This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3iKTBV-g-pE0lx493y-eHg7ezSA.roa File: 3iKTBV-g-pE0lx493y-eHg7ezSA.roa (raw, json) Hash identifier: IDqqyS7fLxVjFkcOhghMUkhUP1hWej66DYh92ktIVbM= Subject key identifier: DE:22:93:05:5F:A0:FA:91:34:97:1E:3D:DF:2F:9E:1E:0E:DE:CD:20 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019A53F4CCE49AE9673D511420DCDFA232F4 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3iKTBV-g-pE0lx493y-eHg7ezSA.roa Signing time: Wed 05 Nov 2025 12:19:03 +0000 ROA not before: Wed 05 Nov 2025 12:19:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201216 IP address blocks: 192.36.107.0/24 maxlen: 24 192.36.108.0/24 maxlen: 24 192.36.235.0/24 maxlen: 24 192.36.252.0/24 maxlen: 24 192.71.39.0/24 maxlen: 24 192.71.183.0/24 maxlen: 24 192.71.226.0/24 maxlen: 24 192.121.57.0/24 maxlen: 24 192.121.59.0/24 maxlen: 24 192.121.90.0/24 maxlen: 24 192.121.248.0/24 maxlen: 24 192.176.45.0/24 maxlen: 24 192.176.228.0/24 maxlen: 24 193.181.192.0/24 maxlen: 24 193.181.193.0/24 maxlen: 24 193.183.145.0/24 maxlen: 24 193.183.146.0/24 maxlen: 24 193.234.98.0/24 maxlen: 24 193.235.1.0/24 maxlen: 24 193.235.3.0/24 maxlen: 24 193.235.32.0/24 maxlen: 24 194.14.35.0/24 maxlen: 24 194.14.39.0/24 maxlen: 24 194.14.177.0/24 maxlen: 24 194.68.37.0/24 maxlen: 24 194.68.38.0/24 maxlen: 24 194.68.161.0/24 maxlen: 24 194.71.92.0/24 maxlen: 24 194.71.111.0/24 maxlen: 24 194.71.242.0/24 maxlen: 24 194.103.52.0/24 maxlen: 24 194.132.29.0/24 maxlen: 24 194.132.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:f4:cc:e4:9a:e9:67:3d:51:14:20:dc:df:a2:32:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 5 12:19:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de2293055fa0fa9134971e3ddf2f9e1e0edecd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:4d:f4:a2:ba:78:05:42:d9:a1:83:94:eb: df:e6:b5:9e:04:4b:93:38:80:0e:17:9c:af:81:e4: 46:49:f6:a8:61:20:a4:e2:f3:cf:39:cb:86:3d:65: 15:3c:31:b0:6b:98:e4:fe:d4:a9:42:98:d2:18:e5: a1:26:d5:c3:4a:bd:47:3b:5a:76:c5:3f:b2:27:51: 04:d8:55:3f:4a:af:b3:44:84:c8:14:29:f4:07:c3: 7c:85:9d:59:ac:e7:18:d1:b5:f3:e8:67:55:38:75: 89:3c:cf:59:7b:88:c7:c4:bb:85:66:04:1f:39:da: bd:60:f3:1a:2d:40:a9:fc:43:6c:27:3e:ae:24:da: ff:06:17:ea:e3:ff:8b:ae:87:fd:cd:c7:9a:b6:be: f8:a2:2e:0c:6b:ae:4b:4d:6a:3c:dd:63:7b:0c:87: 7b:9e:61:7c:24:99:58:9d:e2:cb:68:04:f8:3c:b1: 8e:3d:8d:a5:fd:22:f3:2c:7e:92:90:e3:25:71:6c: c5:c7:f3:52:9f:95:85:b3:b8:7b:3c:0b:12:cf:e4: 16:81:a4:e8:3e:d8:6b:39:d6:41:25:78:03:42:c6: 05:62:60:ae:53:fb:8b:bb:b8:61:e6:37:d3:76:66: 2a:ae:f4:6b:b0:c3:68:71:f7:6c:86:ad:97:0c:fe: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:22:93:05:5F:A0:FA:91:34:97:1E:3D:DF:2F:9E:1E:0E:DE:CD:20 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3iKTBV-g-pE0lx493y-eHg7ezSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.107.0-192.36.108.255 192.36.235.0/24 192.36.252.0/24 