This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dAcM0V74NzUrFMWYTLkDl087YC4.roa File: dAcM0V74NzUrFMWYTLkDl087YC4.roa (raw, json) Hash identifier: ye4IUWWOyoclvJsC99pCrIhLIm4jpzQC9L5aC5llgJM= Subject key identifier: 74:07:0C:D1:5E:F8:37:35:2B:14:C5:98:4C:B9:03:97:4F:3B:60:2E Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783464449FE0153E569BFC2D35C815D1 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dAcM0V74NzUrFMWYTLkDl087YC4.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48803 IP address blocks: 193.183.148.0/22 maxlen: 22 193.183.192.0/24 maxlen: 24 193.183.194.0/24 maxlen: 24 193.183.195.0/24 maxlen: 24 193.183.212.0/24 maxlen: 24 193.183.213.0/24 maxlen: 24 193.183.215.0/24 maxlen: 24 193.183.250.0/23 maxlen: 23 193.234.72.0/22 maxlen: 24 193.234.72.0/24 maxlen: 24 193.234.73.0/24 maxlen: 24 193.234.74.0/24 maxlen: 24 193.234.75.0/24 maxlen: 24 193.234.108.0/24 maxlen: 24 193.234.109.0/24 maxlen: 24 193.234.111.0/24 maxlen: 24 194.68.117.0/24 maxlen: 24 194.132.224.0/22 maxlen: 24 194.132.224.0/24 maxlen: 24 194.132.225.0/24 maxlen: 24 194.132.226.0/24 maxlen: 24 194.132.227.0/24 maxlen: 24 194.132.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:64:44:9f:e0:15:3e:56:9b:fc:2d:35:c8:15:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74070cd15ef837352b14c5984cb903974f3b602e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:ac:3e:b7:ad:6a:56:58:c2:a3:a6:eb:e2: 16:67:1b:43:7f:77:2f:0e:9f:1f:3d:fc:9b:09:d7: 2c:b4:21:62:d4:22:b6:dc:94:25:46:87:c3:3b:e7: 44:dc:74:ac:d8:cf:e5:ec:a9:12:ee:19:a1:48:c0: 24:d3:a3:23:f5:25:d3:90:96:1e:e5:33:08:bf:93: 8d:a0:6a:b2:06:82:54:dc:c4:2d:0c:a4:f2:af:16: 0b:35:c3:2a:a3:68:5f:9d:a5:c5:07:dc:a9:35:d6: a6:e1:b9:1a:85:a2:9c:e4:78:7e:8b:a7:a4:54:5b: 85:10:b8:cc:05:e8:f6:05:65:c7:4f:a6:1d:9a:5d: 46:54:cd:a6:34:9f:78:87:b9:bb:0c:4a:74:20:2c: 2a:25:60:c2:a6:fa:40:89:ea:a9:07:58:22:ff:4a: 22:70:b9:0f:79:ec:62:77:ce:13:55:29:e1:7d:bf: ea:e4:18:aa:59:76:c1:df:4e:12:f3:20:2d:ac:07: a0:46:be:9f:3f:2b:bc:d0:fe:57:ee:15:23:0c:73: 33:2d:b8:6d:d4:7f:fd:9f:17:c9:f2:fb:50:57:e5: 0f:4f:ac:89:d9:ed:c3:b9:ba:4a:87:05:e9:c0:86: 66:49:c3:18:ad:fd:52:b0:a6:8f:50:96:c5:15:0e: d3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:07:0C:D1:5E:F8:37:35:2B:14:C5:98:4C:B9:03:97:4F:3B:60:2E X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dAcM0V74NzUrFMWYTLkDl087YC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.148.0/22 193.183.192.0/24 193.183.194.0/23 193.183.212.0/23 193.183.215.0/24 193.183.250.0/23 193.234.72.0/22 193.234.108.0/23 193.234.111.0/24 194.68.117.0/24 194.132.224.