This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3OxZ2gddbwULtUwLwHZmZUD5BQA.roa File: 3OxZ2gddbwULtUwLwHZmZUD5BQA.roa (raw, json) Hash identifier: M1obY2rHjP1HWxoVpshGqk+PD84t/Z1l5sE2g31nZK0= Subject key identifier: DC:EC:59:DA:07:5D:6F:05:0B:B5:4C:0B:C0:76:66:65:40:F9:05:00 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834413F737AC781C50573F1EDACCF22 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3OxZ2gddbwULtUwLwHZmZUD5BQA.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3399 IP address blocks: 192.36.22.0/24 maxlen: 24 192.36.208.0/24 maxlen: 24 192.165.178.0/23 maxlen: 23 193.180.23.0/24 maxlen: 24 193.180.96.0/22 maxlen: 22 193.180.164.0/23 maxlen: 23 193.181.248.0/22 maxlen: 22 193.182.111.0/24 maxlen: 24 193.183.68.0/23 maxlen: 23 193.183.116.0/24 maxlen: 24 193.183.132.0/23 maxlen: 23 194.14.188.0/23 maxlen: 23 194.68.170.0/23 maxlen: 23 194.68.170.0/24 maxlen: 24 194.68.171.0/24 maxlen: 24 194.68.220.0/23 maxlen: 23 194.71.216.0/23 maxlen: 23 194.71.216.0/24 maxlen: 24 194.71.217.0/24 maxlen: 24 194.103.80.0/22 maxlen: 22 194.132.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:41:3f:73:7a:c7:81:c5:05:73:f1:ed:ac:cf:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcec59da075d6f050bb54c0bc076666540f90500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:7e:3e:2f:d9:7e:c6:46:c7:8c:8d:dd:46: 69:17:8f:d6:b0:67:98:e6:ba:b1:05:44:cb:3b:5e: 85:b2:c5:9d:e0:c6:4d:c6:9e:f6:5b:9c:3e:57:85: c4:ed:8d:2f:4b:e1:36:30:44:69:c4:9a:9f:10:d2: ae:8e:4c:7e:44:b1:be:ec:9c:aa:0a:a0:5d:cf:37: e1:04:fb:7c:f5:0a:c6:a3:ee:a4:99:06:ec:5c:d6: 0c:a8:05:1e:f4:0f:97:53:97:24:9f:9a:55:fc:f1: fa:9b:85:ac:a6:f1:70:30:b0:54:40:75:f3:d2:cb: 14:16:03:b6:28:26:7f:ad:02:4d:1c:00:c7:f0:12: 69:97:de:74:64:72:b0:72:2b:b6:37:91:c7:2d:0f: 85:0e:fb:89:43:bd:d4:f6:2e:fa:3a:c8:ea:e6:99: ce:1b:1d:0a:f5:25:f6:3e:1c:a4:02:0e:61:d2:6d: 9e:15:d5:91:b6:96:3c:70:d0:70:db:9a:04:68:64: 34:f1:6d:2d:b5:7e:b7:5f:60:60:d1:a5:9c:dc:16: 45:1c:97:b4:1d:99:5a:42:df:ba:bb:17:da:8f:fd: 96:9a:bc:db:49:ee:0c:a6:3f:0f:b7:99:89:c0:af: da:12:b5:85:a9:6a:4a:f1:ec:ec:36:df:78:54:a0: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EC:59:DA:07:5D:6F:05:0B:B5:4C:0B:C0:76:66:65:40:F9:05:00 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3OxZ2gddbwULtUwLwHZmZUD5BQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.22.0/24 192.36.208.0/24 192.165.178.0/23 193.180.23.0/24 193.180.96.0/22 193.180.164.0/23 193.181.248.0/22 193.182.111.0/24 193.183.68.0/23 193.183.116.0/24 193.183.132.0/23 194.14.188.0/23 194.68.170.0/23 194.68.220.0/23 194.71.216.0/23 194.103.80.0/22 194.132.40.