This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/RAO_pCNhlBiv40T04NHXU2aXE2U.roa File: RAO_pCNhlBiv40T04NHXU2aXE2U.roa (raw, json) Hash identifier: uo+4uUhKB5sDU8h5KxZgJWoE2h74C7AtuYv/i5HRqbQ= Subject key identifier: 44:03:BF:A4:23:61:94:18:AF:E3:44:F4:E0:D1:D7:53:66:97:13:65 Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f Certificate serial: 019B7CED0BE8194CB5BD2D9FB27F2E87B7CF Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/RAO_pCNhlBiv40T04NHXU2aXE2U.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13037 IP address blocks: 185.81.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0b:e8:19:4c:b5:bd:2d:9f:b2:7f:2e:87:b7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4403bfa423619418afe344f4e0d1d75366971365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:1d:5c:31:59:95:56:1b:25:59:f5:e1:1e: fc:e2:44:98:38:ed:35:4b:bf:36:87:b0:9d:10:14: 9f:6a:b8:54:5b:95:20:ea:0e:37:fe:53:ef:0f:99: 44:10:77:9b:ce:27:be:cf:90:f3:40:e7:68:a2:72: 21:a2:83:1a:4d:ac:d6:af:1f:f3:9d:4c:71:7a:11: c7:a8:52:b6:40:24:be:1c:b7:13:58:fa:a3:ed:87: 31:d3:12:fa:c0:3e:7f:b4:49:ca:79:fb:af:37:61: f0:f3:63:d2:9c:55:c5:be:42:f9:42:da:06:36:cc: 6d:f1:58:22:f9:cc:f5:ec:9f:ec:21:3b:3c:26:ac: 83:7f:37:e2:86:22:4a:d1:bf:72:82:6d:b5:5c:df: 87:27:b0:65:a0:8c:a5:55:5f:7e:33:dd:e7:eb:7c: 74:da:e2:bc:48:68:e2:4b:a7:2b:c6:5d:01:2c:5d: fb:d8:32:e8:14:1f:7c:4e:8e:36:7c:17:ab:d1:36: 30:0a:24:46:0d:6e:67:f4:ed:97:8f:05:88:0e:fc: b6:1d:fc:18:48:43:32:8d:c8:11:19:c4:2d:38:59: b4:4e:13:d2:d9:0e:df:0e:0a:27:bd:3d:52:77:7b: af:f8:d2:a0:7b:6f:23:20:5e:f4:c9:2d:7b:e1:32: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:03:BF:A4:23:61:94:18:AF:E3:44:F4:E0:D1:D7:53:66:97:13:65 X509v3 Authority Key Identifier: keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/RAO_pCNhlBiv40T04NHXU2aXE2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.232.0/22 Signature Algorithm: sha256WithRSAEncryption 15:63:38:f7:18:ee:49:a1:39:77:ec:e3:a4:03:aa:a0:fe:1f: 46:af:87:4b:3a:e7:58:55:ef:68:f4:9c:77:78:77:be:49:17: 5e:b2:9b:4c:ea:47:75:c1:c1:72:27:d0:07:21:41:3e:87:3e: 99:3c:3a:16:84:cf:d4:87:bd:a7:d3:81:b6:36:11:65:77:98: f8:d8:17:32:27:0c:e6:24:0b:b2:3c:14:09:d0:a6:2d:cd:0f: 85:4b:f5:73:46:4b:19:4a:96:81:eb:94:cc:ef:c1:76:d4:6c: cf:b6:10:d3:2b:c5:a2:a8:03:ca:10:73:3d:15:bf:fd:11:8e: ad:4d:ea:1d:31:c1:5d:5e:44:40:8d:12:0d:16:0b:cd:fe:64: 65:29:cb:ec:41:e3:c3:30:37:78:9d:6a:60:09:f3:40:b7:5f: ec:bc:83:03:fb:ba:9f:08:3f:9d:57:2a:d9:c5:3b:b1:c3:f3: 95:bd:13:ed:0d:0e:82:58:4c:95:32:5c:28:ca:c1:68:50:6f: 1c:7e:87:97:3f:e0:52:97:74:49:69:97:1b:1c:a0:9a:7e:94: 81:0f:d8:4f:4b:20:a4:49:68:93:fc:0e:b4:1a:a6:01:1c:d8: 72:e5:e0:3a:0a:90:c5:93:dd:b6:d6:70:f4:8d:ec:22:ce:83: 64:45:e9:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QvoGUy1vS2fsn8uh7fPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NzczZTljYzk3NDMwMWE3OGI3ZWU2ZDk5NDUyOGYxZjg4 MmU0NmYwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDAzYmZhNDIzNjE5NDE4YWZlMzQ0ZjRlMGQxZDc1MzY2OTcxMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5cdXDFZlVYbJVn14R784kSYOO01 S782h7CdEBSfarhUW5Ug6g43/lPvD5lEEHebzie+z5DzQOdoonIhooMaTazWrx/z nUxxehHHqFK2QCS+HLcTWPqj7Ycx0xL6wD5/tEnKefuvN2Hw82PSnFXFvkL5QtoG Nsxt8Vgi+cz17J/sITs8JqyDfzfihiJK0b9ygm21XN+HJ7BloIylVV9+M93n63x0 2uK8SGjiS6crxl0BLF372DLoFB98To42fBer0TYwCiRGDW5n9O2XjwWIDvy2HfwY SEMyjcgRGcQtOFm0ThPS2Q7fDgonvT1Sd3uv+NKge28jIF70yS174TI/nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQDv6QjYZQYr+NE9ODR11NmlxNlMB8GA1UdIwQY MBaAFJZ3PpzJdDAaeLfubZlFKPH4guRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTct NzU3ODM4NjcwOTQ4LzEvUkFPX3BDTmhsQml2NDBUMDROSFhVMmFYRTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTctNzU3ODM4NjcwOTQ4 LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVHoMA0G CSqGSIb3DQEBCwUAA4IBAQAVYzj3GO5JoTl37OOkA6qg/h9Gr4dLOudYVe9o9Jx3 eHe+SRdesptM6kd1wcFyJ9AHIUE+hz6ZPDoWhM/Uh72n04G2NhFld5j42BcyJwzm JAuyPBQJ0KYtzQ+FS/VzRksZSpaB65TM78F21GzPthDTK8WiqAPKEHM9Fb/9EY6t TeodMcFdXkRAjRINFgvN/mRlKcvsQePDMDd4nWpgCfNAt1/svIMD+7qfCD+dVyrZ xTuxw/OVvRPtDQ6CWEyVMlwoysFoUG8cfoeXP+BSl3RJaZcbHKCafpSBD9hPSyCk SWiT/A60GqYBHNhy5eA6CpDFk9221nD0jewizoNkRel0 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:45 2026 by rpki-client