This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rctBVzHpmWoGQn6Ms-HePsBQTBY.roa File: rctBVzHpmWoGQn6Ms-HePsBQTBY.roa (raw, json) Hash identifier: vo/BoCd3gcGPDWoWmkXKbhVozWLnwoOpXUHs181Hzow= Subject key identifier: AD:CB:41:57:31:E9:99:6A:06:42:7E:8C:B3:E1:DE:3E:C0:50:4C:16 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349B6F38F2D523F5D4446A93C09E19 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rctBVzHpmWoGQn6Ms-HePsBQTBY.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214686 IP address blocks: 193.181.64.0/24 maxlen: 24 193.181.126.0/24 maxlen: 24 193.181.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9b:6f:38:f2:d5:23:f5:d4:44:6a:93:c0:9e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adcb415731e9996a06427e8cb3e1de3ec0504c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:49:0d:a0:5e:3f:ef:89:1e:08:36:d4:c3:8a: d5:45:14:41:1a:37:5d:77:ad:97:1e:de:37:4a:41: 79:86:45:c7:44:68:5e:52:13:79:07:3c:bb:d9:cf: 52:bc:55:65:e7:65:1a:ad:27:d2:e3:2c:a4:53:b5: f9:e2:2a:19:d3:0b:f4:77:6f:96:21:8e:d0:c1:6b: 73:e0:01:6f:a1:21:0a:88:5e:3d:0f:51:6e:60:e3: 2b:6e:5c:8d:2a:eb:82:38:44:e8:06:70:96:c3:9e: 71:03:dd:42:9f:07:a9:d6:1c:54:63:56:74:1b:a9: 0a:59:25:18:71:51:4a:e0:89:01:9a:ae:87:c4:bd: f9:2f:ab:c2:68:19:f2:1d:3d:ae:e9:ef:28:58:b2: 5b:69:2b:3b:aa:0e:91:f1:67:ab:f4:66:9a:4d:ae: 90:e9:e1:32:7b:84:42:2f:92:39:63:ad:5b:e0:10: 53:68:c1:36:81:c7:65:1d:34:39:d6:ea:e2:d5:7b: 58:82:9f:7d:18:fa:e2:9d:db:8e:dc:ca:1a:cf:2b: 17:2e:b5:01:c3:61:92:ab:69:d6:4d:73:eb:e5:93: 79:82:69:5f:19:cf:91:20:5e:cf:d1:ee:4b:81:5a: e8:5f:53:9a:9d:59:a8:cd:b0:23:71:b6:13:ef:ee: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CB:41:57:31:E9:99:6A:06:42:7E:8C:B3:E1:DE:3E:C0:50:4C:16 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rctBVzHpmWoGQn6Ms-HePsBQTBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.181.64.0/24 193.181.126.0/23 Signature Algorithm: sha256WithRSAEncryption 15:ec:6b:f9:f2:cf:19:33:e2:62:34:ca:91:e9:3a:4e:fe:0a: 94:20:a1:5c:cc:78:07:e9:57:9d:6b:ce:e4:0a:42:a0:22:a6: 03:e9:3b:c4:ba:93:a9:62:24:0e:56:50:45:b7:9e:1f:9e:bf: bb:c8:3c:72:a8:67:e9:d0:3f:b8:46:8f:fe:a7:f5:9c:8d:97: 37:ea:cb:f6:2e:5c:29:51:4e:85:a1:18:75:c2:a9:4f:63:a3: 91:d0:96:8f:7f:13:20:ee:83:66:80:75:2a:35:df:90:0a:f9: c7:0a:92:a7:92:0c:29:ca:1d:82:84:70:04:99:b1:1f:b2:1c: 2d:d2:43:03:75:91:2e:7e:dc:86:0f:69:20:79:3b:ca:6d:af: 5c:1e:3e:fe:79:2b:09:36:19:aa:d9:f0:72:62:c4:03:dd:32: ee:51:91:2e:17:e4:fc:23:f1:ab:5b:2d:c2:46:a6:9a:73:0a: 5c:32:46:82:9e:87:03:4d:70:16:46:1f:5e:23:81:e4:4d:cc: 28:cd:65:80:e4:cf:bf:88:f0:da:7b:29:3e:e4:a7:aa:03:9f: 3e:5f:8f:20:87:33:16:35:4c:71:ab:75:5a:26:3a:cf:ce:d5: 92:fc:cc:73:83:5d:3d:73:55:41:a4:02:71:33:4a:e2:1c:d4: 4a:a3:cb:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NJtvOPLVI/XURGqTwJ4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGNiNDE1NzMxZTk5OTZhMDY0MjdlOGNiM2UxZGUzZWMwNTA0YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kkNoF4/74keCDbUw4rVRRRBGjdd d62XHt43SkF5hkXHRGheUhN5Bzy72c9SvFVl52UarSfS4yykU7X54ioZ0wv0d2+W IY7QwWtz4AFvoSEKiF49D1FuYOMrblyNKuuCOEToBnCWw55xA91Cnwep1hxUY1Z0 G6kKWSUYcVFK4IkBmq6HxL35L6vCaBnyHT2u6e8oWLJbaSs7qg6R8Wer9GaaTa6Q 6eEye4RCL5I5Y61b4BBTaME2gcdlHTQ51uri1XtYgp99GPrinduO3MoazysXLrUB w2GSq2nWTXPr5ZN5gmlfGc+RIF7P0e5LgVroX1OanVmozbAjcbYT7+4qiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK3LQVcx6ZlqBkJ+jLPh3j7AUEwWMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvcmN0QlZ6SHBtV29HUW42TXMtSGVQc0JRVEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbVAAwQB wbV+MA0GCSqGSIb3DQEBCwUAA4IBAQAV7Gv58s8ZM+JiNMqR6TpO/gqUIKFczHgH 6Veda87kCkKgIqYD6TvEupOpYiQOVlBFt54fnr+7yDxyqGfp0D+4Ro/+p/WcjZc3 6sv2LlwpUU6FoRh1wqlPY6OR0JaPfxMg7oNmgHUqNd+QCvnHCpKnkgwpyh2ChHAE mbEfshwt0kMDdZEuftyGD2kgeTvKba9cHj7+eSsJNhmq2fByYsQD3TLuUZEuF+T8 I/GrWy3CRqaacwpcMkaCnocDTXAWRh9eI4HkTcwozWWA5M+/iPDaeyk+5KeqA58+ X48ghzMWNUxxq3VaJjrPztWS/Mxzg109c1VBpAJxM0riHNRKo8uX -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:35 2026 by rpki-client