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:23:8e:eb:56:7e:70:18:6a:bd:87:69:69:4a:08:aa:0f:03: c4:d1:30:80:52:f8:7b:4c:ab:88:54:d0:15:d4:4e:51:02:6d: dc:f2:75:a2:c6:42:df:ea:41:3c:82:61:2f:0a:0d:7e:32:b9: 55:c8:33:6c:6c:06:e9:67:b2:49:5e:a6:be:77:4d:87:98:49: c8:13:5e:1a:72:10:48:55:d9:a3:7c:c5:a1:74:8c:bc:5d:fd: ca:d4:05:b5:08:cc:98:0f:47:4d:54:6b:40:8e:3d:4c:e0:43: b8:d8:db:8f:de:01:fc:f7:17:43:12:42:65:9a:f1:ea:e7:60: f4:55:a0:80:a9:dd:94:88:4d:26:c0:00:03:b3:02:9e:be:8c: c3:30:17:fe:55:09:e6:83:75:f0:c3:89:ff:d5:8a:0c:5b:40: a3:15:c2:9e:91:91:6a:6b:26:f5:68:7a:c0:dd:08:a4:89:a5: 9b:ce:ea:91:d5:02:22:cf:5e:e7:da:f4:fd:79:8a:12:d0:98: c6:88:44:67:03:cd:c5:2c:e4:06:0e:50:c9:63:35:6c:2c:6f: e1:9b:39:db:51:1a:63:c4:f5:c9:a5:19:c5:b0:05:89:54:47: d1:53:3e:e9:75:95:ac:ce:1c:c3:df:af:82:c0:41:34:26:e7: 87:d1:df:4e -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt4NEE/c3rHgcUFc/HtrM8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2VjNTlkYTA3NWQ2ZjA1MGJiNTRjMGJjMDc2NjY2NTQwZjkwNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssl+Pi/ZfsZGx4yN3UZpF4/WsGeY 5rqxBUTLO16FssWd4MZNxp72W5w+V4XE7Y0vS+E2MERpxJqfENKujkx+RLG+7Jyq CqBdzzfhBPt89QrGo+6kmQbsXNYMqAUe9A+XU5ckn5pV/PH6m4WspvFwMLBUQHXz 0ssUFgO2KCZ/rQJNHADH8BJpl950ZHKwciu2N5HHLQ+FDvuJQ73U9i76Osjq5pnO Gx0K9SX2PhykAg5h0m2eFdWRtpY8cNBw25oEaGQ08W0ttX63X2Bg0aWc3BZFHJe0 HZlaQt+6uxfaj/2WmrzbSe4Mpj8Pt5mJwK/aErWFqWpK8ezsNt94VKDh8wIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFNzsWdoHXW8FC7VMC8B2ZmVA+QUAMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvM094WjJnZGRid1VMdFV3THdIWm1aVUQ1QlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAwCQWAwQA wCTQAwQBwKWyAwQAwbQXAwQCwbRgAwQBwbSkAwQCwbX4AwQAwbZvAwQBwbdEAwQA wbd0AwQBwbeEAwQBwg68AwQBwkSqAwQBwkTcAwQBwkfYAwQCwmdQAwQCwoQoMA0G CSqGSIb3DQEBCwUAA4IBAQBMI47rVn5wGGq9h2lpSgiqDwPE0TCAUvh7TKuIVNAV 1E5RAm3c8nWixkLf6kE8gmEvCg1+MrlVyDNsbAbpZ7JJXqa+d02HmEnIE14achBI VdmjfMWhdIy8Xf3K1AW1CMyYD0dNVGtAjj1M4EO42NuP3gH89xdDEkJlmvHq52D0 VaCAqd2UiE0mwAADswKevozDMBf+VQnmg3Xww4n/1YoMW0CjFcKekZFqayb1aHrA 3QikiaWbzuqR1QIiz17n2vT9eYoS0JjGiERnA83FLOQGDlDJYzVsLG/hmznbURpj xPXJpRnFsAWJVEfRUz7pdZWszhzD36+CwEE0JueH0d9O -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:51 2026 by rpki-client