This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/Np2VeCA0za46WaMwCq5AiCS9fps.roa File: Np2VeCA0za46WaMwCq5AiCS9fps.roa (raw, json) Hash identifier: lQMOEsMg/PNxQNTWDe3yj7HDtXyMvTPb38KH4IbDlUE= Subject key identifier: 36:9D:95:78:20:34:CD:AE:3A:59:A3:30:0A:AE:40:88:24:BD:7E:9B Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a Certificate serial: 019B7EA683784CF13CDB81574C3B1A33FE7E Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/Np2VeCA0za46WaMwCq5AiCS9fps.roa Signing time: Fri 02 Jan 2026 12:20:00 +0000 ROA not before: Fri 02 Jan 2026 12:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202075 IP address blocks: 185.50.172.0/22 maxlen: 22 185.50.172.0/23 maxlen: 23 185.50.174.0/23 maxlen: 23 2a04:be80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:83:78:4c:f1:3c:db:81:57:4c:3b:1a:33:fe:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a Validity Not Before: Jan 2 12:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=369d95782034cdae3a59a3300aae408824bd7e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:7e:1c:1c:40:42:ff:80:c1:b2:e0:b2:c0: 5d:1c:4b:3a:39:fa:55:bf:54:fa:9e:22:6d:01:6f: c5:a9:46:81:48:66:8e:4a:24:05:4c:0b:92:5b:9e: 6a:e1:7d:c9:7f:76:1d:8f:5b:b2:ac:e1:d8:cc:e4: 51:e5:37:c1:de:f1:78:2c:e1:97:60:ff:4c:af:19: 4d:96:2f:66:03:31:8d:b9:7d:d5:6b:0a:e9:c4:45: fc:8b:61:4d:ab:9f:f2:d2:39:16:c1:26:05:28:2e: 92:8c:7a:92:34:43:87:00:4c:fa:0d:33:f4:96:b8: 18:bf:82:34:33:0d:98:31:38:3e:13:f9:ac:06:b0: ab:38:d7:39:4a:6d:53:a2:ab:fd:ef:e7:c2:04:de: ca:e8:c6:b8:a8:20:e6:91:41:81:5f:a3:ce:6c:d9: 8e:1f:d6:e4:99:91:34:9d:e8:93:e8:26:ae:ca:dc: f0:6d:98:56:44:9d:ec:8d:56:3e:94:89:1e:5c:d6: 6b:7d:6f:b6:72:5f:79:eb:d4:81:63:1c:2d:29:95: 52:03:5a:0e:5b:d8:cc:0d:18:5d:ba:44:17:31:5c: 2d:60:5f:ae:e9:cf:04:f6:e8:b2:37:33:42:3b:6b: e2:10:e6:95:af:af:4e:8b:b8:b4:c8:b8:ec:17:23: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9D:95:78:20:34:CD:AE:3A:59:A3:30:0A:AE:40:88:24:BD:7E:9B X509v3 Authority Key Identifier: keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/Np2VeCA0za46WaMwCq5AiCS9fps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.172.0/22 IPv6: 2a04:be80::/29 Signature Algorithm: sha256WithRSAEncryption 33:48:52:56:ff:d6:fb:a9:b8:b2:22:73:1f:8b:64:4a:39:6e: 66:3c:1b:fb:6e:da:06:af:71:ce:3b:ce:e1:fe:32:94:53:d0: f9:e2:73:d9:b8:1e:51:7b:54:c6:f9:54:a3:ae:35:8f:bb:f3: d4:0a:9a:1d:fd:dc:86:89:8b:19:b1:07:da:74:f1:4a:1a:06: b3:e0:91:09:bf:34:e0:cd:d8:e7:e9:cc:e4:bd:f1:37:a2:4a: 87:3b:b4:ba:4f:3b:b3:8b:bb:01:1a:bf:ba:0e:63:ab:81:42: 26:27:74:ad:02:6b:09:04:9c:cd:99:81:46:3b:84:c0:68:f6: 62:74:6c:6d:f1:00:cf:6b:a2:7d:09:a2:d0:f9:b1:72:45:6d: d4:84:81:4f:c7:28:17:2b:c9:ee:7c:c3:87:6f:62:c1:d9:5e: be:6f:e6:f9:2a:bd:65:91:fb:6b:bc:b1:67:3a:75:d7:49:90: 53:9b:bf:1c:f6:6f:73:6b:9e:62:ef:d7:44:20:4b:7e:c3:9d: 21:27:4c:c0:a4:11:77:8d:dc:8d:c9:02:59:23:b4:39:fc:13: 81:20:39:52:e2:e8:5f:42:39:a8:bd:27:ea:d4:57:28:8f:41: cd:ae:2c:6a:7a:17:52:b5:e7:a3:a9:8e:1a:03:0e:a3:6b:61: 6a:4a:40:be -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+poN4TPE824FXTDsaM/5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWNiNjhjODBkNmQ4ZDE2NDg5MjIzMGY5ZDExZjI1NTFi ZWQzOGEwHhcNMjYwMTAyMTIyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjlkOTU3ODIwMzRjZGFlM2E1OWEzMzAwYWFlNDA4ODI0YmQ3ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVt+HBxAQv+AwbLgssBdHEs6OfpV v1T6niJtAW/FqUaBSGaOSiQFTAuSW55q4X3Jf3Ydj1uyrOHYzORR5TfB3vF4LOGX YP9MrxlNli9mAzGNuX3VawrpxEX8i2FNq5/y0jkWwSYFKC6SjHqSNEOHAEz6DTP0 lrgYv4I0Mw2YMTg+E/msBrCrONc5Sm1Toqv97+fCBN7K6Ma4qCDmkUGBX6PObNmO H9bkmZE0neiT6CauytzwbZhWRJ3sjVY+lIkeXNZrfW+2cl9569SBYxwtKZVSA1oO W9jMDRhdukQXMVwtYF+u6c8E9uiyNzNCO2viEOaVr69Oi7i0yLjsFyP6OQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDadlXggNM2uOlmjMAquQIgkvX6bMB8GA1UdIwQY MBaAFIzstoyA1tjRZIkiMPnRHyVRvtOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgt ZWIwMDEyMWE1NWU1LzEvTnAyVmVDQTB6YTQ2V2FNd0NxNUFpQ1M5ZnBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgtZWIwMDEyMWE1NWU1 LzEvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTKsMA0E AgACMAcDBQMqBL6AMA0GCSqGSIb3DQEBCwUAA4IBAQAzSFJW/9b7qbiyInMfi2RK OW5mPBv7btoGr3HOO87h/jKUU9D54nPZuB5Re1TG+VSjrjWPu/PUCpod/dyGiYsZ sQfadPFKGgaz4JEJvzTgzdjn6czkvfE3okqHO7S6Tzuzi7sBGr+6DmOrgUImJ3St AmsJBJzNmYFGO4TAaPZidGxt8QDPa6J9CaLQ+bFyRW3UhIFPxygXK8nufMOHb2LB 2V6+b+b5Kr1lkftrvLFnOnXXSZBTm78c9m9za55i79dEIEt+w50hJ0zApBF3jdyN yQJZI7Q5/BOBIDlS4uhfQjmovSfq1Fcoj0HNrixqehdSteejqY4aAw6ja2FqSkC+ -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:40 2026 by rpki-client