This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tMLFXk5_CDMV9Cz5oMvBbvEHYoE.roa File: tMLFXk5_CDMV9Cz5oMvBbvEHYoE.roa (raw, json) Hash identifier: NL4kMefwjMVFk24gi2N2Ic8mf4+kV6Jw5F5h6GeAVk4= Subject key identifier: B4:C2:C5:5E:4E:7F:08:33:15:F4:2C:F9:A0:CB:C1:6E:F1:07:62:81 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783499C76197DE75453435786889AE9B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tMLFXk5_CDMV9Cz5oMvBbvEHYoE.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213701 IP address blocks: 192.121.255.0/24 maxlen: 24 193.234.16.0/24 maxlen: 24 194.14.6.0/24 maxlen: 24 194.14.7.0/24 maxlen: 24 194.68.238.0/24 maxlen: 24 194.71.174.0/24 maxlen: 24 194.71.175.0/24 maxlen: 24 194.71.176.0/24 maxlen: 24 194.71.177.0/24 maxlen: 24 194.71.178.0/24 maxlen: 24 194.71.179.0/24 maxlen: 24 2a01:280:310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:99:c7:61:97:de:75:45:34:35:78:68:89:ae:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4c2c55e4e7f083315f42cf9a0cbc16ef1076281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:e4:27:46:8d:b8:da:08:5b:62:67:3f:c6: 9a:ed:51:80:12:9d:1d:1f:c0:75:62:03:8e:fc:f5: d9:9e:64:25:6b:0a:7d:97:ac:24:48:ef:77:27:41: f3:0a:ed:47:36:6a:d3:d9:27:6a:e0:0c:8b:b6:81: 1d:47:4c:6a:28:ef:72:cd:f6:5d:52:bd:71:f7:5d: d8:e1:97:a7:72:2a:85:55:12:75:5b:8a:4c:21:fe: a1:2c:a4:4b:ad:66:be:3d:81:b9:6c:2e:9e:6a:58: 37:d4:ad:60:3f:cb:36:8f:6b:b6:65:33:0a:e4:1d: 02:40:7d:ab:4f:d2:b2:92:f5:fd:47:59:57:c0:e7: 0d:2c:8b:1a:9c:e1:13:21:e5:70:7c:20:d3:d6:89: 9b:0b:16:04:59:68:c1:fb:08:12:8d:6e:4f:af:f5: 4d:2f:1a:0e:e8:67:53:4c:d1:8b:2e:2e:11:1b:4b: 66:c1:0c:2a:e0:77:e5:49:34:f4:69:76:76:3f:c1: 95:4c:90:ed:fb:f3:c9:9a:68:8e:46:47:ca:ba:04: 13:6d:ea:ed:fb:73:28:ae:1c:ba:85:62:c9:95:7c: 40:4b:ec:1d:4e:36:d7:87:b2:9c:1b:d7:21:65:1f: 7b:6d:6a:21:7b:0a:4c:e7:d9:ca:fd:ee:a7:d6:a6: 88:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C2:C5:5E:4E:7F:08:33:15:F4:2C:F9:A0:CB:C1:6E:F1:07:62:81 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tMLFXk5_CDMV9Cz5oMvBbvEHYoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.255.0/24 193.234.16.0/24 194.14.6.0/23 194.68.238.0/24 194.71.174.0-194.71.179.255 IPv6: 2a01:280:310::/48 Signature Algorithm: sha256WithRSAEncryption 60:59:fb:2a:23:42:be:f3:c4:3d:4c:4b:a6:cb:17:2e:34:90: 15:5f:57:95:98:8f:ef:b9:5b:34:fd:b7:da:08:63:fd:5f:6f: 1b:bc:c3:4d:cd:18:bb:c4:d1:96:ac:ca:ec:38:27:7f:6f:b3: 2b:d1:65:b8:a0:6b:5c:d4:ce:5b:cd:06:40:1f:00:3c:d4:97: ad:69:2a:15:b1:fe:eb:bb:b9:91:15:f0:2c:07:c2:6a:0f:a1: 06:36:52:74:60:6e:d0:fd:e8:3e:45:70:60:bd:43:99:10:e8: 72:f6:5f:a5:e2:7b:15:9d:8d:2c:ef:06:c1:3d:c7:ea:01:08: 0e:62:44:49:5e:d7:0b:fe:dc:25:61:1b:79:bf:e4:8f:ea:df: a1:48:bc:ed:3f:c9:43:1f:8d:9a:04:30:63:1e:3d:40:9f:0e: 43:c6:80:52:05:c8:8f:df:2c:d3:60:84:67:75:58:f1:4e:74: f5:f7:0e:ee:f3:f2:c7:54:aa:4d:e4:84:2b:d5:88:c4:89:b8: ac:0a:ef:3e:55:03:c5:55:41:53:37:44:56:95:bf:b6:d7:e0: ee:55:b3:92:f1:c1:25:7e:af:fa:08:c8:1e:58:9f:12:18:d2: 49:d0:60:a2:ed:3e:8a:2e:39:92:6a:46:1e:f6:4b:dc:3d:73: ce:cf:bb:8c -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt4NJnHYZfedUU0NXhoia6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGMyYzU1ZTRlN2YwODMzMTVmNDJjZjlhMGNiYzE2ZWYxMDc2MjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLPkJ0aNuNoIW2JnP8aa7VGAEp0d H8B1YgOO/PXZnmQlawp9l6wkSO93J0HzCu1HNmrT2Sdq4AyLtoEdR0xqKO9yzfZd Ur1x913Y4ZenciqFVRJ1W4pMIf6hLKRLrWa+PYG5bC6ealg31K1gP8s2j2u2ZTMK 5B0CQH2rT9KykvX9R1lXwOcNLIsanOETIeVwfCDT1ombCxYEWWjB+wgSjW5Pr/VN LxoO6GdTTNGLLi4RG0tmwQwq4HflSTT0aXZ2P8GVTJDt+/PJmmiORkfKugQTbert +3Morhy6hWLJlXxAS+wdTjbXh7KcG9chZR97bWohewpM59nK/e6n1qaIwwIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFLTCxV5OfwgzFfQs+aDLwW7xB2KBMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvdE1MRlhrNV9DRE1WOUN6NW9NdkJidkVIWW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQAwHn/AwQA weoQAwQBwg4GAwQAwkTuMAwDBAHCR64DBALCR7AwDwQCAAIwCQMHACoBAoADEDAN BgkqhkiG9w0BAQsFAAOCAQEAYFn7KiNCvvPEPUxLpssXLjSQFV9XlZiP77lbNP23 2ghj/V9vG7zDTc0Yu8TRlqzK7Dgnf2+zK9FluKBrXNTOW80GQB8APNSXrWkqFbH+ 67u5kRXwLAfCag+hBjZSdGBu0P3oPkVwYL1DmRDocvZfpeJ7FZ2NLO8GwT3H6gEI DmJESV7XC/7cJWEbeb/kj+rfoUi87T/JQx+NmgQwYx49QJ8OQ8aAUgXIj98s02CE Z3VY8U509fcO7vPyx1SqTeSEK9WIxIm4rArvPlUDxVVBUzdEVpW/ttfg7lWzkvHB JX6v+gjIHlifEhjSSdBgou0+ii45kmpGHvZL3D1zzs+7jA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:55 2026 by rpki-client