This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qLABbFZX9NtmPuHjIhDrwMalhAU.roa File: qLABbFZX9NtmPuHjIhDrwMalhAU.roa (raw, json) Hash identifier: jXibro3VEFXJWmvimRORlMlSmNV6T7jKkgJc/0DiFJs= Subject key identifier: A8:B0:01:6C:56:57:F4:DB:66:3E:E1:E3:22:10:EB:C0:C6:A5:84:05 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78347007D3111DE15A7B0DF4B31C2738 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qLABbFZX9NtmPuHjIhDrwMalhAU.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57602 IP address blocks: 193.180.238.0/24 maxlen: 24 193.180.239.0/24 maxlen: 24 194.71.212.0/24 maxlen: 24 194.71.213.0/24 maxlen: 24 194.71.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:70:07:d3:11:1d:e1:5a:7b:0d:f4:b3:1c:27:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b0016c5657f4db663ee1e32210ebc0c6a58405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:2e:d3:6e:49:2f:02:61:9d:09:43:65:29: 60:24:93:bd:02:4b:72:a8:91:91:c4:8b:d4:08:94: 31:e2:8a:0e:41:9b:39:d5:d3:e5:d4:22:63:87:5a: 7f:ea:17:1c:f5:e2:84:b9:fc:3e:3f:d5:5b:2c:88: 3a:b5:e0:66:b9:1c:05:1c:17:a7:60:82:1f:77:10: 61:2a:cb:74:fe:7a:e5:49:c4:38:9e:5a:10:10:18: f5:e5:b7:92:3f:49:db:46:bb:8c:48:27:c5:86:bd: a6:5e:78:dd:ec:d7:ab:4a:7d:8f:76:f2:99:0a:d3: e5:c8:46:b7:05:8c:3a:c9:6a:5f:c6:06:84:13:33: 48:20:b6:56:87:25:f5:53:e9:1a:9b:b6:c9:58:10: aa:70:89:17:3c:3d:18:8d:44:51:fb:ff:ea:c7:ef: ad:02:ad:ad:c5:86:d9:35:67:04:f8:42:67:38:9a: f3:e4:a5:79:b7:1f:35:3b:af:12:b7:54:9b:fa:f3: 29:c3:d1:b2:73:df:1c:5d:b7:21:96:0e:c7:64:98: a0:be:21:a8:c9:5b:06:c4:e8:b4:31:73:45:ea:a1: 04:48:05:7a:17:10:6e:1b:88:27:4e:d7:97:cc:0c: b0:1b:7b:7f:86:d3:9a:24:39:a3:0e:87:97:c2:8d: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B0:01:6C:56:57:F4:DB:66:3E:E1:E3:22:10:EB:C0:C6:A5:84:05 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qLABbFZX9NtmPuHjIhDrwMalhAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.238.0/23 194.71.212.0-194.71.214.255 Signature Algorithm: sha256WithRSAEncryption bb:af:77:9d:2b:27:f9:7f:9f:4d:88:f5:5e:1a:64:40:bc:e8: 12:2d:94:8a:ce:fc:8a:ce:17:3d:34:5d:46:22:66:7a:58:69: a1:49:45:ae:97:c6:72:63:57:66:3b:fb:c0:53:a7:72:24:23: f8:c4:4b:3c:e6:d6:69:1f:a3:52:f0:be:a0:dd:1b:41:ad:dc: 40:3f:b8:f8:90:8e:e7:b9:4a:50:7f:c7:e3:e9:35:18:69:98: 5f:d3:6a:51:62:22:5b:e8:b0:2b:0a:f9:54:c9:cf:6e:2c:1d: 7a:a8:c7:8d:30:02:4d:e4:a5:61:2a:f3:e4:38:92:2f:f8:8a: a0:71:c9:4f:c6:8a:4d:c6:00:0b:a9:b8:cd:e5:7a:7d:72:04: ef:a7:73:e1:5c:b8:57:02:92:a1:36:ae:c7:55:47:eb:a6:58: d0:c0:09:42:13:15:8d:51:c9:26:24:7f:30:91:f1:74:5a:25: 47:2a:e8:85:4d:ee:eb:7b:61:6b:21:9c:e3:f0:44:8c:d3:a4: ce:86:da:e3:7f:ea:99:4e:29:47:22:2b:43:d3:ab:3a:e0:76: 8c:6f:f3:9e:12:3d:e8:ba:a8:06:3b:dc:c2:53:36:0a:03:0e: 4d:d6:ec:56:28:ce:7b:c2:06:8c:d4:03:12:ad:52:51:6e:b7: 09:30:6d:c9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NHAH0xEd4Vp7DfSzHCc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGIwMDE2YzU2NTdmNGRiNjYzZWUxZTMyMjEwZWJjMGM2YTU4NDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Eu025JLwJhnQlDZSlgJJO9Akty qJGRxIvUCJQx4ooOQZs51dPl1CJjh1p/6hcc9eKEufw+P9VbLIg6teBmuRwFHBen YIIfdxBhKst0/nrlScQ4nloQEBj15beSP0nbRruMSCfFhr2mXnjd7NerSn2PdvKZ CtPlyEa3BYw6yWpfxgaEEzNIILZWhyX1U+kam7bJWBCqcIkXPD0YjURR+//qx++t Aq2txYbZNWcE+EJnOJrz5KV5tx81O68St1Sb+vMpw9Gyc98cXbchlg7HZJigviGo yVsGxOi0MXNF6qEESAV6FxBuG4gnTteXzAywG3t/htOaJDmjDoeXwo0OQQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKiwAWxWV/TbZj7h4yIQ68DGpYQFMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvcUxBQmJGWlg5TnRtUHVIakloRHJ3TWFsaEFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBwbTuMAwD BALCR9QDBADCR9YwDQYJKoZIhvcNAQELBQADggEBALuvd50rJ/l/n02I9V4aZEC8 6BItlIrO/IrOFz00XUYiZnpYaaFJRa6XxnJjV2Y7+8BTp3IkI/jESzzm1mkfo1Lw vqDdG0Gt3EA/uPiQjue5SlB/x+PpNRhpmF/TalFiIlvosCsK+VTJz24sHXqox40w Ak3kpWEq8+Q4ki/4iqBxyU/Gik3GAAupuM3len1yBO+nc+FcuFcCkqE2rsdVR+um WNDACUITFY1RySYkfzCR8XRaJUcq6IVN7ut7YWshnOPwRIzTpM6G2uN/6plOKUci K0PTqzrgdoxv854SPei6qAY73MJTNgoDDk3W7FYoznvCBozUAxKtUlFutwkwbck= -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:16 2026 by rpki-client