This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/N1JKb0FFXQeFO056LNLZt0AcBTg.roa File: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (raw, json) Hash identifier: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI= Subject key identifier: 37:52:4A:6F:41:45:5D:07:85:3B:4E:7A:2C:D2:D9:B7:40:1C:05:38 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA1C1F90F0F2CB17076AF3DD29C53D Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/N1JKb0FFXQeFO056LNLZt0AcBTg.roa Signing time: Fri 02 Jan 2026 08:19:16 +0000 ROA not before: Fri 02 Jan 2026 08:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 194.124.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1c:1f:90:f0:f2:cb:17:07:6a:f3:dd:29:c5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37524a6f41455d07853b4e7a2cd2d9b7401c0538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:8d:12:57:33:39:4e:44:ae:a0:4d:62:3a: 22:35:45:63:14:3e:72:e5:6c:80:e9:40:e4:e4:0b: 8c:fa:a1:0e:02:30:65:00:42:9d:81:8e:cd:8c:e7: 59:de:86:7f:db:61:05:f5:91:ec:41:f2:4d:67:d9: 95:35:7d:cb:60:94:4a:67:9b:42:66:33:9e:04:aa: c5:9f:ce:7f:ad:a2:44:50:75:3f:f0:57:96:61:bd: 35:c0:df:b6:62:87:24:48:f3:47:92:ac:7b:39:9d: 8c:0f:da:3e:e6:f0:66:2c:64:56:af:1b:c2:7e:16: ef:6a:1e:56:a2:f3:58:d2:16:53:a1:fc:37:3e:a0: c0:e4:3d:6c:91:4d:17:59:f1:b0:4e:60:2c:0e:1f: 0b:78:e8:0c:45:15:31:1b:8d:30:8c:fa:3f:12:0e: a0:01:d9:b4:1a:d5:a5:94:6a:3b:7c:5e:5b:f8:2b: c6:73:d5:38:2d:16:52:83:22:e4:0e:d8:21:56:45: d2:2d:69:0c:dd:c8:19:97:be:52:98:9c:58:9e:b3: 4b:36:47:4f:05:78:ab:b4:35:d9:80:28:16:55:65: d2:d5:83:bd:c2:af:ac:77:ad:e1:8f:94:57:22:72: 61:2c:fc:54:12:0c:ba:d5:96:31:63:48:45:ee:cc: 3b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:52:4A:6F:41:45:5D:07:85:3B:4E:7A:2C:D2:D9:B7:40:1C:05:38 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/N1JKb0FFXQeFO056LNLZt0AcBTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.43.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:29:f4:18:f7:a3:68:fb:f4:9a:22:89:87:58:18:31:0a:91: 2d:ac:57:81:26:3f:ab:ee:98:84:03:91:46:6e:ce:62:87:49: fb:ab:7e:71:93:34:8c:42:53:50:8e:47:bf:fd:b8:28:8c:ab: 0a:4b:a2:69:ae:8f:79:82:84:2e:bb:51:82:f1:ab:9a:66:67: 36:1c:b8:c3:0b:01:9a:70:f9:28:8e:ce:40:27:6e:e9:8e:a7: 28:15:ef:61:db:3b:9d:e9:1a:cd:91:73:e2:a1:5a:ee:34:01: be:b5:f4:2f:e9:19:c3:fa:03:ae:f8:83:b7:8b:2c:b0:8a:f6: 65:2f:cf:53:e9:f2:09:52:95:6d:45:cd:0b:97:7d:56:f2:e8: db:1a:15:93:8d:16:a6:ec:64:9b:72:c0:94:6f:58:0b:71:06: 12:e7:68:5b:c2:4b:23:e2:76:d3:9b:a4:ea:90:57:59:80:f2: 6e:cc:7d:a2:f0:16:52:cb:40:74:bd:e4:cc:0b:e0:37:36:cb: 7c:cb:88:fe:3c:94:ac:d7:61:e9:a5:db:6c:cd:73:25:0a:dd: b1:06:0d:f0:37:89:97:a8:00:e0:bc:80:c2:2c:05:db:ec:03: 95:87:60:5d:f7:6c:44:24:af:28:ef:4a:df:3b:0b:ee:74:d9: 22:8c:a3:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yhwfkPDyyxcHavPdKcU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzUyNGE2ZjQxNDU1ZDA3ODUzYjRlN2EyY2QyZDliNzQwMWMwNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeGNElczOU5ErqBNYjoiNUVjFD5y 5WyA6UDk5AuM+qEOAjBlAEKdgY7NjOdZ3oZ/22EF9ZHsQfJNZ9mVNX3LYJRKZ5tC ZjOeBKrFn85/raJEUHU/8FeWYb01wN+2YockSPNHkqx7OZ2MD9o+5vBmLGRWrxvC fhbvah5WovNY0hZTofw3PqDA5D1skU0XWfGwTmAsDh8LeOgMRRUxG40wjPo/Eg6g Adm0GtWllGo7fF5b+CvGc9U4LRZSgyLkDtghVkXSLWkM3cgZl75SmJxYnrNLNkdP BXirtDXZgCgWVWXS1YO9wq+sd63hj5RXInJhLPxUEgy61ZYxY0hF7sw74wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdSSm9BRV0HhTtOeizS2bdAHAU4MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvTjFKS2IwRkZYUWVGTzA1NkxOTFp0MEFjQlRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnwrMA0G CSqGSIb3DQEBCwUAA4IBAQAuKfQY96No+/SaIomHWBgxCpEtrFeBJj+r7piEA5FG bs5ih0n7q35xkzSMQlNQjke//bgojKsKS6Jpro95goQuu1GC8auaZmc2HLjDCwGa cPkojs5AJ27pjqcoFe9h2zud6RrNkXPioVruNAG+tfQv6RnD+gOu+IO3iyywivZl L89T6fIJUpVtRc0Ll31W8ujbGhWTjRam7GSbcsCUb1gLcQYS52hbwksj4nbTm6Tq kFdZgPJuzH2i8BZSy0B0veTMC+A3Nst8y4j+PJSs12HppdtszXMlCt2xBg3wN4mX qADgvIDCLAXb7AOVh2Bd92xEJK8o70rfOwvudNkijKOn -----END CERTIFICATE-----Generated at Mon Jan 19 21:26:58 2026 by rpki-client