This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Dt47v1s_kr2nj8GpwOUJl75vIJ0.roa File: Dt47v1s_kr2nj8GpwOUJl75vIJ0.roa (raw, json) Hash identifier: NfCgIOkoXUWJqZJXjH6e5BZyGquueaT63SjuNT9ULJQ= Subject key identifier: 0E:DE:3B:BF:5B:3F:92:BD:A7:8F:C1:A9:C0:E5:09:97:BE:6F:20:9D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78347DCF767C7E2F5523F111C806C4DC Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Dt47v1s_kr2nj8GpwOUJl75vIJ0.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201216 IP address blocks: 192.36.107.0/24 maxlen: 24 192.36.108.0/24 maxlen: 24 192.36.235.0/24 maxlen: 24 192.36.252.0/24 maxlen: 24 192.71.39.0/24 maxlen: 24 192.71.183.0/24 maxlen: 24 192.71.226.0/24 maxlen: 24 192.121.57.0/24 maxlen: 24 192.121.59.0/24 maxlen: 24 192.121.90.0/24 maxlen: 24 192.121.248.0/24 maxlen: 24 192.176.45.0/24 maxlen: 24 192.176.228.0/24 maxlen: 24 193.181.192.0/24 maxlen: 24 193.181.193.0/24 maxlen: 24 193.183.145.0/24 maxlen: 24 193.183.146.0/24 maxlen: 24 193.234.98.0/24 maxlen: 24 193.235.1.0/24 maxlen: 24 193.235.3.0/24 maxlen: 24 193.235.32.0/24 maxlen: 24 194.14.35.0/24 maxlen: 24 194.14.39.0/24 maxlen: 24 194.14.177.0/24 maxlen: 24 194.68.37.0/24 maxlen: 24 194.68.38.0/24 maxlen: 24 194.68.161.0/24 maxlen: 24 194.71.92.0/24 maxlen: 24 194.71.111.0/24 maxlen: 24 194.71.242.0/24 maxlen: 24 194.103.52.0/24 maxlen: 24 194.132.29.0/24 maxlen: 24 194.132.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7d:cf:76:7c:7e:2f:55:23:f1:11:c8:06:c4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ede3bbf5b3f92bda78fc1a9c0e50997be6f209d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:8d:f9:98:66:16:d1:ea:f6:c3:75:1f:61: 37:7c:52:6d:ea:b0:a7:66:65:41:6d:5e:4d:22:eb: 26:63:53:d2:98:18:f5:e6:bf:9a:53:74:e9:c4:81: ef:17:2a:ba:9a:13:ab:6c:b1:5f:8f:19:0c:b7:a7: 6b:57:31:c5:30:e6:81:a3:c2:2d:55:0d:c7:48:68: ac:01:e8:36:0f:11:46:40:9b:3f:76:e7:90:73:38: 01:12:c9:8b:f8:ed:27:d1:78:9e:2e:eb:1d:82:ff: 27:f6:34:d2:5d:2d:76:10:74:5a:72:00:19:ac:87: f7:28:88:2d:50:ef:78:ee:59:03:89:db:64:e2:92: ac:16:77:ec:b4:f9:17:65:5e:9d:60:69:93:14:92: 0f:1a:97:86:62:1b:2f:fc:22:97:96:f1:8b:5e:06: 99:d2:a2:ed:2c:48:90:96:a0:70:b0:96:88:aa:a5: 63:a3:d3:36:e1:27:0d:e5:b1:be:a7:34:6e:c3:e3: a6:2b:fe:56:a5:2d:16:b5:0e:b3:62:51:79:fb:13: bb:fc:b3:0a:fe:53:bb:36:fd:3c:66:5d:66:52:90: 16:37:f0:2e:e2:3b:02:66:d9:a1:a8:89:b3:6a:b2: 95:9f:76:1e:6e:b8:91:0b:61:72:da:f1:50:b2:92: 98:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DE:3B:BF:5B:3F:92:BD:A7:8F:C1:A9:C0:E5:09:97:BE:6F:20:9D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Dt47v1s_kr2nj8GpwOUJl75vIJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.107.0-192.36.108.255 192.36.235.0/24 192.36.252.0/24 192.71.39.0/24 192.71.183.0/24 192.71.226.0/24 192.121.57.0/24 192.121.59.0/24 192.121.90.0/24 192.121.248.0/24 192.176.45.0/24 192.176.228.0/24 193.181.192.0/23 193.183.145.0-193.183.146.255 193.234.98.0/24 193.235.1.0/24 193.235.3.0/24 193.235.32.0/24 194.14.35.0/24 194.14.39.0/24 194.14.177.0/24 194.68.37.0-194.68.38.255 194.68.161.0/24 194.71.92.0/24 194.71.111.0/24 194.71.242.0/24 194.103.52.0/24 194.132.29.0/24 194.132.59.