This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B3AeOItoviAd7FWHipR6fFZZdNg.roa File: B3AeOItoviAd7FWHipR6fFZZdNg.roa (raw, json) Hash identifier: l/xTJkG6MX8Nz2P4LITI6nSuDCemF4NzwjnbRnt18Lw= Subject key identifier: 07:70:1E:38:8B:68:BE:20:1D:EC:55:87:8A:94:7A:7C:56:59:74:D8 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345B01516324966AC6F0F92B38389F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B3AeOItoviAd7FWHipR6fFZZdNg.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42649 IP address blocks: 192.165.127.0/24 maxlen: 24 192.165.138.0/23 maxlen: 24 193.180.20.0/24 maxlen: 24 193.180.121.0/24 maxlen: 24 193.183.161.0/24 maxlen: 24 193.183.162.0/24 maxlen: 24 193.183.163.0/24 maxlen: 24 193.183.239.0/24 maxlen: 24 193.234.83.0/24 maxlen: 24 193.234.86.0/24 maxlen: 24 193.234.255.0/24 maxlen: 24 193.235.73.0/24 maxlen: 24 193.235.130.0/24 maxlen: 24 194.68.43.0/24 maxlen: 24 194.68.159.0/24 maxlen: 24 194.68.160.0/24 maxlen: 24 194.103.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5b:01:51:63:24:96:6a:c6:f0:f9:2b:38:38:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07701e388b68be201dec55878a947a7c565974d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7d:9a:aa:90:c5:a2:ee:0a:d9:9a:2f:d1:9b: 7d:59:34:a9:58:b9:e8:0c:0b:25:53:a6:78:06:b5: 1f:99:e5:3c:e9:60:5b:20:ce:87:e2:05:ed:17:d6: 76:d1:7b:46:99:38:1c:92:ae:2d:94:d4:66:8f:f4: 09:73:ea:a7:75:25:bb:39:fe:82:ce:da:d8:7b:37: 0d:47:8b:93:01:2b:a8:6c:a8:1a:45:8d:4e:96:ec: 7d:a7:00:8c:0a:bf:d7:4a:d7:1d:1c:9d:ca:17:c5: 6a:2b:53:68:bc:f2:78:92:db:c4:46:a7:bd:f0:2e: fd:d1:3a:a2:12:0d:07:11:c8:b4:28:03:05:87:6f: 5e:17:4f:43:8b:99:b1:02:78:87:50:42:93:5a:30: e5:e1:3a:93:c1:dc:24:88:fe:b8:51:7c:41:83:74: a1:75:14:0c:46:87:3c:0e:95:df:04:e5:1f:4d:9b: e4:ea:98:22:9d:33:44:ed:c9:41:82:1a:05:f7:1d: f0:6a:8d:06:de:23:fc:18:7b:9a:a2:92:a2:ea:8a: 7b:c1:11:20:62:45:ad:aa:df:35:85:e7:35:2d:4e: 64:12:b6:8d:08:7e:9c:70:c7:3c:ca:57:1d:4d:a2: ee:5d:5a:ca:0d:22:79:ed:2c:57:ce:76:06:88:fc: 18:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:70:1E:38:8B:68:BE:20:1D:EC:55:87:8A:94:7A:7C:56:59:74:D8 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B3AeOItoviAd7FWHipR6fFZZdNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.165.127.0/24 192.165.138.0/23 193.180.20.0/24 193.180.121.0/24 193.183.161.0-193.183.163.255 193.183.239.0/24 