This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DhZhm4OM7OZFl8GxbfsvrT92Ma0.roa File: DhZhm4OM7OZFl8GxbfsvrT92Ma0.roa (raw, json) Hash identifier: opHeJ2Dk6f09P8snzo3PTaiFEK2VZ7DWLOqkKXn6GzU= Subject key identifier: 0E:16:61:9B:83:8C:EC:E6:45:97:C1:B1:6D:FB:2F:AD:3F:76:31:AD Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C761A391D77A1535616343AC296A25 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DhZhm4OM7OZFl8GxbfsvrT92Ma0.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25159 IP address blocks: 31.173.0.0/21 maxlen: 21 31.173.8.0/21 maxlen: 21 31.173.16.0/21 maxlen: 21 31.173.24.0/21 maxlen: 21 31.173.32.0/19 maxlen: 19 31.173.60.0/24 maxlen: 24 31.173.64.0/21 maxlen: 21 31.173.72.0/21 maxlen: 21 31.173.80.0/21 maxlen: 21 31.173.88.0/21 maxlen: 21 37.28.176.0/21 maxlen: 21 37.29.32.0/21 maxlen: 21 46.229.128.0/22 maxlen: 22 62.64.0.0/20 maxlen: 20 62.64.16.0/20 maxlen: 20 78.25.112.0/22 maxlen: 22 78.25.116.0/23 maxlen: 23 78.25.118.0/24 maxlen: 24 78.25.119.0/24 maxlen: 24 83.222.212.0/22 maxlen: 22 83.222.216.0/21 maxlen: 21 83.229.211.0/24 maxlen: 24 83.229.254.0/24 maxlen: 24 85.26.144.0/20 maxlen: 20 91.205.168.0/23 maxlen: 23 91.205.170.0/23 maxlen: 23 94.25.131.0/24 maxlen: 24 94.25.144.0/20 maxlen: 20 94.25.160.0/24 maxlen: 24 94.25.164.0/24 maxlen: 24 94.25.168.0/22 maxlen: 22 94.25.172.0/22 maxlen: 22 94.25.176.0/21 maxlen: 21 94.25.184.0/21 maxlen: 21 109.188.64.0/19 maxlen: 19 109.188.96.0/21 maxlen: 21 109.188.112.0/23 maxlen: 23 109.188.114.0/24 maxlen: 24 109.188.124.0/24 maxlen: 24 109.188.125.0/24 maxlen: 24 128.204.76.0/22 maxlen: 22 128.204.76.0/23 maxlen: 23 128.204.78.0/23 maxlen: 23 178.176.0.0/19 maxlen: 19 178.176.32.0/21 maxlen: 21 178.176.40.0/21 maxlen: 21 178.176.52.0/22 maxlen: 22 178.176.72.0/21 maxlen: 21 178.176.92.0/22 maxlen: 22 178.177.0.0/18 maxlen: 18 178.177.3.0/24 maxlen: 24 178.178.192.0/22 maxlen: 22 178.178.198.0/23 maxlen: 23 178.178.204.0/24 maxlen: 24 178.178.205.0/24 maxlen: 24 178.178.216.0/21 maxlen: 21 178.178.235.0/24 maxlen: 24 178.178.236.0/24 maxlen: 24 188.170.0.0/19 maxlen: 19 188.170.24.0/23 maxlen: 23 188.170.25.0/24 maxlen: 24 188.170.32.0/21 maxlen: 21 188.170.40.0/21 maxlen: 21 193.201.228.0/22 maxlen: 22 195.16.96.0/19 maxlen: 19 195.16.110.0/23 maxlen: 23 195.16.114.0/23 maxlen: 23 195.230.70.0/23 maxlen: 23 195.230.91.0/24 maxlen: 24 195.230.92.0/24 maxlen: 24 212.69.96.0/19 maxlen: 19 212.69.106.0/24 