This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa File: NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa (raw, json) Hash identifier: h8M7ms2bpqiMtf9k+v+XnZ9DC8UMB3Fa8eDf6MLIXMk= Subject key identifier: 35:6F:AB:91:E0:F8:43:78:B8:08:19:F8:3A:99:CB:40:6A:AA:9F:5A Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Certificate serial: 019B7BA4C0EBA7013913C5361255CD6C48E9 Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa Signing time: Thu 01 Jan 2026 22:19:13 +0000 ROA not before: Thu 01 Jan 2026 22:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29221 IP address blocks: 195.85.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c0:eb:a7:01:39:13:c5:36:12:55:cd:6c:48:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=356fab91e0f84378b80819f83a99cb406aaa9f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:db:74:83:8b:2a:d3:4e:f2:ff:6b:08:8d: 3c:4c:1f:b9:38:f7:6f:b9:e5:cd:fc:19:68:d2:8f: c1:93:90:2d:b5:e3:d9:11:24:b9:f4:4b:23:76:0f: 7a:8d:cf:ae:06:48:cb:73:25:c6:52:b3:d7:81:20: 4f:3e:de:85:da:07:09:72:6e:54:60:df:ee:32:06: 61:69:23:f9:79:18:c0:d0:e3:4f:95:54:2e:e9:9c: a5:c9:42:d3:72:14:77:c2:e2:f6:cd:53:13:3d:00: a7:a0:a6:49:db:60:93:bc:6a:41:f0:12:fc:0d:78: c6:e0:37:06:6d:d7:4c:25:30:8b:14:bf:f8:7d:85: c2:dc:06:90:eb:62:bc:14:57:4b:04:37:db:b6:2b: 3d:8b:e4:bb:21:90:9a:a1:7b:09:57:42:be:ec:aa: 36:a5:d2:b5:38:81:06:4a:83:b7:8a:2b:17:73:5d: ec:a0:64:f3:ea:a9:73:f5:c4:39:5c:35:f9:00:46: bb:ce:3e:df:2d:12:e4:19:60:6e:5b:7f:83:60:4b: 79:8a:23:61:fd:3f:f7:ce:1d:3c:f8:bc:01:69:c8: e8:ff:be:06:3f:e3:d7:6d:aa:49:a3:ea:a4:08:e1: b9:a9:88:30:16:18:86:0f:fd:8a:f2:1b:49:24:76: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6F:AB:91:E0:F8:43:78:B8:08:19:F8:3A:99:CB:40:6A:AA:9F:5A X509v3 Authority Key Identifier: keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.242.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:cf:11:8b:f4:10:a5:c7:a2:06:62:e8:8c:cf:49:0c:03:b0: 2f:53:b4:86:96:c7:87:b1:e8:97:0b:a8:71:25:59:54:51:7d: b4:9a:a3:47:bc:8f:c3:a2:db:5c:66:39:21:8f:ae:d4:4d:31: 7d:11:84:3c:4d:51:c6:7c:67:2e:31:a3:40:4f:93:5d:c1:c4: e4:bb:e2:c5:ef:6d:83:87:2f:a7:cf:cc:c2:64:aa:e9:38:9a: a1:71:2f:7e:e1:37:c2:fb:20:2f:fe:ef:86:d2:64:3f:ad:b5: 5c:2c:8a:27:f6:95:d3:71:2b:0f:c1:86:3c:68:23:d5:38:a4: 5d:32:72:4e:07:8d:8b:2f:66:f8:bc:ec:a0:5c:11:c1:d4:aa: f5:f7:72:8c:87:24:92:29:65:2a:b2:fa:ae:c8:26:1f:7c:0f: 58:1f:5f:70:de:59:a2:6d:9f:12:c2:25:67:26:07:12:2f:67: ee:38:30:09:f1:ee:24:96:1c:b7:4d:e0:a2:50:5f:fe:e0:33: 9c:b7:01:b9:7e:23:c8:b4:3f:fd:eb:63:5e:47:a6:56:aa:8d: ed:ea:0c:c9:45:a4:82:5f:d4:43:87:7b:e8:22:ef:62:e9:14: 92:51:35:19:ea:ff:b9:52:dc:b3:41:43:a0:c2:c8:8b:72:59: d1:33:82:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMDrpwE5E8U2ElXNbEjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl ZDI2NmQwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTZmYWI5MWUwZjg0Mzc4YjgwODE5ZjgzYTk5Y2I0MDZhYWE5ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/DbdIOLKtNO8v9rCI08TB+5OPdv ueXN/Blo0o/Bk5AttePZESS59Esjdg96jc+uBkjLcyXGUrPXgSBPPt6F2gcJcm5U YN/uMgZhaSP5eRjA0ONPlVQu6ZylyULTchR3wuL2zVMTPQCnoKZJ22CTvGpB8BL8 DXjG4DcGbddMJTCLFL/4fYXC3AaQ62K8FFdLBDfbtis9i+S7IZCaoXsJV0K+7Ko2 pdK1OIEGSoO3iisXc13soGTz6qlz9cQ5XDX5AEa7zj7fLRLkGWBuW3+DYEt5iiNh /T/3zh08+LwBacjo/74GP+PXbapJo+qkCOG5qYgwFhiGD/2K8htJJHaAoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVvq5Hg+EN4uAgZ+DqZy0Bqqp9aMB8GA1UdIwQY MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt YmFjMjAwMjkzMmQ5LzEvTlctcmtlRDRRM2k0Q0JuNE9wbkxRR3FxbjFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5 LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XyMA0G CSqGSIb3DQEBCwUAA4IBAQBPzxGL9BClx6IGYuiMz0kMA7AvU7SGlseHseiXC6hx JVlUUX20mqNHvI/DottcZjkhj67UTTF9EYQ8TVHGfGcuMaNAT5NdwcTku+LF722D hy+nz8zCZKrpOJqhcS9+4TfC+yAv/u+G0mQ/rbVcLIon9pXTcSsPwYY8aCPVOKRd MnJOB42LL2b4vOygXBHB1Kr193KMhySSKWUqsvquyCYffA9YH19w3lmibZ8SwiVn JgcSL2fuODAJ8e4klhy3TeCiUF/+4DOctwG5fiPItD/962NeR6ZWqo3t6gzJRaSC X9RDh3voIu9i6RSSUTUZ6v+5UtyzQUOgwsiLclnRM4Ju -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:10 2026 by rpki-client