This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/nAYbbcKPFybTolioZUuHNTDXSns.roa File: nAYbbcKPFybTolioZUuHNTDXSns.roa (raw, json) Hash identifier: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs= Subject key identifier: 9C:06:1B:6D:C2:8F:17:26:D3:A2:58:A8:65:4B:87:35:30:D7:4A:7B Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Certificate serial: 019B7C7F7273DA402EC3F857817D86822635 Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/nAYbbcKPFybTolioZUuHNTDXSns.roa Signing time: Fri 02 Jan 2026 02:18:05 +0000 ROA not before: Fri 02 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210096 IP address blocks: 85.235.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:72:73:da:40:2e:c3:f8:57:81:7d:86:82:26:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Validity Not Before: Jan 2 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c061b6dc28f1726d3a258a8654b873530d74a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:45:e8:5a:96:34:c7:08:6e:cc:3e:8b:97:50: 86:48:37:19:f7:35:7e:54:c7:ac:b1:cc:b8:be:aa: cd:cd:f5:f7:2d:0d:c6:35:07:10:aa:8a:51:d3:29: cf:c7:ac:08:ee:46:a5:9c:91:2b:77:90:b6:d1:07: 66:d8:79:55:60:31:4e:2b:8a:d3:45:53:7d:21:24: 95:7f:fe:35:ba:2c:15:8e:44:5b:00:83:a6:d7:fd: 8d:2a:67:1b:81:5a:28:88:d0:3e:eb:97:9b:50:8a: 40:6a:ec:71:3f:61:31:54:38:9e:d8:f7:41:fc:2b: 8c:6b:8d:ce:fa:d0:76:1a:82:ce:f4:62:e5:b0:f9: 5d:70:12:dd:b1:12:68:9b:83:5c:f8:6d:06:d9:4b: 3c:4e:a6:68:d7:02:45:ef:ac:2c:f5:70:6e:2c:42: 7e:df:8e:0f:bf:e3:d7:b4:48:f5:88:7e:05:c2:b4: b2:e8:4d:c7:fb:b5:77:3e:e4:a5:e7:af:1a:fb:e7: 7d:11:bf:49:7d:23:8b:3b:6c:83:cc:2f:53:a1:d1: 81:36:31:ae:c8:5c:df:08:b2:e0:aa:dd:98:91:4b: 29:17:2f:b7:ec:35:88:aa:c6:a4:f4:fd:3a:c7:62: 3d:3f:6c:ac:2e:d5:bb:c6:90:52:83:88:b6:09:44: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:06:1B:6D:C2:8F:17:26:D3:A2:58:A8:65:4B:87:35:30:D7:4A:7B X509v3 Authority Key Identifier: keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/nAYbbcKPFybTolioZUuHNTDXSns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.76.0/22 Signature Algorithm: sha256WithRSAEncryption 21:c1:16:73:02:90:5a:51:0f:68:eb:ad:91:4e:ee:de:5d:e3: a9:41:dc:39:12:72:99:ad:a7:32:8b:83:4a:80:eb:97:54:83: d2:92:2c:5c:be:47:9d:04:f0:6c:c8:fa:72:ee:c1:6b:50:f4: 87:39:11:bc:94:20:55:4a:b7:5a:cf:8e:23:e0:f2:a2:3f:d7: 29:fc:f5:1d:44:b0:fb:b7:f4:06:a1:75:12:6f:fc:d3:9b:ee: 36:9d:5e:10:cc:c1:74:6a:ad:8e:18:1c:78:2b:74:a9:10:89: ef:4b:a6:65:5f:54:09:79:31:c8:30:57:1c:e5:16:eb:f1:2e: 93:3c:00:90:03:5c:fc:ff:39:57:f2:55:9f:65:9b:d3:4a:bd: 82:80:d1:40:7a:7d:d5:a8:5a:42:c8:38:b3:0c:a6:3f:72:07: a5:13:bf:02:60:81:53:ec:44:67:c8:f5:ad:d3:2a:81:fa:19: db:cd:ba:7c:85:90:b2:32:4e:f3:53:dd:a8:b9:6f:93:a4:96: 9d:10:ac:62:34:ae:ec:7a:a4:de:ce:f2:91:fd:b8:f4:f5:72: 09:bb:e5:ba:34:3a:cf:6c:40:79:dc:c2:41:cb:85:fd:ca:de: 6b:5d:a0:fa:c1:f6:83:90:37:fb:b8:1a:24:e4:bd:20:45:50: 10:58:21:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3Jz2kAuw/hXgX2GgiY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1 OGNiYzYwHhcNMjYwMTAyMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzA2MWI2ZGMyOGYxNzI2ZDNhMjU4YTg2NTRiODczNTMwZDc0YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUXoWpY0xwhuzD6Ll1CGSDcZ9zV+ VMesscy4vqrNzfX3LQ3GNQcQqopR0ynPx6wI7kalnJErd5C20Qdm2HlVYDFOK4rT RVN9ISSVf/41uiwVjkRbAIOm1/2NKmcbgVooiNA+65ebUIpAauxxP2ExVDie2PdB /CuMa43O+tB2GoLO9GLlsPldcBLdsRJom4Nc+G0G2Us8TqZo1wJF76ws9XBuLEJ+ 344Pv+PXtEj1iH4FwrSy6E3H+7V3PuSl568a++d9Eb9JfSOLO2yDzC9TodGBNjGu yFzfCLLgqt2YkUspFy+37DWIqsak9P06x2I9P2ysLtW7xpBSg4i2CUQN7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJwGG23Cjxcm06JYqGVLhzUw10p7MB8GA1UdIwQY MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt OTBlNjU0MTIyNTJhLzEvbkFZYmJjS1BGeWJUb2xpb1pVdUhOVERYU25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVetMMA0G CSqGSIb3DQEBCwUAA4IBAQAhwRZzApBaUQ9o662RTu7eXeOpQdw5EnKZracyi4NK gOuXVIPSkixcvkedBPBsyPpy7sFrUPSHORG8lCBVSrdaz44j4PKiP9cp/PUdRLD7 t/QGoXUSb/zTm+42nV4QzMF0aq2OGBx4K3SpEInvS6ZlX1QJeTHIMFcc5Rbr8S6T PACQA1z8/zlX8lWfZZvTSr2CgNFAen3VqFpCyDizDKY/cgelE78CYIFT7ERnyPWt 0yqB+hnbzbp8hZCyMk7zU92ouW+TpJadEKxiNK7seqTezvKR/bj09XIJu+W6NDrP bEB53MJBy4X9yt5rXaD6wfaDkDf7uBok5L0gRVAQWCFe -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:11 2026 by rpki-client