This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kb4Uxqi6dGeUHljJ92Ezk7iwY3c.roa File: kb4Uxqi6dGeUHljJ92Ezk7iwY3c.roa (raw, json) Hash identifier: oVdp7wRI82AkBVkwHvG9LBxheTY3WBFAySBviiSE8Vs= Subject key identifier: 91:BE:14:C6:A8:BA:74:67:94:1E:58:C9:F7:61:33:93:B8:B0:63:77 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019AB5DFB6CAC59B996835557F9FD9D61164 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kb4Uxqi6dGeUHljJ92Ezk7iwY3c.roa Signing time: Mon 24 Nov 2025 12:38:48 +0000 ROA not before: Mon 24 Nov 2025 12:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3399 IP address blocks: 192.36.22.0/24 maxlen: 24 192.36.208.0/24 maxlen: 24 192.165.178.0/23 maxlen: 23 193.180.23.0/24 maxlen: 24 193.180.96.0/22 maxlen: 22 193.180.164.0/23 maxlen: 23 193.181.248.0/22 maxlen: 22 193.182.111.0/24 maxlen: 24 193.183.68.0/23 maxlen: 23 193.183.116.0/24 maxlen: 24 193.183.132.0/23 maxlen: 23 194.14.188.0/23 maxlen: 23 194.68.170.0/23 maxlen: 23 194.68.170.0/24 maxlen: 24 194.68.171.0/24 maxlen: 24 194.68.220.0/23 maxlen: 23 194.71.216.0/23 maxlen: 23 194.71.216.0/24 maxlen: 24 194.71.217.0/24 maxlen: 24 194.103.80.0/22 maxlen: 22 194.132.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:df:b6:ca:c5:9b:99:68:35:55:7f:9f:d9:d6:11:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 24 12:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91be14c6a8ba7467941e58c9f7613393b8b06377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:3c:53:83:00:e3:72:94:13:d3:1f:b6:16: 68:a5:1c:7d:37:d9:22:da:fb:19:ab:56:94:54:f4: 46:e5:26:de:6f:78:97:81:52:fd:f5:08:23:e6:aa: 30:e2:d3:c8:d7:42:60:11:66:05:30:0b:54:6c:62: a4:36:68:5b:86:09:49:64:08:3d:8b:e8:4c:d0:8b: 06:f1:40:fe:ff:51:81:48:68:be:f8:3e:9d:71:f8: 28:6e:a1:0a:3e:8a:e9:0d:7e:a7:f3:5a:15:3c:0d: 72:d3:75:98:94:fd:3c:ac:45:24:5f:6c:1e:3a:88: 41:7d:96:7e:82:4a:1d:25:dd:f0:0b:77:bf:ef:93: f4:63:6b:5e:a6:57:cb:c5:c4:d6:34:ef:49:43:75: fe:9b:82:26:1d:83:5e:be:4f:c0:cc:a7:93:7f:86: 1f:09:38:57:a6:b7:d7:75:5d:4c:fb:1a:29:5c:ea: a5:3c:2a:22:40:ca:5e:39:06:5a:c4:be:a2:c3:da: 35:ab:88:f3:9a:bb:01:ff:79:e6:e7:d3:e2:dc:72: 34:65:83:1f:0c:f1:e6:f0:3f:f6:48:77:c6:94:7d: 6a:50:48:71:47:66:93:ca:45:84:ad:ed:d7:ad:e0: ff:a3:7c:06:12:06:3d:36:ea:8b:67:fb:c0:f8:00: 4d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:14:C6:A8:BA:74:67:94:1E:58:C9:F7:61:33:93:B8:B0:63:77 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kb4Uxqi6dGeUHljJ92Ezk7iwY3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.22.0/24 192.36.208.0/24 