This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/nAEhxGlWfMw1hJO2kHoupGF6bQs.roa File: nAEhxGlWfMw1hJO2kHoupGF6bQs.roa (raw, json) Hash identifier: S5hBxJwXqI+pj2+GP/TME8DVoAiS8tZiCcw9abB/TFw= Subject key identifier: 9C:01:21:C4:69:56:7C:CC:35:84:93:B6:90:7A:2E:A4:61:7A:6D:0B Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2 Certificate serial: 019B77C6B0673132EB37901664BD16BDA291 Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/nAEhxGlWfMw1hJO2kHoupGF6bQs.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48705 IP address blocks: 193.39.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b0:67:31:32:eb:37:90:16:64:bd:16:bd:a2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c0121c469567ccc358493b6907a2ea4617a6d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:79:7a:1a:4d:18:d0:af:2e:30:64:2d:d1: fb:83:b8:2b:15:0e:6c:42:4e:f6:22:b0:13:e3:2d: 88:d1:47:94:04:2a:7b:72:3e:73:f0:fa:1d:a5:f7: 71:bd:4d:fb:0a:11:1f:68:11:bf:d8:d0:69:9f:6b: fc:b6:34:59:f2:be:dc:51:9f:47:96:27:2e:ff:0d: 7e:f5:ec:48:93:43:55:25:68:68:87:c4:2c:81:d7: ad:f3:c3:f0:66:e2:b0:d5:21:18:d1:82:57:6f:52: 17:4f:fd:30:7c:80:cc:bb:2a:ef:79:a9:77:8a:6d: c5:65:16:d0:58:34:b8:7e:18:13:0d:95:5e:e9:7d: ba:ca:43:37:c8:21:47:98:02:8e:0e:ee:f8:bc:81: 46:6e:a6:4f:3d:8d:6a:80:9e:a0:27:c9:45:4e:80: 90:19:bb:8d:e1:84:cb:97:d2:9a:25:b4:d9:95:7e: e7:a1:27:f3:38:21:23:80:4e:a9:3a:6a:bd:bc:0d: 1c:7e:d1:8d:de:95:12:66:b1:31:ed:69:67:01:72: ca:86:c3:68:b8:42:86:c7:15:10:ab:29:ab:9e:b0: 17:1c:94:d8:db:b9:21:b3:55:04:4e:2a:68:20:89: be:21:25:ae:96:56:f3:5d:8d:1b:25:18:81:d1:86: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:21:C4:69:56:7C:CC:35:84:93:B6:90:7A:2E:A4:61:7A:6D:0B X509v3 Authority Key Identifier: keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/nAEhxGlWfMw1hJO2kHoupGF6bQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.66.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:f1:8e:40:24:6a:20:e7:01:ce:ca:75:3c:90:86:d9:f9:b8: ef:a1:3c:6d:cc:92:1d:53:84:0a:b5:5a:e9:14:41:33:31:08: e3:16:6c:ea:07:78:39:cb:d8:11:c8:66:d9:97:a5:9f:6c:02: b7:9e:59:72:f1:00:8e:fb:0e:44:56:9c:cc:aa:8c:b4:5b:cf: 56:4a:bc:c1:48:c5:f2:4a:40:9d:e1:ee:28:e7:7e:54:12:63: 68:ae:a2:0a:27:a1:4c:ea:ce:80:7a:39:12:f3:e1:38:9f:f8: 3a:50:35:18:7d:12:d8:ec:74:30:17:ae:8f:3d:19:f4:ee:df: 32:1a:90:eb:a1:30:78:3f:aa:ea:dd:ef:bc:c4:27:ec:e2:f3: c4:33:ad:52:93:98:a3:80:bb:fc:f2:1d:c3:b5:44:b5:5b:3e: 24:60:b2:66:1d:c6:b2:fa:38:30:63:9a:9e:c7:8a:8f:ad:bc: c9:47:58:18:44:4e:ad:86:de:85:e2:27:ba:7b:99:5d:62:27: 5f:6d:0f:f0:72:22:d2:22:00:45:94:b3:8c:4a:a0:c2:d4:a9: 3e:d8:86:40:9d:71:03:4c:9d:07:58:89:4a:5b:71:52:9c:b8: 39:60:50:08:5b:f4:67:82:ca:19:04:23:3b:10:da:4b:08:fa: c4:ab:f4:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrBnMTLrN5AWZL0WvaKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3Yzc2YTgwZWMyOTEyYTU2ODkzNWNiNTdiNmE2NTBmMDNk ZmQ4ZDIwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzAxMjFjNDY5NTY3Y2NjMzU4NDkzYjY5MDdhMmVhNDYxN2E2ZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ql5ehpNGNCvLjBkLdH7g7grFQ5s Qk72IrAT4y2I0UeUBCp7cj5z8PodpfdxvU37ChEfaBG/2NBpn2v8tjRZ8r7cUZ9H licu/w1+9exIk0NVJWhoh8Qsgdet88PwZuKw1SEY0YJXb1IXT/0wfIDMuyrveal3 im3FZRbQWDS4fhgTDZVe6X26ykM3yCFHmAKODu74vIFGbqZPPY1qgJ6gJ8lFToCQ GbuN4YTLl9KaJbTZlX7noSfzOCEjgE6pOmq9vA0cftGN3pUSZrEx7WlnAXLKhsNo uEKGxxUQqymrnrAXHJTY27khs1UETipoIIm+ISWullbzXY0bJRiB0YYW9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJwBIcRpVnzMNYSTtpB6LqRhem0LMB8GA1UdIwQY MBaAFFfHaoDsKRKlaJNctXtqZQ8D39jSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUt MjI4NmI4OWU3YTdlLzEvbkFFaHhHbFdmTXcxaEpPMmtIb3VwR0Y2YlFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUtMjI4NmI4OWU3YTdl LzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSdCMA0G CSqGSIb3DQEBCwUAA4IBAQCe8Y5AJGog5wHOynU8kIbZ+bjvoTxtzJIdU4QKtVrp FEEzMQjjFmzqB3g5y9gRyGbZl6WfbAK3nlly8QCO+w5EVpzMqoy0W89WSrzBSMXy SkCd4e4o535UEmNorqIKJ6FM6s6AejkS8+E4n/g6UDUYfRLY7HQwF66PPRn07t8y GpDroTB4P6rq3e+8xCfs4vPEM61Sk5ijgLv88h3DtUS1Wz4kYLJmHcay+jgwY5qe x4qPrbzJR1gYRE6tht6F4ie6e5ldYidfbQ/wciLSIgBFlLOMSqDC1Kk+2IZAnXED TJ0HWIlKW3FSnLg5YFAIW/RngsoZBCM7ENpLCPrEq/Si -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:50 2026 by rpki-client