This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QVkraOJzJsftwJ9SAIC91EgQQ00.roa File: QVkraOJzJsftwJ9SAIC91EgQQ00.roa (raw, json) Hash identifier: IuhZIZLEJiuJgtnsF/3LcI3+nkarG4VgfZRp5Yawdxc= Subject key identifier: 41:59:2B:68:E2:73:26:C7:ED:C0:9F:52:00:80:BD:D4:48:10:43:4D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344699CA3D581E0F14760DD88BFA4A Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QVkraOJzJsftwJ9SAIC91EgQQ00.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8674 IP address blocks: 192.36.133.0/24 maxlen: 24 192.36.134.0/24 maxlen: 24 192.36.135.0/24 maxlen: 24 192.36.144.0/24 maxlen: 24 192.71.53.0/24 maxlen: 24 192.71.80.0/24 maxlen: 24 192.165.72.0/24 maxlen: 24 194.68.132.0/24 maxlen: 24 194.68.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:99:ca:3d:58:1e:0f:14:76:0d:d8:8b:fa:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41592b68e27326c7edc09f520080bdd44810434d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8a:fb:36:91:03:13:33:2a:be:25:7b:70:2e: 9b:0a:dc:02:cc:65:26:8f:73:1f:52:60:82:22:5d: f6:75:00:14:71:1f:f9:00:1b:ba:67:14:b7:ad:fb: d2:c2:e5:4a:4d:70:7e:78:13:20:17:1e:4f:9a:9c: 19:01:bc:34:c8:0f:d3:35:a5:5a:ed:3d:cc:30:82: 8f:39:dc:51:9e:bb:15:4d:f7:3d:ba:c7:2d:f0:80: 9b:c2:10:0c:d7:70:e5:d3:60:d6:52:15:3a:c4:d2: fd:54:f3:87:2c:8c:ac:f2:19:3a:8e:24:8a:4b:cf: 74:7d:b3:be:0d:41:51:bd:82:1b:a3:38:1c:c9:24: 8b:35:11:f3:6a:91:c3:0a:77:76:1c:07:73:dc:a0: 2f:bb:2d:4c:8d:a0:bf:5c:60:f9:82:63:60:e0:f7: be:ce:70:13:a4:d7:0d:d2:1d:e8:e7:db:45:ac:79: 1f:da:80:34:a2:a0:c4:80:19:25:d0:e7:96:45:46: 05:46:22:57:09:43:89:2e:5a:50:84:32:84:db:fc: 4f:ef:09:9b:d9:31:b2:26:a3:72:85:b4:38:7e:6b: 79:d1:26:07:5a:9d:ca:54:80:79:df:95:7d:32:30: 10:36:41:76:56:49:e4:c4:5a:a7:6d:4b:dc:2a:7d: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:2B:68:E2:73:26:C7:ED:C0:9F:52:00:80:BD:D4:48:10:43:4D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QVkraOJzJsftwJ9SAIC91EgQQ00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.133.0-192.36.135.255 192.36.144.0/24 192.71.53.0/24 192.71.80.0/24 192.165.72.0/24 194.68.132.0/24 194.68.134.0/24 Signature Algorithm: sha256WithRSAEncryption bb:02:97:01:b8:fc:72:9a:1e:a4:b8:ce:77:95:8e:20:08:93: 23:09:24:f2:73:dd:6b:cc:6b:1f:7a:02:6b:ba:2f:3f:c8:19: 00:18:9f:ab:7d:71:76:33:bf:a9:a1:c1:62:ac:1c:02:b8:ce: c6:91:1c:ae:23:d0:fc:12:d2:68:e4:01:e6:bd:28:e5:1e:50: e5:f9:d6:48:26:2e:0e:4e:59:3a:df:6a:ed:92:73:66:a7:c2: 91:53:36:ab:73:ea:04:24:92:5d:22:3e:95:3c:6c:12:45:cd: 44:1a:df:95:93:ec:29:c1:45:53:a1:53:31:84:04:9f:64:59: 56:b5:90:01:97:08:56:7f:68:64:57:cb:ef:7d:47:dd:39:48: ba:35:7e:8d:cf:ce:64:70:a4:19:b0:b7:9b:9d:ab:fc:f7:45: 80:30:54:35:9e:aa:92:75:84:50:16:9c:18:c5:57:0e:35:af: 37:2d:07:6d:6c:83:23:b5:dd:26:63:c6:2b:83:f4:a6:b3:86: 72:2d:f2:3f:da:bb:d4:af:da:2c:ef:22:40:d4:6f:49:b0:0d: eb:d7:34:1c:11:a2:79:b8:5d:b4:89:77:6a:82:ce:e4:fc:a3: 65:e0:3e:a9:92:e3:86:f9:8b:13:d2:29:22:d2:57:0a:d1:4b: ad:51:e6:2e -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4NEaZyj1YHg8Udg3Yi/pKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTU5MmI2OGUyNzMyNmM3ZWRjMDlmNTIwMDgwYmRkNDQ4MTA0MzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkor7NpEDEzMqviV7cC6bCtwCzGUm j3MfUmCCIl32dQAUcR/5ABu6ZxS3rfvSwuVKTXB+eBMgFx5PmpwZAbw0yA/TNaVa 7T3MMIKPOdxRnrsVTfc9usct8ICbwhAM13Dl02DWUhU6xNL9VPOHLIys8hk6jiSK S890fbO+DUFRvYIbozgcySSLNRHzapHDCnd2HAdz3KAvuy1MjaC/XGD5gmNg4Pe+ znATpNcN0h3o59tFrHkf2oA0oqDEgBkl0OeWRUYFRiJXCUOJLlpQhDKE2/xP7wmb 2TGyJqNyhbQ4fmt50SYHWp3KVIB535V9MjAQNkF2VknkxFqnbUvcKn041QIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFEFZK2jicybH7cCfUgCAvdRIEENNMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUVZrcmFPSnpKc2Z0d0o5U0FJQzkxRWdRUTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBADAJIUD BAPAJIADBADAJJADBADARzUDBADAR1ADBADApUgDBADCRIQDBADCRIYwDQYJKoZI hvcNAQELBQADggEBALsClwG4/HKaHqS4zneVjiAIkyMJJPJz3WvMax96Amu6Lz/I GQAYn6t9cXYzv6mhwWKsHAK4zsaRHK4j0PwS0mjkAea9KOUeUOX51kgmLg5OWTrf au2Sc2anwpFTNqtz6gQkkl0iPpU8bBJFzUQa35WT7CnBRVOhUzGEBJ9kWVa1kAGX CFZ/aGRXy+99R905SLo1fo3PzmRwpBmwt5udq/z3RYAwVDWeqpJ1hFAWnBjFVw41 rzctB21sgyO13SZjxiuD9KazhnIt8j/au9Sv2izvIkDUb0mwDevXNBwRonm4XbSJ d2qCzuT8o2XgPqmS44b5ixPSKSLSVwrRS61R5i4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:29 2026 by rpki-client