This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/NhJ6vdwMryrhpGOR8KKqWfDyEKE.roa File: NhJ6vdwMryrhpGOR8KKqWfDyEKE.roa (raw, json) Hash identifier: 4pFWV2mpeu3iq5Hwo5/8aDs6PTomZFrJ08QxozJPsuY= Subject key identifier: 36:12:7A:BD:DC:0C:AF:2A:E1:A4:63:91:F0:A2:AA:59:F0:F2:10:A1 Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8 Certificate serial: 019B79EC2D62728C3386336554C07343A782 Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/NhJ6vdwMryrhpGOR8KKqWfDyEKE.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21067 IP address blocks: 185.110.148.0/22 maxlen: 24 2a06:5840::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2d:62:72:8c:33:86:33:65:54:c0:73:43:a7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36127abddc0caf2ae1a46391f0a2aa59f0f210a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:b5:79:5e:1a:3d:f2:4a:a5:12:7b:4f:e8: b5:43:f9:4a:1c:8a:b5:c5:6b:01:10:3b:38:52:ce: cc:7b:5e:09:f4:a1:95:77:31:ce:87:78:8f:9c:1e: 97:7c:97:93:0c:e7:57:c1:ba:7f:8e:d6:c3:82:38: ae:db:8a:68:78:9d:63:45:c2:4d:69:8f:7f:d3:5e: 7d:9b:2f:d2:41:1a:af:8a:a1:c3:fe:71:85:a0:a4: 05:b1:4d:99:cd:1a:38:5c:13:3e:ed:e9:07:23:b7: 78:99:59:59:19:12:a7:d6:c6:34:7d:81:b7:18:66: 6f:85:4a:f7:77:7a:18:43:70:ec:69:1e:32:e5:63: cc:b0:56:24:be:20:ac:ff:e1:16:fb:de:37:bd:8f: e8:07:a3:89:38:2c:57:e6:67:3d:82:c1:77:79:f4: eb:47:72:45:b7:0a:24:99:c5:17:86:66:e8:48:66: e4:4b:5c:01:ed:52:a6:99:47:46:a7:d4:88:2f:e6: 1b:e5:19:ea:82:45:2d:98:b2:2d:86:1e:0a:22:4d: e5:98:be:b5:62:77:db:4d:de:1a:ff:26:9c:82:8b: 6a:8b:13:3c:5f:6c:b3:97:e4:fe:ab:26:1c:3c:bf: 5f:be:aa:4d:f6:34:52:ef:a1:c2:95:5a:c6:f2:45: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:12:7A:BD:DC:0C:AF:2A:E1:A4:63:91:F0:A2:AA:59:F0:F2:10:A1 X509v3 Authority Key Identifier: keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/NhJ6vdwMryrhpGOR8KKqWfDyEKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.148.0/22 IPv6: 2a06:5840::/29 Signature Algorithm: sha256WithRSAEncryption 94:6a:ed:a4:ca:a4:d0:91:2e:e2:79:9e:28:93:bf:50:56:a3: 6a:56:f8:19:f0:16:9c:17:69:27:cb:7b:d5:88:e7:e0:b0:46: 86:a8:1b:cc:3d:f0:fd:fe:bb:ea:01:a9:3c:52:2a:9f:3f:48: 03:86:9f:af:64:6b:d0:bd:29:ba:f7:de:54:56:04:3d:31:5e: 58:fa:d8:57:ea:86:86:57:d3:48:de:2a:d9:db:8f:fc:28:13: 51:d5:8c:0d:d3:f1:48:e6:12:30:f7:39:98:8c:cc:97:be:86: a8:b9:c4:11:b5:9f:b0:4c:13:43:0d:cd:17:75:9b:6b:10:52: a0:a5:ec:a4:38:88:aa:8a:a8:ee:e0:25:68:77:f1:d5:4a:af: 84:94:ed:2b:1a:26:ef:21:15:9d:d8:9b:26:73:a5:43:d5:4b: 1d:14:73:f5:0f:a2:24:8f:0f:0e:9a:a1:51:b9:bb:8c:f5:fc: d3:cd:09:55:c9:10:b4:12:6d:3b:5a:fa:a2:98:98:ac:af:7a: 3e:f8:66:de:85:a7:3c:65:c2:eb:23:03:b1:6a:fd:88:03:53: 78:7b:7e:89:f5:93:47:95:47:16:3a:ba:7f:e3:3f:15:45:e4: 80:87:13:9d:b4:49:dc:17:d1:bf:df:0f:cb:c2:cf:27:a1:5b: 15:de:04:69 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57C1icowzhjNlVMBzQ6eCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYTcyNTJhYTY0M2QwZGJjNDJkYTQxMGU5YzIwZjU3MDMz NjhjZDgwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjEyN2FiZGRjMGNhZjJhZTFhNDYzOTFmMGEyYWE1OWYwZjIxMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cy1eV4aPfJKpRJ7T+i1Q/lKHIq1 xWsBEDs4Us7Me14J9KGVdzHOh3iPnB6XfJeTDOdXwbp/jtbDgjiu24poeJ1jRcJN aY9/0159my/SQRqviqHD/nGFoKQFsU2ZzRo4XBM+7ekHI7d4mVlZGRKn1sY0fYG3 GGZvhUr3d3oYQ3DsaR4y5WPMsFYkviCs/+EW+943vY/oB6OJOCxX5mc9gsF3efTr R3JFtwokmcUXhmboSGbkS1wB7VKmmUdGp9SIL+Yb5RnqgkUtmLIthh4KIk3lmL61 YnfbTd4a/yacgotqixM8X2yzl+T+qyYcPL9fvqpN9jRS76HClVrG8kVFcwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDYSer3cDK8q4aRjkfCiqlnw8hChMB8GA1UdIwQY MBaAFLCnJSqmQ9DbxC2kEOnCD1cDNozYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgt MDI4YTJiMGE1M2Q1LzEvTmhKNnZkd01yeXJocEdPUjhLS3FXZkR5RUtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgtMDI4YTJiMGE1M2Q1 LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuW6UMA0E AgACMAcDBQMqBlhAMA0GCSqGSIb3DQEBCwUAA4IBAQCUau2kyqTQkS7ieZ4ok79Q VqNqVvgZ8BacF2kny3vViOfgsEaGqBvMPfD9/rvqAak8UiqfP0gDhp+vZGvQvSm6 995UVgQ9MV5Y+thX6oaGV9NI3irZ24/8KBNR1YwN0/FI5hIw9zmYjMyXvoaoucQR tZ+wTBNDDc0XdZtrEFKgpeykOIiqiqju4CVod/HVSq+ElO0rGibvIRWd2Jsmc6VD 1UsdFHP1D6Ikjw8OmqFRubuM9fzTzQlVyRC0Em07WvqimJisr3o++Gbehac8ZcLr IwOxav2IA1N4e36J9ZNHlUcWOrp/4z8VReSAhxOdtEncF9G/3w/Lws8noVsV3gRp -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:30 2026 by rpki-client