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:5a:e8:5b:f2:84:0f:e6:f2:d5:70:54:41:52:c7:6c:da:63: 47:c7:aa:32:5b:66:e2:99:2a:7c:90:fc:24:2a:3e:d8:e2:66: a8:33:4f:e5:ef:6e:6b:c2:c0:5c:f0:25:ae:98:97:20:fa:af: 25:80:94:91:4b:09:02:57:7f:90:c6:92:8d:2d:dd:d4:bb:88: 8c:78:0b:b5:91:3f:3e:4f:e2:ba:62:2f:77:fa:28:5c:70:f5: b0:e9:9e:df:b1:e4:da:96:aa:9e:8c:3c:64:d5:6a:98:6d:29: b9:f1:f2:41:02:ce:6a:5c:51:92:f9:5d:70:56:55:41:95:e6: 79:b1:33:7a:4e:6d:a9:98:95:1d:73:a5:88:04:22:f6:7e:e2: f3:06:e7:f5:2a:5d:51:08:9d:24:f8:54:b5:6e:0e:7f:d9:94: 7c:a7:fd:bc:72:3e:6c:df:1b:c0:0b:0a:69:ab:be:76:0b:a3: f1:4c:fb:24:42:78:f3:58:32:0d:64:a7:43:6b:dc:00:f8:c9: 7d:b8:51:91:5b:02:87:1e:61:f1:ca:fc:b4:57:a3:02:72:a0: e9:9b:0e:9f:0c:67:93:81:5b:41:1a:60:dc:a0:8d:0e:82:37: 50:b9:92:cb:6f:16:d2:6f:b1:d3:e1:f1:43:8e:75:0c:b0:d8: 25:53:43:12 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt4NGREn+AVPlab/C01yBXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDA3MGNkMTVlZjgzNzM1MmIxNGM1OTg0Y2I5MDM5NzRmM2I2MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLKsPretalZYwqOm6+IWZxtDf3cv Dp8fPfybCdcstCFi1CK23JQlRofDO+dE3HSs2M/l7KkS7hmhSMAk06Mj9SXTkJYe 5TMIv5ONoGqyBoJU3MQtDKTyrxYLNcMqo2hfnaXFB9ypNdam4bkahaKc5Hh+i6ek VFuFELjMBej2BWXHT6Ydml1GVM2mNJ94h7m7DEp0ICwqJWDCpvpAieqpB1gi/0oi cLkPeexid84TVSnhfb/q5BiqWXbB304S8yAtrAegRr6fPyu80P5X7hUjDHMzLbht 1H/9nxfJ8vtQV+UPT6yJ2e3DubpKhwXpwIZmScMYrf1SsKaPUJbFFQ7TwwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFHQHDNFe+Dc1KxTFmEy5A5dPO2AuMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZEFjTTBWNzROelVyRk1XWVRMa0RsMDg3WUM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCwbeUAwQA wbfAAwQBwbfCAwQBwbfUAwQAwbfXAwQBwbf6AwQCwepIAwQBwepsAwQAwepvAwQA wkR1AwQDwoTgMA0GCSqGSIb3DQEBCwUAA4IBAQBdWuhb8oQP5vLVcFRBUsds2mNH x6oyW2bimSp8kPwkKj7Y4maoM0/l725rwsBc8CWumJcg+q8lgJSRSwkCV3+QxpKN Ld3Uu4iMeAu1kT8+T+K6Yi93+ihccPWw6Z7fseTalqqejDxk1WqYbSm58fJBAs5q XFGS+V1wVlVBleZ5sTN6Tm2pmJUdc6WIBCL2fuLzBuf1Kl1RCJ0k+FS1bg5/2ZR8 p/28cj5s3xvACwppq752C6PxTPskQnjzWDINZKdDa9wA+Ml9uFGRWwKHHmHxyvy0 V6MCcqDpmw6fDGeTgVtBGmDcoI0OgjdQuZLLbxbSb7HT4fFDjnUMsNglU0MS -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:28 2026 by rpki-client