This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/N4O6L8wZNEXMElPASpRMOUmUr7w.roa File: N4O6L8wZNEXMElPASpRMOUmUr7w.roa (raw, json) Hash identifier: QXAq/udQzlw3nbGli8BGmWpVXE2xd5fftRn8FB6H/Dc= Subject key identifier: 37:83:BA:2F:CC:19:34:45:CC:12:53:C0:4A:94:4C:39:49:94:AF:BC Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7 Certificate serial: 019B7C7F76A9F5CFB15C00EC856612CF13A6 Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/N4O6L8wZNEXMElPASpRMOUmUr7w.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197917 IP address blocks: 87.236.112.0/21 maxlen: 21 185.192.224.0/22 maxlen: 22 2a0a:2f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:76:a9:f5:cf:b1:5c:00:ec:85:66:12:cf:13:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3783ba2fcc193445cc1253c04a944c394994afbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:4f:c8:99:8c:c8:69:62:f4:37:9e:c1:be: dd:c4:26:80:29:a3:b1:84:29:99:57:a9:52:31:b8: 1d:23:80:43:fe:4e:bb:dd:ed:ac:d5:88:f2:8d:c6: eb:53:bd:a8:90:49:23:a8:69:96:f1:20:93:7b:2f: 10:93:76:d4:35:cf:b0:20:7c:4f:56:4d:c1:6b:e3: b8:60:80:c4:33:32:ae:8f:80:ab:cf:b4:fc:35:75: 29:24:16:c2:a8:95:89:78:43:7a:a2:ec:a8:19:48: 8f:1d:d7:7a:9f:51:fd:dc:d0:f9:21:13:af:bc:8d: 2c:28:f2:fd:aa:81:d5:0b:db:9e:b2:84:bf:0b:04: 0c:06:aa:11:e5:2e:92:d1:24:67:25:40:ae:6b:a6: 06:95:c2:30:30:12:5a:e4:7a:2f:f7:a3:0a:d5:e5: 04:0c:58:90:b4:4e:95:70:ce:10:ae:f8:20:44:60: 17:62:9c:cf:33:e6:8f:4a:70:7a:9d:77:e1:dc:d8: fc:ef:16:49:36:69:a3:fe:f1:16:1c:8a:81:b0:75: 0a:68:d5:81:d7:b5:1d:f6:c5:fc:43:a4:66:b4:94: 1c:7a:41:96:01:12:73:fe:70:ef:c8:22:04:be:03: 9b:62:cb:2e:97:c6:33:71:8b:b2:5a:24:77:eb:3c: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:83:BA:2F:CC:19:34:45:CC:12:53:C0:4A:94:4C:39:49:94:AF:BC X509v3 Authority Key Identifier: keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/N4O6L8wZNEXMElPASpRMOUmUr7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.112.0/21 185.192.224.0/22 IPv6: 2a0a:2f40::/32 Signature Algorithm: sha256WithRSAEncryption 22:b0:3f:45:39:a7:23:4d:53:15:07:22:9e:9c:b1:5e:78:9d: 4c:a5:45:e1:37:56:e7:1e:a2:f8:6b:69:f5:59:26:58:43:9c: b8:53:db:c3:4c:8b:5f:29:18:14:b7:55:28:07:f5:c2:5b:e2: e7:eb:ac:c6:a9:48:7e:52:56:d8:2e:d8:98:69:20:ab:01:0e: b4:83:11:63:44:32:c5:1e:19:80:59:9c:da:72:95:5b:6d:b3: b0:93:c4:e1:81:2e:87:58:e9:a3:b2:89:a2:48:32:ac:3f:74: d3:85:bd:92:c6:94:65:09:9f:80:f1:9f:3f:9c:f4:ec:10:a7: 5c:81:55:41:fb:fe:5d:9e:41:15:47:1f:dd:67:5d:5e:c3:08: 39:3c:ab:d4:59:9f:8b:8a:81:ad:a8:8a:fa:14:28:d0:7a:bc: fb:47:82:39:ce:76:36:e7:0e:d8:8b:0e:52:15:31:0a:4c:88: 51:46:a9:9a:ad:58:46:d3:27:35:bf:37:24:05:01:fe:00:b7: 4b:1e:36:f6:d2:0a:8e:8d:53:e9:70:72:a0:8a:2b:01:2f:12: 08:2a:36:c5:44:81:f6:59:a5:16:73:c1:40:43:26:ad:72:5d: 85:e6:85:5e:1a:e2:81:87:fc:a5:cf:16:3b:b6:af:7e:d2:f7: b5:eb:61:97 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8f3ap9c+xXADshWYSzxOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOWZlZTAzMjcxYjE1YzIzM2EyNDU4OWYyMzY1YTcxMGQ0 MzUyZDcwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzgzYmEyZmNjMTkzNDQ1Y2MxMjUzYzA0YTk0NGMzOTQ5OTRhZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvklPyJmMyGli9Deewb7dxCaAKaOx hCmZV6lSMbgdI4BD/k673e2s1YjyjcbrU72okEkjqGmW8SCTey8Qk3bUNc+wIHxP Vk3Ba+O4YIDEMzKuj4Crz7T8NXUpJBbCqJWJeEN6ouyoGUiPHdd6n1H93ND5IROv vI0sKPL9qoHVC9uesoS/CwQMBqoR5S6S0SRnJUCua6YGlcIwMBJa5Hov96MK1eUE DFiQtE6VcM4QrvggRGAXYpzPM+aPSnB6nXfh3Nj87xZJNmmj/vEWHIqBsHUKaNWB 17Ud9sX8Q6RmtJQcekGWARJz/nDvyCIEvgObYssul8YzcYuyWiR36zxPqwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDeDui/MGTRFzBJTwEqUTDlJlK+8MB8GA1UdIwQY MBaAFJyf7gMnGxXCM6JFifI2WnENQ1LXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTct OGY5OWY5YWZkN2ExLzEvTjRPNkw4d1pORVhNRWxQQVNwUk1PVW1Vcjd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTctOGY5OWY5YWZkN2Ex LzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDV+xwAwQC ucDgMA0EAgACMAcDBQAqCi9AMA0GCSqGSIb3DQEBCwUAA4IBAQAisD9FOacjTVMV ByKenLFeeJ1MpUXhN1bnHqL4a2n1WSZYQ5y4U9vDTItfKRgUt1UoB/XCW+Ln66zG qUh+UlbYLtiYaSCrAQ60gxFjRDLFHhmAWZzacpVbbbOwk8ThgS6HWOmjsomiSDKs P3TThb2SxpRlCZ+A8Z8/nPTsEKdcgVVB+/5dnkEVRx/dZ11ewwg5PKvUWZ+LioGt qIr6FCjQerz7R4I5znY25w7Yiw5SFTEKTIhRRqmarVhG0yc1vzckBQH+ALdLHjb2 0gqOjVPpcHKgiisBLxIIKjbFRIH2WaUWc8FAQyatcl2F5oVeGuKBh/ylzxY7tq9+ 0ve162GX -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:08 2026 by rpki-client