This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/armHtzccUgM1BQgqFWfqXr6nmqw.roa File: armHtzccUgM1BQgqFWfqXr6nmqw.roa (raw, json) Hash identifier: DJ2wNaazpWR4mzxWyuTxAz1ZNGnET3QrOp9oGV9Pz5k= Subject key identifier: 6A:B9:87:B7:37:1C:52:03:35:05:08:2A:15:67:EA:5E:BE:A7:9A:AC Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6C50A7AA3378106E50C5C3258579E Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/armHtzccUgM1BQgqFWfqXr6nmqw.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 62.100.216.0/22 maxlen: 24 185.89.251.0/24 maxlen: 24 193.228.224.0/24 maxlen: 24 193.239.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:0a:7a:a3:37:81:06:e5:0c:5c:32:58:57:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab987b7371c52033505082a1567ea5ebea79aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:9c:fb:b9:7d:f5:b4:5f:06:19:dc:83:3a: 2a:2f:b6:e3:9a:17:cf:db:45:4b:d7:af:6d:86:ec: 42:28:41:8a:fd:93:47:79:60:19:b2:cf:0c:13:f3: 65:21:b7:72:9c:3a:90:33:fb:3b:47:76:04:44:22: 0c:5f:d2:ca:cd:eb:77:b1:88:32:5a:84:76:26:a9: 33:c3:d3:fd:cd:19:a3:2b:e7:8d:2f:4d:8c:b2:57: 21:c5:4c:9e:90:5e:08:35:d5:71:19:9e:74:fb:55: f4:1d:af:16:73:c0:7a:31:0c:43:14:14:94:99:8b: c9:8f:1f:e4:3c:12:fb:21:be:20:b7:6e:81:d4:d0: 74:67:c1:fb:05:8c:8b:bb:78:30:0b:20:a6:c5:8f: 65:9a:be:01:00:ca:fe:89:8d:21:ae:b6:98:e8:eb: 63:25:17:70:31:76:db:37:ff:a5:1a:9c:46:71:d0: a4:6b:23:82:e2:23:28:7c:6d:44:e7:08:63:5d:31: 47:85:24:d7:61:6b:a5:b0:b2:1b:9e:dd:bf:92:00: 20:c6:fb:03:e5:aa:ea:06:e5:fd:5e:b2:5b:af:b4: 06:83:a2:b8:6c:ed:b0:13:49:c1:69:54:81:d7:5d: a0:95:60:a7:2e:38:04:c3:fb:40:52:81:72:d4:cd: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:87:B7:37:1C:52:03:35:05:08:2A:15:67:EA:5E:BE:A7:9A:AC X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/armHtzccUgM1BQgqFWfqXr6nmqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.100.216.0/22 185.89.251.0/24 193.228.224.0/24 193.239.146.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:f6:e7:89:23:72:3a:4f:a7:b1:e6:56:23:8f:b1:bf:f3:91: 76:7c:72:1a:4d:36:2a:c9:86:c3:8a:a6:58:15:e7:ca:b2:1f: f3:06:53:54:67:d8:7e:24:57:80:42:e3:16:e3:1a:69:3b:2e: d3:39:38:22:60:99:69:3e:9e:a5:2d:94:a7:0a:22:a6:0e:16: 30:47:10:53:57:c7:2e:cf:23:8c:09:1f:99:29:d1:15:b5:35: ae:76:80:c4:29:b6:14:19:ea:7b:ab:50:5f:63:d8:65:08:e1: 9c:42:96:7b:96:17:4f:a6:e6:fd:57:8b:7d:e6:3d:e8:2f:11: 84:7d:34:e0:4e:2a:cb:e6:b1:fd:e6:93:9c:f6:c1:1a:fd:84: 53:81:bc:64:7a:dc:72:2d:05:d0:d0:6b:94:a3:89:17:0c:c9: fe:ff:a0:3e:4e:15:a9:09:df:64:f5:50:60:ad:28:c3:c5:39: 29:3a:43:47:4b:a6:a6:f1:04:43:6a:05:74:4e:14:1d:ec:92: 7f:e4:95:c9:c6:66:85:b0:01:7a:5d:d3:cc:cc:b4:7c:fe:3f: fd:21:56:ac:56:d2:3a:e7:da:fa:4a:4e:69:d7:ad:3b:09:35: b4:7a:53:13:9e:e3:b4:ae:7e:78:16:c1:37:d9:8c:26:00:9b: 90:b9:f8:9e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xsUKeqM3gQblDFwyWFeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWI5ODdiNzM3MWM1MjAzMzUwNTA4MmExNTY3ZWE1ZWJlYTc5YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlqc+7l99bRfBhncgzoqL7bjmhfP 20VL169thuxCKEGK/ZNHeWAZss8ME/NlIbdynDqQM/s7R3YERCIMX9LKzet3sYgy WoR2Jqkzw9P9zRmjK+eNL02MslchxUyekF4INdVxGZ50+1X0Ha8Wc8B6MQxDFBSU mYvJjx/kPBL7Ib4gt26B1NB0Z8H7BYyLu3gwCyCmxY9lmr4BAMr+iY0hrraY6Otj JRdwMXbbN/+lGpxGcdCkayOC4iMofG1E5whjXTFHhSTXYWulsLIbnt2/kgAgxvsD 5arqBuX9XrJbr7QGg6K4bO2wE0nBaVSB112glWCnLjgEw/tAUoFy1M3jDwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGq5h7c3HFIDNQUIKhVn6l6+p5qsMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvYXJtSHR6Y2NVZ00xQlFncUZXZnFYcjZubXF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCPmTYAwQA uVn7AwQAweTgAwQBwe+SMA0GCSqGSIb3DQEBCwUAA4IBAQB+9ueJI3I6T6ex5lYj j7G/85F2fHIaTTYqyYbDiqZYFefKsh/zBlNUZ9h+JFeAQuMW4xppOy7TOTgiYJlp Pp6lLZSnCiKmDhYwRxBTV8cuzyOMCR+ZKdEVtTWudoDEKbYUGep7q1BfY9hlCOGc QpZ7lhdPpub9V4t95j3oLxGEfTTgTirL5rH95pOc9sEa/YRTgbxketxyLQXQ0GuU o4kXDMn+/6A+ThWpCd9k9VBgrSjDxTkpOkNHS6am8QRDagV0ThQd7JJ/5JXJxmaF sAF6XdPMzLR8/j/9IVasVtI659r6Sk5p1607CTW0elMTnuO0rn54FsE32YwmAJuQ ufie -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:20 2026 by rpki-client