This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/iTT1Go78g5owZfyu9ktxbP5JHAk.roa File: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (raw, json) Hash identifier: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4= Subject key identifier: 89:34:F5:1A:8E:FC:83:9A:30:65:FC:AE:F6:4B:71:6C:FE:49:1C:09 Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf Certificate serial: 019B7EA68DE56E6CA9DFFBC3E729024BBEC6 Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/iTT1Go78g5owZfyu9ktxbP5JHAk.roa Signing time: Fri 02 Jan 2026 12:20:03 +0000 ROA not before: Fri 02 Jan 2026 12:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212599 IP address blocks: 185.134.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 20:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8d:e5:6e:6c:a9:df:fb:c3:e7:29:02:4b:be:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf Validity Not Before: Jan 2 12:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8934f51a8efc839a3065fcaef64b716cfe491c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:15:b9:9e:0a:5e:29:c5:86:50:ad:5e:ce: 47:68:c8:4a:ed:4e:c3:63:91:ee:cd:87:9a:a6:7f: e6:8f:1b:20:bb:dc:c0:27:d5:87:cb:8e:57:6d:78: 72:bd:b5:82:e8:0a:46:5c:19:81:eb:aa:37:33:21: 06:17:f9:cf:2a:18:d7:79:2d:94:a8:21:6c:73:cb: 16:21:31:1c:bc:b0:6e:1d:82:31:28:eb:a4:c1:c5: 62:ce:7d:98:9d:59:31:ad:4a:21:e6:32:fe:02:09: 9e:e6:1c:e4:de:a8:ea:04:69:fc:b4:7d:5e:23:fd: bd:88:7a:ec:50:8c:f0:32:39:2d:ae:80:09:16:12: 4f:25:99:be:b3:5d:af:62:c2:18:68:f8:16:0c:90: fe:9d:3e:0c:4c:80:1f:91:45:4f:08:1e:50:38:e7: d0:89:51:b2:44:04:ba:10:50:79:fb:4e:b5:7c:bf: 20:8c:6b:0e:5e:dd:45:94:e8:11:95:a2:4d:47:bb: 1e:6f:af:91:cc:cf:3e:c9:b8:31:3f:38:00:a1:62: c7:ad:7a:34:67:05:69:62:56:59:38:81:4e:4a:73: 2c:cf:76:7f:41:d6:a6:85:60:20:52:0f:88:60:cd: d5:dd:5b:d4:8d:82:6b:76:25:e6:c1:0f:df:8f:27: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:34:F5:1A:8E:FC:83:9A:30:65:FC:AE:F6:4B:71:6C:FE:49:1C:09 X509v3 Authority Key Identifier: keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/iTT1Go78g5owZfyu9ktxbP5JHAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.175.0/24 Signature Algorithm: sha256WithRSAEncryption 37:ca:f2:6d:f0:06:5c:0e:33:11:30:6a:33:48:85:e8:87:4e: 5b:58:57:f9:8b:b1:28:bf:a9:05:05:44:88:f6:ee:00:47:b7: 1c:ed:d2:6d:f6:42:cd:85:fa:3c:9c:5c:5d:1e:68:cd:5e:e4: eb:97:f4:be:8f:8d:96:5b:bb:eb:e3:2d:5e:53:c2:f6:10:4e: 2e:c8:97:e5:ee:b5:ca:9c:60:43:75:97:ad:69:8c:59:95:69: 57:a8:6a:2e:d3:44:fe:9c:16:52:e6:c7:6b:50:aa:19:76:1d: 10:20:79:0f:2a:42:94:12:4c:5d:8e:ed:fb:2e:f8:51:a8:0f: 6d:54:25:f8:51:d0:14:95:10:c4:38:ac:de:72:ea:6b:29:6e: ff:8b:12:f0:c0:7b:34:3f:26:1a:d5:9b:5e:e0:20:7e:3e:31: d6:6a:5d:72:cb:0c:3c:22:74:2c:66:55:19:e9:be:89:ad:08: a6:f9:9f:97:0b:55:7e:9e:f7:86:6f:9c:e8:da:3f:74:b1:51: 52:3c:03:4a:8f:2e:03:0b:40:26:a3:9c:39:dd:da:18:27:68: bb:e1:70:44:4a:de:b9:69:81:e3:12:92:a6:8c:15:bc:12:a7: f2:c5:65:14:a2:97:2a:66:33:18:c5:4c:45:b9:33:17:8a:a5: 97:6b:28:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+po3lbmyp3/vD5ykCS77GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODljYjcxODkxYzZkOTRiZDllNmYxNGYxNmU3ZTM3YzJj NzI4YmYwHhcNMjYwMTAyMTIyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTM0ZjUxYThlZmM4MzlhMzA2NWZjYWVmNjRiNzE2Y2ZlNDkxYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywcVuZ4KXinFhlCtXs5HaMhK7U7D Y5HuzYeapn/mjxsgu9zAJ9WHy45XbXhyvbWC6ApGXBmB66o3MyEGF/nPKhjXeS2U qCFsc8sWITEcvLBuHYIxKOukwcVizn2YnVkxrUoh5jL+Agme5hzk3qjqBGn8tH1e I/29iHrsUIzwMjktroAJFhJPJZm+s12vYsIYaPgWDJD+nT4MTIAfkUVPCB5QOOfQ iVGyRAS6EFB5+061fL8gjGsOXt1FlOgRlaJNR7seb6+RzM8+ybgxPzgAoWLHrXo0 ZwVpYlZZOIFOSnMsz3Z/QdamhWAgUg+IYM3V3VvUjYJrdiXmwQ/fjyecywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIk09RqO/IOaMGX8rvZLcWz+SRwJMB8GA1UdIwQY MBaAFNaJy3GJHG2UvZ5vFPFufjfCxyi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0Yjgt ODI0ZmZjNjk0MmY0LzEvaVRUMUdvNzhnNW93WmZ5dTlrdHhiUDVKSEFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0YjgtODI0ZmZjNjk0MmY0 LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYavMA0G CSqGSIb3DQEBCwUAA4IBAQA3yvJt8AZcDjMRMGozSIXoh05bWFf5i7Eov6kFBUSI 9u4AR7cc7dJt9kLNhfo8nFxdHmjNXuTrl/S+j42WW7vr4y1eU8L2EE4uyJfl7rXK nGBDdZetaYxZlWlXqGou00T+nBZS5sdrUKoZdh0QIHkPKkKUEkxdju37LvhRqA9t VCX4UdAUlRDEOKzecuprKW7/ixLwwHs0PyYa1Zte4CB+PjHWal1yyww8InQsZlUZ 6b6JrQim+Z+XC1V+nveGb5zo2j90sVFSPANKjy4DC0Amo5w53doYJ2i74XBESt65 aYHjEpKmjBW8EqfyxWUUopcqZjMYxUxFuTMXiqWXayhN -----END CERTIFICATE-----Generated at Thu Jan 15 07:02:40 2026 by rpki-client