This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uaOGOd5v45zg5mQ08mAWT2LBP2I.roa File: uaOGOd5v45zg5mQ08mAWT2LBP2I.roa (raw, json) Hash identifier: z5uohsFZv3WZCPjIRgtcttnw6uGcx5FTZVgFg/GPeZg= Subject key identifier: B9:A3:86:39:DE:6F:E3:9C:E0:E6:64:34:F2:60:16:4F:62:C1:3F:62 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78349CE6C22C2A5DCAE2DFC6B549434F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uaOGOd5v45zg5mQ08mAWT2LBP2I.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215823 IP address blocks: 194.68.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9c:e6:c2:2c:2a:5d:ca:e2:df:c6:b5:49:43:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9a38639de6fe39ce0e66434f260164f62c13f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:3c:e8:4c:88:a3:9b:b8:91:ee:6c:2d:43: f2:b5:76:72:a8:85:6e:1e:ba:2b:b4:9f:f3:36:8a: d8:58:42:a3:73:91:8e:b0:17:f8:92:c0:53:e1:4e: 4e:57:67:d3:bb:d9:27:b8:1a:81:3f:39:39:f3:cb: 78:96:81:fe:61:1a:4c:0b:8c:23:b1:2c:e7:8b:66: 04:02:3c:cd:5c:61:28:e8:f8:a6:10:5f:91:5a:10: a7:04:7e:9e:9f:de:b7:d1:d8:71:fe:0c:52:30:95: 90:d2:bd:44:5b:5a:58:3f:d9:b6:cc:f8:08:6b:0f: 7d:9d:f2:dc:2a:b1:58:6a:8b:fd:99:6b:a0:9e:5b: b9:24:03:a3:98:77:d0:b4:08:af:08:ca:84:13:c6: 02:5e:09:d7:54:e7:ce:9f:ee:00:bf:bc:47:4b:5a: 11:b8:65:5b:0d:79:83:11:68:cc:da:a8:d0:76:93: 30:e2:51:a8:5e:12:44:f9:93:f8:07:91:ed:7b:0b: f8:06:cf:01:d6:71:07:58:8b:19:df:25:5a:24:dd: 7b:be:4c:3c:4d:98:21:e7:0b:9e:42:d4:20:be:9f: 19:d0:96:03:ab:b7:ab:4a:9e:5d:9a:b7:a3:b9:07: d0:74:ca:c8:d2:8b:22:2e:84:e8:79:92:ed:91:8e: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:86:39:DE:6F:E3:9C:E0:E6:64:34:F2:60:16:4F:62:C1:3F:62 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uaOGOd5v45zg5mQ08mAWT2LBP2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.68.191.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:7c:f5:38:ed:3d:36:36:77:a4:00:b1:a6:9c:27:3a:3c:24: 32:7d:af:73:31:49:6d:14:64:53:ec:65:30:6b:54:c2:38:ff: b5:ab:ae:71:4c:a5:35:fa:60:39:f3:d6:b6:6c:6d:c3:34:ed: 25:73:d8:7a:ca:38:8a:65:c6:6c:53:be:22:ec:8f:f7:aa:16: 05:7d:fc:b3:be:60:ac:9d:b4:3c:95:8e:90:82:c3:fc:32:f7: 8c:c2:73:5b:43:51:9f:77:1c:b3:b4:9d:43:e3:ea:cd:69:d6: 28:7a:bd:64:e8:2d:43:77:5c:0c:13:ca:11:31:30:e7:ca:0b: 13:26:aa:e4:44:79:70:88:0a:63:15:ec:e3:c9:df:73:9a:34: 2a:9a:f1:4d:fe:f8:e5:f2:1f:b3:db:cb:79:f4:e2:8d:74:df: 54:40:59:37:22:40:44:9c:d3:86:de:f4:90:b8:95:5e:c2:b2: d5:e8:91:29:b9:ef:4f:3a:92:85:4a:ef:23:4b:ff:35:e0:19: db:68:32:93:58:a0:14:cf:fa:f1:60:9b:e8:09:bd:21:4b:21: 4e:b7:e5:23:5c:e2:a9:2f:dc:c3:9d:f9:ca:a2:57:48:02:8b: 8e:2d:cc:1c:8a:3e:b5:15:a6:eb:76:cf:55:06:62:b5:39:13: ee:1d:3a:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJzmwiwqXcri38a1SUNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWEzODYzOWRlNmZlMzljZTBlNjY0MzRmMjYwMTY0ZjYyYzEzZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Y86EyIo5u4ke5sLUPytXZyqIVu HrortJ/zNorYWEKjc5GOsBf4ksBT4U5OV2fTu9knuBqBPzk588t4loH+YRpMC4wj sSzni2YEAjzNXGEo6PimEF+RWhCnBH6en9630dhx/gxSMJWQ0r1EW1pYP9m2zPgI aw99nfLcKrFYaov9mWugnlu5JAOjmHfQtAivCMqEE8YCXgnXVOfOn+4Av7xHS1oR uGVbDXmDEWjM2qjQdpMw4lGoXhJE+ZP4B5Htewv4Bs8B1nEHWIsZ3yVaJN17vkw8 TZgh5wueQtQgvp8Z0JYDq7erSp5dmrejuQfQdMrI0osiLoToeZLtkY4KqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmjhjneb+Oc4OZkNPJgFk9iwT9iMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvdWFPR09kNXY0NXpnNW1RMDhtQVdUMkxCUDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkS/MA0G CSqGSIb3DQEBCwUAA4IBAQCffPU47T02NnekALGmnCc6PCQyfa9zMUltFGRT7GUw a1TCOP+1q65xTKU1+mA589a2bG3DNO0lc9h6yjiKZcZsU74i7I/3qhYFffyzvmCs nbQ8lY6QgsP8MveMwnNbQ1GfdxyztJ1D4+rNadYoer1k6C1Dd1wME8oRMTDnygsT JqrkRHlwiApjFezjyd9zmjQqmvFN/vjl8h+z28t59OKNdN9UQFk3IkBEnNOG3vSQ uJVewrLV6JEpue9POpKFSu8jS/814BnbaDKTWKAUz/rxYJvoCb0hSyFOt+UjXOKp L9zDnfnKoldIAouOLcwcij61Fabrds9VBmK1ORPuHTpM -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:03 2026 by rpki-client