This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/CD3PRWosTdH8Ulv5wScytKKOYQc.roa File: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (raw, json) Hash identifier: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ= Subject key identifier: 08:3D:CF:45:6A:2C:4D:D1:FC:52:5B:F9:C1:27:32:B4:A2:8E:61:07 Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019B7F82EB1BFA25557D87ADD7FF7794B763 Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/CD3PRWosTdH8Ulv5wScytKKOYQc.roa Signing time: Fri 02 Jan 2026 16:20:44 +0000 ROA not before: Fri 02 Jan 2026 16:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 139.83.0.0/16 maxlen: 16 185.175.184.0/22 maxlen: 22 192.122.238.0/23 maxlen: 23 192.122.240.0/23 maxlen: 23 192.122.242.0/24 maxlen: 24 193.136.0.0/15 maxlen: 24 193.236.0.0/20 maxlen: 20 193.236.97.0/24 maxlen: 24 193.236.98.0/23 maxlen: 23 193.236.102.0/23 maxlen: 23 193.236.104.0/21 maxlen: 21 193.236.112.0/21 maxlen: 21 193.236.124.0/22 maxlen: 22 193.236.154.0/23 maxlen: 23 193.236.157.0/24 maxlen: 24 193.236.158.0/23 maxlen: 23 193.236.160.0/20 maxlen: 20 193.236.178.0/23 maxlen: 23 193.236.180.0/22 maxlen: 22 193.236.184.0/21 maxlen: 21 193.236.192.0/18 maxlen: 18 194.117.0.0/20 maxlen: 20 194.117.16.0/21 maxlen: 21 194.117.40.0/21 maxlen: 21 194.117.48.0/23 maxlen: 23 194.210.0.0/16 maxlen: 24 2001:690::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:eb:1b:fa:25:55:7d:87:ad:d7:ff:77:94:b7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Jan 2 16:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=083dcf456a2c4dd1fc525bf9c12732b4a28e6107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3f:67:7a:f1:6d:67:1a:95:03:ce:c2:ba:91: b6:c7:55:ea:db:cb:42:aa:21:f8:b1:87:78:ec:9f: df:a2:13:e8:16:9a:ca:41:42:3f:e5:35:ea:2c:17: b7:e7:81:2c:14:5f:f2:cf:e9:3e:05:11:85:1d:5e: 45:bc:f9:14:e5:d7:d2:1b:c0:16:57:ea:a0:82:36: ef:e9:c1:0c:89:d1:85:1e:a6:ba:5b:88:e6:d1:fd: 17:08:82:58:14:8e:fe:d7:4b:a1:a7:35:16:3b:05: 85:24:df:b1:e1:99:b7:b8:b9:04:f7:60:fa:74:16: 19:a2:30:81:0f:47:b8:0b:92:5d:bc:d2:2e:dd:9d: 81:94:ea:8e:0f:6a:06:6b:db:1f:22:1d:57:5b:d6: 04:46:95:9c:3a:e9:9c:c6:9c:9d:12:0a:70:a1:5e: 44:fc:27:7e:66:35:18:76:88:48:69:52:8d:b8:ca: 35:39:87:df:c6:39:d4:94:70:67:df:0d:08:ba:1e: e3:83:94:4f:80:52:46:7e:19:e9:1a:14:3a:99:ca: bb:fe:cc:2a:21:b7:1b:9a:d6:6d:66:c2:6a:1c:89: 62:60:63:d7:b2:8d:7f:dd:d1:bd:83:86:8d:5f:af: 04:5e:a9:2f:12:67:ee:28:81:b3:b1:71:66:27:7e: fa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3D:CF:45:6A:2C:4D:D1:FC:52:5B:F9:C1:27:32:B4:A2:8E:61:07 X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/CD3PRWosTdH8Ulv5wScytKKOYQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.83.0.0/16 