:1a:31:21:c9:0f:ad:ee:dd:e6:e9:df: 70:1b:de:44:72:3a:45:ee:f1:cb:d6:83:3d:49:a0: 5e:b8:19:34:41:ec:16:55:97:a9:c2:8b:f5:cb:16: 53:6b:a3:c4:78:05:e0:2a:e0:ea:d0:d0:11:53:0e: 13:23:01:ee:cc:fd:fa:a7:c2:d6:8d:88:5c:f6:ad: ac:6a:9a:e1:71:2f:e5:0d:7f:94:97:4b:be:92:44: d3:96:b8:91:59:ce:29:f6:f6:b0:c0:e1:98:5b:74: 3c:99:8c:3c:af:20:23:da:d5:04:99:5e:e8:9f:ca: 6f:5d:ae:56:b8:c0:ba:6f:f7:24:cb:96:f8:2c:80: 62:95:03:56:90:55:bd:94:f2:04:25:80:a5:84:ee: e8:36:ea:a6:7a:75:df:01:2f:46:cd:38:1f:41:5d: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:69:E6:EB:F8:BF:B4:26:C7:70:64:FC:9F:C3:C9:2D:66:FF:24 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pUJp5uv4v7Qmx3Bk_J_DyS1m_yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.86.0/24 Signature Algorithm: sha256WithRSAEncryption 30:48:65:34:a6:c9:32:56:ec:f4:a0:d4:bd:d2:9d:d8:64:fb: a8:ac:e3:a1:e6:32:d8:12:eb:f7:75:f3:13:c0:04:76:88:2a: 3c:63:88:e4:d3:df:64:fd:e2:0e:10:64:a0:eb:71:1e:68:da: c7:8d:a2:47:4f:75:a1:c3:10:7d:6c:68:9c:23:b9:a7:34:50: 7b:14:d5:0b:64:2f:44:7e:ac:d1:db:12:e9:a7:d3:b5:a5:90: 0a:cc:e3:6d:1c:4b:70:25:bf:b4:34:b2:31:5d:13:65:8d:b2: a1:7e:12:c6:26:61:d3:38:63:67:9e:46:d9:ae:c6:12:ca:b2: 8f:b3:c9:b8:52:27:10:b6:10:01:80:aa:c3:97:0e:c4:ec:7d: d6:06:98:e3:bd:69:dc:72:3e:02:f0:fc:ce:17:9a:6d:19:73: 86:32:6e:7a:58:b6:50:82:c1:2d:f6:33:6e:25:88:ed:e8:87: 51:e5:3c:d8:ea:e8:28:18:50:38:7e:72:4a:7e:64:55:2a:8b: 0b:3b:4e:ec:e6:79:b6:a0:e4:de:4f:14:4f:8b:f8:59:2c:ee: 7c:3e:39:55:80:3e:a1:93:14:8b:d8:34:af:1e:3b:c8:07:b2: 04:e8:0e:25:b6:7f:0e:68:e7:b6:c6:a1:97:e0:3c:14:85:b7: 72:5a:f6:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEY9BUAafQip3kCtnFsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQyNjllNmViZjhiZmI0MjZjNzcwNjRmYzlmYzNjOTJkNjZmZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o16IqN0EarNJoYJGjjLUTgEzSGA Sce1GYB7fCT9CNkx03bo63huFtY9Gt8/lGw80HsPGBG9zAUo6BFj2peEmo5zKyQ/ KkT0FdQ2s7vb8lYsbAEOzzfRaq0wgolpGjEhyQ+t7t3m6d9wG95EcjpF7vHL1oM9 SaBeuBk0QewWVZepwov1yxZTa6PEeAXgKuDq0NARUw4TIwHuzP36p8LWjYhc9q2s aprhcS/lDX+Ul0u+kkTTlriRWc4p9vawwOGYW3Q8mYw8ryAj2tUEmV7on8pvXa5W uMC6b/cky5b4LIBilQNWkFW9lPIEJYClhO7oNuqmenXfAS9GzTgfQV1LbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVCaebr+L+0JsdwZPyfw8ktZv8kMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvcFVKcDV1djR2N1FteDNCa19KX0R5UzFtX3lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKVWMA0G CSqGSIb3DQEBCwUAA4IBAQAwSGU0pskyVuz0oNS90p3YZPuorOOh5jLYEuv3dfMT wAR2iCo8Y4jk099k/eIOEGSg63EeaNrHjaJHT3WhwxB9bGicI7mnNFB7FNULZC9E fqzR2xLpp9O1pZAKzONtHEtwJb+0NLIxXRNljbKhfhLGJmHTOGNnnkbZrsYSyrKP s8m4UicQthABgKrDlw7E7H3WBpjjvWnccj4C8PzOF5ptGXOGMm56WLZQgsEt9jNu JYjt6IdR5TzY6ugoGFA4fnJKfmRVKosLO07s5nm2oOTeTxRPi/hZLO58PjlVgD6h kxSL2DSvHjvIB7IE6A4ltn8OaOe2xqGX4DwUhbdyWvb5 -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:46 2026 by rpki-client