This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/nD_ARS36tkYEaFa24POgKi0TB4U.roa File: nD_ARS36tkYEaFa24POgKi0TB4U.roa (raw, json) Hash identifier: H1vCO9eNS9BAqP3EHrciv1VmoLehzHokRpUI2dSkh+I= Subject key identifier: 9C:3F:C0:45:2D:FA:B6:46:04:68:56:B6:E0:F3:A0:2A:2D:13:07:85 Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b Certificate serial: 019B7C1179FE85A834572134F3364DC35C5D Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/nD_ARS36tkYEaFa24POgKi0TB4U.roa Signing time: Fri 02 Jan 2026 00:17:58 +0000 ROA not before: Fri 02 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202195 IP address blocks: 46.21.0.0/20 maxlen: 20 87.253.240.0/21 maxlen: 21 185.108.8.0/23 maxlen: 23 185.108.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:79:fe:85:a8:34:57:21:34:f3:36:4d:c3:5c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b Validity Not Before: Jan 2 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c3fc0452dfab646046856b6e0f3a02a2d130785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:b7:79:de:2d:56:c4:0c:53:d7:a9:00:31: 1c:6c:35:74:06:cd:f9:61:1b:da:e3:a8:2a:9e:26: 65:c2:41:82:72:3f:74:82:03:b5:53:30:aa:f6:0f: e0:b1:be:12:21:ed:fc:4f:28:48:e0:33:66:00:46: 3b:96:97:27:d8:f0:35:fa:9f:fe:2f:db:bf:b6:b6: 3e:46:7e:fb:fa:db:7c:c6:86:c5:8c:2a:19:5a:bd: a2:ed:e8:9a:5b:7c:25:f5:11:ba:0a:f7:90:34:d7: 81:09:74:9a:7b:87:68:0c:c1:69:8d:5f:a4:4b:55: a6:ec:f2:50:b8:2b:75:14:95:8f:75:bc:fd:b1:45: 61:31:78:c0:cb:7a:28:4c:8d:d4:f3:24:ad:2a:8e: 89:49:a6:73:fc:2f:6a:5c:17:63:35:24:eb:3f:c7: b3:86:b2:2d:7b:f7:60:f0:35:68:4d:cc:62:9f:e6: 05:99:9f:56:d5:51:3a:80:b0:fe:67:11:6a:1d:dc: e8:a5:ee:22:3b:11:21:04:51:db:54:28:22:ac:94: cd:d6:2d:d6:6d:91:1d:fb:3a:c9:38:25:ab:a5:52: 20:d8:62:b7:d4:fc:0a:5a:7a:94:ac:c0:89:94:df: 3e:5c:61:93:f5:b2:26:1a:ec:9b:e7:82:63:57:e2: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:C0:45:2D:FA:B6:46:04:68:56:B6:E0:F3:A0:2A:2D:13:07:85 X509v3 Authority Key Identifier: keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/nD_ARS36tkYEaFa24POgKi0TB4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.0.0/20 87.253.240.0/21 185.108.8.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:29:de:1a:b8:f9:89:70:c0:95:c5:3e:5c:91:4e:a5:f3:91: 00:da:a4:4c:22:64:a0:78:8d:56:09:cd:45:7a:4c:ca:c8:66: 00:cc:8b:60:c2:08:6d:c3:85:a5:dd:71:44:08:58:6b:94:74: fd:70:ad:22:12:1e:1b:ee:62:e8:01:81:5c:70:ec:8b:ae:b7: 26:21:93:61:0d:c1:85:33:9a:2d:c9:58:c3:24:df:fe:f8:87: fe:3d:d4:01:c4:4a:08:88:d7:b2:e4:68:8a:a1:99:d7:31:ca: 9a:56:0d:3d:b7:0e:b1:b7:56:24:b1:e5:c0:f8:da:16:23:2e: a1:9b:79:df:f1:d3:9b:39:42:7c:bb:f5:e7:fa:a4:74:dd:57: d3:9e:33:2c:ee:a3:d7:21:34:f8:ba:16:7b:ad:dd:96:60:01: 69:85:15:51:aa:6d:3f:1e:dc:99:12:e6:6f:6e:0f:42:34:9b: 07:df:d9:74:2b:b4:85:01:bc:53:72:bb:47:22:0c:2a:6e:66: fa:e7:ed:34:45:b0:57:67:88:97:03:e5:50:9d:a2:07:5b:51: a1:23:e4:b5:a2:fe:fa:63:fd:95:82:13:31:f1:6b:2f:ec:10: ef:21:2f:3f:f0:90:3a:01:77:39:73:1b:a9:82:a4:61:d8:11: 43:4e:f3:0f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EXn+hag0VyE08zZNw1xdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjVjMTdmYTAyOGIzMTM0OGY2MzBmNmI1NmRmNDIyY2Uw NjJiM2IwHhcNMjYwMTAyMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzNmYzA0NTJkZmFiNjQ2MDQ2ODU2YjZlMGYzYTAyYTJkMTMwNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5W3ed4tVsQMU9epADEcbDV0Bs35 YRva46gqniZlwkGCcj90ggO1UzCq9g/gsb4SIe38TyhI4DNmAEY7lpcn2PA1+p/+ L9u/trY+Rn77+tt8xobFjCoZWr2i7eiaW3wl9RG6CveQNNeBCXSae4doDMFpjV+k S1Wm7PJQuCt1FJWPdbz9sUVhMXjAy3ooTI3U8yStKo6JSaZz/C9qXBdjNSTrP8ez hrIte/dg8DVoTcxin+YFmZ9W1VE6gLD+ZxFqHdzope4iOxEhBFHbVCgirJTN1i3W bZEd+zrJOCWrpVIg2GK31PwKWnqUrMCJlN8+XGGT9bImGuyb54JjV+Ln8QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJw/wEUt+rZGBGhWtuDzoCotEweFMB8GA1UdIwQY MBaAFCZlwX+gKLMTSPYw9rVt9CLOBis7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2Et YzM4M2E5MDEwMDA1LzEvbkRfQVJTMzZ0a1lFYUZhMjRQT2dLaTBUQjRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2EtYzM4M2E5MDEwMDA1 LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELhUAAwQD V/3wAwQCuWwIMA0GCSqGSIb3DQEBCwUAA4IBAQBrKd4auPmJcMCVxT5ckU6l85EA 2qRMImSgeI1WCc1FekzKyGYAzItgwghtw4Wl3XFECFhrlHT9cK0iEh4b7mLoAYFc cOyLrrcmIZNhDcGFM5otyVjDJN/++If+PdQBxEoIiNey5GiKoZnXMcqaVg09tw6x t1YkseXA+NoWIy6hm3nf8dObOUJ8u/Xn+qR03VfTnjMs7qPXITT4uhZ7rd2WYAFp hRVRqm0/HtyZEuZvbg9CNJsH39l0K7SFAbxTcrtHIgwqbmb65+00RbBXZ4iXA+VQ naIHW1GhI+S1ov76Y/2VghMx8Wsv7BDvIS8/8JA6AXc5cxupgqRh2BFDTvMP -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:41 2026 by rpki-client