maxlen: 24 212.69.113.0/24 maxlen: 24 212.69.114.0/24 maxlen: 24 212.69.125.0/24 maxlen: 24 213.243.109.0/24 maxlen: 24 213.243.116.0/24 maxlen: 24 2a03:d000:4000::/36 maxlen: 36 2a03:d000:4100::/40 maxlen: 40 2a03:d000:4200::/40 maxlen: 40 2a03:d000:4300::/40 maxlen: 40 2a03:d000:4400::/40 maxlen: 40 2a03:d004::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:61:a3:91:d7:7a:15:35:61:63:43:ac:29:6a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e16619b838cece64597c1b16dfb2fad3f7631ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:68:e3:05:81:19:f9:6f:29:99:e2:7a:bd: bf:e8:fe:d5:94:dc:c3:e1:c5:eb:48:ca:bf:0c:8b: 06:f4:28:69:9e:51:20:8c:be:79:2a:d7:68:d7:a1: 49:15:20:79:30:0f:55:2a:1f:4c:38:95:f4:c0:6e: 55:46:69:1e:83:78:a1:d5:df:24:a1:cb:7a:33:59: aa:11:8e:41:e4:1b:f5:a5:88:d2:29:0a:32:9c:18: a9:78:f4:86:fb:03:98:c6:35:9a:c9:6a:e9:8f:a3: 27:43:33:06:2b:43:54:19:38:d2:fd:29:eb:f1:d9: c7:66:91:00:3f:d1:38:a8:29:0d:7b:75:31:36:3b: e6:2f:12:e0:69:33:25:35:13:c1:1d:3a:26:f2:ba: 54:3d:ce:fa:9f:dc:04:dd:aa:68:a8:fe:c1:79:b1: e4:18:ec:39:d4:2f:ce:1d:11:9d:39:f0:69:25:e5: 3a:4c:aa:45:e4:98:4c:b9:98:aa:d2:a4:7a:60:02: c9:f1:8b:1e:e9:11:a0:86:df:89:eb:8f:81:ef:88: ce:59:b6:1d:cf:f7:6f:87:1f:9d:74:14:2a:c0:46: bd:09:8c:91:f9:e3:e4:da:a8:14:00:ba:77:81:de: d9:f2:a9:d9:ca:a9:2f:5e:fb:53:99:5b:42:58:83: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:16:61:9B:83:8C:EC:E6:45:97:C1:B1:6D:FB:2F:AD:3F:76:31:AD X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DhZhm4OM7OZFl8GxbfsvrT92Ma0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.0.0-31.173.95.255 37.28.176.0/21 37.29.32.0/21 46.229.128.0/22 62.64.0.0/19 78.25.112.0/21 83.222.212.0-83.222.223.255 83.229.211.0/24 83.229.254.0/24 85.26.144.0/20 91.205.168.0/22 94.25.131.0/24 94.25.144.0-94.25.160.255 94.25.164.0/24 94.25.168.0-94.25.191.255 109.188.64.0-109.188.103.255 109.188.112.0-109.188.114.255 109.188.124.0/23 128.204.76.0/22 178.176.0.0-178.176.47.255 178.176.52.0/22 178.176.72.0/21 178.176.92.0/22 178.177.0.0/18 178.178.192.0/22 178.178.198.0/23 178.178.204.0/23 178.178.216.0/21 178.178.235.0-178.178.236.255 188.170.0.0-188.170.47.255 193.201.228.0/22 195.16.96.0/19 195.230.70.0/23 195.230.91.0-195.230.92.255 212.69.96.0/19 213.243.109.0/24 213.243.116.0/24 IPv6: 2a03:d000:4000::/36 2a03:d004::/40 Signature Algorithm: sha256WithRSAEncryption 2e:ac:06:53:bc:b4:9c:67:2a:ae:e9:64:aa:8c:55:c4:5d:bd: 