This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qxPlO-wRERF9bN0AEeiOi9tHjNw.roa File: qxPlO-wRERF9bN0AEeiOi9tHjNw.roa (raw, json) Hash identifier: QrAOr8b0KedLROufhGHrO+79+fJNjUDyHD1ULIcPd/k= Subject key identifier: AB:13:E5:3B:EC:11:11:11:7D:6C:DD:00:11:E8:8E:8B:DB:47:8C:DC Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019BE01B19C38813FE36E0FF6B83C0361184 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qxPlO-wRERF9bN0AEeiOi9tHjNw.roa Signing time: Wed 21 Jan 2026 10:30:31 +0000 ROA not before: Wed 21 Jan 2026 10:30:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.68.123.0/24 maxlen: 24 194.68.128.0/24 maxlen: 24 194.68.130.0/23 maxlen: 23 194.68.133.0/24 maxlen: 24 194.68.135.0/24 maxlen: 24 194.132.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:1b:19:c3:88:13:fe:36:e0:ff:6b:83:c0:36:11:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 21 10:30:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab13e53bec1111117d6cdd0011e88e8bdb478cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:31:42:32:87:e0:19:5c:06:90:5f:15:9a: 67:69:74:f1:f4:3d:ff:c4:a9:36:db:e2:3f:64:32: 33:d6:3d:d1:41:d3:d1:a6:40:52:6c:7d:9e:20:6a: 00:43:9a:9e:77:92:3d:a6:47:ea:e2:84:15:97:ea: b3:33:b3:05:24:3e:69:83:58:4f:36:94:7a:43:38: 57:db:5a:18:5e:46:db:a2:6b:d9:a8:06:30:86:3d: b8:0f:5c:ee:86:7f:29:72:69:f1:83:f4:80:74:e8: e7:42:2d:24:24:06:4d:bd:6f:a9:9b:e5:cd:69:95: 50:12:b7:ce:6b:11:32:f7:be:0a:8b:b2:f6:77:d6: dd:99:0c:5c:eb:9a:d7:fc:33:02:99:7d:df:42:b2: 79:43:8b:7b:bc:ba:46:d9:b8:65:30:ce:26:e3:07: cc:ba:c3:8d:39:30:ef:38:14:be:06:34:46:ed:a2: 68:c6:b5:26:54:f1:e2:ba:16:72:05:6e:de:ef:c4: 77:02:4f:da:b8:5a:9a:48:69:9c:89:74:da:bd:07: 89:6d:6a:db:f4:36:91:93:19:0c:20:cf:c6:47:03: d5:c2:f1:69:40:58:12:1d:a9:bd:92:0d:4f:29:cb: 68:5b:31:7d:d6:2a:6a:22:5e:e9:ff:c9:49:9a:f7: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:13:E5:3B:EC:11:11:11:7D:6C:DD:00:11:E8:8E:8B:DB:47:8C:DC X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qxPlO-wRERF9bN0AEeiOi9tHjNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.68.123.0/24 194.68.128.0/24 194.68.130.0/23 194.68.133.0/24 194.68.135.0/24 194.132.59.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:5a:c7:66:5b:5c:a2:2e:6d:13:e6:cc:7e:d0:fc:a3:cd:01: cb:3a:9e:ea:a5:22:e8:16:ef:a9:da:7b:5f:d6:84:90:a3:14: 21:e4:02:dd:a1:46:1f:fe:d5:f0:c4:81:3b:7f:94:b3:0f:32: 0e:43:11:75:21:c4:19:9f:49:1c:5e:a2:a9:af:2a:fa:85:73: d2:83:e9:fd:bb:c3:a1:ac:90:d3:6a:fd:fd:d3:23:e1:f9:71: 4b:c7:d3:7a:0c:b4:f3:5f:7b:77:18:29:ae:78:73:e4:00:76: 81:ed:52:66:7c:2d:68:2b:58:4f:b3:c8:16:b0:ae:92:9f:1f: a5:e8:a0:6d:3d:95:81:99:53:06:bf:45:9b:79:ad:8e:63:33: 5c:77:89:f8:8e:7e:58:62:9c:79:58:ef:78:0b:aa:3e:cc:ef: 6e:fd:ef:9a:49:6b:9a:8c:4f:64:a1:d5:bc:d4:fb:29:e5:b1: d6:56:48:f4:b4:50:e9:24:26:a1:59:5a:d3:0f:8f:96:32:bc: e7:af:41:0c:fc:e6:6d:f8:14:1c:a8:ea:89:96:0a:a9:ff:5c: 52:ad:7d:7b:b2:b0:90:6e:96:61:48:c0:da:38:66:30:77:51: 73:d2:94:54:91:23:dc:6f:57:0d:78:33:64:2a:a6:bd:47:78: 53:66:96:c8 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZvgGxnDiBP+NuD/a4PANhGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTIxMTAzMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjEzZTUzYmVjMTExMTExN2Q2Y2RkMDAxMWU4OGU4YmRiNDc4Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu28xQjKH4BlcBpBfFZpnaXTx9D3/ xKk22+I/ZDIz1j3RQdPRpkBSbH2eIGoAQ5qed5I9pkfq4oQVl+qzM7MFJD5pg1hP NpR6QzhX21oYXkbbomvZqAYwhj24D1zuhn8pcmnxg/SAdOjnQi0kJAZNvW+pm+XN aZVQErfOaxEy974Ki7L2d9bdmQxc65rX/DMCmX3fQrJ5Q4t7vLpG2bhlMM4m4wfM usONOTDvOBS+BjRG7aJoxrUmVPHiuhZyBW7e78R3Ak/auFqaSGmciXTavQeJbWrb 9DaRkxkMIM/GRwPVwvFpQFgSHam9kg1PKctoWzF91ipqIl7p/8lJmvdd+QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKsT5TvsERERfWzdABHojovbR4zcMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvcXhQbE8td1JFUkY5Yk4wQUVlaU9pOXRIak53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwkR7AwQA wkSAAwQBwkSCAwQAwkSFAwQAwkSHAwQAwoQ7MA0GCSqGSIb3DQEBCwUAA4IBAQAv WsdmW1yiLm0T5sx+0PyjzQHLOp7qpSLoFu+p2ntf1oSQoxQh5ALdoUYf/tXwxIE7 f5SzDzIOQxF1IcQZn0kcXqKpryr6hXPSg+n9u8OhrJDTav390yPh+XFLx9N6DLTz X3t3GCmueHPkAHaB7VJmfC1oK1hPs8gWsK6Snx+l6KBtPZWBmVMGv0Wbea2OYzNc d4n4jn5YYpx5WO94C6o+zO9u/e+aSWuajE9kodW81Psp5bHWVkj0tFDpJCahWVrT D4+WMrznr0EM/OZt+BQcqOqJlgqp/1xSrX17srCQbpZhSMDaOGYwd1Fz0pRUkSPc b1cNeDNkKqa9R3hTZpbI -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:20 2026 by rpki-client