This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mktjByZ1QkwtHq3NP0SVzDKivk0.roa File: mktjByZ1QkwtHq3NP0SVzDKivk0.roa (raw, json) Hash identifier: VSAYTvtOJBTvOJN7smEJS5HM4kdz6BCk8/HWoDtqyeA= Subject key identifier: 9A:4B:63:07:26:75:42:4C:2D:1E:AD:CD:3F:44:95:CC:32:A2:BE:4D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019BC5FF9416B309DAB20C076960D017BCE5 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mktjByZ1QkwtHq3NP0SVzDKivk0.roa Signing time: Fri 16 Jan 2026 08:50:19 +0000 ROA not before: Fri 16 Jan 2026 08:50:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 192.71.161.0/24 maxlen: 24 193.180.119.0/24 maxlen: 24 193.182.245.0/24 maxlen: 24 193.234.82.0/24 maxlen: 24 193.235.104.0/24 maxlen: 24 193.235.106.0/24 maxlen: 24 194.71.221.0/24 maxlen: 24 194.132.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:ff:94:16:b3:09:da:b2:0c:07:69:60:d0:17:bc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 16 08:50:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a4b63072675424c2d1eadcd3f4495cc32a2be4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:7e:5d:bf:a7:24:86:d8:9a:4e:0b:b8:d6: ed:17:33:32:b2:19:34:09:4c:fa:2f:17:df:2b:f3: 6d:9d:86:b9:79:82:44:9d:a4:1a:38:55:2e:3f:23: bc:51:aa:53:0d:db:46:8c:1e:09:fe:73:d2:87:87: b9:90:ed:fa:b9:86:e7:bf:32:f1:22:43:1e:a8:bf: a9:f7:1b:c8:6a:4a:fb:81:46:12:79:55:c5:f5:76: c6:85:d5:de:cb:ae:62:41:a5:01:ef:4e:e1:5f:0a: 3b:eb:f5:d1:17:6e:2a:d5:aa:56:d3:07:15:ff:27: 87:5b:ff:69:e9:6b:bd:40:87:96:25:a2:c7:49:1a: c9:7c:25:f8:71:55:cf:0c:4e:f9:9e:e1:ca:70:23: b4:21:6b:0c:96:1d:21:36:a7:7b:86:38:e1:16:df: 0b:63:32:96:32:ac:95:38:e4:af:f2:fa:78:0e:27: 60:47:7f:5e:b7:27:d8:48:d1:66:46:e4:35:ad:38: aa:17:1f:8b:8c:b3:14:bb:ea:cb:94:38:68:e8:02: d3:ee:cb:5c:bd:2c:54:bf:24:72:29:5a:0d:94:7a: 9d:35:4d:c7:94:52:28:13:0b:e5:22:2c:4f:f7:1d: d8:0e:4c:30:8b:5f:1f:80:47:23:bb:d6:bd:6a:1f: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4B:63:07:26:75:42:4C:2D:1E:AD:CD:3F:44:95:CC:32:A2:BE:4D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mktjByZ1QkwtHq3NP0SVzDKivk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.161.0/24 193.180.119.0/24 193.182.245.0/24 193.234.82.0/24 193.235.104.0/24 193.235.106.0/24 194.71.221.0/24 194.132.122.0/24 Signature Algorithm: sha256WithRSAEncryption a8:c5:39:04:a6:07:a9:0b:93:95:fa:dc:27:42:77:18:a4:d2: eb:e3:d1:ba:c3:97:e5:68:a3:6a:19:fd:cd:09:19:64:59:8f: f9:db:68:9a:b1:cd:6a:00:92:3a:53:e7:c1:57:fe:53:87:1e: 8a:35:a8:5e:46:36:a4:5b:5a:e0:40:17:b8:ad:ec:27:24:e4: 92:94:89:00:c8:27:dd:3b:8b:1b:c4:41:d7:16:9f:6a:d6:77: 2f:d2:97:1d:3b:e1:a0:cb:d4:41:78:3d:d7:32:6a:e2:d0:0d: 2e:45:37:2a:31:50:b8:ee:d5:e9:0c:14:ee:39:a4:83:07:a0: bb:31:02:a5:b2:59:b5:43:63:b8:31:d5:96:77:cb:72:37:e4: 14:f0:cf:52:b0:f1:49:52:26:1a:f2:16:6d:c7:ab:c4:1a:e0: 42:56:d9:84:cb:85:b8:6c:07:b0:33:b8:38:1e:d7:01:60:17: 98:ae:f7:6c:70:9a:2e:73:5b:97:a9:38:8f:19:ef:3e:3e:24: fe:1d:61:9e:c0:ab:a2:31:8c:ce:38:24:eb:87:5c:51:6d:d0: e5:40:d2:79:78:ca:b4:3f:b2:3b:6b:7c:0d:45:cf:46:e2:19: 83:54:61:5c:bc:3b:e3:2f:f5:e5:2d:7f:a9:5a:11:1a:10:38: e3:05:cc:1b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZvF/5QWswnasgwHaWDQF7zlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTE2MDg1MDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTRiNjMwNzI2NzU0MjRjMmQxZWFkY2QzZjQ0OTVjYzMyYTJiZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSd+Xb+nJIbYmk4LuNbtFzMyshk0 CUz6LxffK/NtnYa5eYJEnaQaOFUuPyO8UapTDdtGjB4J/nPSh4e5kO36uYbnvzLx IkMeqL+p9xvIakr7gUYSeVXF9XbGhdXey65iQaUB707hXwo76/XRF24q1apW0wcV /yeHW/9p6Wu9QIeWJaLHSRrJfCX4cVXPDE75nuHKcCO0IWsMlh0hNqd7hjjhFt8L YzKWMqyVOOSv8vp4DidgR39etyfYSNFmRuQ1rTiqFx+LjLMUu+rLlDho6ALT7stc vSxUvyRyKVoNlHqdNU3HlFIoEwvlIixP9x3YDkwwi18fgEcju9a9ah/hQQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFJpLYwcmdUJMLR6tzT9Elcwyor5NMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvbWt0akJ5WjFRa3d0SHEzTlAwU1Z6REtpdmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAwEehAwQA wbR3AwQAwbb1AwQAwepSAwQAwetoAwQAwetqAwQAwkfdAwQAwoR6MA0GCSqGSIb3 DQEBCwUAA4IBAQCoxTkEpgepC5OV+twnQncYpNLr49G6w5flaKNqGf3NCRlkWY/5 22iasc1qAJI6U+fBV/5Thx6KNaheRjakW1rgQBe4rewnJOSSlIkAyCfdO4sbxEHX Fp9q1ncv0pcdO+Ggy9RBeD3XMmri0A0uRTcqMVC47tXpDBTuOaSDB6C7MQKlslm1 Q2O4MdWWd8tyN+QU8M9SsPFJUiYa8hZtx6vEGuBCVtmEy4W4bAewM7g4HtcBYBeY rvdscJouc1uXqTiPGe8+PiT+HWGewKuiMYzOOCTrh1xRbdDlQNJ5eMq0P7I7a3wN Rc9G4hmDVGFcvDvjL/XlLX+pWhEaEDjjBcwb -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:45 2026 by rpki-client