This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ca91QnOHtdehjTaWhmLP90EXppI.roa File: Ca91QnOHtdehjTaWhmLP90EXppI.roa (raw, json) Hash identifier: PpUF1/5+C534shMMJ/DJ5DnfVGQBnwvws2XeIie23tk= Subject key identifier: 09:AF:75:42:73:87:B5:D7:A1:8D:36:96:86:62:CF:F7:41:17:A6:92 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149C45337B990169D613382B45EC81 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ca91QnOHtdehjTaWhmLP90EXppI.roa Signing time: Fri 02 Jan 2026 14:20:15 +0000 ROA not before: Fri 02 Jan 2026 14:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 135.196.155.0/24 maxlen: 24 135.196.166.0/24 maxlen: 24 135.196.236.0/24 maxlen: 24 135.196.244.0/24 maxlen: 24 135.196.248.0/24 maxlen: 24 135.196.252.0/24 maxlen: 24 135.196.254.0/24 maxlen: 24 194.231.144.0/22 maxlen: 24 195.86.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:9c:45:33:7b:99:01:69:d6:13:38:2b:45:ec:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09af75427387b5d7a18d36968662cff74117a692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:b4:c4:1c:99:b5:46:f8:2a:2f:92:a9:51: d8:29:6c:cc:ca:7b:a4:5d:ad:d1:44:da:dd:2c:37: 00:2f:e6:c1:ed:33:ef:a1:32:5d:de:e4:c5:b6:f0: 87:7e:12:59:a9:43:7b:a4:a0:85:9e:35:1d:f1:20: 8a:05:9d:0e:0a:92:cc:9f:2c:00:e4:01:36:48:01: da:f6:25:84:a2:a7:2b:e6:a0:c8:05:e2:19:16:01: 7d:0a:ed:2e:0e:56:be:e0:e4:93:61:ba:a0:3c:27: 5c:b8:a7:9a:c9:ce:0f:87:85:2f:07:5e:9b:96:12: b1:ad:ab:6e:95:7c:69:35:d6:68:82:4a:c3:1b:92: d9:62:2a:2c:77:13:aa:40:10:d8:de:c7:e6:a9:4d: c1:82:7b:42:7b:e5:90:df:1a:d5:22:f3:33:bd:2a: 8e:79:cd:d5:8c:6d:23:b5:08:51:1d:19:51:69:82: b2:46:d9:ea:f8:84:00:99:8d:32:ac:13:72:d7:88: bb:bc:f6:1b:0e:1c:1f:e3:cf:b5:6a:4a:c0:ad:5e: 15:1e:e5:04:e0:03:fc:15:d6:a2:6c:d5:79:fe:15: e3:f6:a2:12:97:25:6b:33:ab:7e:93:d5:02:29:eb: 0a:8e:1a:05:23:6e:69:f1:bd:e8:a1:d5:f4:5b:00: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AF:75:42:73:87:B5:D7:A1:8D:36:96:86:62:CF:F7:41:17:A6:92 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ca91QnOHtdehjTaWhmLP90EXppI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.196.155.0/24 135.196.166.0/24 135.196.236.0/24 135.196.244.0/24 135.196.248.0/24 135.196.252.0/24 135.196.254.0/24 194.231.144.0/22 195.86.238.0/24 Signature Algorithm: sha256WithRSAEncryption 76:76:3f:bd:70:be:b3:ad:76:44:d0:12:13:06:bf:9f:06:8d: 78:19:c2:f4:a2:0e:1a:94:f4:c0:c3:ec:25:5e:1f:2a:0a:5a: 88:5a:5b:cb:05:86:33:b5:84:94:3c:4c:8d:e5:1f:51:ab:36: 81:cb:b2:87:33:5e:e1:ba:9e:db:c1:35:9d:05:95:85:10:e1: 7d:03:ee:9e:42:27:4a:08:bb:1c:da:e2:ee:0b:90:18:38:b4: 84:6f:af:14:91:0e:18:1b:32:7f:f6:83:3b:e0:b7:d3:4e:1f: 23:2f:71:c6:39:ed:e7:ba:11:c7:e3:8e:54:cd:39:0b:8a:97: e6:95:68:96:41:a6:54:c3:2f:61:81:e4:5c:fb:0c:1d:13:ac: 3c:77:ac:24:aa:5b:53:0b:ba:06:56:1f:72:60:3d:b1:a6:a0: 02:da:d3:0c:77:1f:16:bb:57:9c:ee:8f:3b:8e:68:60:8e:d5: 82:09:e1:9f:ac:f5:d5:9f:80:54:0d:67:11:90:3f:37:f8:0c: 7d:65:f1:2b:9b:1c:08:9c:48:f7:20:ec:3b:99:c7:37:1b:cd: 44:e9:16:71:5f:ac:55:63:f5:76:3a:a0:78:5c:17:42:c3:ee: 05:bf:88:ad:a4:2f:cf:ab:b0:82:46:b6:38:89:0d:ec:73:21: 04:1b:d1:4c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/FJxFM3uZAWnWEzgrReyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWFmNzU0MjczODdiNWQ3YTE4ZDM2OTY4NjYyY2ZmNzQxMTdhNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4i0xByZtUb4Ki+SqVHYKWzMynuk Xa3RRNrdLDcAL+bB7TPvoTJd3uTFtvCHfhJZqUN7pKCFnjUd8SCKBZ0OCpLMnywA 5AE2SAHa9iWEoqcr5qDIBeIZFgF9Cu0uDla+4OSTYbqgPCdcuKeayc4Ph4UvB16b lhKxratulXxpNdZogkrDG5LZYiosdxOqQBDY3sfmqU3BgntCe+WQ3xrVIvMzvSqO ec3VjG0jtQhRHRlRaYKyRtnq+IQAmY0yrBNy14i7vPYbDhwf48+1akrArV4VHuUE 4AP8FdaibNV5/hXj9qISlyVrM6t+k9UCKesKjhoFI25p8b3oodX0WwDo5QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAmvdUJzh7XXoY02loZiz/dBF6aSMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvQ2E5MVFuT0h0ZGVoalRhV2htTFA5MEVYcHBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAh8SbAwQA h8SmAwQAh8TsAwQAh8T0AwQAh8T4AwQAh8T8AwQAh8T+AwQCwueQAwQAw1buMA0G CSqGSIb3DQEBCwUAA4IBAQB2dj+9cL6zrXZE0BITBr+fBo14GcL0og4alPTAw+wl Xh8qClqIWlvLBYYztYSUPEyN5R9RqzaBy7KHM17hup7bwTWdBZWFEOF9A+6eQidK CLsc2uLuC5AYOLSEb68UkQ4YGzJ/9oM74LfTTh8jL3HGOe3nuhHH445UzTkLipfm lWiWQaZUwy9hgeRc+wwdE6w8d6wkqltTC7oGVh9yYD2xpqAC2tMMdx8Wu1ec7o87 jmhgjtWCCeGfrPXVn4BUDWcRkD83+Ax9ZfErmxwInEj3IOw7mcc3G81E6RZxX6xV Y/V2OqB4XBdCw+4Fv4itpC/Pq7CCRrY4iQ3scyEEG9FM -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:03 2026 by rpki-client