This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qtwl9dA0d6psim5Rt2hhse0Mvtw.roa File: Qtwl9dA0d6psim5Rt2hhse0Mvtw.roa (raw, json) Hash identifier: 5143/Inp6OtGrdzS+dWt/tGipaOZFftfeXXJS6so85k= Subject key identifier: 42:DC:25:F5:D0:34:77:AA:6C:8A:6E:51:B7:68:61:B1:ED:0C:BE:DC Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C64740D8569574670C11F5ECCF6F Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qtwl9dA0d6psim5Rt2hhse0Mvtw.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 135.196.6.0/24 maxlen: 24 135.196.9.0/24 maxlen: 24 135.196.18.0/24 maxlen: 24 135.196.21.0/24 maxlen: 24 135.196.23.0/24 maxlen: 24 135.196.27.0/24 maxlen: 24 135.196.31.0/24 maxlen: 24 135.196.35.0/24 maxlen: 24 135.196.98.0/24 maxlen: 24 135.196.105.0/24 maxlen: 24 135.196.106.0/24 maxlen: 24 135.196.116.0/24 maxlen: 24 135.196.180.0/23 maxlen: 24 135.196.186.0/23 maxlen: 24 194.231.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c6:47:40:d8:56:95:74:67:0c:11:f5:ec:cf:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42dc25f5d03477aa6c8a6e51b76861b1ed0cbedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:31:10:ca:73:a4:b0:61:74:01:25:fb:c3: 9c:ac:f2:37:8f:dd:28:7c:ce:6a:50:4b:cd:26:7b: 01:ba:7a:d2:ec:bd:89:74:40:a5:f0:cf:8b:b2:5b: a4:77:e8:96:e4:ba:b3:8d:30:c9:be:17:86:26:90: 39:ac:bf:15:ca:9a:97:bd:6e:d4:4b:6f:c1:f7:9b: 9d:aa:13:36:1f:c0:4f:d3:64:1a:a4:1f:4c:53:1f: fa:55:7c:e3:f6:6a:4a:5a:17:ac:db:e6:ae:07:28: a9:c6:85:81:c7:2b:86:9b:bd:af:34:93:12:49:db: 8b:66:ff:28:17:ac:c0:4f:5e:84:14:2d:e2:e2:14: 8d:59:9d:83:1d:20:bf:44:4b:7c:7f:79:27:62:a4: e8:18:1a:63:5c:4a:f8:12:8b:db:da:85:dc:64:2d: a1:29:a9:9a:f0:cc:02:63:67:03:74:0f:fa:78:27: 3b:c1:58:60:18:38:32:ee:1f:80:7c:fc:ab:52:5b: 49:ed:a8:b5:a9:09:2d:7c:96:a8:19:cb:67:7e:a3: d2:b3:8c:49:02:09:6c:dd:e5:90:c7:a5:d8:4c:9e: f1:31:e2:39:b4:3a:d2:02:d2:01:14:e9:34:76:90: d2:8d:a5:c8:c8:c6:07:58:37:d7:82:1e:d1:70:94: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DC:25:F5:D0:34:77:AA:6C:8A:6E:51:B7:68:61:B1:ED:0C:BE:DC X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qtwl9dA0d6psim5Rt2hhse0Mvtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.196.6.0/24 135.196.9.0/24 135.196.18.0/24 135.196.21.0/24 135.196.23.0/24 135.196.27.0/24 135.196.31.0/24 135.196.35.0/24 135.196.98.0/24 135.196.105.0-135.196.106.255 135.196.116.0/24 135.196.180.0/23 135.196.186.0/23 194.231.156.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:8e:0c:ec:cb:87:81:71:3e:ea:67:4e:30:d0:18:5c:fc:62: 83:1f:9d:e3:b5:9c:db:62:41:d0:31:d6:a8:fd:39:a3:e4:ba: 6b:2b:99:bf:94:2a:53:f4:0d:b6:d8:97:c8:56:4c:1d:aa:24: c5:6a:31:98:03:c8:bf:ca:6d:e2:6b:4e:b3:bf:3b:a2:eb:4c: 74:63:b7:69:c2:ba:32:7e:92:4b:90:f6:dc:27:af:9d:72:6a: 5b:94:90:5b:6f:1d:fe:19:c6:3f:11:47:5e:86:40:29:cd:96: 6a:8e:62:28:8a:cf:16:18:1e:9d:e6:a4:e5:da:db:30:a4:5e: f2:21:ce:a7:e3:51:23:1f:22:56:b6:ae:46:ef:af:29:6f:88: ae:0d:ec:f8:bc:4e:62:39:15:07:c6:28:7d:fa:18:9b:0b:58: 8e:46:9d:50:b7:7a:99:92:db:cf:93:4e:80:e1:91:f3:51:ed: 0a:b1:b0:87:5c:4e:72:ea:19:47:d3:81:5e:bc:43:bb:d5:3a: 67:8a:70:61:f8:3d:d6:26:3e:a3:97:96:5c:90:07:47:17:48: a4:da:ff:9f:57:27:e1:ae:8a:43:f3:19:d4:00:b8:78:2c:58: 0b:2a:e5:37:6a:c4:42:d8:ef:44:a9:55:fb:92:40:d2:59:f0: ec:ea:d8:b1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt/FMZHQNhWlXRnDBH17M9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmRjMjVmNWQwMzQ3N2FhNmM4YTZlNTFiNzY4NjFiMWVkMGNiZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzgxEMpzpLBhdAEl+8OcrPI3j90o fM5qUEvNJnsBunrS7L2JdECl8M+Lslukd+iW5LqzjTDJvheGJpA5rL8VypqXvW7U S2/B95udqhM2H8BP02QapB9MUx/6VXzj9mpKWhes2+auByipxoWBxyuGm72vNJMS SduLZv8oF6zAT16EFC3i4hSNWZ2DHSC/REt8f3knYqToGBpjXEr4Eovb2oXcZC2h Kama8MwCY2cDdA/6eCc7wVhgGDgy7h+AfPyrUltJ7ai1qQktfJaoGctnfqPSs4xJ Agls3eWQx6XYTJ7xMeI5tDrSAtIBFOk0dpDSjaXIyMYHWDfXgh7RcJQjhQIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFELcJfXQNHeqbIpuUbdoYbHtDL7cMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvUXR3bDlkQTBkNnBzaW01UnQyaGhzZTBNdnR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAh8QGAwQA h8QJAwQAh8QSAwQAh8QVAwQAh8QXAwQAh8QbAwQAh8QfAwQAh8QjAwQAh8RiMAwD BACHxGkDBACHxGoDBACHxHQDBAGHxLQDBAGHxLoDBADC55wwDQYJKoZIhvcNAQEL BQADggEBAJ+ODOzLh4FxPupnTjDQGFz8YoMfneO1nNtiQdAx1qj9OaPkumsrmb+U KlP0DbbYl8hWTB2qJMVqMZgDyL/KbeJrTrO/O6LrTHRjt2nCujJ+kkuQ9twnr51y aluUkFtvHf4Zxj8RR16GQCnNlmqOYiiKzxYYHp3mpOXa2zCkXvIhzqfjUSMfIla2 rkbvrylviK4N7Pi8TmI5FQfGKH36GJsLWI5GnVC3epmS28+TToDhkfNR7QqxsIdc TnLqGUfTgV68Q7vVOmeKcGH4PdYmPqOXllyQB0cXSKTa/59XJ+GuikPzGdQAuHgs WAsq5TdqxELY70SpVfuSQNJZ8Ozq2LE= -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:22 2026 by rpki-client