This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/692Q6p3dwFt6exNHVWJvrLr2ZXE.roa File: 692Q6p3dwFt6exNHVWJvrLr2ZXE.roa (raw, json) Hash identifier: aX9QaOIHWcbdXhi/DvPhLEdHiXl6GWuln1YtCwrgNUs= Subject key identifier: EB:DD:90:EA:9D:DD:C0:5B:7A:7B:13:47:55:62:6F:AC:BA:F6:65:71 Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36 Certificate serial: 019B78352AB8910C75E474023D408034C72C Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/692Q6p3dwFt6exNHVWJvrLr2ZXE.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211112 IP address blocks: 46.174.142.0/23 maxlen: 24 2a14:d580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2a:b8:91:0c:75:e4:74:02:3d:40:80:34:c7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebdd90ea9dddc05b7a7b134755626facbaf66571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:83:61:1a:16:55:8a:4e:ac:7b:dd:ca:81: 75:9c:65:bf:4c:34:dc:1e:53:ee:fa:c3:6c:1c:79: d2:4f:cf:be:91:d5:2a:d0:df:48:38:7a:49:27:c8: 97:dc:7a:fd:d5:1c:21:40:48:4f:bb:51:89:b0:2c: f7:9c:53:5a:48:31:36:a9:84:cb:8f:1b:23:67:ce: e4:63:a4:8f:81:be:5d:0a:e1:53:51:a8:66:84:11: 85:38:54:3e:20:01:44:fc:bb:25:aa:c0:f6:98:16: 72:35:51:2d:6c:27:4f:35:df:2f:3b:ad:98:3e:a3: 98:8f:ef:48:f5:1d:24:25:67:8e:24:5d:19:72:ff: 7c:ed:04:cb:d3:8d:15:df:3e:df:c3:95:f2:96:5e: 61:c1:e0:1d:07:18:40:81:1a:5f:a2:66:cf:6d:b2: 4a:32:7a:e4:91:e7:fe:86:a1:fe:15:eb:a2:e6:aa: e6:f0:79:43:10:d9:ac:96:ad:0e:2d:3d:18:d7:3d: 14:3f:6e:26:77:7c:46:a9:42:18:ba:f5:81:b7:61: 55:10:87:d8:7a:13:1b:00:f5:22:5f:a6:03:4b:4c: 26:fa:e0:8d:ec:9a:f1:ac:7a:5c:95:1c:00:33:83: 8b:df:55:20:57:65:dd:ac:ae:33:4f:b9:15:7b:f5: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DD:90:EA:9D:DD:C0:5B:7A:7B:13:47:55:62:6F:AC:BA:F6:65:71 X509v3 Authority Key Identifier: keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/692Q6p3dwFt6exNHVWJvrLr2ZXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.142.0/23 IPv6: 2a14:d580::/32 Signature Algorithm: sha256WithRSAEncryption 5f:11:5c:a4:83:ca:8f:db:16:f3:5d:f5:cc:70:c8:84:16:42: 2a:d7:34:f1:71:c0:f2:9d:59:49:53:7a:7e:66:72:37:2b:12: 4e:4a:e0:35:b1:27:e1:eb:d1:41:0f:4a:06:e3:47:2f:89:ba: 4c:a9:51:d1:5a:6c:3b:cb:d7:88:32:a1:43:37:f7:ed:bf:ee: cb:80:de:f7:16:fe:6c:df:19:38:4b:6a:e4:ca:be:37:f6:4b: 52:72:8f:15:57:7d:ce:61:00:72:44:8f:e2:21:5c:ac:fa:5b: 35:3a:c2:74:ab:97:9d:c3:72:8a:93:b3:0d:dd:9e:8c:d4:53: b3:91:fe:ca:c0:c6:dd:e3:ce:29:a7:f9:4f:38:47:e8:e2:70: 28:bf:6a:ab:15:17:f3:59:b4:a2:5c:17:13:e5:db:e7:9a:6b: 75:45:7c:3a:ed:3f:fb:a1:34:3e:f3:0c:e8:bd:8d:6e:56:bf: 59:3c:96:dd:3a:b5:ba:c4:65:00:61:e4:91:04:db:f4:1a:a2: 32:99:0b:02:42:2a:0d:80:e6:ae:a1:15:3e:67:f3:6d:73:c2: 6b:36:82:8b:46:d1:85:14:56:73:03:e3:62:e8:95:2a:8a:e3: 22:3b:17:fc:11:06:fe:0f:94:61:ed:85:eb:f1:4f:39:aa:57: ed:7f:56:6a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NSq4kQx15HQCPUCANMcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh NzRmMzYwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmRkOTBlYTlkZGRjMDViN2E3YjEzNDc1NTYyNmZhY2JhZjY2NTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31uDYRoWVYpOrHvdyoF1nGW/TDTc HlPu+sNsHHnST8++kdUq0N9IOHpJJ8iX3Hr91RwhQEhPu1GJsCz3nFNaSDE2qYTL jxsjZ87kY6SPgb5dCuFTUahmhBGFOFQ+IAFE/LslqsD2mBZyNVEtbCdPNd8vO62Y PqOYj+9I9R0kJWeOJF0Zcv987QTL040V3z7fw5Xyll5hweAdBxhAgRpfombPbbJK Mnrkkef+hqH+Feui5qrm8HlDENmslq0OLT0Y1z0UP24md3xGqUIYuvWBt2FVEIfY ehMbAPUiX6YDS0wm+uCN7JrxrHpclRwAM4OL31UgV2XdrK4zT7kVe/WEoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOvdkOqd3cBbensTR1Vib6y69mVxMB8GA1UdIwQY MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt NmI1MjM5Nzc5ZDhhLzEvNjkyUTZwM2R3RnQ2ZXhOSFZXSnZyTHIyWlhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLq6OMA0E AgACMAcDBQAqFNWAMA0GCSqGSIb3DQEBCwUAA4IBAQBfEVykg8qP2xbzXfXMcMiE FkIq1zTxccDynVlJU3p+ZnI3KxJOSuA1sSfh69FBD0oG40cvibpMqVHRWmw7y9eI MqFDN/ftv+7LgN73Fv5s3xk4S2rkyr439ktSco8VV33OYQByRI/iIVys+ls1OsJ0 q5edw3KKk7MN3Z6M1FOzkf7KwMbd484pp/lPOEfo4nAov2qrFRfzWbSiXBcT5dvn mmt1RXw67T/7oTQ+8wzovY1uVr9ZPJbdOrW6xGUAYeSRBNv0GqIymQsCQioNgOau oRU+Z/Ntc8JrNoKLRtGFFFZzA+Ni6JUqiuMiOxf8EQb+D5Rh7YXr8U85qlftf1Zq -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:21 2026 by rpki-client