This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa File: N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa (raw, json) Hash identifier: fc9tBn+6SqJqfSW/GpPBz9lgPSF51UDlJcUc1bmbePQ= Subject key identifier: 37:62:6B:F4:91:C9:3E:D4:42:ED:FC:C1:61:67:4E:46:63:D2:2B:E5 Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6 Certificate serial: 019B7F137EA687F1C86ABC891A83E60C796F Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa Signing time: Fri 02 Jan 2026 14:19:02 +0000 ROA not before: Fri 02 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44507 IP address blocks: 5.175.88.0/21 maxlen: 21 46.42.0.0/18 maxlen: 18 46.42.8.0/21 maxlen: 21 46.42.16.0/21 maxlen: 21 46.42.24.0/21 maxlen: 21 46.42.32.0/21 maxlen: 21 46.42.40.0/21 maxlen: 21 46.42.48.0/21 maxlen: 21 46.42.56.0/21 maxlen: 21 46.228.96.0/20 maxlen: 20 134.90.152.0/21 maxlen: 21 146.247.32.0/21 maxlen: 21 178.57.32.0/21 maxlen: 21 178.57.40.0/21 maxlen: 21 178.57.48.0/21 maxlen: 21 185.16.56.0/22 maxlen: 22 188.120.48.0/20 maxlen: 20 194.58.160.0/21 maxlen: 21 194.58.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:7e:a6:87:f1:c8:6a:bc:89:1a:83:e6:0c:79:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6 Validity Not Before: Jan 2 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37626bf491c93ed442edfcc161674e4663d22be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:f8:06:5c:24:c9:f3:96:cc:f1:75:49:3c: 4f:24:19:68:45:51:1d:fd:ea:b6:65:86:b0:d8:c8: ee:13:9d:3a:aa:a0:3a:5d:54:c9:f0:4e:cc:7b:5b: 2a:ac:7f:ec:5a:92:43:44:65:ea:60:9c:de:72:c0: 84:26:52:b8:69:1d:79:08:1c:a9:8e:2f:a1:be:62: 9f:ec:3b:0b:9e:21:aa:a8:1c:17:e3:47:4b:0c:dd: 4d:b8:14:13:26:79:d6:93:30:bf:62:fb:8a:8f:f3: 8e:91:d7:c8:e6:66:5a:6b:49:76:f4:9a:81:54:75: c3:5a:97:52:4f:23:06:d4:fe:b6:d8:07:84:76:d7: d0:5e:b3:10:d0:34:6e:24:58:1b:7e:b2:8c:ef:c8: 83:03:6a:c8:a4:c9:6a:93:f1:46:e2:0f:94:44:a6: b2:d9:7d:bf:b0:11:62:35:cd:94:6d:d6:76:d0:41: 23:7d:af:ef:d7:c2:1c:40:72:15:6a:e9:d7:36:d6: fb:1d:9b:b9:df:2f:4e:cc:c6:8f:7f:23:4e:7b:13: ef:e1:95:e2:04:fa:d6:2d:b0:02:6c:ad:bc:48:70: 8c:3a:7a:72:f5:fb:c5:9a:6f:b7:e3:4c:6e:50:65: 4d:8b:5e:5e:07:60:74:dc:44:64:82:6a:71:90:fa: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:62:6B:F4:91:C9:3E:D4:42:ED:FC:C1:61:67:4E:46:63:D2:2B:E5 X509v3 Authority Key Identifier: keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.88.0/21 46.42.0.0/18 46.228.96.0/20 134.90.152.0/21 146.247.32.0/21 178.57.32.0-178.57.55.255 185.16.56.0/22 