This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vJT-ZJaidrwsT-Kfa4Y6JEArVDw.roa File: vJT-ZJaidrwsT-Kfa4Y6JEArVDw.roa (raw, json) Hash identifier: JBysPZ/c2jaVJEyUqKDSdRwn2foFIbQhhU51DdAZhFs= Subject key identifier: BC:94:FE:64:96:A2:76:BC:2C:4F:E2:9F:6B:86:3A:24:40:2B:54:3C Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348F74A2B9264A51D5BC1BDCCEACB4 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vJT-ZJaidrwsT-Kfa4Y6JEArVDw.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209659 IP address blocks: 193.180.167.0/24 maxlen: 24 193.180.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8f:74:a2:b9:26:4a:51:d5:bc:1b:dc:ce:ac:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc94fe6496a276bc2c4fe29f6b863a24402b543c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:0b:0f:3d:7a:db:8b:10:e6:55:c6:c9:14: 97:e7:50:ce:a9:7f:f6:1c:4d:c1:cc:a7:96:c6:27: af:bf:f2:9a:22:a1:91:7c:e1:de:98:cb:1f:07:16: dc:92:7a:4e:e2:61:3a:f4:91:4d:09:db:4d:b1:d2: bd:80:2d:70:07:c1:3c:68:18:07:cb:a5:87:5e:e8: e4:4d:cc:b7:1d:87:b8:c6:7a:8b:ba:48:e5:79:6c: 46:1f:95:e2:bf:a5:46:98:e0:17:33:55:7b:eb:70: bd:c6:81:db:9f:88:b0:8b:e0:5d:52:1f:7d:1a:4c: 64:e4:1e:74:04:88:61:05:9f:aa:0c:05:33:8b:bf: b8:5b:d6:8f:f4:46:41:0e:89:c8:78:ea:78:6d:94: e0:28:69:74:bc:6c:dd:0d:e1:47:76:a8:84:46:06: ae:bb:c8:4b:a5:30:0e:00:b7:d9:7a:5b:c9:04:d3: 20:5c:0a:cf:37:64:38:db:22:7b:14:6f:43:ac:b7: 7e:1b:82:33:0a:52:c2:00:06:ed:78:71:14:74:37: 6b:64:62:eb:da:46:48:f3:ef:1d:e2:a4:28:f2:71: 42:b3:a7:38:d4:e7:c5:1f:5f:3f:ff:eb:b5:ed:8f: 75:e0:76:f2:c3:68:58:50:67:18:7e:7a:dd:fb:b5: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:94:FE:64:96:A2:76:BC:2C:4F:E2:9F:6B:86:3A:24:40:2B:54:3C X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vJT-ZJaidrwsT-Kfa4Y6JEArVDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.167.0/24 193.180.173.0/24 Signature Algorithm: sha256WithRSAEncryption a5:e3:06:ef:29:e6:a5:50:6f:8c:10:26:f1:69:e4:55:40:ed: a9:42:f0:4a:0e:dd:36:d8:bc:4c:cb:e6:52:44:6c:c2:91:c0: be:91:1a:b4:ac:33:ff:09:98:93:94:18:e0:cb:dd:98:de:6b: a9:0b:8b:6c:6a:c4:46:85:5f:9c:cc:83:79:06:5a:fb:5a:0f: 40:3c:19:19:83:59:ee:96:f3:8f:0c:ca:94:f2:88:5b:8f:f4: 0d:e4:32:1b:81:3c:79:1a:33:35:ad:21:19:bf:46:67:73:8f: d5:38:ae:1e:5d:70:22:b9:41:64:53:02:22:75:dd:51:a7:7c: 98:d9:35:e5:0f:6b:e1:ec:ab:ec:01:f4:5e:e2:15:b0:5f:50: 36:45:2e:e0:d0:a4:f7:51:37:9c:ae:04:d4:24:d6:e5:ee:be: 50:81:79:83:8a:c6:e9:ba:c4:35:9e:74:6d:7a:fa:c5:db:90: 4f:e8:bc:a2:2c:f3:3b:be:9d:56:d8:91:87:84:c0:4c:70:2e: 0a:b6:59:83:14:06:7f:c6:1b:48:c6:59:88:7e:43:34:ef:d5: 3f:ae:68:09:f8:73:dd:d2:5a:43:46:1c:6f:71:33:04:dd:98: 8c:c7:64:5e:81:b8:10:35:67:33:3d:2a:64:a0:85:95:2f:c2: 04:ba:0d:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NI90orkmSlHVvBvczqy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzk0ZmU2NDk2YTI3NmJjMmM0ZmUyOWY2Yjg2M2EyNDQwMmI1NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu4LDz1624sQ5lXGyRSX51DOqX/2 HE3BzKeWxievv/KaIqGRfOHemMsfBxbcknpO4mE69JFNCdtNsdK9gC1wB8E8aBgH y6WHXujkTcy3HYe4xnqLukjleWxGH5Xiv6VGmOAXM1V763C9xoHbn4iwi+BdUh99 Gkxk5B50BIhhBZ+qDAUzi7+4W9aP9EZBDonIeOp4bZTgKGl0vGzdDeFHdqiERgau u8hLpTAOALfZelvJBNMgXArPN2Q42yJ7FG9DrLd+G4IzClLCAAbteHEUdDdrZGLr 2kZI8+8d4qQo8nFCs6c41OfFH18//+u17Y914Hbyw2hYUGcYfnrd+7UvDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLyU/mSWona8LE/in2uGOiRAK1Q8MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvdkpULVpKYWlkcndzVC1LZmE0WTZKRUFyVkR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbSnAwQA wbStMA0GCSqGSIb3DQEBCwUAA4IBAQCl4wbvKealUG+MECbxaeRVQO2pQvBKDt02 2LxMy+ZSRGzCkcC+kRq0rDP/CZiTlBjgy92Y3mupC4tsasRGhV+czIN5Blr7Wg9A PBkZg1nulvOPDMqU8ohbj/QN5DIbgTx5GjM1rSEZv0Znc4/VOK4eXXAiuUFkUwIi dd1Rp3yY2TXlD2vh7KvsAfRe4hWwX1A2RS7g0KT3UTecrgTUJNbl7r5QgXmDisbp usQ1nnRtevrF25BP6LyiLPM7vp1W2JGHhMBMcC4KtlmDFAZ/xhtIxlmIfkM079U/ rmgJ+HPd0lpDRhxvcTME3ZiMx2RegbgQNWczPSpkoIWVL8IEug2d -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:30 2026 by rpki-client