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:ba:02:00:10:d4:3b:f8:10:37:e7:77:77:32:fa:7f:5c:cb: 66:0e:70:fe:65:a6:44:ed:c2:a2:52:36:15:fd:7c:36:bb:64: 7b:07:a7:e8:22:b7:a3:00:ab:b9:2b:8f:5d:a0:1d:99:2e:51: 52:7a:70:d6:b2:b5:52:4e:d1:5d:7c:fd:c0:e5:19:05:b5:96: 57:67:30:8a:0d:60:38:79:c8:22:af:dc:f9:36:6f:70:52:85: 23:f9:6d:a4:0b:71:1c:e5:0a:97:f9:14:ac:11:3c:f0:d5:fc: de:c6:a2:5c:45:9a:53:57:56:72:33:43:b0:e0:8c:98:1c:66: 18:c8:7c:64:85:d1:cd:ff:ba:bd:a6:93:19:03:20:8c:34:e0: fb:2d:eb:31:b2:4e:d4:c7:fe:de:50:78:ef:e8:b2:a3:2d:70: 8d:37:92:43:c9:90:f0:b9:99:2e:45:53:c1:07:35:bd:e7:9a: ea:e4:b6:76:72:f5:c0:ae:2f:86:fd:01:f2:e1:35:92:b4:79: 0d:91:e0:ed:3b:29:07:19:87:27:ff:7a:e9:96:f0:62:bc:93: 61:53:96:0f:ef:71:1d:16:38:27:c7:06:43:97:31:68:51:c8: 54:7a:9b:b4:68:ab:17:11:60:87:79:db:e0:30:48:24:28:58: d2:90:90:fc -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt4NH3Pdnx+L1Uj8RHIBsTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWRlM2JiZjViM2Y5MmJkYTc4ZmMxYTljMGU1MDk5N2JlNmYyMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtON+ZhmFtHq9sN1H2E3fFJt6rCn ZmVBbV5NIusmY1PSmBj15r+aU3TpxIHvFyq6mhOrbLFfjxkMt6drVzHFMOaBo8It VQ3HSGisAeg2DxFGQJs/dueQczgBEsmL+O0n0XieLusdgv8n9jTSXS12EHRacgAZ rIf3KIgtUO947lkDidtk4pKsFnfstPkXZV6dYGmTFJIPGpeGYhsv/CKXlvGLXgaZ 0qLtLEiQlqBwsJaIqqVjo9M24ScN5bG+pzRuw+OmK/5WpS0WtQ6zYlF5+xO7/LMK /lO7Nv08Zl1mUpAWN/Au4jsCZtmhqImzarKVn3YebriRC2Fy2vFQspKYlQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFA7eO79bP5K9p4/BqcDlCZe+byCdMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRHQ0N3Yxc19rcjJuajhHcHdPVUpsNzV2SUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DCBzQQCAAEwgcYwDAME AMAkawMEAMAkbAMEAMAk6wMEAMAk/AMEAMBHJwMEAMBHtwMEAMBH4gMEAMB5OQME AMB5OwMEAMB5WgMEAMB5+AMEAMCwLQMEAMCw5AMEAcG1wDAMAwQAwbeRAwQAwbeS AwQAwepiAwQAwesBAwQAwesDAwQAwesgAwQAwg4jAwQAwg4nAwQAwg6xMAwDBADC RCUDBADCRCYDBADCRKEDBADCR1wDBADCR28DBADCR/IDBADCZzQDBADChB0DBADC hDswDQYJKoZIhvcNAQELBQADggEBADy6AgAQ1Dv4EDfnd3cy+n9cy2YOcP5lpkTt wqJSNhX9fDa7ZHsHp+git6MAq7krj12gHZkuUVJ6cNaytVJO0V18/cDlGQW1lldn MIoNYDh5yCKv3Pk2b3BShSP5baQLcRzlCpf5FKwRPPDV/N7GolxFmlNXVnIzQ7Dg jJgcZhjIfGSF0c3/ur2mkxkDIIw04Pst6zGyTtTH/t5QeO/osqMtcI03kkPJkPC5 mS5FU8EHNb3nmurktnZy9cCuL4b9AfLhNZK0eQ2R4O07KQcZhyf/eumW8GK8k2FT lg/vcR0WOCfHBkOXMWhRyFR6m7RoqxcRYId52+AwSCQoWNKQkPw= -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:02 2026 by rpki-client