This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tdCYkx3yRRzp74v4NFiotk01ldk.roa File: tdCYkx3yRRzp74v4NFiotk01ldk.roa (raw, json) Hash identifier: RwVlgxYvdD4daVoHu4j4TvzlImKN9ac9EIwetD7Yi1A= Subject key identifier: B5:D0:98:93:1D:F2:45:1C:E9:EF:8B:F8:34:58:A8:B6:4D:35:95:D9 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019AC5893AF61EB6E49258578F6225912F25 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tdCYkx3yRRzp74v4NFiotk01ldk.roa Signing time: Thu 27 Nov 2025 13:38:16 +0000 ROA not before: Thu 27 Nov 2025 13:38:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12552 IP address blocks: 192.36.87.0/24 maxlen: 24 192.36.92.0/24 maxlen: 24 192.71.200.0/24 maxlen: 24 192.121.63.0/24 maxlen: 24 193.181.71.0/24 maxlen: 24 193.182.6.0/24 maxlen: 24 193.182.105.0/24 maxlen: 24 193.182.156.0/24 maxlen: 24 193.182.159.0/24 maxlen: 24 194.14.240.0/24 maxlen: 24 194.14.242.0/24 maxlen: 24 194.68.3.0/24 maxlen: 24 194.68.24.0/23 maxlen: 24 194.103.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:89:3a:f6:1e:b6:e4:92:58:57:8f:62:25:91:2f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 27 13:38:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5d098931df2451ce9ef8bf83458a8b64d3595d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:3f:a6:17:7d:fa:6e:ed:5f:b2:a1:eb:54: 74:80:3a:a8:22:19:19:d9:a4:09:ed:81:74:31:98: f0:b5:c8:58:f7:2e:08:46:03:04:f1:5e:01:6d:88: 3e:b3:32:33:6b:49:29:a1:ea:d6:11:25:e3:20:a0: 25:f7:be:d7:e9:71:6d:19:86:63:ec:3e:80:5e:09: 22:92:58:6a:81:a8:fd:44:ec:ec:57:1c:12:d0:7c: 62:7d:27:45:8c:c6:4a:5b:4e:2c:4b:17:5d:5f:8e: f9:2f:ab:e5:2e:76:dc:a3:12:10:3f:f2:ae:4c:85: da:02:74:7a:ec:fb:97:74:38:e0:7c:e5:e1:3e:19: 2d:ee:04:d9:9b:45:c6:59:d7:eb:91:9c:c1:84:e5: c8:c8:f3:30:fc:0e:12:d2:c3:8e:93:6d:80:53:81: 7a:24:b0:d9:b4:97:28:1c:74:14:76:95:b5:bc:d6: cd:f2:b8:bd:94:c2:52:e8:e8:32:2f:ff:f1:78:a5: ae:09:e7:a8:27:63:44:b4:46:f1:7c:fb:ce:3b:c1: f5:0e:b3:f9:12:1b:3c:86:8f:95:9d:7f:6b:56:58: f6:72:5e:3f:0a:81:9c:0a:84:44:55:02:15:da:8a: 99:29:bf:85:5f:d0:ce:3a:8c:75:c3:9b:63:cf:46: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D0:98:93:1D:F2:45:1C:E9:EF:8B:F8:34:58:A8:B6:4D:35:95:D9 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tdCYkx3yRRzp74v4NFiotk01ldk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.87.0/24 192.36.92.0/24 192.71.200.0/24 192.121.63.0/24 193.181.71.0/24 193.182.6.0/24 193.182.105.0/24 193.182.156.0/24 193.182.159.0/24 194.14.240.0/24 194.14.242.0/24 194.68.3.0/24 194.68.24.0/23 194.103.248.