This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/ntt8oBWCvDCUpNDHjPuie_5MUck.roa File: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (raw, json) Hash identifier: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE= Subject key identifier: 9E:DB:7C:A0:15:82:BC:30:94:A4:D0:C7:8C:FB:A2:7B:FE:4C:51:C9 Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Certificate serial: 019C0515B3F6F153B8C6CD512088892E6C3B Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/ntt8oBWCvDCUpNDHjPuie_5MUck.roa Signing time: Wed 28 Jan 2026 14:50:34 +0000 ROA not before: Wed 28 Jan 2026 14:50:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 194.26.16.0/24 maxlen: 24 2a11:9400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:15:b3:f6:f1:53:b8:c6:cd:51:20:88:89:2e:6c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669 Validity Not Before: Jan 28 14:50:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9edb7ca01582bc3094a4d0c78cfba27bfe4c51c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:a4:93:62:ad:00:ae:a2:66:0d:57:ec:13: 26:1a:59:a1:fd:dd:46:de:99:96:f0:5e:b7:3f:70: 4c:bd:71:1e:16:6d:7a:af:b9:34:d7:02:b9:ec:e5: a1:0a:4c:c0:b6:22:4a:48:e1:89:d5:8e:5b:78:64: 97:db:e9:63:d1:b6:7e:50:ea:d3:90:1a:d4:5d:7c: af:59:53:09:83:8b:3f:dd:24:2d:05:80:18:b7:46: c9:d2:70:fc:be:d1:eb:6c:20:c4:c5:9a:f0:bf:90: 08:99:60:c5:c8:23:50:ad:f5:54:5d:a5:03:7e:6f: b3:63:f9:bd:d7:3f:55:35:b1:46:4d:8e:76:31:79: 0f:70:fb:92:85:ef:0b:5f:f3:d0:c8:bd:79:fc:3a: 5b:44:17:29:3d:ec:18:4e:1c:4f:e4:57:a0:7f:dd: 0b:8f:dc:68:62:e1:52:33:05:6a:0d:bf:52:77:01: d5:f0:b5:76:32:17:1c:ed:50:d2:18:ae:23:22:ce: 7c:20:d7:f6:bc:a8:6a:eb:54:b1:cf:6d:f1:48:9c: da:a0:51:d5:e9:5b:d5:2a:ac:4d:ba:d2:ed:ad:0b: 32:4f:4f:60:78:ce:cb:db:70:7c:88:2e:9d:dc:59: c1:5d:86:b8:e7:ea:ab:18:7e:8e:5a:f4:c5:6c:d7: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:7C:A0:15:82:BC:30:94:A4:D0:C7:8C:FB:A2:7B:FE:4C:51:C9 X509v3 Authority Key Identifier: keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/ntt8oBWCvDCUpNDHjPuie_5MUck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.16.0/24 IPv6: 2a11:9400::/32 Signature Algorithm: sha256WithRSAEncryption 7b:6d:8e:07:54:b6:6f:0a:05:92:5a:4e:2c:68:a6:70:b9:38: 96:21:bb:8f:cc:e3:d1:9e:9c:3e:7d:bc:aa:a7:ac:33:c5:2d: fd:1d:85:d0:1e:2a:25:a4:c2:1a:52:53:aa:00:a7:14:ac:18: 1e:fa:b8:79:e8:a2:0b:4c:14:9b:87:a4:d3:2f:5e:57:97:68: 79:d8:e4:3f:1c:5d:2d:5e:a9:95:59:ed:da:5a:1d:4b:21:04: a4:e3:5f:d8:35:f8:53:58:de:45:b6:36:87:a8:55:9e:fd:a3: 71:1b:99:85:f0:0b:f8:88:52:0c:be:b4:fb:2c:ed:ce:a7:84: 23:98:d0:b0:41:cf:26:3b:80:d4:c9:54:6f:4a:65:3b:5c:5a: 3e:2c:9e:fb:ed:eb:f7:0c:a2:6a:69:b4:36:d1:a7:c8:a8:99: 01:f9:33:6b:dd:0d:61:27:a9:e7:a4:81:08:ab:47:63:99:32: 32:3a:c4:54:cb:92:5f:ff:ea:28:16:66:fe:fb:bc:76:97:3d: 9e:55:23:5a:94:3a:4d:40:fe:95:c2:5c:02:e4:ea:ca:56:a3: 68:bb:66:be:e0:58:06:ec:68:16:8a:b9:01:45:5a:4b:6d:60: b6:54:49:40:16:d3:2a:f9:4b:65:3a:2c:21:ed:7e:41:db:1e: d0:2c:8f:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwFFbP28VO4xs1RIIiJLmw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz YWM2NjkwHhcNMjYwMTI4MTQ1MDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWRiN2NhMDE1ODJiYzMwOTRhNGQwYzc4Y2ZiYTI3YmZlNGM1MWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoCkk2KtAK6iZg1X7BMmGlmh/d1G 3pmW8F63P3BMvXEeFm16r7k01wK57OWhCkzAtiJKSOGJ1Y5beGSX2+lj0bZ+UOrT kBrUXXyvWVMJg4s/3SQtBYAYt0bJ0nD8vtHrbCDExZrwv5AImWDFyCNQrfVUXaUD fm+zY/m91z9VNbFGTY52MXkPcPuShe8LX/PQyL15/DpbRBcpPewYThxP5Fegf90L j9xoYuFSMwVqDb9SdwHV8LV2Mhcc7VDSGK4jIs58INf2vKhq61Sxz23xSJzaoFHV 6VvVKqxNutLtrQsyT09geM7L23B8iC6d3FnBXYa45+qrGH6OWvTFbNeZHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ7bfKAVgrwwlKTQx4z7onv+TFHJMB8GA1UdIwQY MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt ZGY0NTA1NGRkOTM0LzEvbnR0OG9CV0N2RENVcE5ESGpQdWllXzVNVWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0 LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwhoQMA0E AgACMAcDBQAqEZQAMA0GCSqGSIb3DQEBCwUAA4IBAQB7bY4HVLZvCgWSWk4saKZw uTiWIbuPzOPRnpw+fbyqp6wzxS39HYXQHiolpMIaUlOqAKcUrBge+rh56KILTBSb h6TTL15Xl2h52OQ/HF0tXqmVWe3aWh1LIQSk41/YNfhTWN5FtjaHqFWe/aNxG5mF 8Av4iFIMvrT7LO3Op4QjmNCwQc8mO4DUyVRvSmU7XFo+LJ777ev3DKJqabQ20afI qJkB+TNr3Q1hJ6nnpIEIq0djmTIyOsRUy5Jf/+ooFmb++7x2lz2eVSNalDpNQP6V wlwC5OrKVqNou2a+4FgG7GgWirkBRVpLbWC2VElAFtMq+UtlOiwh7X5B2x7QLI8y -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:18 2026 by rpki-client