This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rNU30sQ1kjhFs9qtip4FzhllI6U.roa File: rNU30sQ1kjhFs9qtip4FzhllI6U.roa (raw, json) Hash identifier: 3stjosNy61GUwcSgGVqU1pVsI7Hjf+ObJHXFmhYz53w= Subject key identifier: AC:D5:37:D2:C4:35:92:38:45:B3:DA:AD:8A:9E:05:CE:19:65:23:A5 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834692F74E132001DEC23081B7B0EFD Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rNU30sQ1kjhFs9qtip4FzhllI6U.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50066 IP address blocks: 194.14.0.0/24 maxlen: 24 194.14.165.0/24 maxlen: 24 194.14.246.0/24 maxlen: 24 194.14.247.0/24 maxlen: 24 194.68.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:69:2f:74:e1:32:00:1d:ec:23:08:1b:7b:0e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acd537d2c435923845b3daad8a9e05ce196523a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:3b:4a:35:a0:ba:4f:19:6d:6d:4a:f0:15: 36:20:05:f0:6d:c9:f6:a7:a7:8d:fd:a1:1b:6b:24: 4e:8f:d5:39:64:41:bf:1e:44:c3:ac:9e:18:80:f0: f9:50:b1:77:c5:7c:13:f1:e2:8e:52:85:a2:c6:5d: c3:fb:4e:20:60:e0:aa:97:f0:58:3e:61:40:eb:1b: a5:fb:e9:10:c7:b2:66:dd:74:fa:48:c2:d5:50:7d: 86:02:da:8c:ad:a8:ce:70:a7:a0:af:6c:ee:72:b3: 10:75:f6:65:73:f5:ce:67:c0:0b:69:1b:ef:20:ca: e7:49:c8:b5:ab:1e:85:98:b0:e0:90:28:b7:06:79: a0:25:9d:df:17:51:13:e5:9e:72:45:1a:8c:51:1d: 64:f7:65:25:b5:d2:21:d2:4d:58:40:fc:f6:9a:27: e1:03:66:50:1e:88:a4:0a:56:73:8a:85:b2:ae:92: 65:c2:ea:fa:2d:eb:38:44:04:d0:93:0c:e7:58:8e: 49:c4:45:b3:d8:2e:53:37:62:27:60:ce:d7:78:dd: 03:c2:f8:4c:d0:b6:38:ed:ec:5b:96:e8:0b:db:51: 3a:25:39:67:cc:b9:2d:29:48:f0:5b:a1:92:dc:ec: fd:fb:18:71:a5:4a:d7:a1:b5:36:6a:c2:7c:bf:f4: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D5:37:D2:C4:35:92:38:45:B3:DA:AD:8A:9E:05:CE:19:65:23:A5 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rNU30sQ1kjhFs9qtip4FzhllI6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.0.0/24 194.14.165.0/24 194.14.246.0/23 194.68.0.0/24 Signature Algorithm: sha256WithRSAEncryption 05:db:a3:50:7d:ca:e4:13:c2:c2:b2:48:38:2d:0d:b2:58:89: ca:c7:6b:85:da:ac:38:82:12:40:18:bb:a9:c4:78:a5:68:08: 79:5f:36:e5:ad:04:99:47:aa:b5:44:b9:68:02:4d:ab:ff:8f: 82:65:a6:5c:15:a1:f9:f9:96:9d:3e:a5:58:6b:5e:7b:47:96: 8b:03:9c:9a:b1:91:2e:56:b6:aa:99:c4:6c:38:11:36:3d:35: cb:cb:a8:1c:26:4a:bd:5a:cb:b5:1e:12:02:aa:24:f7:77:28: bb:e7:0b:ec:71:02:b7:f7:5e:1e:fe:ec:14:26:e1:0d:7a:0d: f5:73:55:ca:0a:bd:7e:98:18:a0:13:0c:96:4d:48:ac:88:b8: 77:62:2f:ca:ad:bb:af:ed:49:71:9e:f6:27:cf:13:7d:e7:ec: 73:93:29:39:56:9a:6c:7d:b1:fb:23:71:6e:6d:29:6a:26:9e: 59:2f:99:38:a4:12:73:c8:1a:76:54:72:eb:4f:72:e6:d4:15: e0:8b:ef:a6:13:1d:f6:52:17:dc:8c:a7:a9:1e:68:c9:b0:a3: 38:4b:97:77:d6:58:3d:a5:4a:ba:c6:d7:7c:8f:58:ab:ef:b0: c4:ed:5d:8d:d7:85:d4:78:5d:e0:45:ea:e9:c6:e3:52:5f:54: cc:7e:dd:43 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NGkvdOEyAB3sIwgbew79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2Q1MzdkMmM0MzU5MjM4NDViM2RhYWQ4YTllMDVjZTE5NjUyM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG07SjWguk8ZbW1K8BU2IAXwbcn2 p6eN/aEbayROj9U5ZEG/HkTDrJ4YgPD5ULF3xXwT8eKOUoWixl3D+04gYOCql/BY PmFA6xul++kQx7Jm3XT6SMLVUH2GAtqMrajOcKegr2zucrMQdfZlc/XOZ8ALaRvv IMrnSci1qx6FmLDgkCi3BnmgJZ3fF1ET5Z5yRRqMUR1k92UltdIh0k1YQPz2mifh A2ZQHoikClZzioWyrpJlwur6Les4RATQkwznWI5JxEWz2C5TN2InYM7XeN0DwvhM 0LY47exblugL21E6JTlnzLktKUjwW6GS3Oz9+xhxpUrXobU2asJ8v/T8bQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKzVN9LENZI4RbParYqeBc4ZZSOlMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvck5VMzBzUTFramhGczlxdGlwNEZ6aGxsSTZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwg4AAwQA wg6lAwQBwg72AwQAwkQAMA0GCSqGSIb3DQEBCwUAA4IBAQAF26NQfcrkE8LCskg4 LQ2yWInKx2uF2qw4ghJAGLupxHilaAh5XzblrQSZR6q1RLloAk2r/4+CZaZcFaH5 +ZadPqVYa157R5aLA5yasZEuVraqmcRsOBE2PTXLy6gcJkq9Wsu1HhICqiT3dyi7 5wvscQK3914e/uwUJuENeg31c1XKCr1+mBigEwyWTUisiLh3Yi/Krbuv7UlxnvYn zxN95+xzkyk5VppsfbH7I3FubSlqJp5ZL5k4pBJzyBp2VHLrT3Lm1BXgi++mEx32 UhfcjKepHmjJsKM4S5d31lg9pUq6xtd8j1ir77DE7V2N14XUeF3gRerpxuNSX1TM ft1D -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:42 2026 by rpki-client