This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NF3HNmWjvU4rUpNaUR1_MOWVw-0.roa File: NF3HNmWjvU4rUpNaUR1_MOWVw-0.roa (raw, json) Hash identifier: DHfu3WlwfHYaZ/V3DF9c3gRuG/jJIA/GhUm4VOazuv4= Subject key identifier: 34:5D:C7:36:65:A3:BD:4E:2B:52:93:5A:51:1D:7F:30:E5:95:C3:ED Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B357C7266728DA0B5E08781A025E0A7 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NF3HNmWjvU4rUpNaUR1_MOWVw-0.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50886 IP address blocks: 85.122.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7c:72:66:72:8d:a0:b5:e0:87:81:a0:25:e0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=345dc73665a3bd4e2b52935a511d7f30e595c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:05:43:29:04:30:8e:a0:71:b8:d9:cc:5b: ae:1f:42:45:2a:95:04:a8:1d:3a:96:a9:27:0c:a3: 8c:47:9b:c7:7d:63:9d:60:89:73:c1:ca:b0:81:67: 5e:89:8a:df:e3:d9:03:f8:13:73:00:4e:ab:9e:69: ba:50:43:af:69:eb:0b:fe:d6:96:05:ad:b9:54:3d: 69:1b:f9:8b:d7:67:f6:dd:ce:6c:d4:65:e5:33:7a: 40:e9:b0:2e:ae:26:72:2b:1d:0e:3d:4d:3d:07:86: 54:0b:e7:14:f7:33:eb:52:8f:58:e2:e3:94:40:95: dd:54:e3:d6:75:10:3d:b8:74:5e:76:00:d5:af:2b: d4:72:ce:6e:78:6e:1e:91:cf:90:ae:6e:10:75:cc: 0c:fa:44:91:f5:48:1c:5f:b7:a5:5f:32:ee:4a:d7: 6e:58:20:f0:cc:09:98:b0:d7:15:7c:68:d4:f3:09: cd:7b:b0:06:43:84:93:9d:84:d6:69:13:6c:86:f0: 98:3b:26:bf:6b:8b:89:26:a3:3d:2c:49:4a:ad:f9: 22:e9:d5:ce:ff:59:49:df:58:a1:38:72:6d:52:49: 17:ac:ff:fa:7a:63:2b:c8:70:66:49:61:ce:8a:bb: f8:50:ab:1b:83:11:2a:7f:05:a8:c6:21:ad:1b:e0: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5D:C7:36:65:A3:BD:4E:2B:52:93:5A:51:1D:7F:30:E5:95:C3:ED X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NF3HNmWjvU4rUpNaUR1_MOWVw-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.122.144.0/21 Signature Algorithm: sha256WithRSAEncryption 49:20:a4:24:ea:11:1d:87:c4:d9:6a:1a:4a:8d:66:50:78:48: 44:9f:ca:de:62:66:59:d2:90:fe:ed:90:9f:26:07:84:2f:0a: 3a:dc:af:b6:fc:84:cc:d0:f0:ff:ed:98:19:fb:e2:c3:a7:48: dd:6e:f0:9c:a4:7c:b9:af:4a:3b:b0:ea:93:bd:86:55:9f:80: af:58:51:ad:d6:5d:e9:47:1a:03:9e:67:90:01:5c:75:64:c0: cd:48:ee:86:0b:29:80:be:49:5a:72:1c:8a:9d:56:16:26:47: 42:b3:61:b6:fc:e4:3f:b1:42:8a:d1:c5:4c:5f:5a:2a:31:82: 2e:b5:50:0e:4f:a0:4d:a7:76:20:9b:8d:80:61:db:ae:56:01: 15:ad:63:c5:e2:91:aa:05:73:ef:6f:67:68:54:c4:b9:05:32: f9:b2:4b:19:c8:23:88:46:88:eb:b5:05:3a:df:fe:12:dd:d5: ff:36:b6:70:19:48:06:50:83:e1:8e:21:07:c0:0d:50:3a:14: f9:67:1c:1e:78:02:20:34:1e:5a:a9:9c:2e:53:fd:ed:0e:71: a0:6c:d6:e4:5f:9c:ff:c8:36:d6:36:5b:06:77:0a:72:e6:e7: b9:a2:f5:29:b2:d5:ac:ce:46:9c:b5:87:19:a9:2a:76:2b:33: 54:42:fd:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXxyZnKNoLXgh4GgJeCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDVkYzczNjY1YTNiZDRlMmI1MjkzNWE1MTFkN2YzMGU1OTVjM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BUFQykEMI6gcbjZzFuuH0JFKpUE qB06lqknDKOMR5vHfWOdYIlzwcqwgWdeiYrf49kD+BNzAE6rnmm6UEOvaesL/taW Ba25VD1pG/mL12f23c5s1GXlM3pA6bAuriZyKx0OPU09B4ZUC+cU9zPrUo9Y4uOU QJXdVOPWdRA9uHRedgDVryvUcs5ueG4ekc+Qrm4QdcwM+kSR9UgcX7elXzLuStdu WCDwzAmYsNcVfGjU8wnNe7AGQ4STnYTWaRNshvCYOya/a4uJJqM9LElKrfki6dXO /1lJ31ihOHJtUkkXrP/6emMryHBmSWHOirv4UKsbgxEqfwWoxiGtG+CRdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRdxzZlo71OK1KTWlEdfzDllcPtMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvTkYzSE5tV2p2VTRyVXBOYVVSMV9NT1dWdy0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVXqQMA0G CSqGSIb3DQEBCwUAA4IBAQBJIKQk6hEdh8TZahpKjWZQeEhEn8reYmZZ0pD+7ZCf JgeELwo63K+2/ITM0PD/7ZgZ++LDp0jdbvCcpHy5r0o7sOqTvYZVn4CvWFGt1l3p RxoDnmeQAVx1ZMDNSO6GCymAvklachyKnVYWJkdCs2G2/OQ/sUKK0cVMX1oqMYIu tVAOT6BNp3Ygm42AYduuVgEVrWPF4pGqBXPvb2doVMS5BTL5sksZyCOIRojrtQU6 3/4S3dX/NrZwGUgGUIPhjiEHwA1QOhT5ZxweeAIgNB5aqZwuU/3tDnGgbNbkX5z/ yDbWNlsGdwpy5ue5ovUpstWszkactYcZqSp2KzNUQv2P -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:18 2026 by rpki-client