This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/xIxV3QV0-KrN7rSzr-0HLG1i190.roa File: xIxV3QV0-KrN7rSzr-0HLG1i190.roa (raw, json) Hash identifier: 8Bgn1Ips0oqsProytAnDAz5ffPqB6GHNefvHzifH3aI= Subject key identifier: C4:8C:55:DD:05:74:F8:AA:CD:EE:B4:B3:AF:ED:07:2C:6D:62:D7:DD Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Certificate serial: 019B7E3879A3D311A47913CC375F4B504028 Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/xIxV3QV0-KrN7rSzr-0HLG1i190.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209236 IP address blocks: 170.102.144.0/24 maxlen: 24 170.102.145.0/24 maxlen: 24 170.102.192.0/23 maxlen: 23 170.102.192.0/24 maxlen: 24 170.102.193.0/24 maxlen: 24 170.102.194.0/24 maxlen: 24 170.102.195.0/24 maxlen: 24 170.102.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:79:a3:d3:11:a4:79:13:cc:37:5f:4b:50:40:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c48c55dd0574f8aacdeeb4b3afed072c6d62d7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:97:be:64:c2:c9:d7:76:61:f9:b8:7f:5e: 23:92:8f:b3:d6:a6:8f:a0:98:7b:7a:f2:d9:74:05: 85:72:70:7c:a4:aa:90:4d:c4:10:e4:9e:f5:f9:f8: ce:f9:27:51:52:d5:ae:89:ca:d5:17:7f:ca:29:2e: e4:fa:8b:fa:a9:55:99:ff:fc:cd:c4:b8:f7:6f:02: 81:38:f3:a2:9c:68:3f:ed:5c:df:af:ab:6a:bd:ae: 10:1c:fd:fa:05:4a:b2:ef:47:e5:bc:d0:41:7a:ef: b5:d7:2a:96:10:fd:f5:4c:0d:88:eb:40:ef:6e:8b: d4:8a:7c:9d:bc:12:4a:19:74:d6:d9:db:c7:bc:b3: 13:ad:30:15:72:f3:0c:36:f7:c3:ec:77:c1:38:42: f1:12:75:61:c4:09:6e:d2:99:f6:c8:da:e1:bc:45: e5:4a:75:40:0f:4d:57:a5:bc:16:d5:56:29:4a:8e: 5f:b9:5b:cb:f8:07:32:37:59:fa:45:42:35:28:26: 36:b3:54:39:30:c0:43:28:10:d7:61:c7:7b:b5:00: 27:22:f8:1d:67:a9:cf:7d:af:e8:93:3f:35:95:ba: 31:84:7c:2b:80:4a:5d:79:3b:66:cc:59:56:ab:e3: 1c:c9:89:62:f2:a8:84:71:2c:94:f8:83:e9:74:d9: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8C:55:DD:05:74:F8:AA:CD:EE:B4:B3:AF:ED:07:2C:6D:62:D7:DD X509v3 Authority Key Identifier: keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/xIxV3QV0-KrN7rSzr-0HLG1i190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.102.144.0/23 170.102.192.0-170.102.196.255 Signature Algorithm: sha256WithRSAEncryption 6a:ba:1e:6a:5b:65:9c:93:28:f9:6c:9e:35:83:c8:c3:be:dd: 08:02:1b:0b:7d:a3:14:87:06:18:9b:a4:b1:4e:1e:bc:12:75: 34:b7:16:dc:f1:74:d9:85:d2:70:27:1a:bf:14:2e:8c:b5:08: 4e:0e:0a:3c:95:5a:fe:85:a9:b8:76:78:2e:81:ed:39:ed:bd: 00:68:1c:09:18:27:d3:bf:02:1d:cd:02:9c:de:f1:cb:76:c9: c2:d6:7c:ff:1e:6a:07:1c:09:c7:80:84:1a:95:0f:ff:a5:45: 4b:99:3f:d1:ad:f2:e5:ec:5c:45:58:b5:85:fb:19:79:a1:1a: cc:e4:8e:ea:ee:3f:c6:9d:29:98:db:b8:6b:49:2e:d7:84:2c: e8:f4:51:08:3d:02:9c:89:3f:a6:fb:7b:9d:5f:ed:7b:b2:8f: f7:de:5d:15:b1:2c:a6:d4:50:a3:1a:f4:b3:1f:9f:3a:9c:b5: e5:df:68:1b:45:d1:35:6d:a3:43:de:9e:dd:76:d5:80:ae:52: 45:f2:ea:c3:9a:14:54:9f:b1:9a:b2:ad:df:c0:bb:3e:0c:8d: 51:a5:17:f8:74:3d:94:72:f5:f3:5c:e3:78:9e:67:a2:f1:d3: c8:ed:ef:ab:e6:0e:b4:00:fb:ac:57:18:b1:e2:5b:36:0f:ef: 1d:46:15:35 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OHmj0xGkeRPMN19LUEAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3M2IzYTcxY2Y3NzI3NTVhM2RmOGNlZDVkNzM1MTZmODcx YzBhMTEwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDhjNTVkZDA1NzRmOGFhY2RlZWI0YjNhZmVkMDcyYzZkNjJkN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mOXvmTCydd2Yfm4f14jko+z1qaP oJh7evLZdAWFcnB8pKqQTcQQ5J71+fjO+SdRUtWuicrVF3/KKS7k+ov6qVWZ//zN xLj3bwKBOPOinGg/7Vzfr6tqva4QHP36BUqy70flvNBBeu+11yqWEP31TA2I60Dv bovUinydvBJKGXTW2dvHvLMTrTAVcvMMNvfD7HfBOELxEnVhxAlu0pn2yNrhvEXl SnVAD01XpbwW1VYpSo5fuVvL+AcyN1n6RUI1KCY2s1Q5MMBDKBDXYcd7tQAnIvgd Z6nPfa/okz81lboxhHwrgEpdeTtmzFlWq+McyYli8qiEcSyU+IPpdNlDfwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMSMVd0FdPiqze60s6/tByxtYtfdMB8GA1UdIwQY MBaAFGc7OnHPdydVo9+M7V1zUW+HHAoRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEt NmZlMWYyOTRlNjI3LzEveEl4VjNRVjAtS3JON3JTenItMEhMRzFpMTkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEtNmZlMWYyOTRlNjI3 LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBqmaQMAwD BAaqZsADBACqZsQwDQYJKoZIhvcNAQELBQADggEBAGq6HmpbZZyTKPlsnjWDyMO+ 3QgCGwt9oxSHBhibpLFOHrwSdTS3FtzxdNmF0nAnGr8ULoy1CE4OCjyVWv6Fqbh2 eC6B7TntvQBoHAkYJ9O/Ah3NApze8ct2ycLWfP8eagccCceAhBqVD/+lRUuZP9Gt 8uXsXEVYtYX7GXmhGszkjuruP8adKZjbuGtJLteELOj0UQg9ApyJP6b7e51f7Xuy j/feXRWxLKbUUKMa9LMfnzqcteXfaBtF0TVto0Pent121YCuUkXy6sOaFFSfsZqy rd/Auz4MjVGlF/h0PZRy9fNc43ieZ6Lx08jt76vmDrQA+6xXGLHiWzYP7x1GFTU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:20 2026 by rpki-client