This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yf3OVGZOJ9B8_-XW--qSgPpHr60.roa File: yf3OVGZOJ9B8_-XW--qSgPpHr60.roa (raw, json) Hash identifier: ttqi0gt5c3gAYBmygusdtKaEAz/BcRRuhiuA39zhbdQ= Subject key identifier: C9:FD:CE:54:66:4E:27:D0:7C:FF:E5:D6:FB:EA:92:80:FA:47:AF:AD Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834707B7FFE60ACDAA89D9DBA3A93B6 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yf3OVGZOJ9B8_-XW--qSgPpHr60.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57630 IP address blocks: 192.36.200.0/24 maxlen: 24 192.71.0.0/24 maxlen: 24 192.71.206.0/24 maxlen: 24 192.165.3.0/24 maxlen: 24 192.165.134.0/23 maxlen: 23 192.165.152.0/22 maxlen: 24 192.165.157.0/24 maxlen: 24 193.180.92.0/24 maxlen: 24 193.181.34.0/24 maxlen: 24 193.183.20.0/24 maxlen: 24 193.183.49.0/24 maxlen: 24 193.183.59.0/24 maxlen: 24 193.234.3.0/24 maxlen: 24 193.234.94.0/24 maxlen: 24 193.234.116.0/22 maxlen: 22 193.234.144.0/24 maxlen: 24 193.234.205.0/24 maxlen: 24 194.14.57.0/24 maxlen: 24 194.68.22.0/23 maxlen: 23 194.68.24.0/24 maxlen: 24 194.68.181.0/24 maxlen: 24 194.71.0.0/23 maxlen: 23 194.71.106.0/24 maxlen: 24 194.71.219.0/24 maxlen: 24 194.103.3.0/24 maxlen: 24 194.103.16.0/23 maxlen: 24 194.103.95.0/24 maxlen: 24 194.103.145.0/24 maxlen: 24 194.103.197.0/24 maxlen: 24 194.132.120.0/24 maxlen: 24 194.132.164.0/24 maxlen: 24 194.132.166.0/24 maxlen: 24 194.132.172.0/23 maxlen: 23 194.132.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:70:7b:7f:fe:60:ac:da:a8:9d:9d:ba:3a:93:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9fdce54664e27d07cffe5d6fbea9280fa47afad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:3a:12:d3:54:8f:51:3d:01:4e:d3:13:59: 43:ea:4b:af:47:41:95:86:e6:f5:e4:a3:a6:04:9a: 2d:56:3f:56:71:6e:98:ec:b8:8a:ad:a0:da:b2:75: ef:22:cd:fc:cb:de:99:39:3c:44:81:61:8f:96:38: d2:b0:b8:72:8c:cd:b5:5a:50:17:79:66:04:ba:0d: 18:23:07:2d:aa:c6:98:0d:d6:1e:0b:10:3c:71:f7: 70:dc:23:d7:f7:da:cc:d4:dc:8a:f5:fd:4c:ef:73: a8:6d:27:d4:2c:d9:de:7d:6b:5d:0c:6c:9e:d9:95: 1c:0c:ed:d9:ac:61:da:aa:16:d9:b3:3f:83:94:b8: 87:fa:af:e4:19:b0:c9:dd:41:f8:98:c5:41:65:7d: a6:ba:ff:eb:cb:f7:23:c0:c6:9b:26:c0:29:de:45: 27:b0:45:27:50:fa:97:6c:a9:6a:0c:50:d9:0e:a7: ea:3d:53:87:75:98:ae:ca:b9:84:40:24:c4:48:d3: 94:56:42:bd:19:b2:92:87:8b:5d:b1:10:4a:eb:c3: 3e:22:08:4c:19:e9:17:e1:c5:47:d4:dd:9a:5f:39: bc:ee:94:e8:9b:cf:5f:19:5a:d8:a9:37:41:56:16: e3:c8:ac:22:5d:95:4b:e5:af:93:24:a0:b3:b1:16: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FD:CE:54:66:4E:27:D0:7C:FF:E5:D6:FB:EA:92:80:FA:47:AF:AD X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yf3OVGZOJ9B8_-XW--qSgPpHr60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.200.0/24 192.71.0.0/24 192.71.206.0/24 192.165.3.0/24 192.165.134.0/23 192.165.152.0/22 192.165.157.0/24 