This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/nSCF5qcvbkhkVZeNhESQPgQzsYw.roa File: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (raw, json) Hash identifier: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g= Subject key identifier: 9D:20:85:E6:A7:2F:6E:48:64:55:97:8D:84:44:90:3E:04:33:B1:8C Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 019B78A2417A98A1600830671686A48BB8C4 Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/nSCF5qcvbkhkVZeNhESQPgQzsYw.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62131 IP address blocks: 193.201.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:41:7a:98:a1:60:08:30:67:16:86:a4:8b:b8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d2085e6a72f6e486455978d8444903e0433b18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0d:08:46:95:be:f0:a9:83:29:44:27:fc:b7: 2d:01:54:3b:52:a6:83:2c:dc:c7:86:18:de:02:3c: 3f:0b:c8:79:c3:4e:2d:e6:8e:89:58:59:d0:6b:d5: 09:f6:94:d8:fe:64:cc:a2:bc:06:55:b6:2f:80:73: 8a:35:58:cf:85:7c:92:1d:cb:b1:09:57:f1:60:60: 71:d1:3f:bb:d6:e8:93:f3:0b:de:9c:22:6b:89:85: 2f:d7:ad:7c:c5:e8:61:2a:f8:13:d4:a8:64:08:c1: dd:67:3d:9d:c2:6e:0d:90:cb:11:79:33:c6:59:05: a4:f1:8d:3b:e6:75:e9:5b:26:aa:b2:36:eb:d9:c5: cc:12:e6:66:ce:0d:31:8a:95:83:a1:11:c1:2a:06: 8f:12:a7:fe:5a:dc:5a:d4:b8:13:80:93:49:29:4f: 47:96:5a:bf:8f:f1:48:4a:0e:5a:6f:6c:19:83:67: e1:49:3d:29:26:06:6c:a1:27:a4:09:6b:f2:0d:8a: b8:6b:65:5c:cd:98:52:9f:d0:ba:7b:c4:27:3e:18: 7e:b9:1b:44:d7:c8:c9:38:0d:fc:61:b8:2e:d0:8e: c0:d7:3e:d0:14:45:ac:85:9f:80:2c:fc:4a:37:81: c6:7d:19:0d:ef:20:32:c1:73:44:ad:02:15:e4:70: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:85:E6:A7:2F:6E:48:64:55:97:8D:84:44:90:3E:04:33:B1:8C X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/nSCF5qcvbkhkVZeNhESQPgQzsYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.96.0/24 Signature Algorithm: sha256WithRSAEncryption 87:e8:d0:6a:38:f5:18:08:20:1b:5c:aa:36:cc:6b:ec:16:ba: 87:2b:e6:4b:d1:ab:41:8e:19:a1:ff:a5:76:97:4d:7b:25:94: 41:9c:6c:8a:05:29:43:45:fd:d1:1e:52:a3:c5:43:04:69:84: 41:96:19:92:d9:35:0b:a8:85:14:73:cb:b4:26:1e:03:9a:03: 0b:0c:e8:72:a7:2b:46:17:cf:61:91:74:b3:06:55:7a:14:6c: 6c:e0:94:a4:d4:40:17:4b:d9:3f:57:ec:f0:75:46:7c:f9:4a: 85:7e:d9:e9:b3:68:b1:7c:d7:42:52:20:39:2e:b4:81:af:b1: ed:a4:49:d6:1a:e2:24:42:92:dd:6b:a0:49:48:79:47:41:81: ac:57:a0:ca:d4:04:4b:45:09:3b:29:a9:45:b8:db:ba:29:f4: f3:4f:c2:a4:df:1b:f5:40:c2:92:c7:b9:98:79:62:29:35:89: af:b1:b2:2c:87:87:a0:ac:9d:df:2a:a3:93:d5:a5:07:54:a8: 64:66:33:3a:5c:b1:3b:dd:d8:5d:93:16:51:02:05:50:ca:6a: 8d:60:fa:43:3c:35:33:b1:41:fd:bb:03:9e:d4:2a:f2:74:fe: c1:28:95:86:3c:5e:7b:0a:24:2b:22:cc:07:0c:be:03:81:46: 2b:97:73:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okF6mKFgCDBnFoaki7jEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDIwODVlNmE3MmY2ZTQ4NjQ1NTk3OGQ4NDQ0OTAzZTA0MzNiMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g0IRpW+8KmDKUQn/LctAVQ7UqaD LNzHhhjeAjw/C8h5w04t5o6JWFnQa9UJ9pTY/mTMorwGVbYvgHOKNVjPhXySHcux CVfxYGBx0T+71uiT8wvenCJriYUv1618xehhKvgT1KhkCMHdZz2dwm4NkMsReTPG WQWk8Y075nXpWyaqsjbr2cXMEuZmzg0xipWDoRHBKgaPEqf+Wtxa1LgTgJNJKU9H llq/j/FISg5ab2wZg2fhST0pJgZsoSekCWvyDYq4a2VczZhSn9C6e8QnPhh+uRtE 18jJOA38Ybgu0I7A1z7QFEWshZ+ALPxKN4HGfRkN7yAywXNErQIV5HAEZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0gheanL25IZFWXjYREkD4EM7GMMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvblNDRjVxY3Zia2hrVlplTmhFU1FQZ1F6c1l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwclgMA0G CSqGSIb3DQEBCwUAA4IBAQCH6NBqOPUYCCAbXKo2zGvsFrqHK+ZL0atBjhmh/6V2 l017JZRBnGyKBSlDRf3RHlKjxUMEaYRBlhmS2TULqIUUc8u0Jh4DmgMLDOhypytG F89hkXSzBlV6FGxs4JSk1EAXS9k/V+zwdUZ8+UqFftnps2ixfNdCUiA5LrSBr7Ht pEnWGuIkQpLda6BJSHlHQYGsV6DK1ARLRQk7KalFuNu6KfTzT8Kk3xv1QMKSx7mY eWIpNYmvsbIsh4egrJ3fKqOT1aUHVKhkZjM6XLE73dhdkxZRAgVQymqNYPpDPDUz sUH9uwOe1CrydP7BKJWGPF57CiQrIswHDL4DgUYrl3P+ -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:19 2026 by rpki-client