This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/NJVMWOrligqTcr-rcvI2msW0lWg.roa File: NJVMWOrligqTcr-rcvI2msW0lWg.roa (raw, json) Hash identifier: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s= Subject key identifier: 34:95:4C:58:EA:E5:8A:0A:93:72:BF:AB:72:F2:36:9A:C5:B4:95:68 Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe Certificate serial: 019B7910F2FB4BF31AD4C304AF92398A8CED Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/NJVMWOrligqTcr-rcvI2msW0lWg.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208821 IP address blocks: 185.130.90.0/24 maxlen: 24 193.22.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:fb:4b:f3:1a:d4:c3:04:af:92:39:8a:8c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e1d50d52288bee80eea435577018712409bbe Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34954c58eae58a0a9372bfab72f2369ac5b49568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:73:00:3c:b2:d4:d2:e8:ca:55:3c:a4:0b: f8:f0:34:40:fb:7e:27:8f:45:27:8a:5b:c5:ed:fe: 64:7c:b1:47:37:58:6c:f9:01:49:bd:9c:3a:df:c6: a0:a4:de:95:cc:8d:a5:d1:49:c6:4f:f6:a7:97:e3: 6d:55:6d:ea:56:59:a4:e7:1c:e5:83:2e:93:7f:fa: 49:61:ce:cc:f7:56:09:68:68:e5:b7:68:58:49:58: 82:7d:9f:9f:36:0e:e7:29:89:38:a2:09:a7:1b:4c: 91:03:8c:6d:38:ff:1e:5c:81:ed:f6:1c:6d:6e:19: 3e:34:09:b5:45:94:92:a7:d7:e4:f7:54:1e:89:66: a3:ff:0c:0c:9b:32:1a:87:9e:64:f8:59:88:f2:de: 40:ee:00:0d:93:b7:64:fa:c9:1b:68:16:f2:59:75: df:dc:b8:35:b1:c3:12:20:36:87:38:69:02:ae:05: e2:d2:bf:fb:11:65:1d:35:db:5c:7e:63:04:ff:fd: 13:ee:58:31:b5:86:84:1e:ed:37:e2:c7:81:94:57: 8b:f6:95:97:12:30:38:04:97:ce:c6:72:ff:7f:03: 79:70:6e:67:35:c3:99:a8:18:f4:49:4d:48:de:9c: 65:b5:ae:9e:89:24:01:1f:59:dc:f9:66:cb:52:55: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:95:4C:58:EA:E5:8A:0A:93:72:BF:AB:72:F2:36:9A:C5:B4:95:68 X509v3 Authority Key Identifier: keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/NJVMWOrligqTcr-rcvI2msW0lWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.90.0/24 193.22.12.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:2b:cf:af:e9:26:5d:a0:13:64:3b:b3:f3:8e:2d:a7:0d:f4: d4:4a:0d:21:20:21:9d:89:d1:fa:99:ae:4c:b8:7a:ad:77:1a: f4:05:3e:c0:db:26:82:46:cf:09:c1:65:8d:d3:ee:3d:df:37: e1:5f:18:c6:7a:ef:da:a3:3f:86:07:21:38:e9:8a:c7:43:71: fb:9d:65:b8:74:e6:90:1e:0a:d4:6b:48:8a:2b:04:9d:8b:53: 2b:8c:06:b1:0b:4f:d5:b4:6d:f4:c1:6c:6f:cf:8a:94:46:d6: 88:32:bc:39:38:b8:48:01:f2:da:76:f3:35:76:e4:49:2a:82: 8c:7c:9c:dd:7a:10:34:be:06:bd:50:0f:6c:00:cc:da:66:30: 53:08:94:c9:c0:58:ac:3f:53:fc:f2:c9:fa:c3:ff:3f:f2:b0: 01:46:1b:ec:d0:8d:ab:32:fb:fa:2a:0e:da:4b:3e:1c:4a:fa: 8f:d2:94:04:6a:44:ce:db:e5:6f:ab:78:6b:15:17:a1:58:b4: ab:fa:dd:5c:d6:e5:dd:ca:b7:cf:ce:50:bc:3f:c2:61:cc:7c: 68:a5:80:88:75:4b:e5:f0:21:ce:d9:02:d9:47:b4:d9:74:dc: 3e:b2:17:d5:13:5a:28:d1:28:ff:8e:9e:e8:15:e3:59:3c:85: 7b:f7:87:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EPL7S/Ma1MMEr5I5ioztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0 MDliYmUwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDk1NGM1OGVhZTU4YTBhOTM3MmJmYWI3MmYyMzY5YWM1YjQ5NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxctzADyy1NLoylU8pAv48DRA+34n j0UnilvF7f5kfLFHN1hs+QFJvZw638agpN6VzI2l0UnGT/anl+NtVW3qVlmk5xzl gy6Tf/pJYc7M91YJaGjlt2hYSViCfZ+fNg7nKYk4ogmnG0yRA4xtOP8eXIHt9hxt bhk+NAm1RZSSp9fk91QeiWaj/wwMmzIah55k+FmI8t5A7gANk7dk+skbaBbyWXXf 3Lg1scMSIDaHOGkCrgXi0r/7EWUdNdtcfmME//0T7lgxtYaEHu034seBlFeL9pWX EjA4BJfOxnL/fwN5cG5nNcOZqBj0SU1I3pxlta6eiSQBH1nc+WbLUlWRtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDSVTFjq5YoKk3K/q3LyNprFtJVoMB8GA1UdIwQY MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt MzE2ZWYyNjFmNGE1LzEvTkpWTVdPcmxpZ3FUY3ItcmN2STJtc1cwbFdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1 LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYJaAwQA wRYMMA0GCSqGSIb3DQEBCwUAA4IBAQCLK8+v6SZdoBNkO7Pzji2nDfTUSg0hICGd idH6ma5MuHqtdxr0BT7A2yaCRs8JwWWN0+493zfhXxjGeu/aoz+GByE46YrHQ3H7 nWW4dOaQHgrUa0iKKwSdi1MrjAaxC0/VtG30wWxvz4qURtaIMrw5OLhIAfLadvM1 duRJKoKMfJzdehA0vga9UA9sAMzaZjBTCJTJwFisP1P88sn6w/8/8rABRhvs0I2r Mvv6Kg7aSz4cSvqP0pQEakTO2+Vvq3hrFRehWLSr+t1c1uXdyrfPzlC8P8JhzHxo pYCIdUvl8CHO2QLZR7TZdNw+shfVE1oo0Sj/jp7oFeNZPIV794cB -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:55 2026 by rpki-client