This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa File: NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa (raw, json) Hash identifier: l2Db7QyGTQEhegInLfDc9J67ROlsj8aNjEngOYZ1S48= Subject key identifier: 34:FE:6D:2B:DB:09:A9:1A:5D:B7:45:98:C6:C5:64:09:68:EF:46:57 Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c Certificate serial: 019B7F1550084E2AF3C3E3211A5103C9628C Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa Signing time: Fri 02 Jan 2026 14:21:01 +0000 ROA not before: Fri 02 Jan 2026 14:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57407 IP address blocks: 185.217.80.0/22 maxlen: 22 195.88.108.0/23 maxlen: 23 2001:67c:24f8::/48 maxlen: 48 2a0b:c6c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:50:08:4e:2a:f3:c3:e3:21:1a:51:03:c9:62:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34fe6d2bdb09a91a5db74598c6c5640968ef4657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:fb:8f:52:07:9b:92:b1:35:50:db:39:00: 27:fd:36:96:15:27:b4:0b:3c:20:d2:08:aa:68:76: b4:d9:45:bb:b5:a6:aa:6d:38:da:a9:d7:05:ae:68: ca:e8:3c:76:14:12:73:75:a4:fe:04:53:b9:2b:a7: 16:65:13:f9:7f:e8:c1:8f:ac:4b:b8:69:27:78:76: df:c7:11:19:84:90:a9:67:41:41:7e:f1:91:76:aa: 1c:28:46:02:48:3e:6a:a5:04:23:2c:68:e3:71:42: ce:d0:40:55:01:6d:d1:b7:f5:2d:24:09:d0:fd:d5: 11:25:0f:27:b6:a1:f0:e7:90:52:d8:0d:90:a1:d4: 2e:75:3e:4e:58:a9:29:c6:52:ed:58:78:6b:75:c7: 9d:da:b6:d5:d3:c0:87:d2:e9:ad:b0:13:0a:20:0d: b5:18:2f:b1:14:5f:39:6d:32:29:05:e5:d6:df:c3: 6a:6b:fc:ea:f7:a9:53:37:5a:96:75:b2:6b:81:57: 17:c0:b8:90:16:aa:c8:af:8a:c9:f5:51:1f:87:79: c3:15:7c:59:47:cc:f7:cd:86:54:d6:9d:e5:38:6a: de:5e:23:2a:75:ff:1a:1d:ca:c7:50:4d:1c:73:e2: e8:bd:1a:f8:c1:dd:88:4a:68:af:ff:33:f5:8f:22: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FE:6D:2B:DB:09:A9:1A:5D:B7:45:98:C6:C5:64:09:68:EF:46:57 X509v3 Authority Key Identifier: keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/NP5tK9sJqRpdt0WYxsVkCWjvRlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.80.0/22 195.88.108.0/23 IPv6: 2001:67c:24f8::/48 2a0b:c6c0::/29 Signature Algorithm: sha256WithRSAEncryption 33:ee:b2:e0:56:2e:45:a8:1e:30:a8:d5:65:14:9c:af:0c:26: 61:e7:26:90:7c:eb:01:ae:8d:5a:8b:11:4f:22:30:e4:a3:c9: 51:0e:63:a0:b2:9f:e9:0e:d3:f9:a5:a3:e3:b7:8c:ab:a3:21: 9c:e1:d9:91:77:08:9a:5c:bf:53:e2:2e:b0:e5:63:c7:11:ab: 2f:60:a3:5a:7b:77:79:92:92:e1:e5:88:d9:c5:01:3c:92:d2: 4c:23:d0:00:20:00:c6:c4:0e:3b:ad:14:52:63:e0:98:03:d8: 80:f8:3f:c2:f7:9f:08:1f:05:f1:a6:c9:c5:9b:ea:0d:99:2a: 39:4b:e4:b6:df:a4:70:99:84:50:64:3a:23:f7:f6:5e:00:c6: 8a:93:d7:1b:a9:0f:97:77:78:eb:ea:2f:35:db:49:55:57:65: d7:91:7f:6d:80:a9:87:01:62:22:c9:c7:cc:92:9a:51:14:12: d9:e8:a7:03:64:5e:55:e5:77:e0:ba:c2:a5:05:9e:13:e9:6d: 08:90:26:b5:c7:ee:09:97:66:53:40:96:71:7d:20:19:6e:2f: d7:e7:2a:36:eb:33:f2:a1:f8:32:a4:89:d9:bf:18:39:64:06: b5:68:ad:fb:96:97:4d:51:9d:2d:cf:53:1b:8e:6c:08:30:18: ef:1c:b4:df -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FVAITirzw+MhGlEDyWKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNWNhNGUyYTBhMTgwZWIyZjI5Y2M4ODc0MGFhNzA3Yjg4 MjFkN2MwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGZlNmQyYmRiMDlhOTFhNWRiNzQ1OThjNmM1NjQwOTY4ZWY0NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zb7j1IHm5KxNVDbOQAn/TaWFSe0 Czwg0giqaHa02UW7taaqbTjaqdcFrmjK6Dx2FBJzdaT+BFO5K6cWZRP5f+jBj6xL uGkneHbfxxEZhJCpZ0FBfvGRdqocKEYCSD5qpQQjLGjjcULO0EBVAW3Rt/UtJAnQ /dURJQ8ntqHw55BS2A2QodQudT5OWKkpxlLtWHhrdced2rbV08CH0umtsBMKIA21 GC+xFF85bTIpBeXW38Nqa/zq96lTN1qWdbJrgVcXwLiQFqrIr4rJ9VEfh3nDFXxZ R8z3zYZU1p3lOGreXiMqdf8aHcrHUE0cc+LovRr4wd2ISmiv/zP1jyI+cwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDT+bSvbCakaXbdFmMbFZAlo70ZXMB8GA1UdIwQY MBaAFP5cpOKgoYDrLynMiHQKpwe4gh18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85YzdhYTQtYTRjOS00NDdhLThiYzEt NjhjMTA1ZDJmMGRiLzEvTlA1dEs5c0pxUnBkdDBXWXhzVmtDV2p2UmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85YzdhYTQtYTRjOS00NDdhLThiYzEtNjhjMTA1ZDJmMGRi LzEvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCudlQAwQB w1hsMBYEAgACMBADBwAgAQZ8JPgDBQMqC8bAMA0GCSqGSIb3DQEBCwUAA4IBAQAz 7rLgVi5FqB4wqNVlFJyvDCZh5yaQfOsBro1aixFPIjDko8lRDmOgsp/pDtP5paPj t4yroyGc4dmRdwiaXL9T4i6w5WPHEasvYKNae3d5kpLh5YjZxQE8ktJMI9AAIADG xA47rRRSY+CYA9iA+D/C958IHwXxpsnFm+oNmSo5S+S236RwmYRQZDoj9/ZeAMaK k9cbqQ+Xd3jr6i8120lVV2XXkX9tgKmHAWIiycfMkppRFBLZ6KcDZF5V5XfgusKl BZ4T6W0IkCa1x+4Jl2ZTQJZxfSAZbi/X5yo26zPyofgypInZvxg5ZAa1aK37lpdN UZ0tz1MbjmwIMBjvHLTf -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:30 2026 by rpki-client