192.71.39.0/24 192.71.183.0/24 192.71.226.0/24 192.121.57.0/24 192.121.59.0/24 192.121.90.0/24 192.121.248.0/24 192.176.45.0/24 192.176.228.0/24 193.181.192.0/23 193.183.145.0-193.183.146.255 193.234.98.0/24 193.235.1.0/24 193.235.3.0/24 193.235.32.0/24 194.14.35.0/24 194.14.39.0/24 194.14.177.0/24 194.68.37.0-194.68.38.255 194.68.161.0/24 194.71.92.0/24 194.71.111.0/24 194.71.242.0/24 194.103.52.0/24 194.132.29.0/24 194.132.59.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:e6:03:2b:29:c6:bc:6c:19:2c:a8:71:c0:8a:f7:19:6d:37: a9:d3:6a:83:6b:1b:12:a4:f6:27:f0:89:6b:90:66:8f:53:22: 92:3f:40:f4:b9:6e:85:0d:69:b8:7e:08:cf:ff:66:a7:42:4b: f9:d5:1b:7c:7e:0f:90:d6:0c:3f:cc:89:e8:a0:13:0f:39:8d: 09:4e:98:71:be:a6:02:20:5e:b2:b0:33:ef:fe:16:52:01:fa: ee:d1:6d:56:22:02:33:41:ab:1f:db:e0:e6:36:02:6f:9c:8a: 82:60:00:5c:4d:ee:c1:6a:b0:a0:91:06:b5:97:03:b7:1f:69: b2:f5:1c:94:f5:f0:80:b9:21:fa:48:61:58:a9:93:f9:dd:55: 59:07:1a:16:41:da:bc:0d:94:d1:89:10:ce:ef:a2:83:35:9f: 3b:5c:ec:60:9f:78:47:22:c6:38:bf:d3:77:ce:81:19:fe:7d: c4:fb:fa:48:36:f5:4a:92:20:6b:71:1c:71:72:b8:78:e8:ce: 58:d2:f5:27:49:71:71:da:83:72:d1:a1:95:fc:97:b3:cf:04: 2a:fd:a0:2c:f8:cc:7b:65:80:82:1b:24:a5:28:be:80:51:75: c8:d0:69:a3:0b:1a:6b:f4:65:fa:a7:b6:5d:f3:86:79:7e:d1: d6:04:b1:5e -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZpT9MzkmulnPVEUINzfojL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTA1MTIxOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTIyOTMwNTVmYTBmYTkxMzQ5NzFlM2RkZjJmOWUxZTBlZGVjZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYtN9KK6eAVC2aGDlOvf5rWeBEuT OIAOF5yvgeRGSfaoYSCk4vPPOcuGPWUVPDGwa5jk/tSpQpjSGOWhJtXDSr1HO1p2 xT+yJ1EE2FU/Sq+zRITIFCn0B8N8hZ1ZrOcY0bXz6GdVOHWJPM9Ze4jHxLuFZgQf Odq9YPMaLUCp/ENsJz6uJNr/Bhfq4/+Lrof9zceatr74oi4Ma65LTWo83WN7DId7 nmF8JJlYneLLaAT4PLGOPY2l/SLzLH6SkOMlcWzFx/NSn5WFs7h7PAsSz+QWgaTo PthrOdZBJXgDQsYFYmCuU/uLu7hh5jfTdmYqrvRrsMNocfdshq2XDP7B9QIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFN4ikwVfoPqRNJcePd8vnh4O3s0gMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvM2lLVEJWLWctcEUwbHg0OTN5LWVIZzdlelNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DCBzQQCAAEwgcYwDAME AMAkawMEAMAkbAMEAMAk6wMEAMAk/AMEAMBHJwMEAMBHtwMEAMBH4gMEAMB5OQME AMB5OwMEAMB5WgMEAMB5+AMEAMCwLQMEAMCw5AMEAcG1wDAMAwQAwbeRAwQAwbeS AwQAwepiAwQAwesBAwQAwesDAwQAwesgAwQAwg4jAwQAwg4nAwQAwg6xMAwDBADC RCUDBADCRCYDBADCRKEDBADCR1wDBADCR28DBADCR/IDBADCZzQDBADChB0DBADC hDswDQYJKoZIhvcNAQELBQADggEBAFrmAyspxrxsGSyoccCK9xltN6nTaoNrGxKk 9ifwiWuQZo9TIpI/QPS5boUNabh+CM//ZqdCS/nVG3x+D5DWDD/MieigEw85jQlO mHG+pgIgXrKwM+/+FlIB+u7RbVYiAjNBqx/b4OY2Am+cioJgAFxN7sFqsKCRBrWX A7cfabL1HJT18IC5IfpIYVipk/ndVVkHGhZB2rwNlNGJEM7vooM1nztc7GCfeEci xji/03fOgRn+fcT7+kg29UqSIGtxHHFyuHjozljS9SdJcXHag3LRoZX8l7PPBCr9 oCz4zHtlgIIbJKUovoBRdcjQaaMLGmv0Zfqntl3zhnl+0dYEsV4= -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:13 2025 by rpki-client