This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9UMxDr_IL4zC8QTLsKizwQjhoM4.roa File: 9UMxDr_IL4zC8QTLsKizwQjhoM4.roa (raw, json) Hash identifier: MpXd1IzIQ/O5yiZK/pPDskJYckgDLqZUoiAAU3qO06g= Subject key identifier: F5:43:31:0E:BF:C8:2F:8C:C2:F1:04:CB:B0:A8:B3:C1:08:E1:A0:CE Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783468C63E4D91372A848C332F5D44D5 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9UMxDr_IL4zC8QTLsKizwQjhoM4.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 192.71.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:c6:3e:4d:91:37:2a:84:8c:33:2f:5d:44:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f543310ebfc82f8cc2f104cbb0a8b3c108e1a0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:db:02:e2:f3:2d:8a:48:b3:67:d5:e0:69: b2:06:93:0b:35:1d:ea:ca:3c:46:ee:a3:25:d1:63: 08:91:d2:e0:01:69:91:04:15:8e:8d:b8:87:88:95: 7d:07:18:90:ee:3d:41:a9:b7:05:91:38:65:94:e8: 22:5e:b7:4e:4e:8c:f4:0c:e2:e0:47:b8:e7:36:9f: c4:ee:ac:8f:2b:ea:43:15:96:9f:f3:c9:7e:11:f7: df:ec:ee:dd:16:02:91:06:29:3d:0a:4a:85:f6:9a: 5d:ca:d0:e9:d4:6a:42:3b:ed:93:43:a1:67:4e:bc: cf:3c:ee:54:89:68:8b:91:58:23:69:15:f0:89:e8: dc:40:e9:19:82:87:14:52:7b:fe:b8:3d:72:56:4d: 8e:49:6e:37:f7:d0:08:b3:24:67:04:d6:1a:70:f9: 25:62:b4:8c:84:78:2d:7b:88:d1:7f:51:e4:f9:10: 9e:24:d9:f3:c8:fd:27:9f:77:2c:57:1c:b0:59:2f: 59:8a:b0:84:01:e0:a7:6a:07:b0:7e:03:ea:ad:58: 94:1a:dd:a9:71:0a:fb:3b:d6:74:da:b5:b4:61:d9: 79:a7:97:df:85:80:b8:d5:a4:32:0d:02:22:e8:ad: 55:9d:93:65:f5:eb:c9:89:6d:ea:18:58:b6:8a:38: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:43:31:0E:BF:C8:2F:8C:C2:F1:04:CB:B0:A8:B3:C1:08:E1:A0:CE X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9UMxDr_IL4zC8QTLsKizwQjhoM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.151.0/24 Signature Algorithm: sha256WithRSAEncryption c9:89:c0:a3:3f:b3:f7:2b:e6:9c:ea:57:12:a4:ba:cc:47:1c: cf:c4:65:90:d1:de:70:1e:7e:20:50:a2:9b:6d:2c:76:a7:90: f6:af:68:3f:e7:c5:5d:f0:50:8b:c4:48:20:58:b9:43:c4:c1: b5:14:5c:24:d1:0e:b7:5a:3c:3a:ad:c1:f5:7c:53:5e:98:7a: 46:3d:6a:d6:f2:1f:89:ac:ac:2d:58:bb:4b:34:12:2b:c9:4f: 18:53:90:7c:83:8d:e0:76:69:51:66:02:da:8c:41:6f:ba:24: 2a:9e:8f:10:aa:be:a4:dd:bd:7d:11:79:cc:e8:b9:c1:ac:be: 26:9e:07:96:6e:f1:43:97:5a:ce:05:dd:34:02:b5:db:d9:ae: 5d:9a:6c:1c:76:58:b8:9b:5b:36:45:e7:78:bb:4f:cd:e0:c6: e6:dd:8a:f9:28:71:af:e4:c4:b9:62:03:95:1d:2b:b0:02:03: 5b:8d:f0:e3:cd:ae:cf:b7:0a:9e:70:13:c7:eb:c6:5f:42:d6: 84:b4:17:8f:20:00:cd:e5:40:34:27:0d:d3:8f:57:04:a8:27: a2:be:f2:de:8f:b8:02:38:b3:48:40:db:5c:b9:24:e8:ae:8b: 13:7b:6e:80:01:f9:ce:26:eb:70:3a:92:c6:14:3b:87:69:49: b3:5d:6e:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGjGPk2RNyqEjDMvXUTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTQzMzEwZWJmYzgyZjhjYzJmMTA0Y2JiMGE4YjNjMTA4ZTFhMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZnbAuLzLYpIs2fV4GmyBpMLNR3q yjxG7qMl0WMIkdLgAWmRBBWOjbiHiJV9BxiQ7j1BqbcFkThllOgiXrdOToz0DOLg R7jnNp/E7qyPK+pDFZaf88l+Efff7O7dFgKRBik9CkqF9ppdytDp1GpCO+2TQ6Fn TrzPPO5UiWiLkVgjaRXwiejcQOkZgocUUnv+uD1yVk2OSW4399AIsyRnBNYacPkl YrSMhHgte4jRf1Hk+RCeJNnzyP0nn3csVxywWS9ZirCEAeCnagewfgPqrViUGt2p cQr7O9Z02rW0Ydl5p5ffhYC41aQyDQIi6K1VnZNl9evJiW3qGFi2iji3xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVDMQ6/yC+MwvEEy7Cos8EI4aDOMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvOVVNeERyX0lMNHpDOFFUTHNLaXp3UWpob000LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEeXMA0G CSqGSIb3DQEBCwUAA4IBAQDJicCjP7P3K+ac6lcSpLrMRxzPxGWQ0d5wHn4gUKKb bSx2p5D2r2g/58Vd8FCLxEggWLlDxMG1FFwk0Q63Wjw6rcH1fFNemHpGPWrW8h+J rKwtWLtLNBIryU8YU5B8g43gdmlRZgLajEFvuiQqno8Qqr6k3b19EXnM6LnBrL4m ngeWbvFDl1rOBd00ArXb2a5dmmwcdli4m1s2Red4u0/N4Mbm3Yr5KHGv5MS5YgOV HSuwAgNbjfDjza7PtwqecBPH68ZfQtaEtBePIADN5UA0Jw3Tj1cEqCeivvLej7gC OLNIQNtcuSTorosTe26AAfnOJutwOpLGFDuHaUmzXW6Z -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:10 2026 by rpki-client