6c:a0:ee:16:a0:5a:78:1b:a5:59:a0:fd:14:e7:0e:87:9e:32: 1b:64:6e:fb:55:7f:9c:97:c6:f6:2c:3b:8e:0b:99:8b:cb:ac: ef:e4:e6:b3:d3:d6:54:37:e6:01:b0:32:42:16:67:de:72:04: 9b:fd:17:d2:4d:ec:73:d2:20:76:fe:ef:a4:73:89:c5:fb:86: ea:ef:1a:69:79:6d:8b:9b:37:c1:0c:2a:35:93:15:f3:de:5a: 5f:37:c8:d0:87:f0:4c:7e:be:13:e5:e9:f7:a2:dd:75:4a:37: 0a:ee:0b:20:7d:18:ac:ba:d3:e0:a0:63:5b:53:1f:3e:22:12: d5:01:52:a7:47:2a:5a:ce:d1:e3:e1:80:05:83:e4:d7:12:4f: 16:96:84:37:2c:e7:fa:88:fd:2c:08:12:07:36:e0:02:49:6b: aa:15:20:3c:d5:29:57:1c:b0:45:6f:ba:f0:09:89:df:2b:41: 4b:6a:e0:32:1e:88:7d:c5:2c:02:9d:79:ac:d4:51:c9:c2:1e: 3a:e6:a2:ee:21:0a:a4:f4:3a:d7:d4:e3:73:ba:9a:f8:7a:bf: 2e:d2:4f:13:55:db:64:33:2d:37:9c:32:49:cd:c5:4e:7b:b9: 0c:32:0e:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgISAZt3x2Gjkdd6FTVhY0OsKWolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE2NjE5YjgzOGNlY2U2NDU5N2MxYjE2ZGZiMmZhZDNmNzYzMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYxo4wWBGflvKZnier2/6P7VlNzD 4cXrSMq/DIsG9ChpnlEgjL55Ktdo16FJFSB5MA9VKh9MOJX0wG5VRmkeg3ih1d8k oct6M1mqEY5B5Bv1pYjSKQoynBipePSG+wOYxjWayWrpj6MnQzMGK0NUGTjS/Snr 8dnHZpEAP9E4qCkNe3UxNjvmLxLgaTMlNRPBHTom8rpUPc76n9wE3apoqP7BebHk GOw51C/OHRGdOfBpJeU6TKpF5JhMuZiq0qR6YALJ8Yse6RGght+J64+B74jOWbYd z/dvhx+ddBQqwEa9CYyR+ePk2qgUALp3gd7Z8qnZyqkvXvtTmVtCWIPDWQIDAQAB o4IDUDCCA0wwHQYDVR0OBBYEFA4WYZuDjOzmRZfBsW37L60/djGtMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvRGhaaG00T003T1pGbDhHeGJmc3ZyVDkyTWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBZAYIKwYBBQUHAQcBAf8EggFTMIIBTzCCATMEAgABMIIB KzALAwMAH60DBAUfrUADBAMlHLADBAMlHSADBAIu5YADBAU+QAADBANOGXAwDAME AlPe1AMEBVPewAMEAFPl0wMEAFPl/gMEBFUakAMEAlvNqAMEAF4ZgzAMAwQEXhmQ AwQAXhmgAwQAXhmkMAwDBANeGagDBAZeGYAwDAMEBm28QAMEA228YDAMAwQEbbxw AwQAbbxyAwQBbbx8AwQCgMxMMAsDAwSysAMEBLKwIAMEArKwNAMEA7KwSAMEArKw XAMEBrKxAAMEArKywAMEAbKyxgMEAbKyzAMEA7Ky2DAMAwQAsrLrAwQAsrLsMAsD AwG8qgMEBLyqIAMEAsHJ5AMEBcMQYAMEAcPmRjAMAwQAw+ZbAwQAw+ZcAwQF1EVg AwQA1fNtAwQA1fN0MBYEAgACMBADBgQqA9AAQAMGACoD0AQAMA0GCSqGSIb3DQEB CwUAA4IBAQAurAZTvLScZyqu6WSqjFXEXb1soO4WoFp4G6VZoP0U5w6HnjIbZG77 VX+cl8b2LDuOC5mLy6zv5Oaz09ZUN+YBsDJCFmfecgSb/RfSTexz0iB2/u+kc4nF +4bq7xppeW2LmzfBDCo1kxXz3lpfN8jQh/BMfr4T5en3ot11SjcK7gsgfRisutPg oGNbUx8+IhLVAVKnRypaztHj4YAFg+TXEk8WloQ3LOf6iP0sCBIHNuACSWuqFSA8 1SlXHLBFb7rwCYnfK0FLauAyHoh9xSwCnXms1FHJwh465qLuIQqk9DrX1ONzupr4 er8u0k8TVdtkMy03nDJJzcVOe7kMMg4J -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:47 2026 by rpki-client