This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa File: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (raw, json) Hash identifier: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI= Subject key identifier: 36:E1:BB:7B:E7:9A:79:89:A0:10:AC:D6:FA:00:38:86:6D:04:DF:28 Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Certificate serial: 019B783435D37EADDA006908918F047274AF Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 193.17.197.0/24 maxlen: 24 194.145.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:35:d3:7e:ad:da:00:69:08:91:8f:04:72:74:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36e1bb7be79a7989a010acd6fa0038866d04df28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:63:44:dd:1f:12:ff:55:52:fc:75:e8:19: 0c:86:28:2a:ab:31:75:e0:96:f5:6f:fa:39:c2:d5: 8a:8e:f1:c5:19:5c:df:81:74:cc:11:95:ed:2c:e6: e2:88:70:52:f4:9b:00:a1:2b:04:14:09:3c:ef:d8: 29:b0:56:71:b7:75:fb:1a:da:58:31:5b:32:1b:aa: 7e:ae:4d:6d:5c:a9:cd:68:a7:c3:9a:43:f9:a5:d3: 20:57:62:97:f6:3e:f5:38:33:2f:c1:d6:04:66:8a: af:17:e6:1e:ab:40:7c:19:14:7d:18:57:66:c4:ac: 02:c1:a1:95:47:7c:37:1f:a5:ee:83:a9:6c:ae:a0: 34:7b:fb:4a:b5:d7:93:1e:b4:ef:82:0c:d5:00:bc: 65:37:74:b9:1c:ef:08:48:31:29:17:cb:3e:a5:73: 2a:56:6e:b8:d4:ef:d4:e5:48:c2:e8:71:2b:1d:54: eb:25:6e:e7:43:fe:81:8e:b0:4c:59:31:fd:c8:b3: 73:59:59:cc:95:ea:37:2f:05:6d:a1:f1:60:01:e4: df:22:9d:68:eb:e8:c4:6d:59:66:2d:16:16:b5:4f: fb:14:96:03:83:8c:a5:c0:74:9e:29:1d:dd:29:1b: 8e:96:09:a7:0e:5b:d0:8d:c0:e3:79:89:c5:fb:0b: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E1:BB:7B:E7:9A:79:89:A0:10:AC:D6:FA:00:38:86:6D:04:DF:28 X509v3 Authority Key Identifier: keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.197.0/24 194.145.114.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:df:40:fd:e9:b5:64:6f:65:ab:a6:99:7f:bf:2b:31:22:5d: f4:eb:d0:39:82:81:1f:53:7d:ed:50:93:6d:9b:3d:35:63:60: c3:51:d1:9b:9a:cf:8a:22:16:32:d3:fc:7f:29:ba:68:46:48: 43:14:93:6f:39:02:b9:6e:32:ef:a9:aa:95:47:de:e3:d0:38: 45:7a:fe:53:72:80:65:5a:d5:bf:97:f4:92:26:a0:0e:e2:f5: 35:57:5c:47:1c:99:ac:1b:fd:d0:99:a1:61:77:60:33:c6:69: bc:e2:6f:25:50:1b:e5:d3:fd:26:77:5a:70:01:54:31:93:ff: c3:e7:66:b3:5b:05:a6:51:0c:bd:36:41:e1:8b:4a:63:a7:cf: 58:32:c5:33:1e:b5:a3:12:e8:6e:42:e5:1d:c9:4f:f0:22:cd: 02:61:b2:78:88:27:df:c6:da:33:03:2c:ad:2f:aa:1c:fc:bc: e3:0c:c4:f4:dc:ab:5f:a2:8c:df:1a:98:22:33:66:68:79:84: d1:5f:ce:dc:3d:e5:d8:15:cd:d2:e4:1a:f2:c9:dd:80:4f:94: 41:4a:b0:ea:13:c5:8c:20:cd:0d:36:54:4f:62:dd:08:f8:a8: a0:0d:d2:01:70:99:b5:0e:76:78:ac:e1:71:ac:18:a1:20:7b: 03:32:45:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NDXTfq3aAGkIkY8EcnSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjhlMWZiYTdiNDRhN2I2NjYyMzZiMjEyNTNkN2Q2MzYy ZDBkODMwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmUxYmI3YmU3OWE3OTg5YTAxMGFjZDZmYTAwMzg4NjZkMDRkZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzdjRN0fEv9VUvx16BkMhigqqzF1 4Jb1b/o5wtWKjvHFGVzfgXTMEZXtLObiiHBS9JsAoSsEFAk879gpsFZxt3X7GtpY MVsyG6p+rk1tXKnNaKfDmkP5pdMgV2KX9j71ODMvwdYEZoqvF+Yeq0B8GRR9GFdm xKwCwaGVR3w3H6Xug6lsrqA0e/tKtdeTHrTvggzVALxlN3S5HO8ISDEpF8s+pXMq Vm641O/U5UjC6HErHVTrJW7nQ/6BjrBMWTH9yLNzWVnMleo3LwVtofFgAeTfIp1o 6+jEbVlmLRYWtU/7FJYDg4ylwHSeKR3dKRuOlgmnDlvQjcDjeYnF+wuQKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDbhu3vnmnmJoBCs1voAOIZtBN8oMB8GA1UdIwQY MBaAFEto4funtEp7ZmI2shJT19Y2LQ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMt OGIwNmVjNTY0YTFiLzEvTnVHN2UtZWFlWW1nRUt6Vy1nQTRobTBFM3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMtOGIwNmVjNTY0YTFi LzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRHFAwQA wpFyMA0GCSqGSIb3DQEBCwUAA4IBAQBK30D96bVkb2Wrppl/vysxIl3069A5goEf U33tUJNtmz01Y2DDUdGbms+KIhYy0/x/KbpoRkhDFJNvOQK5bjLvqaqVR97j0DhF ev5TcoBlWtW/l/SSJqAO4vU1V1xHHJmsG/3QmaFhd2Azxmm84m8lUBvl0/0md1pw AVQxk//D52azWwWmUQy9NkHhi0pjp89YMsUzHrWjEuhuQuUdyU/wIs0CYbJ4iCff xtozAyytL6oc/LzjDMT03KtfoozfGpgiM2ZoeYTRX87cPeXYFc3S5Bryyd2AT5RB SrDqE8WMIM0NNlRPYt0I+KigDdIBcJm1DnZ4rOFxrBihIHsDMkW/ -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:21 2026 by rpki-client