188.120.48.0/20 194.58.160.0/21 194.58.176.0/21 Signature Algorithm: sha256WithRSAEncryption 68:d0:ac:ac:37:18:f8:4d:8d:d6:53:8c:e4:33:c9:36:8e:48: ae:ef:df:55:c7:cf:67:8f:d6:c0:ae:9c:9c:df:00:35:ec:47: 4c:03:e2:88:20:cf:88:cb:18:ba:0e:68:62:9d:05:35:68:87: 65:d5:7b:ad:22:25:ab:3b:2d:74:cb:d2:22:46:75:54:73:2d: 33:f0:9d:3d:b3:6e:19:63:04:0d:da:1f:25:a0:0c:c1:cc:47: 5f:a4:dd:70:e7:24:86:20:37:3e:a3:8c:36:b0:ca:05:d8:da: 69:bc:a3:f2:e1:45:c1:40:2d:c5:3a:a1:1b:68:16:8e:03:67: 00:96:aa:3a:6e:a8:b7:17:2e:2f:49:45:3c:23:de:1d:de:95: d5:92:c0:fc:8e:99:45:3f:62:c5:24:ae:a0:6d:dd:f8:3f:fd: 59:ad:a1:01:43:b5:cf:03:d3:a8:ae:ad:81:a4:7b:e6:14:d6: af:5a:17:77:33:a5:b0:2c:fe:bc:db:31:e3:76:40:c9:b0:e6: e2:56:c5:44:60:55:b3:19:2f:27:b3:52:9b:60:f9:c6:0b:54: 09:1c:30:3a:d7:6f:fb:75:e0:c7:4f:88:46:75:5e:50:70:55: 55:74:b6:12:6f:02:09:1b:85:26:36:92:62:69:8e:00:db:bb: 0a:ff:f1:24 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt/E36mh/HIaryJGoPmDHlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMmE1OGM2OTdhMTQ0OTk3NmIwZDExZDZmMTI2MDI1ZTE0 MDg5YzYwHhcNMjYwMTAyMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzYyNmJmNDkxYzkzZWQ0NDJlZGZjYzE2MTY3NGU0NjYzZDIyYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho74BlwkyfOWzPF1STxPJBloRVEd /eq2ZYaw2MjuE506qqA6XVTJ8E7Me1sqrH/sWpJDRGXqYJzecsCEJlK4aR15CByp ji+hvmKf7DsLniGqqBwX40dLDN1NuBQTJnnWkzC/YvuKj/OOkdfI5mZaa0l29JqB VHXDWpdSTyMG1P622AeEdtfQXrMQ0DRuJFgbfrKM78iDA2rIpMlqk/FG4g+URKay 2X2/sBFiNc2UbdZ20EEjfa/v18IcQHIVaunXNtb7HZu53y9OzMaPfyNOexPv4ZXi BPrWLbACbK28SHCMOnpy9fvFmm+340xuUGVNi15eB2B03ERkgmpxkPqIewIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFDdia/SRyT7UQu38wWFnTkZj0ivlMB8GA1UdIwQY MBaAFKoqWMaXoUSZdrDRHW8SYCXhQInGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgt YmU2MjJjMzEzMmRmLzEvTjJKcjlKSEpQdFJDN2Z6QllXZE9SbVBTSy1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgtYmU2MjJjMzEzMmRm LzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQDBa9YAwQG LioAAwQELuRgAwQDhlqYAwQDkvcgMAwDBAWyOSADBAOyOTADBAK5EDgDBAS8eDAD BAPCOqADBAPCOrAwDQYJKoZIhvcNAQELBQADggEBAGjQrKw3GPhNjdZTjOQzyTaO SK7v31XHz2eP1sCunJzfADXsR0wD4oggz4jLGLoOaGKdBTVoh2XVe60iJas7LXTL 0iJGdVRzLTPwnT2zbhljBA3aHyWgDMHMR1+k3XDnJIYgNz6jjDawygXY2mm8o/Lh RcFALcU6oRtoFo4DZwCWqjpuqLcXLi9JRTwj3h3eldWSwPyOmUU/YsUkrqBt3fg/ /VmtoQFDtc8D06iurYGke+YU1q9aF3czpbAs/rzbMeN2QMmw5uJWxURgVbMZLyez Uptg+cYLVAkcMDrXb/t14MdPiEZ1XlBwVVV0thJvAgkbhSY2kmJpjgDbuwr/8SQ= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:06 2026 by rpki-client