193.234.83.0/24 193.234.86.0/24 193.234.255.0/24 193.235.73.0/24 193.235.130.0/24 194.68.43.0/24 194.68.159.0-194.68.160.255 194.103.4.0/24 Signature Algorithm: sha256WithRSAEncryption 50:34:ef:ad:d7:85:46:61:33:20:bd:d4:8a:62:a7:c4:91:8a: 0e:d6:5a:42:24:dc:99:bc:ba:1a:a7:61:78:a9:ea:a9:0a:5d: bc:53:c3:cb:0c:2d:70:bc:d3:9a:60:1a:1d:3f:1a:e8:b4:5e: 01:a1:8f:0f:e9:c1:91:66:9f:84:14:7b:e2:56:03:98:86:6c: d6:d3:4f:10:c6:85:63:17:bf:48:78:1a:c0:26:e8:82:93:a1: cb:79:5a:17:18:20:c5:bb:83:ec:04:f3:6c:84:39:09:50:cb: 22:de:73:65:d8:af:de:eb:53:8e:c5:bf:31:ea:33:fe:96:1b: fd:c1:4d:82:a3:1e:ff:18:e9:40:87:e6:71:43:c8:4a:3c:4f: a2:6a:16:ed:b9:76:3d:1f:8f:bd:b7:fa:98:2d:fa:4d:93:33: 7a:a5:3a:79:d4:61:72:97:12:4d:0b:f7:27:aa:0f:63:3e:11: 69:35:1c:4c:86:76:40:0c:ef:6a:3b:f3:35:81:61:45:34:1d: 5f:02:a1:9c:ec:a6:70:53:57:d2:5b:1b:ff:f6:22:bd:96:5f: 59:f6:6e:a5:49:10:14:cc:12:67:ff:83:b7:df:b1:85:93:65: 1e:1c:b0:5c:3f:90:49:00:ce:e9:a8:44:6f:ba:df:f3:bd:b3: 8c:e7:5d:88 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt4NFsBUWMklmrG8PkrODifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzcwMWUzODhiNjhiZTIwMWRlYzU1ODc4YTk0N2E3YzU2NTk3NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n2aqpDFou4K2Zov0Zt9WTSpWLno DAslU6Z4BrUfmeU86WBbIM6H4gXtF9Z20XtGmTgckq4tlNRmj/QJc+qndSW7Of6C ztrYezcNR4uTASuobKgaRY1Olux9pwCMCr/XStcdHJ3KF8VqK1NovPJ4ktvERqe9 8C790TqiEg0HEci0KAMFh29eF09Di5mxAniHUEKTWjDl4TqTwdwkiP64UXxBg3Sh dRQMRoc8DpXfBOUfTZvk6pginTNE7clBghoF9x3wao0G3iP8GHuaopKi6op7wREg YkWtqt81hec1LU5kEraNCH6ccMc8ylcdTaLuXVrKDSJ57SxXznYGiPwYYwIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFAdwHjiLaL4gHexVh4qUenxWWXTYMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQjNBZU9JdG92aUFkN0ZXSGlwUjZmRlpaZE5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQAwKV/AwQB wKWKAwQAwbQUAwQAwbR5MAwDBADBt6EDBALBt6ADBADBt+8DBADB6lMDBADB6lYD BADB6v8DBADB60kDBADB64IDBADCRCswDAMEAMJEnwMEAMJEoAMEAMJnBDANBgkq hkiG9w0BAQsFAAOCAQEAUDTvrdeFRmEzIL3UimKnxJGKDtZaQiTcmby6GqdheKnq qQpdvFPDywwtcLzTmmAaHT8a6LReAaGPD+nBkWafhBR74lYDmIZs1tNPEMaFYxe/ SHgawCbogpOhy3laFxggxbuD7ATzbIQ5CVDLIt5zZdiv3utTjsW/Meoz/pYb/cFN gqMe/xjpQIfmcUPISjxPomoW7bl2PR+Pvbf6mC36TZMzeqU6edRhcpcSTQv3J6oP Yz4RaTUcTIZ2QAzvajvzNYFhRTQdXwKhnOymcFNX0lsb//YivZZfWfZupUkQFMwS Z/+Dt9+xhZNlHhywXD+QSQDO6ahEb7rf872zjOddiA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:47 2026 by rpki-client