This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa File: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (raw, json) Hash identifier: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs= Subject key identifier: 36:7D:C0:9A:E7:D8:28:6C:E1:3A:D6:75:2D:81:DE:0A:2B:0C:EF:02 Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10 Certificate serial: 019B7C8081FB10AE1120DFCD3936C2B2D41E Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 91.106.128.0/18 maxlen: 24 170.133.0.0/18 maxlen: 24 185.78.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:81:fb:10:ae:11:20:df:cd:39:36:c2:b2:d4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=367dc09ae7d8286ce13ad6752d81de0a2b0cef02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:76:00:12:a1:bc:e9:64:71:7a:82:17:4f: b9:31:4f:38:1e:3c:98:b9:c6:6d:33:bc:46:a0:dd: e6:f6:b9:fd:70:8e:90:6b:93:c7:b4:84:92:16:98: a2:d4:b2:b6:ff:f1:f0:7c:37:26:2a:80:65:1c:1b: 20:1b:92:9e:5a:96:bc:c9:1d:92:85:25:c3:ef:e6: 93:fb:d7:84:94:a2:9a:10:57:c2:9c:d8:0c:b8:71: f6:c1:98:e6:77:ba:32:3e:c6:00:cc:4a:3d:46:7b: 4f:ee:d6:c8:90:08:9b:e4:27:ca:a5:82:f9:88:fa: f4:3d:04:b8:85:0a:9e:d5:d0:e2:93:fc:65:4c:b5: 17:74:18:05:98:9d:dd:97:1a:b4:a2:7b:1f:82:ee: 91:fe:35:da:47:aa:0c:c4:ec:0a:06:0e:3e:90:c1: b8:8c:c0:2b:34:f5:96:1f:58:32:cc:af:6d:94:2b: 53:95:5a:c0:ab:bd:80:c9:a9:57:9a:53:49:45:f6: b8:ac:76:ba:a9:d3:b8:c8:4b:ae:b8:f6:59:c7:ad: 2d:c8:cd:3e:da:6e:59:9c:7e:84:d8:e6:04:8a:ce: 6f:ac:98:07:56:5c:67:15:08:2f:bb:cf:ea:55:70: bc:a9:88:65:20:1c:f7:fc:dc:d3:a8:87:39:9b:e8: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7D:C0:9A:E7:D8:28:6C:E1:3A:D6:75:2D:81:DE:0A:2B:0C:EF:02 X509v3 Authority Key Identifier: keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.128.0/18 170.133.0.0/18 185.78.60.0/22 Signature Algorithm: sha256WithRSAEncryption 07:de:c2:1e:44:ab:3b:66:ac:0d:98:30:91:bd:b2:9c:4b:03: cb:d5:66:eb:cd:c2:33:25:d0:7e:45:5e:ae:42:bf:9e:91:61: 27:36:c2:49:1f:45:ca:8f:6d:b3:eb:12:c4:37:ee:27:ee:57: d0:45:bb:4a:ca:9c:26:57:b1:dc:f6:3c:ec:ee:3a:c7:f5:e5: b7:d7:9a:a7:ab:39:88:bf:66:b0:1e:ba:fb:3a:2c:77:8f:5b: 7a:63:b5:37:25:05:a1:41:7f:01:3d:16:de:b6:08:c7:b2:ac: 7c:30:82:d4:94:09:8b:0d:0f:b4:ab:d1:19:0d:1d:17:cb:93: d1:36:32:8f:a6:ef:b8:fd:40:ad:5c:90:39:71:0f:e6:8c:8b: 63:d3:a3:07:53:1e:09:f5:e8:df:d2:38:15:9e:d9:cc:dc:f8: da:7a:29:97:c8:48:81:65:d5:7e:e9:f5:2a:1a:20:f7:32:5b: 28:8f:dd:9c:c3:a8:00:56:df:81:64:b9:cb:96:fb:5d:06:10: 9e:03:54:25:52:a1:fe:53:8a:38:41:7c:5f:47:6e:25:ca:9d: 41:61:bc:8a:97:21:bc:3b:2c:e1:05:f0:2f:c8:e8:cf:43:ee: 8e:57:f1:2f:e9:84:57:61:00:e5:03:49:12:17:15:ad:ae:ca: d9:93:a1:ba -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gIH7EK4RIN/NOTbCstQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZjJlYzgyNWZhNjM4MWU4ZTk0ZmQzOWIwNmVhMzhiNjNl NDFhMTAwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjdkYzA5YWU3ZDgyODZjZTEzYWQ2NzUyZDgxZGUwYTJiMGNlZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusx2ABKhvOlkcXqCF0+5MU84HjyY ucZtM7xGoN3m9rn9cI6Qa5PHtISSFpii1LK2//HwfDcmKoBlHBsgG5KeWpa8yR2S hSXD7+aT+9eElKKaEFfCnNgMuHH2wZjmd7oyPsYAzEo9RntP7tbIkAib5CfKpYL5 iPr0PQS4hQqe1dDik/xlTLUXdBgFmJ3dlxq0onsfgu6R/jXaR6oMxOwKBg4+kMG4 jMArNPWWH1gyzK9tlCtTlVrAq72AyalXmlNJRfa4rHa6qdO4yEuuuPZZx60tyM0+ 2m5ZnH6E2OYEis5vrJgHVlxnFQgvu8/qVXC8qYhlIBz3/NzTqIc5m+iPGQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDZ9wJrn2Chs4TrWdS2B3gorDO8CMB8GA1UdIwQY MBaAFBzy7IJfpjgejpT9ObBuo4tj5BoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2Ut YzRjNjM5ODNiNTBjLzEvTm4zQW11ZllLR3poT3RaMUxZSGVDaXNNN3dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2UtYzRjNjM5ODNiNTBj LzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGW2qAAwQG qoUAAwQCuU48MA0GCSqGSIb3DQEBCwUAA4IBAQAH3sIeRKs7ZqwNmDCRvbKcSwPL 1WbrzcIzJdB+RV6uQr+ekWEnNsJJH0XKj22z6xLEN+4n7lfQRbtKypwmV7Hc9jzs 7jrH9eW315qnqzmIv2awHrr7Oix3j1t6Y7U3JQWhQX8BPRbetgjHsqx8MILUlAmL DQ+0q9EZDR0Xy5PRNjKPpu+4/UCtXJA5cQ/mjItj06MHUx4J9ejf0jgVntnM3Pja eimXyEiBZdV+6fUqGiD3Mlsoj92cw6gAVt+BZLnLlvtdBhCeA1QlUqH+U4o4QXxf R24lyp1BYbyKlyG8OyzhBfAvyOjPQ+6OV/Ev6YRXYQDlA0kSFxWtrsrZk6G6 -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:25 2026 by rpki-client