This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa File: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (raw, json) Hash identifier: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4= Subject key identifier: 34:23:F2:D9:5E:0C:4C:92:31:C3:A1:1E:82:5C:A7:E2:4F:7E:73:C9 Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Certificate serial: 019B79ED320837F888BF17810EAC7C143D5F Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207065 IP address blocks: 185.166.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:32:08:37:f8:88:bf:17:81:0e:ac:7c:14:3d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3423f2d95e0c4c9231c3a11e825ca7e24f7e73c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:c7:eb:e6:2e:0e:77:9a:65:f7:c7:b1:cd: 54:f0:f3:1b:9b:22:0a:8f:ba:8a:28:a2:b3:fb:cf: 03:c8:3b:a8:4c:9d:fe:d9:c6:10:d1:15:e5:ae:b9: 41:a2:69:dc:6d:b1:d4:c8:7b:f1:e3:fd:cd:d4:04: 73:f7:e5:71:2d:75:66:d8:d0:e1:74:a7:50:16:70: 56:f0:01:28:58:e4:98:7c:b8:5a:7d:4f:99:a6:8a: 6b:f3:7a:4b:5a:1a:15:5d:27:93:11:b3:c0:49:8d: cc:a0:fa:da:d6:5b:a1:b0:df:c5:26:a2:02:87:33: 55:c1:8f:38:38:4c:03:02:3c:5d:77:af:76:eb:29: 70:fc:ba:14:bb:ef:9e:2a:3f:09:24:c6:4b:d0:1b: f0:c6:14:f5:cf:65:9e:d0:d4:21:26:bd:b6:b3:ea: c9:a5:30:e5:a0:19:83:3c:50:e9:5d:62:ef:39:2e: 39:2a:18:f6:ff:23:96:18:35:29:76:43:ac:21:94: c4:fc:8f:cc:27:84:d5:b2:c4:21:82:37:10:d8:37: f0:17:65:de:37:12:da:42:40:0b:ad:8a:ea:9f:de: d9:92:63:02:e9:4a:eb:c2:b4:fe:98:65:72:c8:6c: 98:3b:85:5c:c3:17:9a:85:e4:d1:df:30:a6:8e:34: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:F2:D9:5E:0C:4C:92:31:C3:A1:1E:82:5C:A7:E2:4F:7E:73:C9 X509v3 Authority Key Identifier: keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.184.0/22 Signature Algorithm: sha256WithRSAEncryption a0:0e:1f:35:68:dd:fd:aa:0c:a1:8a:d5:08:e1:2d:f0:57:bb: 21:9d:98:9c:70:d2:65:6f:83:d9:6a:c3:66:ba:67:d6:7e:a4: 69:67:11:c7:2e:eb:e9:b3:b0:af:46:39:fd:b2:31:d0:83:8b: b5:73:17:c0:e1:e8:0e:bb:cf:a4:d5:46:99:c2:3c:1a:08:79: cb:cf:f3:3a:4d:ad:e0:82:a9:66:56:4a:1e:32:19:09:b2:5d: 30:e3:fa:b6:4c:b4:80:8f:96:d7:c4:9f:66:90:e3:a6:c2:c5: d0:8a:8a:13:15:21:76:51:fc:5c:75:28:ec:6c:52:45:bb:45: 90:81:b9:7c:e7:ce:00:2d:55:e4:e0:75:f6:5e:e2:93:52:83: fc:e9:49:e5:87:26:d3:be:d4:df:67:9d:0c:ea:97:77:56:2e: 0e:9a:5e:e7:43:59:0c:fa:1f:e2:20:50:1a:ae:59:92:a1:56: 47:2d:26:8e:2c:21:de:6a:3d:73:6c:4f:a6:cc:d2:37:37:53: 50:c0:41:9f:d8:b1:5f:f3:b4:cd:e7:c0:43:82:88:c6:50:24: e0:4f:8b:e7:76:fc:f5:b3:2e:f9:f2:59:ed:50:68:89:e0:83: 4f:3a:37:e9:dd:9a:7a:34:33:40:b2:1f:27:75:db:d9:be:80: 75:d0:45:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TIIN/iIvxeBDqx8FD1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2 MDM4Y2MwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDIzZjJkOTVlMGM0YzkyMzFjM2ExMWU4MjVjYTdlMjRmN2U3M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1zH6+YuDneaZffHsc1U8PMbmyIK j7qKKKKz+88DyDuoTJ3+2cYQ0RXlrrlBomncbbHUyHvx4/3N1ARz9+VxLXVm2NDh dKdQFnBW8AEoWOSYfLhafU+Zpopr83pLWhoVXSeTEbPASY3MoPra1luhsN/FJqIC hzNVwY84OEwDAjxdd6926ylw/LoUu++eKj8JJMZL0BvwxhT1z2We0NQhJr22s+rJ pTDloBmDPFDpXWLvOS45Khj2/yOWGDUpdkOsIZTE/I/MJ4TVssQhgjcQ2DfwF2Xe NxLaQkALrYrqn97ZkmMC6UrrwrT+mGVyyGyYO4VcwxeaheTR3zCmjjSU+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQj8tleDEySMcOhHoJcp+JPfnPJMB8GA1UdIwQY MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt N2U0N2RhMWNlNDA2LzEvTkNQeTJWNE1USkl4dzZFZWdseW40azktYzhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2 LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaa4MA0G CSqGSIb3DQEBCwUAA4IBAQCgDh81aN39qgyhitUI4S3wV7shnZiccNJlb4PZasNm umfWfqRpZxHHLuvps7CvRjn9sjHQg4u1cxfA4egOu8+k1UaZwjwaCHnLz/M6Ta3g gqlmVkoeMhkJsl0w4/q2TLSAj5bXxJ9mkOOmwsXQiooTFSF2UfxcdSjsbFJFu0WQ gbl8584ALVXk4HX2XuKTUoP86UnlhybTvtTfZ50M6pd3Vi4Oml7nQ1kM+h/iIFAa rlmSoVZHLSaOLCHeaj1zbE+mzNI3N1NQwEGf2LFf87TN58BDgojGUCTgT4vndvz1 sy758lntUGiJ4INPOjfp3Zp6NDNAsh8nddvZvoB10EVY -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:21 2026 by rpki-client