This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/DZY0oEXFZsUFERTd8aRhz8EJydk.roa File: DZY0oEXFZsUFERTd8aRhz8EJydk.roa (raw, json) Hash identifier: q0fp6UUPi9LPlZCrwxiMiifAAPc3HpSzd4FOG9KAcNs= Subject key identifier: 0D:96:34:A0:45:C5:66:C5:05:11:14:DD:F1:A4:61:CF:C1:09:C9:D9 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F81799A1C2B3A4FC0F9E152B6E0535B Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/DZY0oEXFZsUFERTd8aRhz8EJydk.roa Signing time: Fri 02 Jan 2026 16:19:10 +0000 ROA not before: Fri 02 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 147.136.65.0/24 maxlen: 24 147.136.66.0/24 maxlen: 24 147.136.67.0/24 maxlen: 24 147.136.68.0/24 maxlen: 24 147.136.69.0/24 maxlen: 24 147.136.71.0/24 maxlen: 24 147.136.76.0/24 maxlen: 24 168.199.165.0/24 maxlen: 24 168.199.170.0/24 maxlen: 24 168.199.171.0/24 maxlen: 24 168.199.172.0/24 maxlen: 24 168.199.173.0/24 maxlen: 24 168.199.175.0/24 maxlen: 24 168.199.176.0/24 maxlen: 24 168.199.177.0/24 maxlen: 24 168.199.178.0/24 maxlen: 24 168.199.179.0/24 maxlen: 24 168.199.180.0/24 maxlen: 24 168.199.181.0/24 maxlen: 24 168.199.182.0/24 maxlen: 24 168.199.183.0/24 maxlen: 24 168.199.184.0/24 maxlen: 24 168.199.185.0/24 maxlen: 24 168.199.187.0/24 maxlen: 24 168.199.188.0/24 maxlen: 24 168.199.189.0/24 maxlen: 24 168.199.190.0/24 maxlen: 24 168.199.191.0/24 maxlen: 24 168.199.196.0/24 maxlen: 24 168.199.197.0/24 maxlen: 24 168.199.198.0/24 maxlen: 24 168.199.199.0/24 maxlen: 24 168.199.200.0/24 maxlen: 24 168.199.201.0/24 maxlen: 24 168.199.205.0/24 maxlen: 24 168.199.207.0/24 maxlen: 24 168.199.210.0/24 maxlen: 24 168.199.231.0/24 maxlen: 24 168.199.233.0/24 maxlen: 24 192.95.81.0/24 maxlen: 24 192.95.82.0/24 maxlen: 24 192.95.84.0/24 maxlen: 24 192.95.87.0/24 maxlen: 24 192.95.88.0/24 maxlen: 24 192.95.89.0/24 maxlen: 24 192.95.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:79:9a:1c:2b:3a:4f:c0:f9:e1:52:b6:e0:53:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d9634a045c566c5051114ddf1a461cfc109c9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:9b:43:61:68:85:d0:c3:2e:5d:28:bd:6f: a6:cc:24:66:ad:4b:3b:ad:de:91:8c:a3:8e:00:88: e3:bc:60:57:a2:03:ad:4c:57:68:25:02:b1:c9:72: 5d:29:ac:c1:90:f9:72:12:43:e8:50:28:76:e5:3c: a9:90:02:3d:ea:04:eb:01:df:eb:d5:fb:5c:38:e8: 84:3e:5f:87:ac:4a:90:34:e8:6e:09:b3:56:9b:05: 42:40:19:06:7f:ad:a4:21:94:4a:a3:dc:21:88:66: c9:b7:cc:bf:07:20:31:3c:2e:e2:53:ab:34:61:dc: ae:2e:fb:b0:b2:f0:ca:d8:b1:ca:49:92:0c:61:62: 31:d6:a1:91:fa:49:84:1a:06:dc:55:59:b2:0b:c6: 6f:30:b1:b1:70:08:9a:6e:99:d2:6c:9c:d7:4f:5a: 42:62:05:ba:bb:04:54:6b:93:be:e7:ea:ba:fd:42: 4a:c9:f5:cb:1d:73:ca:4b:72:22:42:44:1f:68:95: ea:2a:b7:a7:75:55:10:93:24:c3:6d:3d:1d:10:73: db:ce:85:6d:23:76:14:33:b2:60:45:bc:33:24:9c: 76:43:4a:e5:d4:5e:57:2c:8e:a2:b0:ce:5d:14:37: 92:c6:e5:8f:fd:74:d3:67:93:85:c3:00:20:9b:b0: 87:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:96:34:A0:45:C5:66:C5:05:11:14:DD:F1:A4:61:CF:C1:09:C9:D9 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/DZY0oEXFZsUFERTd8aRhz8EJydk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.136.65.0-147.136.69.255 147.136.71.0/24 147.136.76.0/24 168.199.165.0/24 168.199.170.0-168.199.173.255 168.199.175.0-168.199.185.255 168.199.187.0-168.199.191.255 168.199.196.0-168.199.201.255 168.199.205.0/24 168.199.207.0/24 168.199.210.0/24 168.199.231.0/24 168.199.233.0/24 192.95.81.0-192.95.82.255 192.95.84.0/24 192.95.87.0-192.95.90.255 Signature Algorithm: sha256WithRSAEncryption 69:d7:1e:42:80:ef:ae:c0:de:69:d1:a1:ce:76:f9:65:cc:04: 02:8b:00:b3:df:7a:06:89:ba:58:d0:68:64:fe:ed:0d:8d:94: 3b:76:8e:c7:c9:a5:27:0e:24:ac:4f:eb:0e:49:45:30:6f:9f: f7:a7:7e:f8:e7:f8:d3:59:da:a8:01:43:26:1e:36:78:1d:df: cf:5f:0c:0a:fd:f9:c0:d9:0e:fb:f2:1c:29:1e:75:f8:8e:3d: eb:84:0c:88:97:51:a6:74:ea:4d:f7:16:71:13:19:7e:fb:e3: 3e:07:a1:05:eb:d9:e5:80:0b:2f:76:f0:e7:e2:11:b1:5f:97: 97:a6:f5:9d:c6:df:3e:24:ca:f5:1d:b9:0a:d5:1d:29:b5:b9: 69:36:67:1d:bb:b1:65:42:1c:96:ab:14:68:6d:81:df:fc:f1: f0:a6:cd:ad:ae:b5:1a:7f:9e:93:48:67:44:59:d1:f5:cb:4d: 5e:7c:2b:fd:0e:4c:94:0d:1d:a7:2e:f0:a4:14:b9:53:54:4b: 68:b8:37:ad:19:8f:89:5c:24:9d:2d:77:28:de:a8:b6:49:30: 6b:dd:2c:ed:c1:0e:49:f3:c7:4b:c5:c2:17:65:12:a2:9d:bc: 79:49:89:2d:11:52:c7:13:52:c0:56:e2:ed:ec:64:cf:1e:49: f6:27:e3:41 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gXmaHCs6T8D54VK24FNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDk2MzRhMDQ1YzU2NmM1MDUxMTE0ZGRmMWE0NjFjZmMxMDljOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmKbQ2FohdDDLl0ovW+mzCRmrUs7 rd6RjKOOAIjjvGBXogOtTFdoJQKxyXJdKazBkPlyEkPoUCh25TypkAI96gTrAd/r 1ftcOOiEPl+HrEqQNOhuCbNWmwVCQBkGf62kIZRKo9whiGbJt8y/ByAxPC7iU6s0 YdyuLvuwsvDK2LHKSZIMYWIx1qGR+kmEGgbcVVmyC8ZvMLGxcAiabpnSbJzXT1pC YgW6uwRUa5O+5+q6/UJKyfXLHXPKS3IiQkQfaJXqKrendVUQkyTDbT0dEHPbzoVt I3YUM7JgRbwzJJx2Q0rl1F5XLI6isM5dFDeSxuWP/XTTZ5OFwwAgm7CH9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFA2WNKBFxWbFBREU3fGkYc/BCcnZMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvRFpZMG9FWEZac1VGRVJUZDhhUmh6OEVKeWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgwDAME AJOIQQMEAZOIRAMEAJOIRwMEAJOITAMEAKjHpTAMAwQBqMeqAwQBqMesMAwDBACo x68DBAGox7gwDAMEAKjHuwMEBqjHgDAMAwQCqMfEAwQBqMfIAwQAqMfNAwQAqMfP AwQAqMfSAwQAqMfnAwQAqMfpMAwDBADAX1EDBADAX1IDBADAX1QwDAMEAMBfVwME AMBfWjANBgkqhkiG9w0BAQsFAAOCAQEAadceQoDvrsDeadGhznb5ZcwEAosAs996 Bom6WNBoZP7tDY2UO3aOx8mlJw4krE/rDklFMG+f96d++Of401naqAFDJh42eB3f z18MCv35wNkO+/IcKR51+I4964QMiJdRpnTqTfcWcRMZfvvjPgehBevZ5YALL3bw 5+IRsV+Xl6b1ncbfPiTK9R25CtUdKbW5aTZnHbuxZUIclqsUaG2B3/zx8KbNra61 Gn+ek0hnRFnR9ctNXnwr/Q5MlA0dpy7wpBS5U1RLaLg3rRmPiVwknS13KN6otkkw a90s7cEOSfPHS8XCF2USop28eUmJLRFSxxNSwFbi7exkzx5J9ifjQQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:50:38 2026 by rpki-client