This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa File: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (raw, json) Hash identifier: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY= Subject key identifier: 9D:67:57:CE:8D:37:36:FE:5E:B9:88:C9:7E:B5:10:F0:74:ED:69:12 Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019B7EA510B00BC37D974CBD74B09DF5148E Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa Signing time: Fri 02 Jan 2026 12:18:25 +0000 ROA not before: Fri 02 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 185.162.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:10:b0:0b:c3:7d:97:4c:bd:74:b0:9d:f5:14:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jan 2 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d6757ce8d3736fe5eb988c97eb510f074ed6912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:15:6e:12:f8:0b:49:9d:89:2e:7e:9e:bd: 7b:35:de:06:e4:ce:90:5d:59:66:1e:7b:f8:97:4a: 0d:e2:bf:8b:31:b3:f0:af:2c:24:d4:39:6f:8c:7e: 02:e5:e8:f7:de:b8:ce:7a:dd:97:19:cd:8f:ac:f6: c7:01:fe:f9:1a:08:89:3a:c1:eb:72:77:47:c3:b5: 8e:eb:51:b8:85:c7:7a:6b:91:b6:d4:35:4a:40:2c: a1:af:3b:4a:f6:fe:d9:4c:39:fe:84:97:62:10:bf: 5e:77:f7:d7:e8:16:7e:0d:26:1e:c1:cf:28:68:90: 4b:f2:3b:dd:83:3c:2a:69:49:f0:c1:83:bb:b0:67: fb:6c:d0:39:f0:0e:20:a7:8f:17:25:18:f0:8c:44: f6:5f:b5:fd:3e:e8:66:d3:9a:77:31:e6:e7:b2:ec: a8:fa:b0:40:b6:82:6d:d3:43:77:f8:89:9e:17:40: 6a:1f:0c:ff:c8:df:7a:24:77:74:6d:c4:d8:03:2b: 52:d2:35:2a:25:ce:78:71:f9:63:a4:a1:83:da:1d: 10:e6:87:2c:4d:5c:9a:36:2f:a3:f9:99:d8:7d:9c: 94:ac:9d:30:45:56:36:9f:85:30:04:b7:d1:ee:33: 66:7d:7a:3a:f6:c5:a5:bb:17:f4:08:08:7f:42:02: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:67:57:CE:8D:37:36:FE:5E:B9:88:C9:7E:B5:10:F0:74:ED:69:12 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.89.0/24 Signature Algorithm: sha256WithRSAEncryption 85:f2:73:fd:c1:71:dc:77:75:34:5c:0a:28:5f:96:72:45:ef: 77:9c:e5:3a:db:41:56:66:bb:65:56:d5:73:33:f8:30:b4:9b: fe:17:88:9e:b1:db:f5:46:a7:b9:f5:66:95:dc:7b:a7:b7:37: d5:f1:15:15:bd:42:8a:36:a3:5d:6d:b3:f9:95:bc:1a:3a:8a: 2e:b7:0d:e4:a2:f4:42:ab:12:ff:71:4a:14:e6:73:07:1e:98: 0b:a0:13:d8:15:a8:1c:2f:a5:a6:26:e0:28:3a:52:16:1d:69: 36:de:e2:9e:14:98:04:34:0c:f7:e9:f8:42:1e:66:cf:8a:df: 6b:7a:8f:93:bd:b0:c4:22:49:b3:cb:fc:3d:b9:c3:a4:0f:f1: 0e:9d:cd:27:bb:32:e0:37:8c:7e:f8:d9:22:85:e7:ad:7e:77: e4:45:2f:e6:39:db:c0:dd:b1:1c:aa:58:15:d1:63:b0:94:43: 8a:e2:03:d5:01:87:71:e9:a5:f7:c8:14:7c:72:24:a6:4a:e7: e1:75:f9:19:b2:ba:27:e0:7a:46:f7:60:68:f2:be:e3:3e:8f: e2:46:2d:bb:7d:41:f6:97:c7:d4:1a:8a:c2:67:f2:ab:80:8e: 53:c9:42:9b:51:ba:7a:d3:7d:10:29:42:ee:83:2c:8d:dd:5d: 99:01:63:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pRCwC8N9l0y9dLCd9RSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwMTAyMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDY3NTdjZThkMzczNmZlNWViOTg4Yzk3ZWI1MTBmMDc0ZWQ2OTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlQVbhL4C0mdiS5+nr17Nd4G5M6Q XVlmHnv4l0oN4r+LMbPwrywk1DlvjH4C5ej33rjOet2XGc2PrPbHAf75GgiJOsHr cndHw7WO61G4hcd6a5G21DVKQCyhrztK9v7ZTDn+hJdiEL9ed/fX6BZ+DSYewc8o aJBL8jvdgzwqaUnwwYO7sGf7bNA58A4gp48XJRjwjET2X7X9Puhm05p3Mebnsuyo +rBAtoJt00N3+ImeF0BqHwz/yN96JHd0bcTYAytS0jUqJc54cfljpKGD2h0Q5ocs TVyaNi+j+ZnYfZyUrJ0wRVY2n4UwBLfR7jNmfXo69sWluxf0CAh/QgJm0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1nV86NNzb+XrmIyX61EPB07WkSMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbldkWHpvMDNOdjVldVlqSmZyVVE4SFR0YVJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaJZMA0G CSqGSIb3DQEBCwUAA4IBAQCF8nP9wXHcd3U0XAooX5ZyRe93nOU620FWZrtlVtVz M/gwtJv+F4iesdv1Rqe59WaV3HuntzfV8RUVvUKKNqNdbbP5lbwaOooutw3kovRC qxL/cUoU5nMHHpgLoBPYFagcL6WmJuAoOlIWHWk23uKeFJgENAz36fhCHmbPit9r eo+TvbDEIkmzy/w9ucOkD/EOnc0nuzLgN4x++NkiheetfnfkRS/mOdvA3bEcqlgV 0WOwlEOK4gPVAYdx6aX3yBR8ciSmSufhdfkZsron4HpG92Bo8r7jPo/iRi27fUH2 l8fUGorCZ/KrgI5TyUKbUbp6030QKULugyyN3V2ZAWPy -----END CERTIFICATE-----Generated at Fri Jan 23 02:01:23 2026 by rpki-client