This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/f50RxC1NVBVormqB1W0YprxARBU.roa File: f50RxC1NVBVormqB1W0YprxARBU.roa (raw, json) Hash identifier: 2VJ7fQ+9c7hFEpFaDOZi0izMIdQ4roeMDLcbuUO1C3c= Subject key identifier: 7F:9D:11:C4:2D:4D:54:15:68:AE:6A:81:D5:6D:18:A6:BC:40:44:15 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346F439A7838ABD6F3FA16ACC5CF4B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/f50RxC1NVBVormqB1W0YprxARBU.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57169 IP address blocks: 192.36.38.0/24 maxlen: 24 192.36.39.0/24 maxlen: 24 192.36.41.0/24 maxlen: 24 192.36.56.0/24 maxlen: 24 192.36.61.0/24 maxlen: 24 192.71.26.0/24 maxlen: 24 192.71.233.0/24 maxlen: 24 192.71.247.0/24 maxlen: 24 192.71.249.0/24 maxlen: 24 192.121.16.0/24 maxlen: 24 192.121.17.0/24 maxlen: 24 192.121.163.0/24 maxlen: 24 192.121.170.0/24 maxlen: 24 192.121.171.0/24 maxlen: 24 193.235.147.0/24 maxlen: 24 194.14.208.0/24 maxlen: 24 194.68.225.0/24 maxlen: 24 194.71.107.0/24 maxlen: 24 194.71.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6f:43:9a:78:38:ab:d6:f3:fa:16:ac:c5:cf:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f9d11c42d4d541568ae6a81d56d18a6bc404415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:13:61:2b:13:29:9b:b8:27:d5:09:bf:34: ef:1f:a3:95:8e:fa:3d:f3:4e:2f:55:f9:cc:5c:9a: ce:39:6d:22:4e:cd:d9:3d:8e:2b:ce:f6:e8:15:f5: a8:02:56:40:bb:25:50:6d:55:6a:d3:ba:6a:58:2a: 67:03:06:6a:a2:dc:a1:ca:7f:3e:b3:a0:6d:ed:fc: 02:9a:7b:96:b1:47:e2:5f:63:c9:26:d6:71:d4:ba: 18:8a:0d:19:7f:fa:03:6e:c2:c3:05:84:14:8d:64: bf:22:bc:a5:f0:35:44:6b:f3:55:89:68:cc:d1:1b: 58:f1:7c:a6:72:66:bf:d5:ec:f6:e5:ec:3e:76:81: d5:fe:12:8e:40:d3:01:d2:8c:2a:f7:0c:53:64:b5: 1f:32:4b:36:9b:9a:34:f2:ce:99:84:06:91:1a:3f: b9:06:75:bb:fc:77:c3:16:36:de:88:17:40:ed:95: f0:52:ec:84:18:6e:d1:80:8d:a7:26:63:f4:41:e4: 33:a6:19:94:4d:ea:98:ad:86:7f:ab:79:59:02:c8: 49:b7:82:f4:02:6e:6e:30:c0:b6:91:76:5f:9f:ca: ce:9c:ac:cd:14:35:45:a5:1a:da:86:a6:17:7c:6a: a2:b5:64:c8:04:b8:69:5b:1a:07:36:16:fe:ed:77: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9D:11:C4:2D:4D:54:15:68:AE:6A:81:D5:6D:18:A6:BC:40:44:15 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/f50RxC1NVBVormqB1W0YprxARBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.38.0/23 192.36.41.0/24 192.36.56.0/24 192.36.61.0/24 192.71.26.0/24 192.71.233.0/24 