This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa File: NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa (raw, json) Hash identifier: aspcKV2w4XRZmv8Xg1QmYjjgR0mYMF80LK5f3kp14g8= Subject key identifier: 35:67:3B:98:E7:6A:67:C7:C6:5A:48:55:92:20:CD:6B:87:38:36:71 Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d Certificate serial: 019B7EA462E3CA85DC8D0C4852D86E89944B Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa Signing time: Fri 02 Jan 2026 12:17:40 +0000 ROA not before: Fri 02 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59748 IP address blocks: 185.73.156.0/22 maxlen: 22 2a03:43e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:62:e3:ca:85:dc:8d:0c:48:52:d8:6e:89:94:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d Validity Not Before: Jan 2 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35673b98e76a67c7c65a48559220cd6b87383671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:90:87:00:8e:56:6d:30:1f:71:46:f3:5b: a3:5a:f3:ce:de:94:8c:cc:b1:98:14:ad:79:5d:76: 45:3b:94:0c:05:00:bc:52:7d:ac:6d:7b:23:02:89: e9:c9:63:9d:70:aa:3e:85:73:72:a8:a2:b5:b0:c6: a6:78:b5:f4:9d:d1:d6:f8:1b:4b:f6:73:c9:f2:0e: 19:be:3a:61:d9:5f:22:79:a2:44:16:c8:01:0f:11: 01:59:23:4e:06:b2:bc:5e:74:56:75:f6:82:29:42: 8e:2e:c0:8c:10:24:e1:f1:2d:98:4d:af:0f:f7:e3: 5c:6a:54:5c:3b:7a:70:a8:08:7a:b2:93:66:0c:3c: 1d:8e:91:e1:97:11:dd:d7:bc:94:da:1c:32:3e:2a: 07:24:a0:d6:e6:c4:4a:3b:37:23:3d:0b:31:4d:10: 1a:b8:bb:dd:7f:fb:da:96:e9:42:c0:51:a0:e6:54: 2d:a2:d4:fa:0a:50:ac:97:77:bf:90:24:0e:9d:42: 32:67:20:d7:99:5c:bc:96:a5:f3:15:08:05:e1:70: 37:e4:19:28:04:3b:2b:65:98:65:c7:ac:48:4d:f9: 5b:cf:40:d9:a5:e0:23:d6:45:c9:f6:6e:18:93:c7: 15:3b:45:d6:61:c3:bc:7b:c5:98:fb:dd:ee:3e:6d: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:3B:98:E7:6A:67:C7:C6:5A:48:55:92:20:CD:6B:87:38:36:71 X509v3 Authority Key Identifier: keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.156.0/22 IPv6: 2a03:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:47:9c:8b:73:24:cb:0e:e2:c9:11:a7:2e:bf:7c:74:5c:6b: d9:6e:f4:3a:b1:ad:a5:cd:0f:0c:4c:92:66:d4:fc:d1:84:54: 41:85:3d:9c:24:9d:14:30:f7:7c:8a:2c:27:0f:4c:8d:8e:8b: d9:fc:58:43:3f:c7:f7:ef:b3:f0:b1:fa:91:6e:7a:4c:fc:41: 8c:56:75:13:8c:5c:21:7e:aa:5d:b4:bf:7a:ae:7e:79:86:26: 84:d2:34:44:c5:05:77:b5:df:3e:a0:ed:9c:ef:e2:b7:3a:f9: 68:ad:14:28:de:eb:91:4e:13:f4:18:00:d5:eb:c2:c5:28:ac: 8a:73:e7:69:48:8b:ca:18:dd:d7:98:34:ee:60:0f:7b:53:60: b2:81:54:9f:28:19:17:a9:3e:bc:46:74:0f:22:9b:6e:44:9f: 09:e3:65:ef:bf:6d:06:5a:2f:eb:db:cd:42:ca:6b:3c:91:de: 46:ad:64:11:b8:09:68:9a:c1:e9:c4:d4:cb:02:91:59:e2:53: bc:5e:24:6f:2e:89:4e:bc:a8:ab:89:37:30:90:b4:b9:f2:3c: c6:1a:6e:81:09:0d:c8:bc:85:08:33:83:17:66:e6:00:11:35: 4a:cf:3c:28:ce:70:fd:30:4c:96:08:26:74:be:a1:69:30:09: d9:62:58:f4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pGLjyoXcjQxIUthuiZRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI0NDk4OTQ1ODlkMTZmNjc2YmZmMjgyYWJlZGFhNTZj YzdiOGQwHhcNMjYwMTAyMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTY3M2I5OGU3NmE2N2M3YzY1YTQ4NTU5MjIwY2Q2Yjg3MzgzNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssKQhwCOVm0wH3FG81ujWvPO3pSM zLGYFK15XXZFO5QMBQC8Un2sbXsjAonpyWOdcKo+hXNyqKK1sMameLX0ndHW+BtL 9nPJ8g4Zvjph2V8ieaJEFsgBDxEBWSNOBrK8XnRWdfaCKUKOLsCMECTh8S2YTa8P 9+NcalRcO3pwqAh6spNmDDwdjpHhlxHd17yU2hwyPioHJKDW5sRKOzcjPQsxTRAa uLvdf/valulCwFGg5lQtotT6ClCsl3e/kCQOnUIyZyDXmVy8lqXzFQgF4XA35Bko BDsrZZhlx6xITflbz0DZpeAj1kXJ9m4Yk8cVO0XWYcO8e8WY+93uPm0qRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDVnO5jnamfHxlpIVZIgzWuHODZxMB8GA1UdIwQY MBaAFCNLRJiUWJ0W9na/8oKr7apWzHuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMt NzNhNjNiMjU5YmViLzEvTldjN21PZHFaOGZHV2toVmtpRE5hNGM0Tm5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMtNzNhNjNiMjU5YmVi LzEvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUmcMA0E AgACMAcDBQAqA0PgMA0GCSqGSIb3DQEBCwUAA4IBAQBqR5yLcyTLDuLJEacuv3x0 XGvZbvQ6sa2lzQ8MTJJm1PzRhFRBhT2cJJ0UMPd8iiwnD0yNjovZ/FhDP8f377Pw sfqRbnpM/EGMVnUTjFwhfqpdtL96rn55hiaE0jRExQV3td8+oO2c7+K3OvlorRQo 3uuRThP0GADV68LFKKyKc+dpSIvKGN3XmDTuYA97U2CygVSfKBkXqT68RnQPIptu RJ8J42Xvv20GWi/r281Cyms8kd5GrWQRuAlomsHpxNTLApFZ4lO8XiRvLolOvKir iTcwkLS58jzGGm6BCQ3IvIUIM4MXZuYAETVKzzwoznD9MEyWCCZ0vqFpMAnZYlj0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:35 2026 by rpki-client