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a1:fd:65:5e:6c:f5:f5:a1:56:e0:8b:f9:6e:34:1e:f0:20: 69:f3:b4:bb:62:65:f1:de:0f:2a:43:76:3e:69:9f:2a:97:25: 3e:68:c4:da:bd:60:73:b5:69:54:f2:3d:6d:f1:61:b3:83:98: e0:f1:93:bb:be:61:fe:0e:6f:e2:b2:76:16:d5:1e:62:86:cd: a1:07:5c:ef:9a:8f:a9:b6:30:00:99:86:81:9f:40:ef:49:ff: 82:f8:11:35:c1:a2:cc:45:6e:7f:12:2b:f0:98:a4:2b:aa:44: 00:1e:c7:28:33:92:05:84:ef:50:cc:ae:2c:b2:42:32:66:f9: 64:7e:41:d0:d1:fc:fc:38:d0:23:88:ff:7c:c3:f0:a1:5c:b0: 68:cc:55:b8:48:f6:84:de:e6:c7:86:de:cc:a1:ee:b9:77:47: 98:23:62:9f:9a:66:e4:01:c1:30:85:8f:05:cd:cd:61:4f:29: 3a:57:31:21:9c:98:f6:cb:58:bf:60:e1:5c:f4:31:7e:4b:0f: 9e:7d:7f:98:4e:89:af:91:5d:b3:0d:9e:f1:13:04:35:f5:70: ef:3b:ce:aa:7b:3b:cf:2c:23:5a:aa:ea:8b:0b:f2:d3:84:01: 96:cf:07:45:96:f9:b6:a7:1b:45:8d:20:bd:6d:a3:df:0a:37: 1e:77:5d:36 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZrFiTr2HrbkklhXj2IlkS8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTI3MTMzODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWQwOTg5MzFkZjI0NTFjZTllZjhiZjgzNDU4YThiNjRkMzU5NWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13s/phd9+m7tX7Kh61R0gDqoIhkZ 2aQJ7YF0MZjwtchY9y4IRgME8V4BbYg+szIza0kpoerWESXjIKAl977X6XFtGYZj 7D6AXgkiklhqgaj9ROzsVxwS0HxifSdFjMZKW04sSxddX475L6vlLnbcoxIQP/Ku TIXaAnR67PuXdDjgfOXhPhkt7gTZm0XGWdfrkZzBhOXIyPMw/A4S0sOOk22AU4F6 JLDZtJcoHHQUdpW1vNbN8ri9lMJS6OgyL//xeKWuCeeoJ2NEtEbxfPvOO8H1DrP5 Ehs8ho+VnX9rVlj2cl4/CoGcCoREVQIV2oqZKb+FX9DOOox1w5tjz0b43wIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFLXQmJMd8kUc6e+L+DRYqLZNNZXZMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvdGRDWWt4M3lSUnpwNzR2NE5GaW90azAxbGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAwCRXAwQA wCRcAwQAwEfIAwQAwHk/AwQAwbVHAwQAwbYGAwQAwbZpAwQAwbacAwQAwbafAwQA wg7wAwQAwg7yAwQAwkQDAwQBwkQYAwQAwmf4MA0GCSqGSIb3DQEBCwUAA4IBAQA0 of1lXmz19aFW4Iv5bjQe8CBp87S7YmXx3g8qQ3Y+aZ8qlyU+aMTavWBztWlU8j1t 8WGzg5jg8ZO7vmH+Dm/isnYW1R5ihs2hB1zvmo+ptjAAmYaBn0DvSf+C+BE1waLM RW5/EivwmKQrqkQAHscoM5IFhO9QzK4sskIyZvlkfkHQ0fz8ONAjiP98w/ChXLBo zFW4SPaE3ubHht7Moe65d0eYI2KfmmbkAcEwhY8Fzc1hTyk6VzEhnJj2y1i/YOFc 9DF+Sw+efX+YTomvkV2zDZ7xEwQ19XDvO86qezvPLCNaquqLC/LThAGWzwdFlvm2 pxtFjSC9baPfCjced102 -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:51 2025 by rpki-client