This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/z2hDf3wLihJq7Hfxb3O0vWwrjTA.roa File: z2hDf3wLihJq7Hfxb3O0vWwrjTA.roa (raw, json) Hash identifier: dbsQkuCcjRhFDzT0xgzDFWJ2sn/KTg51351GKaPCEg4= Subject key identifier: CF:68:43:7F:7C:0B:8A:12:6A:EC:77:F1:6F:73:B4:BD:6C:2B:8D:30 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834827D6BBF7B3FBA40EED50A995CCC Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/z2hDf3wLihJq7Hfxb3O0vWwrjTA.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204074 IP address blocks: 193.183.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:82:7d:6b:bf:7b:3f:ba:40:ee:d5:0a:99:5c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf68437f7c0b8a126aec77f16f73b4bd6c2b8d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:7d:63:ef:a3:93:41:88:6e:c1:be:b5:60: 1b:24:72:88:d4:f9:9d:db:61:c0:a0:20:c8:c5:e4: e0:e0:31:73:4d:a7:36:d0:33:d2:d3:a6:8f:58:17: a0:17:a3:b2:f7:7e:45:e5:d1:5b:7b:35:d3:9f:d3: 13:f9:36:c3:c5:81:44:9a:2f:5f:86:f6:0c:63:e4: c8:f2:e6:22:10:aa:d7:ba:44:42:8d:3b:a5:c2:72: 96:5d:d0:7a:36:cb:cc:6b:1a:bd:8c:aa:c3:0a:a9: 06:07:b7:db:2e:5b:9b:a9:77:dd:36:51:2c:6c:fc: fc:72:15:f1:21:37:78:98:9e:89:3a:92:ad:3a:b2: 3d:58:cf:d1:f1:3f:b2:e4:66:27:e9:4f:31:0b:e3: 43:2b:3f:ec:e9:87:75:25:56:28:0c:03:03:d5:0f: d7:0c:88:1a:c1:b2:04:8c:48:ae:e9:ed:f4:14:8e: 35:b5:84:61:ba:35:2e:74:56:b9:06:79:68:85:2c: 63:54:66:cb:a9:30:a4:17:7d:3c:23:98:59:6e:e3: 73:9c:71:a2:ab:f0:4e:de:8b:12:2c:fc:38:ef:90: db:76:57:56:e2:6a:dc:e5:aa:93:79:ef:a7:0a:86: 19:9f:1e:53:62:cb:b6:ea:2a:42:9b:e4:fe:dc:b9: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:68:43:7F:7C:0B:8A:12:6A:EC:77:F1:6F:73:B4:BD:6C:2B:8D:30 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/z2hDf3wLihJq7Hfxb3O0vWwrjTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.80.0/24 Signature Algorithm: sha256WithRSAEncryption 25:a5:0b:61:95:23:90:7f:a5:a3:fb:4d:03:8a:ca:f9:03:a1: 48:83:79:ff:af:0a:7f:08:39:1b:d7:54:67:ad:f0:f3:c8:9e: 0e:02:cd:d1:fc:4d:14:46:7d:c8:49:11:49:fc:e0:fb:af:3d: d1:e2:bc:ed:64:c0:d8:de:0e:ee:a8:82:93:49:84:3e:cb:ec: 7e:eb:37:10:30:b1:db:04:63:f2:6b:98:9c:6e:8f:dc:7a:b8: 41:83:16:3a:d5:40:40:9e:a3:0d:eb:1d:3a:3c:fe:fc:b2:20: 58:94:c6:72:e3:d0:b5:66:3a:49:75:77:38:71:ef:24:01:a1: 67:26:5a:92:b6:ae:35:89:d3:2e:bd:33:c8:e3:a3:89:86:a8: ae:48:f9:3a:03:9f:2f:ce:38:4b:4e:19:4e:00:62:37:1c:9f: 37:85:af:f2:e9:0d:57:c1:b1:12:d9:e7:de:00:fc:a7:64:19: 9c:50:5b:9c:ff:fb:18:24:f7:50:d2:24:85:e2:7e:d2:8f:00: 6f:bf:25:79:0e:90:81:bf:b2:00:85:02:49:60:6a:b2:ee:2b: 17:da:2f:43:e1:b1:fa:29:df:28:81:39:f1:5a:3b:70:75:f8: 63:11:37:31:3b:9c:2b:3e:62:96:cb:98:4d:b1:ed:3f:3d:65: 4a:3b:65:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NIJ9a797P7pA7tUKmVzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjY4NDM3ZjdjMGI4YTEyNmFlYzc3ZjE2ZjczYjRiZDZjMmI4ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2h9Y++jk0GIbsG+tWAbJHKI1Pmd 22HAoCDIxeTg4DFzTac20DPS06aPWBegF6Oy935F5dFbezXTn9MT+TbDxYFEmi9f hvYMY+TI8uYiEKrXukRCjTulwnKWXdB6NsvMaxq9jKrDCqkGB7fbLlubqXfdNlEs bPz8chXxITd4mJ6JOpKtOrI9WM/R8T+y5GYn6U8xC+NDKz/s6Yd1JVYoDAMD1Q/X DIgawbIEjEiu6e30FI41tYRhujUudFa5BnlohSxjVGbLqTCkF308I5hZbuNznHGi q/BO3osSLPw475DbdldW4mrc5aqTee+nCoYZnx5TYsu26ipCm+T+3Ll/RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM9oQ398C4oSaux38W9ztL1sK40wMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvejJoRGYzd0xpaEpxN0hmeGIzTzB2V3dyalRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbdQMA0G CSqGSIb3DQEBCwUAA4IBAQAlpQthlSOQf6Wj+00Disr5A6FIg3n/rwp/CDkb11Rn rfDzyJ4OAs3R/E0URn3ISRFJ/OD7rz3R4rztZMDY3g7uqIKTSYQ+y+x+6zcQMLHb BGPya5icbo/cerhBgxY61UBAnqMN6x06PP78siBYlMZy49C1ZjpJdXc4ce8kAaFn JlqStq41idMuvTPI46OJhqiuSPk6A58vzjhLThlOAGI3HJ83ha/y6Q1XwbES2efe APynZBmcUFuc//sYJPdQ0iSF4n7SjwBvvyV5DpCBv7IAhQJJYGqy7isX2i9D4bH6 Kd8ogTnxWjtwdfhjETcxO5wrPmKWy5hNse0/PWVKO2VA -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:54 2026 by rpki-client