192.165.178.0/23 193.180.23.0/24 193.180.96.0/22 193.180.164.0/23 193.181.248.0/22 193.182.111.0/24 193.183.68.0/23 193.183.116.0/24 193.183.132.0/23 194.14.188.0/23 194.68.170.0/23 194.68.220.0/23 194.71.216.0/23 194.103.80.0/22 194.132.40.0/22 Signature Algorithm: sha256WithRSAEncryption 79:31:18:07:21:13:f1:31:68:4c:b2:7f:ac:c4:67:de:be:e8: 72:8a:5f:0f:eb:e9:6f:1a:c6:1b:b8:97:6f:b0:9c:2e:6a:13: e8:e9:26:bb:51:6f:9c:37:21:94:dc:f8:9a:78:5d:1f:68:b8: b5:12:8f:6e:25:67:a6:ce:5b:7d:6a:85:4b:f5:17:67:82:14: 79:11:39:21:5b:9d:85:e2:bc:5d:fd:9e:56:fe:d7:5d:87:41: 16:07:ef:38:50:a7:b4:db:8a:10:a8:c9:4b:f8:c3:18:7e:39: ad:03:d9:a0:aa:10:c9:42:f3:3f:64:2b:4c:1e:d3:fb:dd:74: e7:bb:c0:72:df:72:09:20:1a:c2:cb:e5:a0:3c:a4:e1:ec:a3: 60:20:38:23:27:3c:1d:c1:dc:31:5f:07:27:a7:28:fc:d3:fd: 51:30:1c:af:2f:0d:a9:c6:60:64:cb:4b:6c:e1:9f:45:e2:cb: f4:fa:cb:43:56:e5:a4:fb:8f:f0:43:9c:01:35:38:c4:57:6c: e5:4f:49:fb:57:10:e8:48:3d:1f:0b:7e:d2:18:7c:0b:76:46: d1:95:ed:cf:98:3b:6b:cc:ac:6a:3e:ac:b9:ed:37:ac:82:ec: 10:28:38:4e:63:b1:24:c6:80:c3:c2:f9:01:1f:d6:1b:99:a9: ba:a5:1a:1b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZq137bKxZuZaDVVf5/Z1hFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTI0MTIzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWJlMTRjNmE4YmE3NDY3OTQxZTU4YzlmNzYxMzM5M2I4YjA2Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQE8U4MA43KUE9MfthZopRx9N9ki 2vsZq1aUVPRG5Sbeb3iXgVL99Qgj5qow4tPI10JgEWYFMAtUbGKkNmhbhglJZAg9 i+hM0IsG8UD+/1GBSGi++D6dcfgobqEKPorpDX6n81oVPA1y03WYlP08rEUkX2we OohBfZZ+gkodJd3wC3e/75P0Y2teplfLxcTWNO9JQ3X+m4ImHYNevk/AzKeTf4Yf CThXprfXdV1M+xopXOqlPCoiQMpeOQZaxL6iw9o1q4jzmrsB/3nm59Pi3HI0ZYMf DPHm8D/2SHfGlH1qUEhxR2aTykWEre3XreD/o3wGEgY9NuqLZ/vA+ABNgwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFJG+FMaounRnlB5YyfdhM5O4sGN3MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEva2I0VXhxaTZkR2VVSGxqSjkyRXprN2l3WTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAwCQWAwQA wCTQAwQBwKWyAwQAwbQXAwQCwbRgAwQBwbSkAwQCwbX4AwQAwbZvAwQBwbdEAwQA wbd0AwQBwbeEAwQBwg68AwQBwkSqAwQBwkTcAwQBwkfYAwQCwmdQAwQCwoQoMA0G CSqGSIb3DQEBCwUAA4IBAQB5MRgHIRPxMWhMsn+sxGfevuhyil8P6+lvGsYbuJdv sJwuahPo6Sa7UW+cNyGU3PiaeF0faLi1Eo9uJWemzlt9aoVL9RdnghR5ETkhW52F 4rxd/Z5W/tddh0EWB+84UKe024oQqMlL+MMYfjmtA9mgqhDJQvM/ZCtMHtP73XTn u8By33IJIBrCy+WgPKTh7KNgIDgjJzwdwdwxXwcnpyj80/1RMByvLw2pxmBky0ts 4Z9F4sv0+stDVuWk+4/wQ5wBNTjEV2zlT0n7VxDoSD0fC37SGHwLdkbRle3PmDtr zKxqPqy57TesguwQKDhOY7EkxoDDwvkBH9Ybmam6pRob -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:43 2025 by rpki-client