This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-g39FqYAChfWMmnLKxkMp-vdg84.roa File: 1-g39FqYAChfWMmnLKxkMp-vdg84.roa (raw, json) Hash identifier: i16DZFymIohjIBlBUXUfTgx6kVBcsRdCzJHY++Lp/FU= Subject key identifier: FA:0D:FD:16:A6:00:0A:17:D6:32:69:CB:2B:19:0C:A7:EB:DD:83:CE Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834756450B7A9F12C49F3D0DD83CF18 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-g39FqYAChfWMmnLKxkMp-vdg84.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 192.36.180.0/24 maxlen: 24 192.121.9.0/24 maxlen: 24 192.121.242.0/24 maxlen: 24 193.180.81.0/24 maxlen: 24 193.180.160.0/23 maxlen: 23 193.182.121.0/24 maxlen: 24 193.183.182.0/24 maxlen: 24 193.183.188.0/24 maxlen: 24 193.234.70.0/24 maxlen: 24 193.234.81.0/24 maxlen: 24 193.234.93.0/24 maxlen: 24 193.234.198.0/24 maxlen: 24 193.234.203.0/24 maxlen: 24 194.14.187.0/24 maxlen: 24 194.14.218.0/24 maxlen: 24 194.71.64.0/22 maxlen: 22 194.71.68.0/22 maxlen: 22 194.71.72.0/21 maxlen: 24 194.71.80.0/24 maxlen: 24 194.71.81.0/24 maxlen: 24 194.71.82.0/24 maxlen: 24 194.103.18.0/24 maxlen: 24 194.132.133.0/24 maxlen: 24 2a01:280:3a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:75:64:50:b7:a9:f1:2c:49:f3:d0:dd:83:cf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa0dfd16a6000a17d63269cb2b190ca7ebdd83ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:23:bb:10:ef:f8:30:d6:be:76:4f:7e:45: de:ca:96:d5:42:ca:12:5c:48:33:84:be:fe:cc:cb: 76:76:bf:fb:be:dc:96:77:64:df:61:26:82:9c:28: 6e:76:9c:0c:93:e0:48:7b:f7:3f:fc:13:c1:0a:bf: ac:05:1f:bc:0f:66:01:58:cf:46:0b:21:4a:4d:ae: 71:bc:69:a6:b1:77:0d:26:76:62:58:8c:0c:cc:00: 00:e0:79:4e:da:27:57:71:ac:71:b4:e1:07:3c:fc: a9:30:2d:84:ab:18:58:c0:78:7b:bb:61:37:90:eb: 4b:5e:1d:57:13:2b:f7:14:9e:dc:94:77:7c:c1:59: ac:8c:f8:7a:7e:0f:c4:3d:9d:60:a9:0a:6f:67:2f: a0:b7:ce:a5:8d:36:45:97:57:f3:6b:69:45:58:70: e3:1d:c6:46:da:57:88:c0:c3:f7:e4:36:c0:48:c8: d1:66:9a:7f:b1:0e:1e:66:1e:19:08:da:26:88:15: 71:51:e2:12:c9:da:f3:91:82:b8:cc:9d:07:19:7c: 75:24:0a:d3:22:71:48:dc:30:29:71:d0:43:c4:10: e8:16:3e:80:5e:7e:63:f8:36:b1:03:e4:04:51:fc: 95:f9:fc:3e:0e:67:b5:bf:26:03:19:a3:d8:91:8c: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0D:FD:16:A6:00:0A:17:D6:32:69:CB:2B:19:0C:A7:EB:DD:83:CE X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-g39FqYAChfWMmnLKxkMp-vdg84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.180.0/24 192.121.9.0/24 192.121.242.0/24 193.180.81.0/24 193.180.160.0/23 193.182.121.0/24 193.183.182.0/24 193.183.188.0/24 193.234.70.0/24 