This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xoi6iA3-oQjXtJLEC5GmK_-Gplw.roa File: xoi6iA3-oQjXtJLEC5GmK_-Gplw.roa (raw, json) Hash identifier: so6Lx2Dv4Nn9Wu4fNJMPivYYAgcujFowp7/aLGO43+w= Subject key identifier: C6:88:BA:88:0D:FE:A1:08:D7:B4:92:C4:0B:91:A6:2B:FF:86:A6:5C Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834743F4FCB1FD2DC2D9F2C4EAB1F9B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xoi6iA3-oQjXtJLEC5GmK_-Gplw.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154270 IP address blocks: 193.235.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:74:3f:4f:cb:1f:d2:dc:2d:9f:2c:4e:ab:1f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c688ba880dfea108d7b492c40b91a62bff86a65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:68:0a:17:e6:61:39:39:e5:68:3a:de:40:eb: 01:29:e2:a4:07:1f:e9:b1:44:35:ee:8a:ac:c1:d1: a1:76:49:a9:0b:ac:d3:60:86:fd:be:95:97:b7:87: 9b:48:a4:be:69:c9:cc:9f:33:19:82:cd:63:26:9c: 58:87:ae:9e:82:e3:7e:6f:06:a1:7f:bd:bf:1b:35: c4:86:b2:bf:04:86:5e:96:45:01:ab:b0:ce:5c:b2: f2:f7:48:79:1d:91:24:94:ce:70:0b:b1:06:b2:a4: f8:d4:b8:6b:26:40:43:0b:53:94:57:67:65:c4:73: 49:ca:09:00:e9:89:94:f5:b6:75:9b:bf:45:ad:9c: 5b:af:c9:86:d6:19:be:f5:37:70:a8:04:09:53:a5: 97:23:d7:d8:2b:3f:73:cf:e8:03:53:cb:90:f2:2e: 0e:3a:1e:ad:7c:86:fc:af:c7:10:0e:d1:4f:16:70: 74:fe:61:d3:c6:d2:ee:f3:58:88:b4:70:08:b4:70: 18:de:24:63:c7:52:f8:09:9c:e3:81:1e:6d:e2:12: e6:e6:f9:d0:bb:53:c0:be:1b:f0:1f:35:e7:df:e7: fb:94:7a:cd:a3:ea:b1:0c:2d:c1:67:21:b5:fe:70: 76:8c:bd:a1:8c:c9:dd:40:bf:e7:98:46:c1:fc:db: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:88:BA:88:0D:FE:A1:08:D7:B4:92:C4:0B:91:A6:2B:FF:86:A6:5C X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xoi6iA3-oQjXtJLEC5GmK_-Gplw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.110.0/23 Signature Algorithm: sha256WithRSAEncryption ba:71:7a:3b:4a:ca:4b:0c:ea:06:88:e2:85:a1:ce:12:a2:ec: bb:8f:cd:d6:0b:44:3b:a6:1e:43:af:be:7b:01:66:4c:85:c0: fd:0c:77:d6:9e:cd:12:e4:6a:77:7a:7f:ea:42:6a:b3:95:2b: 00:6f:38:9e:a1:96:1a:24:23:21:36:39:ae:95:44:7b:fd:8b: 13:8c:7e:4e:2c:19:4b:71:eb:3f:bf:74:fb:58:cf:2a:20:37: 81:46:95:1c:29:0c:d1:54:bb:3c:bf:17:3b:ad:e1:ae:da:e5: 25:0a:47:67:be:15:76:e0:97:10:43:75:d6:0d:ca:a1:2a:f5: 0c:96:ef:86:ee:4c:fb:2e:9a:5f:69:ff:7e:5b:ff:14:63:77: 77:70:79:38:a8:1b:28:a6:52:04:d4:8c:dc:74:bb:1d:c6:7e: 79:d7:72:14:4e:ac:56:a5:ad:1d:81:a8:a0:95:07:22:42:25: d4:5c:30:8c:4e:52:16:92:99:4f:07:5d:9f:78:09:a0:c0:c1: 23:04:d2:71:83:41:93:7b:74:fe:a2:c7:0e:ff:0d:2c:11:ac: db:94:19:48:6b:83:7e:9a:07:ce:35:a0:2e:59:74:4a:05:29: 5f:e3:3a:bd:ed:3e:e2:45:25:a1:22:2b:98:07:e8:9d:35:94: 23:2f:35:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHQ/T8sf0twtnyxOqx+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjg4YmE4ODBkZmVhMTA4ZDdiNDkyYzQwYjkxYTYyYmZmODZhNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWgKF+ZhOTnlaDreQOsBKeKkBx/p sUQ17oqswdGhdkmpC6zTYIb9vpWXt4ebSKS+acnMnzMZgs1jJpxYh66eguN+bwah f72/GzXEhrK/BIZelkUBq7DOXLLy90h5HZEklM5wC7EGsqT41LhrJkBDC1OUV2dl xHNJygkA6YmU9bZ1m79FrZxbr8mG1hm+9TdwqAQJU6WXI9fYKz9zz+gDU8uQ8i4O Oh6tfIb8r8cQDtFPFnB0/mHTxtLu81iItHAItHAY3iRjx1L4CZzjgR5t4hLm5vnQ u1PAvhvwHzXn3+f7lHrNo+qxDC3BZyG1/nB2jL2hjMndQL/nmEbB/NvE1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMaIuogN/qEI17SSxAuRpiv/hqZcMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEveG9pNmlBMy1vUWpYdEpMRUM1R21LXy1HcGx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwetuMA0G CSqGSIb3DQEBCwUAA4IBAQC6cXo7SspLDOoGiOKFoc4Souy7j83WC0Q7ph5Dr757 AWZMhcD9DHfWns0S5Gp3en/qQmqzlSsAbzieoZYaJCMhNjmulUR7/YsTjH5OLBlL ces/v3T7WM8qIDeBRpUcKQzRVLs8vxc7reGu2uUlCkdnvhV24JcQQ3XWDcqhKvUM lu+G7kz7Lppfaf9+W/8UY3d3cHk4qBsoplIE1IzcdLsdxn5513IUTqxWpa0dgaig lQciQiXUXDCMTlIWkplPB12feAmgwMEjBNJxg0GTe3T+oscO/w0sEazblBlIa4N+ mgfONaAuWXRKBSlf4zq97T7iRSWhIiuYB+idNZQjLzUv -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:14 2026 by rpki-client