192.71.247.0/24 192.71.249.0/24 192.121.16.0/23 192.121.163.0/24 192.121.170.0/23 193.235.147.0/24 194.14.208.0/24 194.68.225.0/24 194.71.107.0/24 194.71.227.0/24 Signature Algorithm: sha256WithRSAEncryption b8:36:4b:e4:87:f4:4e:1a:76:97:f5:2c:4c:9a:23:5d:51:93: db:0d:b5:b2:d5:6e:e2:de:8d:9a:ec:07:ee:27:dd:e6:eb:78: 50:2b:79:82:b4:f2:db:ee:b9:04:eb:f9:2e:83:e3:f7:49:71: 3a:80:69:c0:7a:02:64:69:07:a8:c2:25:11:fa:4f:48:34:c5: 63:7b:ac:aa:51:ff:05:cd:5e:92:ac:09:91:12:05:b6:4f:6d: 7f:56:7c:d2:cf:7f:76:81:55:0b:26:66:01:5e:2f:fd:dd:9b: 29:d9:58:fe:5f:04:ab:5b:0e:76:64:29:7d:51:d0:4e:c9:d2: 70:c4:3a:b7:6d:ce:30:d6:2a:5d:00:c5:45:2a:e6:ea:bb:66: 36:be:b4:d9:75:44:0a:29:2b:00:f7:b2:30:f8:01:50:03:b3: c2:66:1b:3d:ec:6c:f7:c1:b8:90:af:64:67:34:5b:71:7b:e6: 35:f5:a4:07:62:77:7e:1c:25:35:09:39:f0:4d:c7:e0:3c:c0: 04:10:64:27:3a:f4:d1:63:c7:01:4d:8a:c1:67:bf:75:a4:20: 6b:2a:a9:d4:a9:9a:86:83:d8:00:55:4a:6e:f8:e7:64:40:58: ef:2c:ce:5d:a4:33:44:ba:d0:37:eb:c2:ef:9a:a1:bf:57:f6: 1c:ed:fa:23 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt4NG9Dmng4q9bz+hasxc9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjlkMTFjNDJkNGQ1NDE1NjhhZTZhODFkNTZkMThhNmJjNDA0NDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEwTYSsTKZu4J9UJvzTvH6OVjvo9 804vVfnMXJrOOW0iTs3ZPY4rzvboFfWoAlZAuyVQbVVq07pqWCpnAwZqotyhyn8+ s6Bt7fwCmnuWsUfiX2PJJtZx1LoYig0Zf/oDbsLDBYQUjWS/Iryl8DVEa/NViWjM 0RtY8Xymcma/1ez25ew+doHV/hKOQNMB0owq9wxTZLUfMks2m5o08s6ZhAaRGj+5 BnW7/HfDFjbeiBdA7ZXwUuyEGG7RgI2nJmP0QeQzphmUTeqYrYZ/q3lZAshJt4L0 Am5uMMC2kXZfn8rOnKzNFDVFpRrahqYXfGqitWTIBLhpWxoHNhb+7XfCQwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFH+dEcQtTVQVaK5qgdVtGKa8QEQVMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZjUwUnhDMU5WQlZvcm1xQjFXMFlwcnhBUkJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBwCQmAwQA wCQpAwQAwCQ4AwQAwCQ9AwQAwEcaAwQAwEfpAwQAwEf3AwQAwEf5AwQBwHkQAwQA wHmjAwQBwHmqAwQAweuTAwQAwg7QAwQAwkThAwQAwkdrAwQAwkfjMA0GCSqGSIb3 DQEBCwUAA4IBAQC4Nkvkh/ROGnaX9SxMmiNdUZPbDbWy1W7i3o2a7AfuJ93m63hQ K3mCtPLb7rkE6/kug+P3SXE6gGnAegJkaQeowiUR+k9INMVje6yqUf8FzV6SrAmR EgW2T21/VnzSz392gVULJmYBXi/93Zsp2Vj+XwSrWw52ZCl9UdBOydJwxDq3bc4w 1ipdAMVFKubqu2Y2vrTZdUQKKSsA97Iw+AFQA7PCZhs97Gz3wbiQr2RnNFtxe+Y1 9aQHYnd+HCU1CTnwTcfgPMAEEGQnOvTRY8cBTYrBZ791pCBrKqnUqZqGg9gAVUpu +OdkQFjvLM5dpDNEutA368LvmqG/V/Yc7foj -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:32 2026 by rpki-client