This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tR9AcBs5yUe1RTqdBO6YTPBAMBI.roa File: tR9AcBs5yUe1RTqdBO6YTPBAMBI.roa (raw, json) Hash identifier: 9mXCVNa5jz+hr6xN4THY3qijn72XxaBhdcIfG+SmTcY= Subject key identifier: B5:1F:40:70:1B:39:C9:47:B5:45:3A:9D:04:EE:98:4C:F0:40:30:12 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834478DAC367E6392EA76AFC2082293 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tR9AcBs5yUe1RTqdBO6YTPBAMBI.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8995 IP address blocks: 192.165.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:47:8d:ac:36:7e:63:92:ea:76:af:c2:08:22:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b51f40701b39c947b5453a9d04ee984cf0403012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:e7:f7:3c:77:bd:0e:f7:b5:f4:8e:39:8b: c2:c8:15:0d:0f:c6:c2:22:54:28:28:ec:94:3f:df: c8:b8:d0:a4:ec:ee:b3:d0:cc:ca:06:41:38:95:38: 66:af:71:a9:e5:0b:65:26:4e:7d:ad:b7:6c:d2:c0: d9:33:40:68:10:05:5b:36:9f:36:ed:48:3e:67:d6: 8b:bd:7a:af:00:ee:67:7b:40:65:ca:64:cf:01:e5: 48:21:82:16:ff:88:23:79:96:f1:c7:91:bb:fd:1b: eb:c0:51:69:b0:14:d5:5c:ad:93:ae:06:23:28:1e: dd:fd:3e:d2:41:0e:c5:9f:2b:c1:13:63:a2:9c:6c: d9:d1:fd:22:7e:09:02:a1:8a:26:b1:59:ae:b8:36: 63:49:cf:ce:7d:30:a6:6f:d9:2e:3c:5f:b3:e4:65: a2:e2:bf:71:c3:f4:e0:8a:82:1f:a8:b1:04:5a:aa: 2a:ab:5f:3a:be:e3:1f:f4:d6:c8:c5:72:32:6f:f1: ac:e7:ab:47:20:51:64:c3:37:26:e2:a3:69:8c:4e: 42:52:fb:48:e7:00:20:e2:09:ad:ae:2a:0a:e5:7d: a8:81:38:b5:7d:a4:77:6b:28:d0:d7:6e:63:1c:f3: 98:8b:89:58:8b:04:0e:c2:6c:aa:f7:67:6b:7d:e0: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1F:40:70:1B:39:C9:47:B5:45:3A:9D:04:EE:98:4C:F0:40:30:12 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tR9AcBs5yUe1RTqdBO6YTPBAMBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.82.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:08:d1:cd:97:cd:25:88:66:be:72:6c:e6:56:91:9d:7c:dc: 7f:2a:20:80:92:31:e8:f4:70:46:08:e9:10:f4:df:e5:16:ed: 15:19:58:2b:3b:c1:69:b5:7b:02:fc:ac:6f:43:4f:03:c8:87: e3:f1:36:fe:22:33:a5:fb:7b:e8:ea:d9:1b:5e:72:0d:1d:58: c6:a4:4b:d4:3e:1f:83:69:75:45:60:c2:72:47:dd:36:21:35: 7b:4d:30:8d:0c:70:65:8f:08:22:37:96:b9:e6:f3:5e:b1:50: de:00:f2:36:21:15:85:9d:1f:d0:8e:c5:13:1b:6f:76:7b:00: fb:56:02:5f:9d:ee:a0:95:b6:22:7a:2a:ec:4b:04:9b:16:9e: 95:fe:83:f8:3e:66:c1:89:b3:ad:1d:cc:78:da:6c:03:cc:0f: 74:15:66:ae:d5:7c:c4:0f:39:69:8a:61:22:54:36:ee:37:a9: 6d:d4:a2:fb:eb:ef:ad:4f:f2:92:c9:d8:9d:20:73:a5:9e:b3: ef:1d:ce:62:33:b2:23:08:99:83:4f:9d:07:89:ad:d8:53:59: 6f:ec:77:c9:d5:a4:a6:c1:15:d5:43:01:b7:56:48:5c:84:c7: b6:25:7e:69:bf:62:61:3d:87:ca:50:bd:3a:a6:51:64:4d:df: 17:71:93:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEeNrDZ+Y5Lqdq/CCCKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTFmNDA3MDFiMzljOTQ3YjU0NTNhOWQwNGVlOTg0Y2YwNDAzMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6/n9zx3vQ73tfSOOYvCyBUND8bC IlQoKOyUP9/IuNCk7O6z0MzKBkE4lThmr3Gp5QtlJk59rbds0sDZM0BoEAVbNp82 7Ug+Z9aLvXqvAO5ne0BlymTPAeVIIYIW/4gjeZbxx5G7/RvrwFFpsBTVXK2TrgYj KB7d/T7SQQ7FnyvBE2OinGzZ0f0ifgkCoYomsVmuuDZjSc/OfTCmb9kuPF+z5GWi 4r9xw/TgioIfqLEEWqoqq186vuMf9NbIxXIyb/Gs56tHIFFkwzcm4qNpjE5CUvtI 5wAg4gmtrioK5X2ogTi1faR3ayjQ125jHPOYi4lYiwQOwmyq92drfeDGZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUfQHAbOclHtUU6nQTumEzwQDASMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvdFI5QWNCczV5VWUxUlRxZEJPNllUUEJBTUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKVSMA0G CSqGSIb3DQEBCwUAA4IBAQANCNHNl80liGa+cmzmVpGdfNx/KiCAkjHo9HBGCOkQ 9N/lFu0VGVgrO8FptXsC/KxvQ08DyIfj8Tb+IjOl+3vo6tkbXnINHVjGpEvUPh+D aXVFYMJyR902ITV7TTCNDHBljwgiN5a55vNesVDeAPI2IRWFnR/QjsUTG292ewD7 VgJfne6glbYieirsSwSbFp6V/oP4PmbBibOtHcx42mwDzA90FWau1XzEDzlpimEi VDbuN6lt1KL76++tT/KSydidIHOlnrPvHc5iM7IjCJmDT50Hia3YU1lv7HfJ1aSm wRXVQwG3VkhchMe2JX5pv2JhPYfKUL06plFkTd8XcZPN -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:26 2026 by rpki-client