This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/NIBdBrCWkls2-OOG_XM2Qpl_4D4.roa File: NIBdBrCWkls2-OOG_XM2Qpl_4D4.roa (raw, json) Hash identifier: z833UxZscO7V0+hUaFeEIUPRXOX0hAwFsN5RSRmYdiA= Subject key identifier: 34:80:5D:06:B0:96:92:5B:36:F8:E3:86:FD:73:36:42:99:7F:E0:3E Certificate issuer: /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb Certificate serial: 019B797EA7AA84D8E11E240A7F0C18D3B505 Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/NIBdBrCWkls2-OOG_XM2Qpl_4D4.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196901 IP address blocks: 193.106.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a7:aa:84:d8:e1:1e:24:0a:7f:0c:18:d3:b5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34805d06b096925b36f8e386fd733642997fe03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:ad:eb:66:38:c3:1e:0f:f2:52:96:4f:c3: 39:48:28:b2:4c:ba:a7:c3:b2:e9:70:ed:38:9c:3d: 06:73:9a:4c:3b:e3:92:e4:22:51:61:8a:19:b9:ea: 5a:fb:d7:5a:d0:e5:6c:af:07:dc:94:00:a8:95:35: 03:aa:b2:cf:0b:3b:20:ab:94:33:49:c9:59:f4:5b: 1f:50:28:3e:c3:c7:ac:f1:9e:5d:1f:a5:7c:e6:93: de:03:82:92:fb:e3:02:10:2f:3e:1a:2e:e0:c6:69: 29:e9:68:2e:09:d4:2e:47:fe:fb:23:56:0b:eb:72: 36:4e:46:ce:98:82:90:36:26:26:be:77:5f:fe:f7: 94:65:43:0f:af:df:51:ed:6e:87:0f:50:25:80:4e: 6a:31:e6:ec:6a:64:80:48:b8:ee:81:de:80:5c:b0: a7:c6:1e:47:9a:2b:b4:6d:23:fd:eb:8e:ca:b0:e2: 7e:13:83:9c:32:f8:4c:22:c8:87:6e:ec:e5:b7:03: 65:9f:a2:c6:6f:29:8b:d2:40:98:48:c9:27:70:0a: 52:a8:fa:09:54:a6:32:6f:83:3c:17:9b:0f:2b:e4: 36:63:94:5f:7f:94:11:31:2d:f0:82:c9:60:a8:f1: b4:f5:e8:cb:c9:fd:12:ec:2d:d3:bd:ea:06:a9:d0: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:80:5D:06:B0:96:92:5B:36:F8:E3:86:FD:73:36:42:99:7F:E0:3E X509v3 Authority Key Identifier: keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/NIBdBrCWkls2-OOG_XM2Qpl_4D4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.192.0/22 Signature Algorithm: sha256WithRSAEncryption 42:3f:80:f6:e6:80:85:e5:b3:1d:0b:c8:f0:25:41:a3:ba:08: 44:e8:f6:a6:9c:7b:ca:23:29:62:d0:bb:7c:c2:ed:f0:b1:62: 46:f3:74:ba:e8:20:ba:e8:9c:2a:f7:9e:c3:aa:48:9e:42:d3: 84:6f:68:f1:4b:bf:c9:4e:a1:f7:d2:58:4a:59:82:7b:83:2a: dd:6e:ef:97:2b:92:a5:ab:dd:8c:ee:0c:59:6a:5e:1b:c4:20: 02:a3:09:6f:ee:29:3a:62:ac:52:98:d6:0f:bc:32:75:79:c5: 49:42:6b:81:92:c4:a6:bb:cf:30:2d:7e:00:1a:ff:6d:9a:64: 38:10:fd:87:bc:31:15:b8:d2:da:c9:24:93:c1:d8:08:cc:4e: 67:1a:f3:52:49:5d:47:bf:bc:ff:33:89:0b:27:e5:db:cb:63: 61:5f:26:cf:ab:e4:45:f7:84:a5:a6:20:ae:08:96:36:2c:3f: bc:07:db:d2:3c:5e:15:dc:0b:49:4e:e9:b3:cc:1b:53:f9:4c: 69:3a:b8:22:29:2d:ce:fc:1b:0b:d4:93:3e:79:96:12:6b:5a: bb:9a:d3:bf:c8:3a:a2:f6:40:28:a8:ed:06:af:1c:67:6b:8a: f6:dd:9e:c6:ed:6f:a5:34:b6:16:ce:78:53:75:24:1b:8b:56: 0d:5b:e5:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqeqhNjhHiQKfwwY07UFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOWE1ODBhNGNmNjRhODg0MTkwYTViMGZiMjI3ZjMwOWU5 MDQwZWIwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDgwNWQwNmIwOTY5MjViMzZmOGUzODZmZDczMzY0Mjk5N2ZlMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CKt62Y4wx4P8lKWT8M5SCiyTLqn w7LpcO04nD0Gc5pMO+OS5CJRYYoZuepa+9da0OVsrwfclAColTUDqrLPCzsgq5Qz SclZ9FsfUCg+w8es8Z5dH6V85pPeA4KS++MCEC8+Gi7gxmkp6WguCdQuR/77I1YL 63I2TkbOmIKQNiYmvndf/veUZUMPr99R7W6HD1AlgE5qMebsamSASLjugd6AXLCn xh5Hmiu0bSP9647KsOJ+E4OcMvhMIsiHbuzltwNln6LGbymL0kCYSMkncApSqPoJ VKYyb4M8F5sPK+Q2Y5Rff5QRMS3wgslgqPG09ejLyf0S7C3TveoGqdBC8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSAXQawlpJbNvjjhv1zNkKZf+A+MB8GA1UdIwQY MBaAFOqaWApM9kqIQZClsPsifzCekEDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBwWUNrejJTb2hCa0tXdy15Sl9NSjZRUU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83M2QzYjItOWJkMS00MTBmLTkxZWMt ODA3NGE1NTI1MGVhLzEvTklCZEJyQ1drbHMyLU9PR19YTTJRcGxfNEQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83M2QzYjItOWJkMS00MTBmLTkxZWMtODA3NGE1NTI1MGVh LzEvNnBwWUNrejJTb2hCa0tXdy15Sl9NSjZRUU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWrAMA0G CSqGSIb3DQEBCwUAA4IBAQBCP4D25oCF5bMdC8jwJUGjughE6PamnHvKIyli0Lt8 wu3wsWJG83S66CC66Jwq957DqkieQtOEb2jxS7/JTqH30lhKWYJ7gyrdbu+XK5Kl q92M7gxZal4bxCACowlv7ik6YqxSmNYPvDJ1ecVJQmuBksSmu88wLX4AGv9tmmQ4 EP2HvDEVuNLaySSTwdgIzE5nGvNSSV1Hv7z/M4kLJ+Xby2NhXybPq+RF94SlpiCu CJY2LD+8B9vSPF4V3AtJTumzzBtT+UxpOrgiKS3O/BsL1JM+eZYSa1q7mtO/yDqi 9kAoqO0Grxxna4r23Z7G7W+lNLYWznhTdSQbi1YNW+XZ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:33 2026 by rpki-client