This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/nkciQnEuEjOQTOgeL1hdYkyj4wg.roa File: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (raw, json) Hash identifier: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M= Subject key identifier: 9E:47:22:42:71:2E:12:33:90:4C:E8:1E:2F:58:5D:62:4C:A3:E3:08 Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019B7C8070650B5E2BB843BF6F25D7573F53 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/nkciQnEuEjOQTOgeL1hdYkyj4wg.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 109.105.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:70:65:0b:5e:2b:b8:43:bf:6f:25:d7:57:3f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e472242712e1233904ce81e2f585d624ca3e308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:71:65:33:29:e8:ca:ca:09:b2:60:31:77:3b: c8:db:a9:5c:b3:04:36:87:2d:d2:44:b4:96:7a:72: 8a:5b:99:49:76:c5:64:97:7a:66:fb:87:93:9b:d8: 59:39:3c:e3:d1:5f:c0:1b:0b:77:e4:3e:61:11:9e: 31:2a:53:f9:8c:60:c6:cb:39:ea:08:87:90:aa:8e: 29:3d:cd:d0:d5:74:9f:8d:4f:95:a7:75:2c:43:cb: 1f:9c:6a:82:f0:da:d5:c3:93:b0:aa:3d:dc:ed:2e: 29:41:87:34:40:96:d0:33:c6:94:b1:09:c2:f3:49: 71:53:6a:72:a6:5c:2b:a8:83:52:51:33:90:e6:3f: 25:2c:85:cf:85:f1:ec:04:3d:ce:91:4c:ed:9f:cc: d2:ce:ea:11:ea:0b:5f:bb:85:48:51:f7:6e:72:5a: bd:f9:01:eb:e1:25:e6:4e:af:0d:30:88:83:fc:d3: 35:27:37:20:d3:40:6e:08:b8:32:0a:d2:8c:c9:8a: 33:48:40:9b:cc:a8:41:80:04:f2:b2:2b:92:23:d8: 3c:66:7b:4e:de:73:21:ca:54:9a:31:2a:ad:af:0a: 59:82:f9:bc:5d:a4:9b:c6:16:6b:fa:f7:96:37:ed: d2:02:71:8c:4c:bc:5b:bb:af:24:0d:31:4a:c4:a6: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:47:22:42:71:2E:12:33:90:4C:E8:1E:2F:58:5D:62:4C:A3:E3:08 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/nkciQnEuEjOQTOgeL1hdYkyj4wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.196.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:28:c7:a7:cf:51:5e:8a:47:7c:ae:c0:ed:97:84:20:e1:6e: d9:37:89:37:0f:77:7f:bc:3e:13:72:a7:28:d6:51:90:67:e3: f9:7d:77:49:16:c6:b2:36:25:2c:68:19:da:06:a0:aa:0e:b2: 4c:bd:e4:e3:78:0e:ba:d9:18:b1:1b:5b:5f:5f:db:87:4b:51: ba:cf:7b:a5:39:24:d3:20:26:10:73:8f:fe:d6:cf:b9:9d:e7: 19:87:43:08:ad:11:1f:92:3f:b1:0e:d9:75:f5:49:08:11:db: 86:9e:c0:20:2a:d1:03:82:f0:93:f3:1c:06:63:cb:09:fc:c8: f6:f6:ea:57:2e:b4:1f:39:92:07:de:08:36:76:37:7a:e8:72: 85:21:06:9b:c5:39:38:63:34:57:07:ac:f6:b1:98:21:6f:28: c8:fa:07:82:cc:f8:50:92:0a:b8:d6:bf:1b:72:d5:3e:88:c6: 46:05:7b:81:cc:3c:b1:b3:59:b1:47:ec:92:9d:e4:65:01:06: 10:31:be:96:46:ec:59:1c:a9:52:33:d5:dc:bd:1e:bf:15:70: 9d:6d:79:3c:ab:76:4c:1d:77:ae:fc:53:f1:45:14:12:77:8b: ef:5c:b7:d7:e5:3e:75:8f:59:94:c3:d8:2d:0a:9a:05:c8:a3: c5:29:15:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHBlC14ruEO/byXXVz9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQ3MjI0MjcxMmUxMjMzOTA0Y2U4MWUyZjU4NWQ2MjRjYTNlMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHFlMynoysoJsmAxdzvI26lcswQ2 hy3SRLSWenKKW5lJdsVkl3pm+4eTm9hZOTzj0V/AGwt35D5hEZ4xKlP5jGDGyznq CIeQqo4pPc3Q1XSfjU+Vp3UsQ8sfnGqC8NrVw5Owqj3c7S4pQYc0QJbQM8aUsQnC 80lxU2pyplwrqINSUTOQ5j8lLIXPhfHsBD3OkUztn8zSzuoR6gtfu4VIUfduclq9 +QHr4SXmTq8NMIiD/NM1Jzcg00BuCLgyCtKMyYozSECbzKhBgATysiuSI9g8ZntO 3nMhylSaMSqtrwpZgvm8XaSbxhZr+veWN+3SAnGMTLxbu68kDTFKxKachwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5HIkJxLhIzkEzoHi9YXWJMo+MIMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvbmtjaVFuRXVFak9RVE9nZUwxaGRZa3lqNHdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnEMA0G CSqGSIb3DQEBCwUAA4IBAQBLKMenz1Feikd8rsDtl4Qg4W7ZN4k3D3d/vD4Tcqco 1lGQZ+P5fXdJFsayNiUsaBnaBqCqDrJMveTjeA662RixG1tfX9uHS1G6z3ulOSTT ICYQc4/+1s+5necZh0MIrREfkj+xDtl19UkIEduGnsAgKtEDgvCT8xwGY8sJ/Mj2 9upXLrQfOZIH3gg2djd66HKFIQabxTk4YzRXB6z2sZghbyjI+geCzPhQkgq41r8b ctU+iMZGBXuBzDyxs1mxR+ySneRlAQYQMb6WRuxZHKlSM9XcvR6/FXCdbXk8q3ZM HXeu/FPxRRQSd4vvXLfX5T51j1mUw9gtCpoFyKPFKRWV -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:50 2026 by rpki-client