This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/Nd6Aiea9MEU2nzcir7VqD9MLwAo.roa File: Nd6Aiea9MEU2nzcir7VqD9MLwAo.roa (raw, json) Hash identifier: vVF0+qWcpNomgKKgwD8I1nDMzXvRcJv3hRMCFwqrqvc= Subject key identifier: 35:DE:80:89:E6:BD:30:45:36:9F:37:22:AF:B5:6A:0F:D3:0B:C0:0A Certificate issuer: /CN=c15c153441aab020eb6f60dff7152eeaacaea4e7 Certificate serial: 019B797EFB3CEF970AE3BC29FB874F6165BB Authority key identifier: C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/Nd6Aiea9MEU2nzcir7VqD9MLwAo.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39823 IP address blocks: 92.62.96.0/20 maxlen: 20 185.12.236.0/22 maxlen: 22 188.92.160.0/21 maxlen: 21 2a02:e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fb:3c:ef:97:0a:e3:bc:29:fb:87:4f:61:65:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15c153441aab020eb6f60dff7152eeaacaea4e7 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35de8089e6bd3045369f3722afb56a0fd30bc00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:12:16:7a:de:3f:c1:fc:85:ec:ec:b6:a1: be:ae:0f:cb:09:fa:d7:1f:1a:11:19:14:92:0f:4b: de:94:02:f9:01:e2:19:fe:f9:db:72:04:3e:d3:79: b2:0e:8f:58:83:0a:31:be:b2:0e:6e:d1:9b:8f:dc: 2b:9d:48:3c:d1:34:ab:63:bc:aa:f3:ed:f5:46:10: 93:be:c8:3d:77:32:29:e5:f1:5d:95:e8:44:df:ca: 1e:74:97:24:bc:1b:b6:f9:99:81:74:af:59:a4:08: 54:1b:82:17:70:e6:e7:8a:cf:4d:af:27:c9:68:3f: 41:8b:cc:a7:d0:49:61:1b:bd:65:07:ee:80:7a:d7: 0d:29:12:f7:c7:22:4c:83:99:57:10:e7:4f:cb:b1: a4:d2:9a:c2:bb:e1:ce:49:51:be:c7:df:54:66:39: 23:12:3e:1e:39:ac:f7:8e:85:76:1d:1f:f0:4e:37: 54:df:11:cc:cd:3f:79:48:e1:06:1e:5c:01:b4:86: 02:74:e0:28:a9:70:0b:51:28:19:14:bf:38:c6:51: 6e:f7:47:07:b1:05:77:79:f9:7a:82:f8:b4:61:ed: ad:e1:d3:a3:e1:af:e2:02:22:8d:02:3b:45:72:30: 54:73:37:d4:8c:4a:c3:06:c6:83:5e:6f:b7:c8:98: 21:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DE:80:89:E6:BD:30:45:36:9F:37:22:AF:B5:6A:0F:D3:0B:C0:0A X509v3 Authority Key Identifier: keyid:C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/Nd6Aiea9MEU2nzcir7VqD9MLwAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.96.0/20 185.12.236.0/22 188.92.160.0/21 IPv6: 2a02:e80::/32 Signature Algorithm: sha256WithRSAEncryption 28:6b:a5:67:b7:0a:12:d7:f2:4f:80:c5:36:32:ea:ab:76:74: 30:b9:87:62:3d:79:0b:2b:07:f7:5e:f3:e8:90:39:7c:e9:85: b6:23:0d:ea:77:f4:ed:77:f7:b8:22:cb:63:65:47:c3:10:af: d0:8d:97:78:0d:e0:89:b7:36:fb:8d:40:5a:49:73:f0:67:44: 3e:9e:8a:0b:67:9d:75:54:aa:c4:53:86:05:07:89:eb:49:1b: 54:f5:a3:8b:b4:cc:0f:fc:64:b6:90:c3:44:39:5b:75:48:b7: 6a:5a:cd:63:90:bc:03:68:39:da:2c:30:61:be:49:97:dd:58: c5:0c:a6:f5:0f:d8:38:40:59:6b:0a:b0:71:d8:dd:60:30:5e: 63:31:8b:34:70:fb:8e:9d:71:80:e5:98:71:d6:8d:e8:02:9b: 91:fc:3f:46:b1:f5:50:f4:12:d2:9d:f7:b0:c4:b8:df:6b:34: d0:84:88:de:9e:ff:2f:cd:4f:9d:12:19:fd:6f:6c:1d:e6:19: 00:bf:99:c4:99:8b:f8:1c:d2:26:45:04:d0:8e:77:78:96:f7: 7c:41:bf:b6:8e:c5:3f:cf:09:e4:13:0e:bb:07:e6:98:6d:fe: 57:0a:f4:33:3f:2e:e5:7a:ae:d2:4d:04:9a:fc:ad:bf:c9:db: 2e:c8:33:88 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fvs875cK47wp+4dPYWW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWMxNTM0NDFhYWIwMjBlYjZmNjBkZmY3MTUyZWVhYWNh ZWE0ZTcwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWRlODA4OWU2YmQzMDQ1MzY5ZjM3MjJhZmI1NmEwZmQzMGJjMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs18SFnreP8H8hezstqG+rg/LCfrX HxoRGRSSD0velAL5AeIZ/vnbcgQ+03myDo9YgwoxvrIObtGbj9wrnUg80TSrY7yq 8+31RhCTvsg9dzIp5fFdlehE38oedJckvBu2+ZmBdK9ZpAhUG4IXcObnis9NryfJ aD9Bi8yn0ElhG71lB+6AetcNKRL3xyJMg5lXEOdPy7Gk0prCu+HOSVG+x99UZjkj Ej4eOaz3joV2HR/wTjdU3xHMzT95SOEGHlwBtIYCdOAoqXALUSgZFL84xlFu90cH sQV3efl6gvi0Ye2t4dOj4a/iAiKNAjtFcjBUczfUjErDBsaDXm+3yJghNQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDXegInmvTBFNp83Iq+1ag/TC8AKMB8GA1UdIwQY MBaAFMFcFTRBqrAg629g3/cVLuqsrqTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83ODRjOWUtZTZlYS00OWU5LWFkYmUt NDc5Mjk3MzY0ZWI2LzEvTmQ2QWllYTlNRVUybnpjaXI3VnFEOU1Md0FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83ODRjOWUtZTZlYS00OWU5LWFkYmUtNDc5Mjk3MzY0ZWI2 LzEvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEXD5gAwQC uQzsAwQDvFygMA0EAgACMAcDBQAqAg6AMA0GCSqGSIb3DQEBCwUAA4IBAQAoa6Vn twoS1/JPgMU2MuqrdnQwuYdiPXkLKwf3XvPokDl86YW2Iw3qd/Ttd/e4IstjZUfD EK/QjZd4DeCJtzb7jUBaSXPwZ0Q+nooLZ511VKrEU4YFB4nrSRtU9aOLtMwP/GS2 kMNEOVt1SLdqWs1jkLwDaDnaLDBhvkmX3VjFDKb1D9g4QFlrCrBx2N1gMF5jMYs0 cPuOnXGA5Zhx1o3oApuR/D9GsfVQ9BLSnfewxLjfazTQhIjenv8vzU+dEhn9b2wd 5hkAv5nEmYv4HNImRQTQjnd4lvd8Qb+2jsU/zwnkEw67B+aYbf5XCvQzPy7leq7S TQSa/K2/ydsuyDOI -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:27 2026 by rpki-client