This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa File: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (raw, json) Hash identifier: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno= Subject key identifier: 37:04:E7:03:97:BB:C2:BF:94:FC:C3:30:14:F0:B6:0E:83:A6:0A:4D Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91 Certificate serial: 019B7FF21EF824BEFA32CCC284E5189093CF Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa Signing time: Fri 02 Jan 2026 18:22:12 +0000 ROA not before: Fri 02 Jan 2026 18:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206543 IP address blocks: 185.44.230.0/24 maxlen: 24 185.44.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1e:f8:24:be:fa:32:cc:c2:84:e5:18:90:93:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3704e70397bbc2bf94fcc33014f0b60e83a60a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:19:fc:b2:92:a1:63:bb:9a:a9:61:7b:ac: f7:18:c8:6f:f6:42:cd:11:03:f9:8c:55:1c:54:02: 6e:92:77:6e:22:5b:32:cf:e0:ca:23:45:1d:81:f3: 71:7a:e2:3a:a3:f9:35:cf:cc:6e:d0:4f:21:3a:14: 4e:ab:32:b0:60:01:63:88:a8:42:13:8e:be:98:da: 71:4b:bf:d6:2b:0d:c4:2a:6b:a7:dd:5f:24:b1:4a: c7:a2:58:0b:51:95:51:3e:dc:cb:6f:ed:3d:2b:1e: 5e:06:e2:09:94:d8:1b:83:3d:ac:67:21:2f:19:63: c9:fa:3d:86:22:e9:a1:e6:0f:0d:5d:57:6d:25:24: e8:8b:1f:7c:75:4c:21:2c:ba:0f:3d:d8:2a:f5:54: 4e:56:f5:7d:35:c3:8b:93:af:56:f0:48:bc:d9:66: bd:39:21:48:1d:ae:50:24:cf:b6:58:be:fd:a3:93: 09:54:d4:f3:a6:00:7a:1d:cb:79:df:53:eb:71:b8: fd:33:8d:dd:b7:e7:6c:41:22:d4:77:e0:f2:6f:f2: f2:4e:f7:31:8a:19:ed:68:9f:59:83:5f:29:62:f9: ae:22:43:2b:f7:c8:98:59:49:2b:e0:0c:16:e4:76: 16:4c:98:fa:f2:ed:f8:23:ef:42:82:b9:30:51:0d: 89:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:E7:03:97:BB:C2:BF:94:FC:C3:30:14:F0:B6:0E:83:A6:0A:4D X509v3 Authority Key Identifier: keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.230.0/23 Signature Algorithm: sha256WithRSAEncryption 14:17:4c:77:26:c7:28:0e:70:0a:23:34:70:b0:41:73:03:71: 8f:ea:8a:e0:10:86:70:64:de:12:1e:33:c8:a9:37:49:27:4c: ec:86:ff:52:4b:89:99:1a:61:cb:f8:8e:f4:1e:c2:77:2e:49: c0:ec:77:20:1f:7b:4f:04:4b:47:4f:c0:1e:71:e4:b4:40:75: 83:64:19:1f:28:2b:5b:08:4d:cb:c2:2b:6d:a2:07:e6:bd:2e: 44:b2:4f:e2:1b:4c:e3:2c:55:f4:e8:ff:44:fc:07:0b:fc:53: ac:7e:3c:21:41:6c:b5:12:c8:a3:62:7b:66:06:22:e7:ad:19: d7:fb:8f:55:5b:8e:09:44:de:36:d9:db:8f:90:7b:77:1d:41: 59:bc:d7:9f:9b:54:c0:fc:c3:53:27:ad:23:85:22:1c:80:91: 48:78:95:ed:f3:f3:50:a7:4b:f1:c3:3e:fc:47:b3:a7:0b:cf: 90:9b:10:d7:00:f4:4d:23:95:98:57:34:16:36:dd:98:f0:a1: e5:35:4c:02:ea:90:31:62:7c:b3:b0:00:1e:e5:38:ff:df:58: 03:44:80:3a:e6:6e:73:f3:df:47:1e:a8:17:1a:90:47:eb:59: 31:08:29:66:35:71:13:92:f3:23:73:53:09:c4:53:15:f7:0a: a3:41:dd:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8h74JL76MszChOUYkJPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwODNmNjk3OTU0ZWM3Y2M0OTJlNWFhNDZjYzhlZjEzZmM4 ZWRhOTEwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzA0ZTcwMzk3YmJjMmJmOTRmY2MzMzAxNGYwYjYwZTgzYTYwYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnkZ/LKSoWO7mqlhe6z3GMhv9kLN EQP5jFUcVAJuknduIlsyz+DKI0UdgfNxeuI6o/k1z8xu0E8hOhROqzKwYAFjiKhC E46+mNpxS7/WKw3EKmun3V8ksUrHolgLUZVRPtzLb+09Kx5eBuIJlNgbgz2sZyEv GWPJ+j2GIumh5g8NXVdtJSToix98dUwhLLoPPdgq9VROVvV9NcOLk69W8Ei82Wa9 OSFIHa5QJM+2WL79o5MJVNTzpgB6Hct531Prcbj9M43dt+dsQSLUd+Dyb/LyTvcx ihntaJ9Zg18pYvmuIkMr98iYWUkr4AwW5HYWTJj68u34I+9CgrkwUQ2JaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcE5wOXu8K/lPzDMBTwtg6DpgpNMB8GA1UdIwQY MBaAFACD9peVTsfMSS5apGzI7xP8jtqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMt ODE5ZGIxNmI2NmVlLzEvTndUbkE1ZTd3ci1VX01Nd0ZQQzJEb09tQ2swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMtODE5ZGIxNmI2NmVl LzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSzmMA0G CSqGSIb3DQEBCwUAA4IBAQAUF0x3JscoDnAKIzRwsEFzA3GP6orgEIZwZN4SHjPI qTdJJ0zshv9SS4mZGmHL+I70HsJ3LknA7HcgH3tPBEtHT8AeceS0QHWDZBkfKCtb CE3LwittogfmvS5Esk/iG0zjLFX06P9E/AcL/FOsfjwhQWy1EsijYntmBiLnrRnX +49VW44JRN422duPkHt3HUFZvNefm1TA/MNTJ60jhSIcgJFIeJXt8/NQp0vxwz78 R7OnC8+QmxDXAPRNI5WYVzQWNt2Y8KHlNUwC6pAxYnyzsAAe5Tj/31gDRIA65m5z 899HHqgXGpBH61kxCClmNXETkvMjc1MJxFMV9wqjQd12 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:22 2026 by rpki-client