This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa File: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (raw, json) Hash identifier: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk= Subject key identifier: 34:84:E0:C1:9D:01:A3:27:2B:5D:21:8F:53:C8:97:ED:99:D6:C8:77 Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a Certificate serial: 019B7E37447FDE65EE668D07CEDF11741BD2 Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa Signing time: Fri 02 Jan 2026 10:18:29 +0000 ROA not before: Fri 02 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 131.154.0.0/16 maxlen: 16 141.108.0.0/16 maxlen: 16 192.84.127.0/24 maxlen: 24 192.84.128.0/20 maxlen: 20 192.84.144.0/21 maxlen: 21 192.84.152.0/22 maxlen: 22 192.84.156.0/24 maxlen: 24 192.135.8.0/21 maxlen: 21 192.135.16.0/20 maxlen: 20 192.135.32.0/23 maxlen: 23 192.135.34.0/24 maxlen: 24 192.135.35.0/24 maxlen: 24 192.135.36.0/24 maxlen: 24 192.135.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:44:7f:de:65:ee:66:8d:07:ce:df:11:74:1b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a Validity Not Before: Jan 2 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3484e0c19d01a3272b5d218f53c897ed99d6c877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:77:67:70:24:2a:ce:94:64:3e:7d:fe:25: df:be:b5:38:e6:a4:2e:df:dc:d1:e1:e7:36:0e:4d: e3:49:3b:f2:ce:22:11:5c:cd:df:c7:5e:36:e6:7c: 37:6e:07:30:f1:b6:fb:15:db:2d:98:00:19:30:3b: 5b:c9:51:55:7a:57:f0:85:f4:02:cc:37:6e:e6:ae: 31:33:2c:64:39:a6:8e:24:1e:d7:7c:86:10:e5:7f: b2:e1:de:2f:e0:85:a1:57:f3:b7:62:c3:d1:e2:21: c1:4c:74:5d:ee:57:bf:75:26:0d:f2:9c:1f:92:23: a1:b3:8c:ee:43:1c:fc:dc:67:2e:bc:99:de:9e:87: 05:57:33:11:2f:9b:99:66:2f:82:32:5e:14:66:97: 6f:6e:6e:08:e8:52:8b:ca:05:7b:72:0f:3f:a0:7d: c7:fa:78:30:2c:5c:ca:d1:74:a1:ca:a1:d5:c7:cf: 88:0f:e9:99:72:e3:05:2f:ea:d1:40:27:af:a0:5b: a7:97:07:1c:b6:7c:18:f7:e9:90:03:3f:3a:a5:f0: 9d:ea:a7:b1:6a:d5:e1:54:c1:08:28:f2:76:7d:93: 2f:e1:27:85:f0:e2:22:1c:8e:f4:27:bb:ea:9b:22: c8:f7:4e:3b:14:2e:e6:dd:ab:f1:20:7e:22:0d:eb: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:84:E0:C1:9D:01:A3:27:2B:5D:21:8F:53:C8:97:ED:99:D6:C8:77 X509v3 Authority Key Identifier: keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.154.0.0/16 141.108.0.0/16 192.84.127.0-192.84.156.255 192.135.8.0-192.135.37.255 Signature Algorithm: sha256WithRSAEncryption 22:c7:3a:e8:c2:b5:47:3c:63:0c:e2:f1:21:48:03:e4:6c:1b: bc:30:34:d5:cf:0b:2d:26:33:bb:17:e7:97:3a:ed:97:7c:e9: 34:66:99:0b:05:a5:92:e0:90:a8:17:cd:e0:56:91:d1:66:9b: 0f:73:fe:b7:1b:d7:3c:fa:d0:45:5d:02:9d:9e:69:1d:46:9b: b6:3a:ae:57:90:a7:e4:0a:14:77:85:39:30:48:ff:7e:1a:71: 99:42:5e:ac:0b:09:7d:92:11:ea:f2:73:b6:50:3a:4c:68:5c: 18:a7:60:17:f5:88:ae:10:5f:3e:97:9e:91:e3:92:94:1f:a8: 6c:96:b5:93:00:15:40:e7:b9:97:ad:6c:ed:3d:26:bf:06:04: d5:d2:eb:24:d1:97:7e:76:f0:33:37:c6:42:83:e4:67:21:28: 59:68:e9:e3:c8:49:f7:b5:4a:10:e5:3c:13:b2:72:20:0f:14: bb:d6:30:40:ec:a2:d4:f8:7f:b3:99:46:37:1a:90:98:98:63: ee:b5:ed:4d:7a:25:51:56:92:8a:e9:87:e7:ce:03:b0:2a:2b: c8:43:62:3d:4e:93:bf:f4:07:4e:e6:18:0d:21:77:bc:0e:1b: 36:f8:2f:fe:2e:86:63:57:37:3d:ac:1e:7d:66:14:2d:ea:83: cc:5e:fa:ca -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+N0R/3mXuZo0Hzt8RdBvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi ODg4MWEwHhcNMjYwMTAyMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg0ZTBjMTlkMDFhMzI3MmI1ZDIxOGY1M2M4OTdlZDk5ZDZjODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2l3Z3AkKs6UZD59/iXfvrU45qQu 39zR4ec2Dk3jSTvyziIRXM3fx1425nw3bgcw8bb7FdstmAAZMDtbyVFVelfwhfQC zDdu5q4xMyxkOaaOJB7XfIYQ5X+y4d4v4IWhV/O3YsPR4iHBTHRd7le/dSYN8pwf kiOhs4zuQxz83GcuvJnenocFVzMRL5uZZi+CMl4UZpdvbm4I6FKLygV7cg8/oH3H +ngwLFzK0XShyqHVx8+ID+mZcuMFL+rRQCevoFunlwcctnwY9+mQAz86pfCd6qex atXhVMEIKPJ2fZMv4SeF8OIiHI70J7vqmyLI9047FC7m3avxIH4iDevetwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDSE4MGdAaMnK10hj1PIl+2Z1sh3MB8GA1UdIwQY MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt ZDBlMGYyMTM5MzZjLzEvTklUZ3daMEJveWNyWFNHUFU4aVg3Wm5XeUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwMAg5oDAwCN bDAMAwQAwFR/AwQAwFScMAwDBAPAhwgDBAHAhyQwDQYJKoZIhvcNAQELBQADggEB ACLHOujCtUc8Ywzi8SFIA+RsG7wwNNXPCy0mM7sX55c67Zd86TRmmQsFpZLgkKgX zeBWkdFmmw9z/rcb1zz60EVdAp2eaR1Gm7Y6rleQp+QKFHeFOTBI/34acZlCXqwL CX2SEeryc7ZQOkxoXBinYBf1iK4QXz6XnpHjkpQfqGyWtZMAFUDnuZetbO09Jr8G BNXS6yTRl3528DM3xkKD5GchKFlo6ePISfe1ShDlPBOyciAPFLvWMEDsotT4f7OZ RjcakJiYY+617U16JVFWkorph+fOA7AqK8hDYj1Ok7/0B07mGA0hd7wOGzb4L/4u hmNXNz2sHn1mFC3qg8xe+so= -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:46 2026 by rpki-client