This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t-h5ibfdftxAu2eIF2-bLpHZD0M.roa File: t-h5ibfdftxAu2eIF2-bLpHZD0M.roa (raw, json) Hash identifier: YhBGvTlf9yawzCyyEC1IIWHR72vSwwOa7XqCxdlmfdg= Subject key identifier: B7:E8:79:89:B7:DD:7E:DC:40:BB:67:88:17:6F:9B:2E:91:D9:0F:43 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834784EFD6BD801042D6DFB66CB13A5 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t-h5ibfdftxAu2eIF2-bLpHZD0M.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199520 IP address blocks: 194.132.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:78:4e:fd:6b:d8:01:04:2d:6d:fb:66:cb:13:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7e87989b7dd7edc40bb6788176f9b2e91d90f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:1f:6e:71:5e:47:a9:53:8c:e6:ca:88:1f: 26:a4:bf:5e:26:83:61:fd:98:50:c1:6d:9c:dd:1a: 40:87:68:5c:d1:07:bb:96:bb:51:6b:d1:3c:43:0d: 20:82:84:db:2f:de:10:84:7a:47:d4:1a:e1:d4:da: 10:c7:f1:4b:0f:78:81:74:fb:d2:42:bc:34:a9:f4: b8:67:43:f2:06:a0:4b:86:d3:7c:ea:4d:46:3b:7b: 0d:d4:19:02:7c:be:4a:6c:8f:b0:a3:0a:98:e5:d5: 85:31:ef:20:aa:5a:78:1f:a5:89:b5:53:5c:6e:e8: 2b:da:09:51:74:21:aa:99:26:e8:63:39:a8:61:70: 33:3e:79:b3:08:34:88:be:78:95:ac:eb:09:11:1c: 5e:a6:f9:56:9b:7e:fc:90:0a:ee:5a:f4:89:ac:14: 77:61:c7:db:18:f2:6d:86:f8:3a:7d:ae:7b:96:13: 6d:1d:90:81:f7:b7:71:2e:e2:5e:9b:ab:b8:00:18: d1:1b:02:71:c7:5e:39:77:ac:10:08:57:7b:2d:4a: 3a:ee:8c:4d:26:2d:d2:f4:99:bf:8d:f3:6a:6a:95: ad:b5:da:53:36:fc:fb:0c:52:bb:51:ef:e2:a8:69: 01:cd:f1:88:59:58:20:21:e3:d8:f1:d3:e2:9d:ba: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:79:89:B7:DD:7E:DC:40:BB:67:88:17:6F:9B:2E:91:D9:0F:43 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t-h5ibfdftxAu2eIF2-bLpHZD0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.132.19.0/24 Signature Algorithm: sha256WithRSAEncryption 30:de:d7:90:44:b6:bd:3c:db:e9:7b:e1:9f:82:f3:36:86:9c: ec:dd:f5:2f:11:95:ad:b5:b2:ec:67:62:4f:e8:b3:9c:d2:67: c7:c0:cd:3b:08:da:dc:67:e4:9c:64:d5:97:5b:cf:23:17:86: 99:8d:a8:c1:ba:6b:04:05:71:bd:71:eb:a4:2c:c9:b7:96:bb: 0e:82:c8:90:6e:45:3e:6d:0f:2e:ff:af:86:db:43:6a:b2:58: 03:53:d9:8d:59:43:9f:c8:11:89:81:0d:5e:a3:71:54:ff:ad: 89:fc:80:da:75:78:e2:dd:66:6b:0b:2b:5a:b0:1c:a7:fa:3d: 92:d4:a3:8d:59:55:92:f1:8c:c3:af:e5:ac:a7:1f:55:45:86: 1e:a6:da:c7:f7:f0:33:eb:13:8f:3b:6e:cd:5e:b7:e5:47:b8: 36:77:dd:64:35:29:61:11:ca:7c:96:a5:b3:69:7c:94:03:42: 38:ff:89:43:90:7d:a5:87:85:d7:50:a3:fc:5b:3c:5b:79:ff: af:78:84:bc:5d:43:9a:b8:e7:ed:ca:2f:08:2e:33:f8:b7:65: b4:92:99:52:af:0b:fe:ef:52:04:e6:b3:d9:a7:af:c6:ca:46: d7:80:f6:53:ba:e3:a3:63:4b:a2:9c:a6:3a:50:d9:1a:ae:cb: c1:1d:66:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHhO/WvYAQQtbftmyxOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2U4Nzk4OWI3ZGQ3ZWRjNDBiYjY3ODgxNzZmOWIyZTkxZDkwZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD8fbnFeR6lTjObKiB8mpL9eJoNh /ZhQwW2c3RpAh2hc0Qe7lrtRa9E8Qw0ggoTbL94QhHpH1Brh1NoQx/FLD3iBdPvS Qrw0qfS4Z0PyBqBLhtN86k1GO3sN1BkCfL5KbI+wowqY5dWFMe8gqlp4H6WJtVNc bugr2glRdCGqmSboYzmoYXAzPnmzCDSIvniVrOsJERxepvlWm378kAruWvSJrBR3 YcfbGPJthvg6fa57lhNtHZCB97dxLuJem6u4ABjRGwJxx145d6wQCFd7LUo67oxN Ji3S9Jm/jfNqapWttdpTNvz7DFK7Ue/iqGkBzfGIWVggIePY8dPinbpgwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfoeYm33X7cQLtniBdvmy6R2Q9DMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvdC1oNWliZmRmdHhBdTJlSUYyLWJMcEhaRDBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoQTMA0G CSqGSIb3DQEBCwUAA4IBAQAw3teQRLa9PNvpe+GfgvM2hpzs3fUvEZWttbLsZ2JP 6LOc0mfHwM07CNrcZ+ScZNWXW88jF4aZjajBumsEBXG9ceukLMm3lrsOgsiQbkU+ bQ8u/6+G20NqslgDU9mNWUOfyBGJgQ1eo3FU/62J/IDadXji3WZrCytasByn+j2S 1KONWVWS8YzDr+Wspx9VRYYeptrH9/Az6xOPO27NXrflR7g2d91kNSlhEcp8lqWz aXyUA0I4/4lDkH2lh4XXUKP8Wzxbef+veIS8XUOauOftyi8ILjP4t2W0kplSrwv+ 71IE5rPZp6/GykbXgPZTuuOjY0uinKY6UNkarsvBHWb2 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:31 2026 by rpki-client