This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/neTZwdUrsvjvhEOVdhB7zsbctJU.roa File: neTZwdUrsvjvhEOVdhB7zsbctJU.roa (raw, json) Hash identifier: 63MePPCn/rJDWdkOz9zyLAtuyWHAkx1hOc5iIXs9UC8= Subject key identifier: 9D:E4:D9:C1:D5:2B:B2:F8:EF:84:43:95:76:10:7B:CE:C6:DC:B4:95 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F39C19500936B7A5E14BAB5E389C Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/neTZwdUrsvjvhEOVdhB7zsbctJU.roa Signing time: Fri 02 Jan 2026 14:19:32 +0000 ROA not before: Fri 02 Jan 2026 14:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49874 IP address blocks: 188.234.120.0/21 maxlen: 21 2a02:2698:a004::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f3:9c:19:50:09:36:b7:a5:e1:4b:ab:5e:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9de4d9c1d52bb2f8ef84439576107bcec6dcb495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:8d:23:b1:76:93:b2:90:6b:90:2f:8b:93: c6:f1:2c:c0:0d:3d:47:4d:74:e9:c3:7c:f3:1d:8a: 45:0d:d2:00:c3:57:fa:74:e9:46:14:63:0d:9d:c1: 8f:83:1b:77:54:76:30:de:43:50:2c:de:2f:2b:b3: 68:86:76:95:f7:35:6e:f8:31:62:77:e9:c1:25:53: a4:6b:71:5f:70:6b:dc:13:ea:09:b5:0c:5e:7f:94: 7d:0d:d3:21:f3:1a:60:ff:2c:2f:db:95:4e:5c:06: 4d:6b:42:1c:74:98:3a:47:f3:ff:ac:ee:38:0e:0e: ca:43:f3:d5:8d:7c:4f:e3:99:e1:87:c3:31:54:d7: a4:e7:17:cb:f8:75:42:4b:d9:27:23:97:a1:64:cc: fa:71:36:70:a2:c5:61:b6:e9:23:86:36:b5:7b:9a: 69:e1:c2:18:74:1c:61:45:5c:67:63:a6:ed:ae:45: 78:ea:85:e6:f3:f6:32:6c:3e:ac:4a:d8:20:64:08: 07:a9:e3:e9:d0:e4:85:e1:ba:89:3d:1d:a1:48:b1: f6:a1:06:40:bc:be:d2:75:d3:fa:90:9e:9d:73:9b: ca:2d:a7:fc:c8:d4:93:a7:39:ad:96:1f:7b:6d:3c: 63:4a:e5:c4:27:96:89:5f:66:e4:49:8d:0c:f0:b5: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E4:D9:C1:D5:2B:B2:F8:EF:84:43:95:76:10:7B:CE:C6:DC:B4:95 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/neTZwdUrsvjvhEOVdhB7zsbctJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.234.120.0/21 IPv6: 2a02:2698:a004::/46 Signature Algorithm: sha256WithRSAEncryption da:72:ee:74:1a:6b:54:f2:4b:f0:13:c7:0c:cb:73:ee:e7:6b: 0a:b8:13:35:19:17:35:b4:97:41:86:fc:63:42:d0:f1:4c:78: 2a:ce:3a:6e:91:79:51:9d:13:74:48:28:fd:35:77:3f:f6:78: 29:72:2c:a9:3c:04:10:43:31:72:0f:eb:58:25:1e:a6:8e:e6: 2a:b5:f7:1c:92:02:f3:e0:96:7c:ee:a3:5e:be:01:29:15:3e: 88:1d:02:f3:27:6e:fd:be:36:00:5d:4b:f1:5d:fb:88:84:af: 7c:74:02:72:bc:86:f8:dd:91:40:04:ed:8a:12:4f:0b:5a:c8: 59:6d:4b:16:a0:6f:81:7d:4a:74:35:2f:f3:35:2a:5b:8e:5b: d5:1b:3c:7e:ac:58:bc:5c:f0:18:e5:d3:c1:5d:6e:f3:14:3a: 90:0e:0b:81:38:e7:39:34:0a:ec:a5:d8:54:7d:46:04:ac:db: f2:de:ea:8c:6e:3b:9c:b3:a1:2a:0c:78:63:84:01:5b:de:21: d4:46:14:14:99:4e:a9:43:10:1f:bc:b6:88:7e:a7:ad:ab:e3: 71:a0:4f:f1:e2:60:6f:46:98:42:b6:f8:ea:3b:3f:fe:5c:07: 6e:72:8e:c1:2a:72:82:56:db:c7:a1:ec:9b:6b:1c:ff:db:06: c4:01:6b:37 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/E/OcGVAJNrel4UurXjicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGU0ZDljMWQ1MmJiMmY4ZWY4NDQzOTU3NjEwN2JjZWM2ZGNiNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwemNI7F2k7KQa5Avi5PG8SzADT1H TXTpw3zzHYpFDdIAw1f6dOlGFGMNncGPgxt3VHYw3kNQLN4vK7NohnaV9zVu+DFi d+nBJVOka3FfcGvcE+oJtQxef5R9DdMh8xpg/ywv25VOXAZNa0IcdJg6R/P/rO44 Dg7KQ/PVjXxP45nhh8MxVNek5xfL+HVCS9knI5ehZMz6cTZwosVhtukjhja1e5pp 4cIYdBxhRVxnY6btrkV46oXm8/YybD6sStggZAgHqePp0OSF4bqJPR2hSLH2oQZA vL7SddP6kJ6dc5vKLaf8yNSTpzmtlh97bTxjSuXEJ5aJX2bkSY0M8LW1AQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ3k2cHVK7L474RDlXYQe87G3LSVMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvbmVUWndkVXJzdmp2aEVPVmRoQjd6c2JjdEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDvOp4MA8E AgACMAkDBwIqAiaYoAQwDQYJKoZIhvcNAQELBQADggEBANpy7nQaa1TyS/ATxwzL c+7nawq4EzUZFzW0l0GG/GNC0PFMeCrOOm6ReVGdE3RIKP01dz/2eClyLKk8BBBD MXIP61glHqaO5iq19xySAvPglnzuo16+ASkVPogdAvMnbv2+NgBdS/Fd+4iEr3x0 AnK8hvjdkUAE7YoSTwtayFltSxagb4F9SnQ1L/M1KluOW9UbPH6sWLxc8Bjl08Fd bvMUOpAOC4E45zk0Cuyl2FR9RgSs2/Le6oxuO5yzoSoMeGOEAVveIdRGFBSZTqlD EB+8toh+p62r43GgT/HiYG9GmEK2+Oo7P/5cB25yjsEqcoJW28eh7JtrHP/bBsQB azc= -----END CERTIFICATE-----Generated at Thu Feb 5 05:57:38 2026 by rpki-client