This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/nbBdckUEspBVGSHKC4SpFpPe-2o.roa File: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (raw, json) Hash identifier: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A= Subject key identifier: 9D:B0:5D:72:45:04:B2:90:55:19:21:CA:0B:84:A9:16:93:DE:FB:6A Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Certificate serial: 019B7EA6A702E7BA2C9E8AA94C10DD148BF7 Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/nbBdckUEspBVGSHKC4SpFpPe-2o.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 185.192.36.0/22 maxlen: 22 185.192.36.0/23 maxlen: 23 185.192.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a7:02:e7:ba:2c:9e:8a:a9:4c:10:dd:14:8b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db05d724504b290551921ca0b84a91693defb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:81:ea:0e:73:92:fc:ec:97:c8:9e:31:0a: 38:f9:04:08:b7:a7:15:52:df:18:fb:62:55:5b:75: 14:e6:86:4b:7d:9a:0a:c2:fe:73:07:8a:11:bd:f7: 4f:98:71:c9:2d:a4:0b:a9:53:2e:d9:45:42:1a:0c: 27:fb:51:27:2b:dc:4f:7e:96:4d:6a:cb:53:76:d0: 72:06:00:ef:07:ce:38:37:15:5f:40:50:31:54:80: 08:91:e1:f4:aa:84:cb:1a:82:50:d1:62:25:c8:da: 14:00:4e:1d:5d:f9:f7:60:1d:83:c5:76:2c:3c:c4: fc:8e:b0:8b:d2:fa:56:56:c1:26:81:66:c4:96:bb: 73:35:62:85:56:f0:d9:a5:ce:09:c3:a7:6a:85:ab: 3d:12:3b:69:5b:aa:c8:41:8a:89:b6:65:45:5e:c1: 62:6b:cf:c9:11:33:83:01:4b:48:40:6d:8f:52:4c: d5:dc:db:0d:b5:1a:56:41:67:72:46:88:e1:7e:83: 52:67:ce:e2:35:c4:52:67:c1:07:a6:40:08:45:05: 3e:24:c8:0d:1a:7b:8a:fe:0f:ae:da:89:04:0d:1a: 3f:64:79:15:be:b8:ff:7a:99:93:87:6f:06:3c:ad: 12:34:0e:ed:34:e1:81:e2:d7:08:cd:c3:ff:03:46: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:5D:72:45:04:B2:90:55:19:21:CA:0B:84:A9:16:93:DE:FB:6A X509v3 Authority Key Identifier: keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/nbBdckUEspBVGSHKC4SpFpPe-2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.36.0/22 Signature Algorithm: sha256WithRSAEncryption d6:b6:58:17:19:af:e8:52:53:f3:77:12:30:63:3f:5c:4d:cb: 8b:ea:83:af:fe:9d:18:bf:1a:a2:58:4e:47:9a:29:05:d1:8a: 58:3d:1b:20:c9:9a:71:19:be:95:fb:7a:1e:51:27:35:6d:4f: 3c:92:5d:b5:34:05:e7:8c:2d:a1:8f:c3:18:a1:a1:fa:14:38: 4e:41:0d:02:f0:38:19:5f:ad:19:f9:63:7a:e1:f8:8b:04:cb: 4f:98:1e:5c:70:23:94:d5:25:03:4d:6c:f0:44:dc:cb:26:bd: bd:eb:78:d4:d9:5e:c6:ab:e0:9c:28:8f:c0:4d:16:db:9e:58: bf:3a:ec:1c:02:66:ab:dd:55:f6:de:86:f4:34:c8:86:29:f8: f2:ab:5c:a1:09:0d:9f:84:17:c7:28:bf:d1:f2:ed:0b:ee:04: 15:26:1b:95:84:18:88:f1:6f:ed:9c:99:96:67:1f:d9:01:ae: 75:91:56:60:27:7c:b4:7a:b4:ce:a1:87:2a:e6:27:fd:56:fb: f1:39:7e:73:d1:ea:af:f8:1f:29:36:d0:75:81:00:58:76:a2: 88:dd:6b:c0:dd:28:83:af:ce:06:dd:4e:86:d7:1e:30:6c:59: 80:2e:1f:a6:b0:c3:bd:cd:1d:e2:9b:36:f4:e3:fd:70:b3:f9: 7e:9d:f4:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqcC57osnoqpTBDdFIv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYThkYjNiNTRkMDgxYzMwYmY1MWJkYzdiMTllNGY2NDgw YjdmNTMwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGIwNWQ3MjQ1MDRiMjkwNTUxOTIxY2EwYjg0YTkxNjkzZGVmYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0uB6g5zkvzsl8ieMQo4+QQIt6cV Ut8Y+2JVW3UU5oZLfZoKwv5zB4oRvfdPmHHJLaQLqVMu2UVCGgwn+1EnK9xPfpZN astTdtByBgDvB844NxVfQFAxVIAIkeH0qoTLGoJQ0WIlyNoUAE4dXfn3YB2DxXYs PMT8jrCL0vpWVsEmgWbElrtzNWKFVvDZpc4Jw6dqhas9EjtpW6rIQYqJtmVFXsFi a8/JETODAUtIQG2PUkzV3NsNtRpWQWdyRojhfoNSZ87iNcRSZ8EHpkAIRQU+JMgN GnuK/g+u2okEDRo/ZHkVvrj/epmTh28GPK0SNA7tNOGB4tcIzcP/A0bkWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2wXXJFBLKQVRkhyguEqRaT3vtqMB8GA1UdIwQY MBaAFOuo2ztU0IHDC/Ub3HsZ5PZIC39TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2Yt ZTlkYzNmMWNmODI0LzEvbmJCZGNrVUVzcEJWR1NIS0M0U3BGcFBlLTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2YtZTlkYzNmMWNmODI0 LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucAkMA0G CSqGSIb3DQEBCwUAA4IBAQDWtlgXGa/oUlPzdxIwYz9cTcuL6oOv/p0YvxqiWE5H mikF0YpYPRsgyZpxGb6V+3oeUSc1bU88kl21NAXnjC2hj8MYoaH6FDhOQQ0C8DgZ X60Z+WN64fiLBMtPmB5ccCOU1SUDTWzwRNzLJr2963jU2V7Gq+CcKI/ATRbbnli/ OuwcAmar3VX23ob0NMiGKfjyq1yhCQ2fhBfHKL/R8u0L7gQVJhuVhBiI8W/tnJmW Zx/ZAa51kVZgJ3y0erTOoYcq5if9VvvxOX5z0eqv+B8pNtB1gQBYdqKI3WvA3SiD r84G3U6G1x4wbFmALh+msMO9zR3imzb04/1ws/l+nfSe -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:19 2026 by rpki-client