This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/nGPG4bCL5fRCaWtl1CSmf_9dePY.roa File: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (raw, json) Hash identifier: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw= Subject key identifier: 9C:63:C6:E1:B0:8B:E5:F4:42:69:6B:65:D4:24:A6:7F:FF:5D:78:F6 Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319 Certificate serial: 019B7F15B4823BDF265247325C208B408D78 Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/nGPG4bCL5fRCaWtl1CSmf_9dePY.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48213 IP address blocks: 45.13.172.0/22 maxlen: 22 185.135.236.0/22 maxlen: 22 213.232.226.0/24 maxlen: 24 2a07:980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b4:82:3b:df:26:52:47:32:5c:20:8b:40:8d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c63c6e1b08be5f442696b65d424a67fff5d78f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:9a:d3:a9:40:db:ef:6b:2a:bf:ef:fd:96: 97:d5:43:ac:b3:c7:d3:96:30:a6:c5:43:21:28:30: 2d:41:3f:8e:13:83:3f:8d:fd:5f:47:ae:32:29:53: cf:1a:70:d9:61:3f:57:c1:7c:8e:c9:3d:8f:9c:15: 57:e7:27:7e:6e:9d:65:60:99:97:e9:23:23:e9:d9: e5:13:4d:a4:41:72:19:0d:e1:b1:ac:c7:f3:68:f9: b0:f9:b4:3a:e3:d0:73:2b:e2:d4:96:e4:ad:53:44: c7:c7:bf:37:3d:cb:d9:61:60:8a:78:fe:67:da:2a: 43:29:6b:03:26:8a:e1:6e:e2:d7:01:43:0f:d7:8d: f5:ca:d9:97:06:f6:a6:50:d7:2b:73:93:f1:d2:57: d6:76:70:83:d6:dd:1b:f7:a8:a6:1a:a5:db:54:2c: 1f:29:69:cf:b4:1c:3c:fc:0f:f1:5b:cd:07:c3:e2: 70:57:49:17:a0:ed:3b:e4:bd:60:99:3e:c9:ce:5c: 90:6b:ee:c5:0c:8b:91:3f:0b:e3:01:04:d1:81:e8: d9:94:0c:8c:f5:5b:a8:b5:46:da:b6:b1:3e:c1:c8: 73:99:f2:c8:da:35:b0:82:b3:ef:d1:2b:f1:48:b5: 9e:3b:93:de:d2:9d:84:6c:1d:9a:c3:6a:c7:e4:55: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:63:C6:E1:B0:8B:E5:F4:42:69:6B:65:D4:24:A6:7F:FF:5D:78:F6 X509v3 Authority Key Identifier: keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/nGPG4bCL5fRCaWtl1CSmf_9dePY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.172.0/22 185.135.236.0/22 213.232.226.0/24 IPv6: 2a07:980::/29 Signature Algorithm: sha256WithRSAEncryption 45:78:cb:a2:df:6b:d9:2e:c0:06:8e:63:2b:29:1a:47:80:52: 6c:db:1f:91:a1:c3:63:e9:f4:54:19:db:9b:5c:54:9e:16:2a: 57:34:08:b1:17:1c:c7:ae:69:90:49:3d:f4:17:c1:0d:41:08: 0b:d2:1b:ce:d4:ff:08:4d:9c:94:83:d2:46:ca:26:92:46:12: a3:1d:9f:10:73:8a:96:4a:ad:36:ac:9a:93:93:b8:f8:08:9b: 8b:37:31:0d:92:76:0d:f2:7f:b6:b6:66:3a:e5:2c:3b:43:0b: 2b:f6:12:83:96:12:e4:25:46:ee:23:11:28:05:d5:60:8c:67: 6d:85:8e:68:5a:1b:f9:43:e4:66:ba:4d:14:33:85:0c:ce:94: 06:d5:48:3b:f7:75:a5:e5:f0:60:0b:47:c5:83:e1:59:96:10: 15:a3:7c:09:3c:76:2e:f4:5f:98:ab:57:c9:59:3f:94:55:1b: 03:2c:01:d8:95:3f:6e:37:2d:4c:8e:a1:6b:4d:1a:80:9f:59: 56:13:87:1e:13:de:a2:7e:b3:77:eb:4e:41:8a:a5:00:66:f7: 34:0a:47:10:ca:f0:ea:00:c0:94:f5:4f:34:60:1b:be:1a:1f: f7:3e:a1:ab:68:27:3c:7c:26:a2:d3:a6:44:9c:6f:3d:4f:c7: 78:d2:f8:cb -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FbSCO98mUkcyXCCLQI14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx ZjMzMTkwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzYzYzZlMWIwOGJlNWY0NDI2OTZiNjVkNDI0YTY3ZmZmNWQ3OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihaa06lA2+9rKr/v/ZaX1UOss8fT ljCmxUMhKDAtQT+OE4M/jf1fR64yKVPPGnDZYT9XwXyOyT2PnBVX5yd+bp1lYJmX 6SMj6dnlE02kQXIZDeGxrMfzaPmw+bQ649BzK+LUluStU0THx783PcvZYWCKeP5n 2ipDKWsDJorhbuLXAUMP1431ytmXBvamUNcrc5Px0lfWdnCD1t0b96imGqXbVCwf KWnPtBw8/A/xW80Hw+JwV0kXoO075L1gmT7JzlyQa+7FDIuRPwvjAQTRgejZlAyM 9VuotUbatrE+wchzmfLI2jWwgrPv0SvxSLWeO5Pe0p2EbB2aw2rH5FUEqwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJxjxuGwi+X0QmlrZdQkpn//XXj2MB8GA1UdIwQY MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt YmYyOWM0MTg4ZDdlLzEvbkdQRzRiQ0w1ZlJDYVd0bDFDU21mXzlkZVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQ2sAwQC uYfsAwQA1ejiMA0EAgACMAcDBQMqBwmAMA0GCSqGSIb3DQEBCwUAA4IBAQBFeMui 32vZLsAGjmMrKRpHgFJs2x+RocNj6fRUGdubXFSeFipXNAixFxzHrmmQST30F8EN QQgL0hvO1P8ITZyUg9JGyiaSRhKjHZ8Qc4qWSq02rJqTk7j4CJuLNzENknYN8n+2 tmY65Sw7Qwsr9hKDlhLkJUbuIxEoBdVgjGdthY5oWhv5Q+Rmuk0UM4UMzpQG1Ug7 93Wl5fBgC0fFg+FZlhAVo3wJPHYu9F+Yq1fJWT+UVRsDLAHYlT9uNy1MjqFrTRqA n1lWE4ceE96ifrN3605BiqUAZvc0CkcQyvDqAMCU9U80YBu+Gh/3PqGraCc8fCai 06ZEnG89T8d40vjL -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:12 2026 by rpki-client