This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/1nYeCdEIBl74RW5H49WfsI_nh5E.roa File: 1nYeCdEIBl74RW5H49WfsI_nh5E.roa (raw, json) Hash identifier: EcWzaBWnHXuF+60jlRtvVMtfG/DsbN91ytwmWQKXBaU= Subject key identifier: D6:76:1E:09:D1:08:06:5E:F8:45:6E:47:E3:D5:9F:B0:8F:E7:87:91 Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Certificate serial: 019B7CEE26D7D92E31066A5ED40EC6F3C146 Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/1nYeCdEIBl74RW5H49WfsI_nh5E.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199493 IP address blocks: 37.220.64.0/20 maxlen: 24 193.221.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:26:d7:d9:2e:31:06:6a:5e:d4:0e:c6:f3:c1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6761e09d108065ef8456e47e3d59fb08fe78791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:2d:46:6f:d3:3f:40:b6:1e:a5:de:ba:15: 4a:71:6b:27:2f:64:ce:4d:c6:15:03:ab:df:f7:1e: 86:dc:d0:2a:b8:ed:f2:b3:ae:f6:c3:08:0a:24:cd: 44:d9:d8:55:eb:d2:13:bf:74:25:cc:8e:f7:0c:da: fc:c4:5a:4e:bd:d9:a2:5e:c2:5c:16:31:e6:99:7d: 1c:ec:c8:49:ab:6b:62:63:5f:66:6b:87:2a:c4:2e: 3b:e6:0b:0d:60:e6:3c:50:3a:aa:19:62:e7:4f:45: dd:85:1a:8d:46:f9:ad:be:b7:17:4f:1e:42:c5:41: b7:00:df:41:7d:4a:e9:48:d9:a6:44:62:9d:03:a4: 7d:b1:70:52:77:52:e9:b7:e8:f9:2a:d9:e6:1d:19: 25:0c:ae:13:80:8d:37:49:70:aa:39:32:b2:f6:0e: 96:dc:44:70:94:ce:34:9d:ef:5b:a8:db:01:da:f4: 91:f2:46:e8:82:57:0d:bd:7f:3e:8e:2e:c5:8d:bf: 0c:a6:f1:08:f5:e2:2b:5e:61:41:04:6b:57:5d:7e: 2c:f8:9b:e4:4e:70:75:c6:87:25:52:95:42:24:45: f3:11:8c:fa:00:0d:63:71:17:06:ff:09:82:9a:f5: 6a:8a:63:48:29:5a:f2:12:92:76:84:f1:bd:bc:d6: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:76:1E:09:D1:08:06:5E:F8:45:6E:47:E3:D5:9F:B0:8F:E7:87:91 X509v3 Authority Key Identifier: keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/1nYeCdEIBl74RW5H49WfsI_nh5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.64.0/20 193.221.196.0/22 Signature Algorithm: sha256WithRSAEncryption 49:70:a3:1e:74:de:4c:07:23:f2:63:8a:ef:e2:a1:0e:b2:d2: 57:75:38:b0:c6:a0:83:30:19:0a:1f:1c:f9:82:bf:30:c6:1e: 71:ca:04:04:8d:f9:56:9e:f7:2e:8a:de:c7:a9:5c:e0:18:16: be:62:75:7e:45:36:3d:ad:a6:7f:fe:06:cc:2a:00:74:dc:c0: d7:79:aa:ee:34:4a:ec:0a:5f:5e:18:06:c8:59:f1:71:1b:33: bc:8b:37:82:ee:d7:e7:fc:ab:f9:5c:7f:53:cd:33:14:95:75: b0:41:99:26:72:75:dd:22:cb:f5:39:4d:84:a8:ca:63:f1:a6: 39:34:24:66:16:2e:34:ad:74:22:f5:71:e5:f4:da:0f:01:85: 5a:08:15:01:9a:e0:f2:9b:4b:b9:be:66:de:c8:d7:e7:40:41: 8f:84:2c:51:f5:31:4d:be:f6:26:c1:46:fe:48:23:76:7b:eb: 42:a8:79:6f:3b:06:30:86:68:42:bc:39:6c:11:31:1d:81:a3: 3c:44:dd:4c:50:25:21:31:67:ed:9c:29:70:ce:5d:ad:ab:90: 79:cd:2f:b4:62:9c:a2:f5:6d:9c:b8:b5:08:66:6d:9a:89:1b: 71:25:69:a9:a4:6c:68:f0:08:ff:0c:19:1e:99:de:65:51:4d: ff:ca:7b:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ibX2S4xBmpe1A7G88FGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm OWUwYTAwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjc2MWUwOWQxMDgwNjVlZjg0NTZlNDdlM2Q1OWZiMDhmZTc4NzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21stRm/TP0C2HqXeuhVKcWsnL2TO TcYVA6vf9x6G3NAquO3ys672wwgKJM1E2dhV69ITv3QlzI73DNr8xFpOvdmiXsJc FjHmmX0c7MhJq2tiY19ma4cqxC475gsNYOY8UDqqGWLnT0XdhRqNRvmtvrcXTx5C xUG3AN9BfUrpSNmmRGKdA6R9sXBSd1Lpt+j5KtnmHRklDK4TgI03SXCqOTKy9g6W 3ERwlM40ne9bqNsB2vSR8kboglcNvX8+ji7Fjb8MpvEI9eIrXmFBBGtXXX4s+Jvk TnB1xoclUpVCJEXzEYz6AA1jcRcG/wmCmvVqimNIKVryEpJ2hPG9vNYePQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNZ2HgnRCAZe+EVuR+PVn7CP54eRMB8GA1UdIwQY MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt ZmVjOGE4MGVkMjMzLzEvMW5ZZUNkRUlCbDc0Ulc1SDQ5V2ZzSV9uaDVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEJdxAAwQC wd3EMA0GCSqGSIb3DQEBCwUAA4IBAQBJcKMedN5MByPyY4rv4qEOstJXdTiwxqCD MBkKHxz5gr8wxh5xygQEjflWnvcuit7HqVzgGBa+YnV+RTY9raZ//gbMKgB03MDX earuNErsCl9eGAbIWfFxGzO8izeC7tfn/Kv5XH9TzTMUlXWwQZkmcnXdIsv1OU2E qMpj8aY5NCRmFi40rXQi9XHl9NoPAYVaCBUBmuDym0u5vmbeyNfnQEGPhCxR9TFN vvYmwUb+SCN2e+tCqHlvOwYwhmhCvDlsETEdgaM8RN1MUCUhMWftnClwzl2tq5B5 zS+0Ypyi9W2cuLUIZm2aiRtxJWmppGxo8Aj/DBkemd5lUU3/ynuo -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:23 2026 by rpki-client