185.175.184.0/22 192.122.238.0-192.122.242.255 193.136.0.0/15 193.236.0.0/20 193.236.97.0-193.236.99.255 193.236.102.0-193.236.119.255 193.236.124.0/22 193.236.154.0/23 193.236.157.0-193.236.175.255 193.236.178.0-193.236.255.255 194.117.0.0-194.117.23.255 194.117.40.0-194.117.49.255 194.210.0.0/16 IPv6: 2001:690::/32 Signature Algorithm: sha256WithRSAEncryption 7f:35:92:8d:74:bb:01:e6:4b:24:86:68:9b:68:56:0a:2b:8c: d0:05:7f:9a:7a:2e:56:50:db:39:75:49:27:48:ba:83:47:25: ef:08:4d:6b:f5:05:3f:bb:96:06:ca:0e:21:2a:57:f1:13:9e: 30:d4:42:e3:91:a3:30:b5:6d:ce:96:92:5f:7a:8b:94:53:46: b8:fa:05:79:37:38:fb:8d:b3:7b:45:aa:55:8a:e3:8e:21:db: b2:71:d7:9d:e6:d7:ce:cd:1f:1c:9c:92:05:1f:a8:13:db:b1: 84:17:ac:25:b9:5a:03:e2:27:eb:51:f0:ad:a8:09:8e:56:52: c5:9a:d5:b8:ea:8c:c6:85:29:44:30:f2:b2:30:76:19:ac:4b: a2:3c:db:f4:8e:fe:68:6f:58:be:e3:64:10:aa:b0:2e:eb:df: 7e:2a:39:79:03:5c:d4:fe:c8:9d:e3:19:64:51:33:7a:13:4f: b2:44:7c:a0:7a:0c:81:3c:5c:25:71:24:42:cb:23:08:05:7a: 85:2c:39:1f:27:a1:dc:20:8b:33:56:99:c3:94:6a:23:06:a7: 32:25:ba:7d:28:3a:2f:a7:ee:b4:a9:c5:87:e7:b7:d3:e2:e7: 92:f1:f7:02:e7:59:fb:7f:22:d9:37:e8:3b:ff:00:53:e7:e5: fa:07:93:e6 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt/gusb+iVVfYet1/93lLdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjYwMTAyMTYyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNkY2Y0NTZhMmM0ZGQxZmM1MjViZjljMTI3MzJiNGEyOGU2MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9j9nevFtZxqVA87CupG2x1Xq28tC qiH4sYd47J/fohPoFprKQUI/5TXqLBe354EsFF/yz+k+BRGFHV5FvPkU5dfSG8AW V+qggjbv6cEMidGFHqa6W4jm0f0XCIJYFI7+10uhpzUWOwWFJN+x4Zm3uLkE92D6 dBYZojCBD0e4C5JdvNIu3Z2BlOqOD2oGa9sfIh1XW9YERpWcOumcxpydEgpwoV5E /Cd+ZjUYdohIaVKNuMo1OYffxjnUlHBn3w0Iuh7jg5RPgFJGfhnpGhQ6mcq7/swq IbcbmtZtZsJqHIliYGPXso1/3dG9g4aNX68EXqkvEmfuKIGzsXFmJ376fQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFAg9z0VqLE3R/FJb+cEnMrSijmEHMB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvQ0QzUFJXb3NUZEg4VWx2NXdTY3l0S0tPWVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBjgQCAAEwgYcDAwCL UwMEArmvuDAMAwQBwHruAwQAwHryAwMBwYgDBATB7AAwDAMEAMHsYQMEAsHsYDAM AwQBwexmAwQDwexwAwQCwex8AwQBweyaMAwDBADB7J0DBATB7KAwCwMEAcHssgMD AMHsMAsDAwDCdQMEA8J1EDAMAwQDwnUoAwQBwnUwAwMAwtIwDQQCAAIwBwMFACAB BpAwDQYJKoZIhvcNAQELBQADggEBAH81ko10uwHmSySGaJtoVgorjNAFf5p6LlZQ 2zl1SSdIuoNHJe8ITWv1BT+7lgbKDiEqV/ETnjDUQuORozC1bc6Wkl96i5RTRrj6 BXk3OPuNs3tFqlWK444h27Jx153m187NHxyckgUfqBPbsYQXrCW5WgPiJ+tR8K2o CY5WUsWa1bjqjMaFKUQw8rIwdhmsS6I82/SO/mhvWL7jZBCqsC7r334qOXkDXNT+ yJ3jGWRRM3oTT7JEfKB6DIE8XCVxJELLIwgFeoUsOR8nodwgizNWmcOUaiMGpzIl un0oOi+n7rSpxYfnt9Pi55Lx9wLnWft/Itk36Dv/AFPn5foHk+Y= -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:59 2026 by rpki-client