This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sHXH8Bu0toCukVnuVPvI22sDGiU.roa File: sHXH8Bu0toCukVnuVPvI22sDGiU.roa (raw, json) Hash identifier: RYVTQSZHceduJYAJN2J5DsafrCLgoAODmAlHT1FrGyA= Subject key identifier: B0:75:C7:F0:1B:B4:B6:80:AE:91:59:EE:54:FB:C8:DB:6B:03:1A:25 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78343E9125B8DD6685C1921ADC24603B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sHXH8Bu0toCukVnuVPvI22sDGiU.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2836 IP address blocks: 192.121.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3e:91:25:b8:dd:66:85:c1:92:1a:dc:24:60:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b075c7f01bb4b680ae9159ee54fbc8db6b031a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:73:71:20:77:61:a4:be:55:d1:52:9a:db: 7c:c9:44:99:4b:eb:3c:37:54:45:e6:db:f9:02:06: f2:01:09:52:27:66:31:78:f4:ea:bf:90:e8:d1:e7: ff:83:09:f1:31:66:93:ec:c0:95:ca:0f:1f:38:31: 26:8f:9d:c2:09:33:c1:08:b4:fe:ee:2d:e5:13:38: 86:50:59:18:87:be:1c:14:98:e5:fa:74:e8:e5:b6: ab:c0:f3:b5:c4:98:c9:2f:ac:fe:79:2e:90:7b:2a: 67:7c:01:27:e7:51:f8:a8:fe:9a:ff:cf:54:a2:ba: 43:68:e0:3e:94:02:55:3a:6a:99:82:b8:0d:d5:57: 0e:cc:58:7c:18:0b:52:14:da:2f:1d:22:6a:36:8a: a9:f8:8f:75:28:14:0d:76:a4:af:99:00:b5:32:7e: d3:04:f9:88:7b:ee:c1:47:07:86:ce:ef:e7:91:bf: 02:21:f8:f1:37:0f:df:2c:e7:8d:22:54:59:ff:7d: 30:ed:17:2c:7d:c2:82:4b:34:dc:a0:31:a8:fb:78: 85:74:8d:7c:68:a0:14:e9:ef:4e:10:59:57:6c:6f: 1d:9b:fe:45:23:7b:bb:f8:95:d3:1e:7c:7b:e3:98: 0a:7e:c5:19:ad:09:de:95:57:a3:e2:de:6f:32:69: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:75:C7:F0:1B:B4:B6:80:AE:91:59:EE:54:FB:C8:DB:6B:03:1A:25 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sHXH8Bu0toCukVnuVPvI22sDGiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.86.0/24 Signature Algorithm: sha256WithRSAEncryption 64:05:cf:5b:ae:9d:0f:52:fc:39:60:6e:fd:f4:7f:5c:ca:8f: bc:53:d6:ce:be:14:db:a2:5e:bb:32:2d:22:cb:82:6d:80:4d: c0:ca:7f:a1:7e:1a:d3:b8:49:9a:67:70:29:ad:40:20:38:41: 83:f2:2a:44:b4:a8:c9:dd:db:71:91:81:57:e6:15:7b:2f:35: e5:07:cd:01:4d:9f:41:e8:8e:c0:c8:2f:d9:cd:89:85:60:e5: 9a:84:5b:6a:a8:86:77:49:37:82:64:28:c2:6f:d1:da:94:3c: 1e:87:bf:96:de:80:78:2d:52:89:43:16:01:4d:9f:71:68:d9: b7:f3:41:9b:87:01:99:b0:89:f1:9c:3f:56:ac:39:34:84:5e: 13:a5:e7:29:c0:57:2f:23:f4:93:dd:8f:58:9c:b8:71:fe:e9: bf:1d:2e:d4:ca:31:d9:c0:14:9a:f9:ec:54:80:d8:c7:d3:0c: 80:3e:05:40:02:d9:5a:07:d4:c1:11:2d:30:ff:76:b5:bb:a5: 9c:eb:aa:ba:73:89:2a:32:ee:79:d7:98:7f:85:54:83:f2:21: 82:85:bf:50:96:8b:e7:f3:45:7e:4a:5e:2b:a3:cd:63:23:b0: 70:c5:06:b5:f0:57:5d:6a:09:dc:21:6f:23:7c:af:fd:12:5f: 52:f7:11:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ND6RJbjdZoXBkhrcJGA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDc1YzdmMDFiYjRiNjgwYWU5MTU5ZWU1NGZiYzhkYjZiMDMxYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdBzcSB3YaS+VdFSmtt8yUSZS+s8 N1RF5tv5AgbyAQlSJ2YxePTqv5Do0ef/gwnxMWaT7MCVyg8fODEmj53CCTPBCLT+ 7i3lEziGUFkYh74cFJjl+nTo5barwPO1xJjJL6z+eS6QeypnfAEn51H4qP6a/89U orpDaOA+lAJVOmqZgrgN1VcOzFh8GAtSFNovHSJqNoqp+I91KBQNdqSvmQC1Mn7T BPmIe+7BRweGzu/nkb8CIfjxNw/fLOeNIlRZ/30w7RcsfcKCSzTcoDGo+3iFdI18 aKAU6e9OEFlXbG8dm/5FI3u7+JXTHnx745gKfsUZrQnelVej4t5vMmnkMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLB1x/AbtLaArpFZ7lT7yNtrAxolMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvc0hYSDhCdTB0b0N1a1ZudVZQdkkyMnNER2lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHlWMA0G CSqGSIb3DQEBCwUAA4IBAQBkBc9brp0PUvw5YG799H9cyo+8U9bOvhTbol67Mi0i y4JtgE3Ayn+hfhrTuEmaZ3AprUAgOEGD8ipEtKjJ3dtxkYFX5hV7LzXlB80BTZ9B 6I7AyC/ZzYmFYOWahFtqqIZ3STeCZCjCb9HalDweh7+W3oB4LVKJQxYBTZ9xaNm3 80GbhwGZsInxnD9WrDk0hF4TpecpwFcvI/ST3Y9YnLhx/um/HS7UyjHZwBSa+exU gNjH0wyAPgVAAtlaB9TBES0w/3a1u6Wc66q6c4kqMu5515h/hVSD8iGChb9Qlovn 80V+Sl4ro81jI7BwxQa18FddagncIW8jfK/9El9S9xFH -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:58 2026 by rpki-client