193.180.92.0/24 193.181.34.0/24 193.183.20.0/24 193.183.49.0/24 193.183.59.0/24 193.234.3.0/24 193.234.94.0/24 193.234.116.0/22 193.234.144.0/24 193.234.205.0/24 194.14.57.0/24 194.68.22.0-194.68.24.255 194.68.181.0/24 194.71.0.0/23 194.71.106.0/24 194.71.219.0/24 194.103.3.0/24 194.103.16.0/23 194.103.95.0/24 194.103.145.0/24 194.103.197.0/24 194.132.120.0/24 194.132.164.0/24 194.132.166.0/24 194.132.172.0/23 194.132.186.0/24 Signature Algorithm: sha256WithRSAEncryption b4:19:5c:6d:39:72:43:9d:7b:d7:63:b1:c5:9b:d4:55:ec:17: 22:12:a0:0d:8b:e3:70:e7:95:39:ba:c3:61:0f:fd:c2:a5:da: 1b:22:25:a9:e4:5e:a1:ce:79:a4:3d:83:06:df:8d:f6:1e:83: ff:9c:ef:7f:83:c7:3f:f2:e7:dc:0a:15:63:17:22:83:3e:d2: 68:ea:5a:b8:42:e6:9b:c3:88:86:a3:e2:ab:96:02:a9:bb:8b: 27:d8:9a:d0:2c:47:91:a0:c8:42:7b:e4:0b:57:e5:1f:30:4c: 93:2d:a3:63:03:dd:a0:23:a1:a1:17:19:cd:d9:02:f9:2f:08: 3f:84:26:ca:19:45:7e:0b:26:fa:8c:a7:33:f9:56:ff:f6:8c: 64:50:6a:49:12:5f:31:c7:77:9c:d8:91:3a:d5:f8:ea:79:1b: b2:df:b2:dd:17:08:6c:8e:1c:da:5d:68:5b:2f:ca:c2:4f:a4: 41:b6:76:aa:0e:19:b4:31:b0:3f:99:a9:79:fb:9d:ad:8c:51: 11:59:84:89:aa:01:53:4e:7a:e8:1f:0a:91:af:23:36:1c:f2: 7e:de:26:97:2c:95:41:f1:60:e5:cd:55:d8:0b:eb:f3:a4:15: 5a:37:cb:d1:3c:5e:b0:6e:d8:b6:77:a1:84:ae:50:a4:0f:32: ee:74:33:70 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt4NHB7f/5grNqonZ26OpO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWZkY2U1NDY2NGUyN2QwN2NmZmU1ZDZmYmVhOTI4MGZhNDdhZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h86EtNUj1E9AU7TE1lD6kuvR0GV hub15KOmBJotVj9WcW6Y7LiKraDasnXvIs38y96ZOTxEgWGPljjSsLhyjM21WlAX eWYEug0YIwctqsaYDdYeCxA8cfdw3CPX99rM1NyK9f1M73OobSfULNnefWtdDGye 2ZUcDO3ZrGHaqhbZsz+DlLiH+q/kGbDJ3UH4mMVBZX2muv/ry/cjwMabJsAp3kUn sEUnUPqXbKlqDFDZDqfqPVOHdZiuyrmEQCTESNOUVkK9GbKSh4tdsRBK68M+IghM GekX4cVH1N2aXzm87pTom89fGVrYqTdBVhbjyKwiXZVL5a+TJKCzsRZXBQIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFMn9zlRmTifQfP/l1vvqkoD6R6+tMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEveWYzT1ZHWk9KOUI4Xy1YVy0tcVNnUHBIcjYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBADA JMgDBADARwADBADAR84DBADApQMDBAHApYYDBALApZgDBADApZ0DBADBtFwDBADB tSIDBADBtxQDBADBtzEDBADBtzsDBADB6gMDBADB6l4DBALB6nQDBADB6pADBADB 6s0DBADCDjkwDAMEAcJEFgMEAMJEGAMEAMJEtQMEAcJHAAMEAMJHagMEAMJH2wME AMJnAwMEAcJnEAMEAMJnXwMEAMJnkQMEAMJnxQMEAMKEeAMEAMKEpAMEAMKEpgME AcKErAMEAMKEujANBgkqhkiG9w0BAQsFAAOCAQEAtBlcbTlyQ51712OxxZvUVewX IhKgDYvjcOeVObrDYQ/9wqXaGyIlqeReoc55pD2DBt+N9h6D/5zvf4PHP/Ln3AoV Yxcigz7SaOpauELmm8OIhqPiq5YCqbuLJ9ia0CxHkaDIQnvkC1flHzBMky2jYwPd oCOhoRcZzdkC+S8IP4QmyhlFfgsm+oynM/lW//aMZFBqSRJfMcd3nNiROtX46nkb st+y3RcIbI4c2l1oWy/Kwk+kQbZ2qg4ZtDGwP5mpefudrYxREVmEiaoBU0566B8K ka8jNhzyft4mlyyVQfFg5c1V2Avr86QVWjfL0TxesG7YtnehhK5QpA8y7nQzcA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:01 2026 by rpki-client