This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1NVqRFHuVOM5iSIyFDPcdnDZwUQ.roa File: 1NVqRFHuVOM5iSIyFDPcdnDZwUQ.roa (raw, json) Hash identifier: VXYeUO88xsTpnHAgOFGswYqYyla5CQxbAvi3lodlRzM= Subject key identifier: D4:D5:6A:44:51:EE:54:E3:39:89:22:32:14:33:DC:76:70:D9:C1:44 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F855E5121304520162CC4BA69B2BC5D Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1NVqRFHuVOM5iSIyFDPcdnDZwUQ.roa Signing time: Fri 02 Jan 2026 16:23:25 +0000 ROA not before: Fri 02 Jan 2026 16:23:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 194.87.199.0/24 maxlen: 24 195.58.38.0/24 maxlen: 24 195.58.39.0/24 maxlen: 24 195.133.64.0/24 maxlen: 24 195.133.65.0/24 maxlen: 24 212.193.4.0/24 maxlen: 24 212.193.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5e:51:21:30:45:20:16:2c:c4:ba:69:b2:bc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4d56a4451ee54e3398922321433dc7670d9c144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:70:13:6a:ae:18:6e:e2:fe:f6:bf:62:01:65: 1f:41:21:d9:db:d0:b9:f0:51:a1:cc:8b:17:5e:9b: 19:60:63:cb:3c:74:2c:d8:6c:73:95:07:a0:18:99: 3b:2c:b2:46:f5:d7:c0:5d:07:d4:8d:1d:ec:2f:c1: be:73:cb:0a:d9:92:a7:a8:6d:25:47:88:be:7d:a5: de:0e:cd:02:d3:38:f7:7d:8c:38:51:e9:2d:2e:48: f0:14:1a:96:bb:98:be:02:d4:1e:45:d6:55:b6:43: a5:e7:71:fe:98:a8:3c:e9:e7:18:b5:55:05:12:62: c3:ff:2e:a1:59:5e:36:04:55:7f:80:2a:e3:fe:96: dd:40:16:08:69:c7:6f:8b:b8:ca:25:41:27:ec:8b: 1c:0a:66:01:bd:9f:6a:26:fa:03:fa:9f:07:e0:49: 33:e6:27:b7:2f:f3:ac:56:08:21:32:97:f9:4a:0d: 81:19:5a:20:c0:53:fd:6d:91:92:5a:ae:84:31:b4: 54:7b:fc:41:d7:1d:31:75:62:5e:f5:08:cb:f5:15: 43:9b:56:fe:fa:18:88:f1:9b:08:dd:c8:94:5e:8b: 62:85:ba:9d:4d:75:59:b9:6a:2b:00:1e:4c:dc:32: bf:37:f2:28:07:17:76:7a:2b:d9:6b:a1:ab:64:e2: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D5:6A:44:51:EE:54:E3:39:89:22:32:14:33:DC:76:70:D9:C1:44 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1NVqRFHuVOM5iSIyFDPcdnDZwUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.199.0/24 195.58.38.0/23 195.133.64.0/23 212.193.4.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:ae:1a:c4:4b:33:3f:46:da:d4:bc:05:84:f8:5c:66:31:5a: 0c:a5:54:fc:de:7a:fb:37:dc:01:1e:aa:d5:02:fc:1e:9f:5d: 11:a0:d8:02:9c:c2:9f:d2:8d:55:f6:96:d9:6b:31:dc:12:cf: c7:af:03:b7:d0:f4:40:0b:0e:af:7a:ef:68:33:cf:5c:56:55: ca:5b:60:e1:33:15:8c:db:85:7b:67:63:bf:aa:52:f8:93:ec: b7:73:84:48:6c:b3:7f:cd:30:58:1e:bd:00:d9:61:e9:20:b7: ec:cc:38:9f:11:47:3f:58:50:f7:d5:f1:10:e5:20:5b:eb:58: 7d:e8:f6:dd:00:79:38:03:4b:5a:b5:b9:08:89:d5:13:37:74: 54:9f:38:c8:0f:19:63:47:e6:2a:1a:c2:ef:05:3f:64:4f:27: 16:10:1d:0d:97:45:a4:9d:80:ab:4e:08:6c:45:a2:8e:28:84: d6:86:c1:21:83:fc:f4:4d:ce:c3:8c:41:e8:cf:16:3c:79:3b: 45:b4:e1:38:bc:76:9d:d3:24:ad:da:58:76:45:f1:65:13:3b: 81:6d:1f:94:5d:97:d3:53:10:44:b1:28:f6:00:93:4b:3f:c8: 20:29:21:08:bc:9c:87:a1:2a:68:6d:36:69:fe:f3:6d:47:fe: 99:fe:cc:f2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hV5RITBFIBYsxLppsrxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGQ1NmE0NDUxZWU1NGUzMzk4OTIyMzIxNDMzZGM3NjcwZDljMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XATaq4YbuL+9r9iAWUfQSHZ29C5 8FGhzIsXXpsZYGPLPHQs2GxzlQegGJk7LLJG9dfAXQfUjR3sL8G+c8sK2ZKnqG0l R4i+faXeDs0C0zj3fYw4UektLkjwFBqWu5i+AtQeRdZVtkOl53H+mKg86ecYtVUF EmLD/y6hWV42BFV/gCrj/pbdQBYIacdvi7jKJUEn7IscCmYBvZ9qJvoD+p8H4Ekz 5ie3L/OsVgghMpf5Sg2BGVogwFP9bZGSWq6EMbRUe/xB1x0xdWJe9QjL9RVDm1b+ +hiI8ZsI3ciUXotihbqdTXVZuWorAB5M3DK/N/IoBxd2eivZa6GrZOJo3wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNTVakRR7lTjOYkiMhQz3HZw2cFEMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvMU5WcVJGSHVWT001aVNJeUZEUGNkbkRad1VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwlfHAwQB wzomAwQBw4VAAwQB1MEEMA0GCSqGSIb3DQEBCwUAA4IBAQA+rhrESzM/RtrUvAWE +FxmMVoMpVT83nr7N9wBHqrVAvwen10RoNgCnMKf0o1V9pbZazHcEs/HrwO30PRA Cw6veu9oM89cVlXKW2DhMxWM24V7Z2O/qlL4k+y3c4RIbLN/zTBYHr0A2WHpILfs zDifEUc/WFD31fEQ5SBb61h96PbdAHk4A0tatbkIidUTN3RUnzjIDxljR+YqGsLv BT9kTycWEB0Nl0WknYCrTghsRaKOKITWhsEhg/z0Tc7DjEHozxY8eTtFtOE4vHad 0ySt2lh2RfFlEzuBbR+UXZfTUxBEsSj2AJNLP8ggKSEIvJyHoSpobTZp/vNtR/6Z /szy -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:41 2026 by rpki-client