193.234.81.0/24 193.234.93.0/24 193.234.198.0/24 193.234.203.0/24 194.14.187.0/24 194.14.218.0/24 194.71.64.0-194.71.82.255 194.103.18.0/24 194.132.133.0/24 IPv6: 2a01:280:3a8::/48 Signature Algorithm: sha256WithRSAEncryption 6b:90:23:a8:03:80:04:bd:f3:dd:c4:df:d6:4d:7b:e2:6f:c8: 61:b5:01:98:b4:be:5a:98:69:1c:f2:89:60:39:b2:26:02:ff: d0:6d:af:f0:5d:69:39:f8:1c:30:6b:fb:98:d4:1b:92:9f:a9: 7b:12:93:c8:23:50:f0:7a:ba:5e:bf:57:2d:f2:02:5d:bf:f9: e6:f8:b0:ae:17:4b:45:5a:1b:10:bc:2c:53:88:16:dc:db:0a: a7:ed:e4:cd:02:83:94:ca:7e:6e:12:1a:c7:53:0b:dd:06:0b: f1:86:b7:71:f2:9d:ce:d9:c4:e3:58:eb:01:52:56:ea:5e:d8: 37:1c:6c:0a:5d:bd:26:f4:20:74:fb:10:21:33:3b:fd:83:a7: 6b:d0:77:4b:f7:c5:f1:3e:5c:f5:d3:31:87:b5:08:51:11:a2: e8:0a:97:c6:d6:da:58:0d:d4:f8:71:7f:3e:94:5b:b3:70:cb: 7b:f9:df:d5:46:dd:ac:96:d0:bb:a2:9e:e3:ae:c1:ae:30:17: 93:c6:c1:d1:83:fd:30:59:28:5c:b3:8f:8d:97:31:11:54:c8: 04:d5:cf:77:9d:b9:93:93:7a:dd:fb:a0:63:67:7f:8b:b1:97: 2a:e5:6e:a5:b1:ba:51:f7:4d:25:33:27:ab:ad:cf:72:e9:1d: 56:1d:ea:11 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt4NHVkULep8SxJ89Ddg88YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTBkZmQxNmE2MDAwYTE3ZDYzMjY5Y2IyYjE5MGNhN2ViZGQ4M2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDAjuxDv+DDWvnZPfkXeypbVQsoS XEgzhL7+zMt2dr/7vtyWd2TfYSaCnChudpwMk+BIe/c//BPBCr+sBR+8D2YBWM9G CyFKTa5xvGmmsXcNJnZiWIwMzAAA4HlO2idXcaxxtOEHPPypMC2EqxhYwHh7u2E3 kOtLXh1XEyv3FJ7clHd8wVmsjPh6fg/EPZ1gqQpvZy+gt86ljTZFl1fza2lFWHDj HcZG2leIwMP35DbASMjRZpp/sQ4eZh4ZCNomiBVxUeISydrzkYK4zJ0HGXx1JArT InFI3DApcdBDxBDoFj6AXn5j+DaxA+QEUfyV+fw+Dme1vyYDGaPYkYz9rQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFPoN/RamAAoX1jJpyysZDKfr3YPOMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvMS1nMzlGcVlBQ2hmV01tbkxLeGtNcC12ZGc4NC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMy Ni8xL0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBoAYIKwYBBQUHAQcBAf8EgZAwgY0wegQCAAEwdAMEAMAk tAMEAMB5CQMEAMB58gMEAMG0UQMEAcG0oAMEAMG2eQMEAMG3tgMEAMG3vAMEAMHq RgMEAMHqUQMEAMHqXQMEAMHqxgMEAMHqywMEAMIOuwMEAMIO2jAMAwQGwkdAAwQA wkdSAwQAwmcSAwQAwoSFMA8EAgACMAkDBwAqAQKAA6gwDQYJKoZIhvcNAQELBQAD ggEBAGuQI6gDgAS9893E39ZNe+JvyGG1AZi0vlqYaRzyiWA5siYC/9Btr/BdaTn4 HDBr+5jUG5KfqXsSk8gjUPB6ul6/Vy3yAl2/+eb4sK4XS0VaGxC8LFOIFtzbCqft 5M0Cg5TKfm4SGsdTC90GC/GGt3Hync7ZxONY6wFSVupe2DccbApdvSb0IHT7ECEz O/2Dp2vQd0v3xfE+XPXTMYe1CFERougKl8bW2lgN1Phxfz6UW7Nwy3v539VG3ayW 0LuinuOuwa4wF5PGwdGD/TBZKFyzj42XMRFUyATVz3eduZOTet37oGNnf4uxlyrl bqWxulH3TSUzJ6utz3LpHVYd6hE= -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:37 2026 by rpki-client