This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/NZYrDqHNM7w06ZqIbetRmQuvkI8.roa File: NZYrDqHNM7w06ZqIbetRmQuvkI8.roa (raw, json) Hash identifier: aqDX81Tnke9g7oa5zcmS5K2aP4v9bwtCbdPJWZIvsEE= Subject key identifier: 35:96:2B:0E:A1:CD:33:BC:34:E9:9A:88:6D:EB:51:99:0B:AF:90:8F Certificate issuer: /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd Certificate serial: 019C0A96A33C3F84E91541A10AE2E49818DB Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/NZYrDqHNM7w06ZqIbetRmQuvkI8.roa Signing time: Thu 29 Jan 2026 16:29:30 +0000 ROA not before: Thu 29 Jan 2026 16:29:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 217.179.124.0/24 maxlen: 24 217.179.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:96:a3:3c:3f:84:e9:15:41:a1:0a:e2:e4:98:18:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd Validity Not Before: Jan 29 16:29:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35962b0ea1cd33bc34e99a886deb51990baf908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:a7:d1:fb:a9:fe:6c:4a:45:fc:2a:4a:c6: b6:6f:c8:73:52:a8:89:c6:07:e9:01:8e:57:d9:3f: 33:24:e3:fe:17:1e:dc:29:ac:7c:2b:32:5d:6f:ae: c9:b7:62:48:e8:a5:6f:c2:0a:8a:a1:9f:62:7f:97: e1:d1:f9:2a:7b:c9:d7:26:d9:55:12:d1:05:99:92: 05:cf:7f:b7:6d:07:6e:77:50:10:32:26:98:53:9f: 00:3c:a4:ae:01:dc:0f:62:71:ad:e5:eb:8e:0d:e0: 3b:e6:49:3e:c5:ff:a8:4e:58:a2:04:cd:d7:7f:9e: 4a:4d:9e:be:f2:67:a1:af:c7:f5:d7:49:f5:c4:d4: e8:b1:1c:66:c2:77:8c:30:07:27:68:52:fd:d0:de: c5:15:4c:7d:74:9f:7d:ae:0b:88:9f:6f:6d:37:8d: 5d:35:7a:cb:69:27:65:4f:2e:31:da:78:5b:9c:26: 0f:1a:3d:7d:17:68:de:ed:0d:d8:5b:01:a7:75:8f: 5d:ef:bb:01:fe:84:d2:f9:0d:d5:04:25:c7:12:e9: 71:a0:dc:52:2b:db:df:29:67:d0:93:96:5c:37:f3: af:01:c3:84:8f:16:95:65:56:da:19:40:69:7f:ce: 4b:a9:cb:d0:1b:76:0a:d8:84:10:42:a0:bb:23:eb: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:96:2B:0E:A1:CD:33:BC:34:E9:9A:88:6D:EB:51:99:0B:AF:90:8F X509v3 Authority Key Identifier: keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/NZYrDqHNM7w06ZqIbetRmQuvkI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.179.124.0/23 Signature Algorithm: sha256WithRSAEncryption 20:13:66:4b:e0:0a:ac:43:ac:8e:83:12:05:ce:51:b0:ab:15: 41:90:5a:63:76:19:95:a8:b7:d3:f9:d5:b9:78:f6:8c:e1:df: a3:13:6f:b9:26:b9:11:17:01:02:6f:98:56:a8:e3:59:a4:93: 70:72:23:cb:cd:82:8a:23:61:ec:97:ae:50:db:cf:3e:d3:12: d8:2c:f9:05:18:75:23:78:13:3d:aa:b6:5a:27:68:02:68:87: e2:62:fb:bc:a2:3b:ff:a1:79:88:dc:cf:17:f6:fd:21:a3:c1: ac:91:89:49:c2:2d:91:b5:80:3d:bb:c6:3d:98:09:39:70:92: 22:ab:0d:ff:b3:72:c8:52:5e:58:b8:25:c4:fd:93:01:7d:9a: 88:bd:63:9b:75:22:91:61:65:73:5b:1d:84:6c:96:93:aa:05: 52:1a:dd:f5:6e:0e:c0:9d:69:82:67:7b:b2:83:48:27:b6:94: 95:42:11:a4:c9:36:be:1a:35:77:5f:69:05:dd:5a:c4:61:40: 69:55:2c:84:c2:b3:9a:6b:d4:e0:f2:85:c0:ce:ee:ef:86:f6: 28:87:8c:95:62:b1:1d:ca:49:a7:97:03:72:8d:d9:d0:94:84: d3:cc:ef:e3:c0:62:0e:c2:e7:ff:71:a0:b9:ad:47:b1:fb:73: 66:43:8e:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwKlqM8P4TpFUGhCuLkmBjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MmY3MDM1YzI4OTNiMjhjZDA0ZmQxYTliM2NhY2QyNDI4 YzhkZmQwHhcNMjYwMTI5MTYyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTk2MmIwZWExY2QzM2JjMzRlOTlhODg2ZGViNTE5OTBiYWY5MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtKn0fup/mxKRfwqSsa2b8hzUqiJ xgfpAY5X2T8zJOP+Fx7cKax8KzJdb67Jt2JI6KVvwgqKoZ9if5fh0fkqe8nXJtlV EtEFmZIFz3+3bQdud1AQMiaYU58APKSuAdwPYnGt5euODeA75kk+xf+oTliiBM3X f55KTZ6+8mehr8f110n1xNTosRxmwneMMAcnaFL90N7FFUx9dJ99rguIn29tN41d NXrLaSdlTy4x2nhbnCYPGj19F2je7Q3YWwGndY9d77sB/oTS+Q3VBCXHEulxoNxS K9vfKWfQk5ZcN/OvAcOEjxaVZVbaGUBpf85LqcvQG3YK2IQQQqC7I+uhSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWWKw6hzTO8NOmaiG3rUZkLr5CPMB8GA1UdIwQY MBaAFHcvcDXCiTsozQT9Gps8rNJCjI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQt ODMwMzVhZmU0YTM3LzEvTlpZckRxSE5NN3cwNlpxSWJldFJtUXV2a0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQtODMwMzVhZmU0YTM3 LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2bN8MA0G CSqGSIb3DQEBCwUAA4IBAQAgE2ZL4AqsQ6yOgxIFzlGwqxVBkFpjdhmVqLfT+dW5 ePaM4d+jE2+5JrkRFwECb5hWqONZpJNwciPLzYKKI2Hsl65Q288+0xLYLPkFGHUj eBM9qrZaJ2gCaIfiYvu8ojv/oXmI3M8X9v0ho8GskYlJwi2RtYA9u8Y9mAk5cJIi qw3/s3LIUl5YuCXE/ZMBfZqIvWObdSKRYWVzWx2EbJaTqgVSGt31bg7AnWmCZ3uy g0gntpSVQhGkyTa+GjV3X2kF3VrEYUBpVSyEwrOaa9Tg8oXAzu7vhvYoh4yVYrEd ykmnlwNyjdnQlITTzO/jwGIOwuf/caC5rUex+3NmQ46p -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:22 2026 by rpki-client