This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NqpZMeFy29eZakUlMr19g0OVUDk.roa File: NqpZMeFy29eZakUlMr19g0OVUDk.roa (raw, json) Hash identifier: U0dS1VcYVgJ8dBh2y4dv3nsQUDO36EpX5pEiVRTYq4g= Subject key identifier: 36:AA:59:31:E1:72:DB:D7:99:6A:45:25:32:BD:7D:83:43:95:50:39 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35523854620F7AAE74744450589449 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NqpZMeFy29eZakUlMr19g0OVUDk.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3223 IP address blocks: 81.180.202.0/23 maxlen: 23 194.176.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:52:38:54:62:0f:7a:ae:74:74:44:50:58:94:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36aa5931e172dbd7996a452532bd7d8343955039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:86:47:b0:c5:dc:74:bf:bc:4a:51:51:4d: 31:4d:7a:59:9c:a6:c1:54:ba:5d:8f:5f:1c:86:5b: 25:5f:fd:65:bb:2c:e7:53:e7:cc:3a:1e:45:6f:b3: 0d:94:e4:9f:62:6c:bd:52:d0:7c:8a:9f:01:a0:86: 72:c9:76:58:e8:b1:2f:de:55:a6:94:87:7b:6b:03: 43:fa:fe:e8:21:d5:cd:92:e1:9d:72:a3:03:58:ba: f7:1c:43:51:76:cd:a5:df:af:4b:9b:36:bd:41:5d: 06:ca:e7:3f:b7:e7:a6:e5:2c:1c:47:34:75:36:b3: 05:03:1d:5a:b5:4b:7e:5d:d9:c8:3e:64:7e:97:30: 7e:4b:f8:e5:04:1e:5b:df:4b:6d:12:c2:1a:6b:cb: 22:f1:34:a2:1e:82:3b:e0:fb:ff:83:55:89:68:7f: e5:da:2d:91:e7:0a:9b:0f:99:78:02:c7:b7:b0:6f: d4:55:0d:6d:a5:1f:8c:b2:18:a6:0e:5a:5d:05:d4: e8:00:9f:4e:a6:6c:ca:ee:d9:5e:ea:05:8f:75:f7: c9:be:13:ff:16:0f:bd:b7:16:35:c1:5d:a3:6b:80: 63:57:14:bb:f7:1f:09:96:dd:5a:4f:ec:24:45:1c: 60:0b:ab:72:1b:85:d1:40:c7:48:b1:54:52:9a:7b: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AA:59:31:E1:72:DB:D7:99:6A:45:25:32:BD:7D:83:43:95:50:39 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NqpZMeFy29eZakUlMr19g0OVUDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.180.202.0/23 194.176.184.0/24 Signature Algorithm: sha256WithRSAEncryption 98:0d:2a:4a:23:09:64:57:4f:49:fc:43:3e:db:7a:9a:bf:96: 8f:b7:b1:3e:59:3c:57:93:2b:f4:c6:42:ad:5e:83:10:87:6a: 3c:d7:62:dd:ff:78:9d:51:66:99:5a:65:e6:b2:b9:e4:c1:4f: 71:fe:6f:e7:af:58:a4:75:6b:85:f0:3e:5e:e0:0a:63:4e:8e: e0:f7:76:b2:a0:d7:15:94:16:1d:d9:8e:ac:95:cd:c3:42:0c: bf:60:58:37:6d:2c:55:05:24:39:4c:d9:06:c1:93:db:86:a0: 47:17:c5:91:b4:ad:ca:81:ad:7b:ba:03:a6:8e:45:bb:ab:b9: ad:58:2b:ad:b3:d6:b0:49:4f:50:24:2d:9a:c5:51:f4:a8:d6: 56:e0:c8:34:84:4c:bf:5c:3c:d7:6f:cf:32:ec:33:99:3c:39: 7c:6a:6d:2e:b9:0c:12:0a:94:e3:4c:da:f6:da:a8:b7:96:1f: 8c:bb:2d:5a:d2:3f:46:4f:66:50:5a:cd:8c:5f:1a:3d:dd:12: 4f:db:9d:9b:1d:fb:bf:78:ff:61:0a:60:c1:28:10:fa:c6:97: da:4a:bb:01:78:fd:8b:e3:47:4a:d3:0b:c1:2e:bf:1f:9f:07: 4a:e0:74:c0:22:7f:4b:83:22:1e:66:8e:61:ef:ed:38:ce:38: 02:dd:9e:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NVI4VGIPeq50dERQWJRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmFhNTkzMWUxNzJkYmQ3OTk2YTQ1MjUzMmJkN2Q4MzQzOTU1MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT6GR7DF3HS/vEpRUU0xTXpZnKbB VLpdj18chlslX/1luyznU+fMOh5Fb7MNlOSfYmy9UtB8ip8BoIZyyXZY6LEv3lWm lId7awND+v7oIdXNkuGdcqMDWLr3HENRds2l369Lmza9QV0Gyuc/t+em5SwcRzR1 NrMFAx1atUt+XdnIPmR+lzB+S/jlBB5b30ttEsIaa8si8TSiHoI74Pv/g1WJaH/l 2i2R5wqbD5l4Ase3sG/UVQ1tpR+MshimDlpdBdToAJ9OpmzK7tle6gWPdffJvhP/ Fg+9txY1wV2ja4BjVxS79x8Jlt1aT+wkRRxgC6tyG4XRQMdIsVRSmnsinwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDaqWTHhctvXmWpFJTK9fYNDlVA5MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvTnFwWk1lRnkyOWVaYWtVbE1yMTlnME9WVURrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUbTKAwQA wrC4MA0GCSqGSIb3DQEBCwUAA4IBAQCYDSpKIwlkV09J/EM+23qav5aPt7E+WTxX kyv0xkKtXoMQh2o812Ld/3idUWaZWmXmsrnkwU9x/m/nr1ikdWuF8D5e4ApjTo7g 93ayoNcVlBYd2Y6slc3DQgy/YFg3bSxVBSQ5TNkGwZPbhqBHF8WRtK3Kga17ugOm jkW7q7mtWCuts9awSU9QJC2axVH0qNZW4Mg0hEy/XDzXb88y7DOZPDl8am0uuQwS CpTjTNr22qi3lh+Muy1a0j9GT2ZQWs2MXxo93RJP252bHfu/eP9hCmDBKBD6xpfa SrsBeP2L40dK0wvBLr8fnwdK4HTAIn9LgyIeZo5h7+04zjgC3Z7H -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:04 2026 by rpki-client