This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/niq9BskF1-HN8N01Uhq18XKJ3sg.roa File: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (raw, json) Hash identifier: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M= Subject key identifier: 9E:2A:BD:06:C9:05:D7:E1:CD:F0:DD:35:52:1A:B5:F1:72:89:DE:C8 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B7BA3D72B93A6B050C2BB3F0156863551 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/niq9BskF1-HN8N01Uhq18XKJ3sg.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 217.67.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d7:2b:93:a6:b0:50:c2:bb:3f:01:56:86:35:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e2abd06c905d7e1cdf0dd35521ab5f17289dec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:a8:3e:e5:0a:88:b3:3f:3c:c3:f0:47:40: d0:5d:e6:b1:08:7a:14:95:09:04:3d:1a:9b:c4:9c: c5:a0:e8:ae:ae:50:6f:77:4e:e5:97:05:c1:06:4c: 67:97:af:50:02:56:7f:3d:8a:45:cc:6a:24:76:06: 69:1c:94:61:c9:62:15:38:dd:b4:a8:66:74:7a:c9: 3f:8b:f2:47:08:c3:70:0e:e5:96:5c:0e:6f:54:c3: c5:10:50:4a:ed:cf:52:d7:df:2d:f9:72:19:e0:38: 8b:df:53:20:2f:0b:46:65:43:0f:48:18:58:d2:25: 66:4d:9f:57:98:e2:ec:4d:9e:e8:31:55:58:a5:85: 58:3a:c9:cc:80:ae:8b:db:d2:04:c9:7d:f1:2a:2d: 9e:16:fa:4c:78:18:19:63:a3:48:07:89:14:40:b3: 9c:40:13:b2:65:d9:e6:76:ed:b1:66:9d:93:c2:1e: d1:7b:d6:a0:ed:df:e3:f7:01:de:48:e4:58:42:47: b5:79:3d:3e:36:ed:10:4f:6d:62:92:6d:ef:46:0c: d4:5b:7b:f3:93:2c:51:d5:e9:45:92:26:99:98:3d: c6:7f:a6:6c:c1:3f:13:a2:6b:3f:ee:17:a4:ad:77: 67:30:12:17:a7:44:c8:dc:2d:72:50:78:fe:86:ac: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2A:BD:06:C9:05:D7:E1:CD:F0:DD:35:52:1A:B5:F1:72:89:DE:C8 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/niq9BskF1-HN8N01Uhq18XKJ3sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.67.76.0/23 Signature Algorithm: sha256WithRSAEncryption 09:30:8d:9f:4a:26:13:fd:c8:1f:d1:fc:0b:fb:e9:50:fb:ed: 4b:f7:a8:19:d1:d0:3b:2b:f7:3d:e7:12:00:a8:68:41:5c:88: c0:b0:77:be:57:c0:66:26:96:45:a5:a6:d9:36:96:fe:64:8b: de:ec:22:0e:21:b4:d0:83:6a:32:0b:8a:5e:a2:97:ad:e4:db: 99:70:32:71:83:96:5a:c1:5d:70:89:ec:77:e1:b2:e1:96:54: b5:e0:ea:60:01:37:b5:2c:b3:79:b8:15:41:17:eb:4c:56:d8: 13:d2:a1:d3:a1:7d:b7:a9:70:05:70:ac:46:b8:56:eb:9d:bc: fa:85:21:16:50:0b:f4:ce:9e:02:f8:27:72:7a:f8:15:bb:8c: d5:31:67:01:29:e4:1b:e2:a7:37:6e:9f:ed:5c:13:71:97:6b: 23:b1:cc:2e:24:17:82:70:36:96:d0:2d:60:b9:49:0b:d5:de: 5c:f8:de:d4:b5:e9:13:8c:46:ad:d7:ab:41:ae:5d:db:09:6a: d2:06:71:0e:b9:4d:b6:dd:c8:6e:05:6e:e1:4b:c3:aa:90:ea: 3f:d9:f8:84:9f:78:c6:ac:2a:45:a1:e2:e9:43:1a:a4:0c:f6: 73:ab:41:3f:69:e0:ac:22:12:1f:53:a6:7b:09:4b:41:24:32: 61:da:a2:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9crk6awUMK7PwFWhjVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTJhYmQwNmM5MDVkN2UxY2RmMGRkMzU1MjFhYjVmMTcyODlkZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN+oPuUKiLM/PMPwR0DQXeaxCHoU lQkEPRqbxJzFoOiurlBvd07llwXBBkxnl69QAlZ/PYpFzGokdgZpHJRhyWIVON20 qGZ0esk/i/JHCMNwDuWWXA5vVMPFEFBK7c9S198t+XIZ4DiL31MgLwtGZUMPSBhY 0iVmTZ9XmOLsTZ7oMVVYpYVYOsnMgK6L29IEyX3xKi2eFvpMeBgZY6NIB4kUQLOc QBOyZdnmdu2xZp2Twh7Re9ag7d/j9wHeSORYQke1eT0+Nu0QT21ikm3vRgzUW3vz kyxR1elFkiaZmD3Gf6ZswT8Toms/7hekrXdnMBIXp0TI3C1yUHj+hqy4HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4qvQbJBdfhzfDdNVIatfFyid7IMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvbmlxOUJza0YxLUhOOE4wMVVocTE4WEtKM3NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2UNMMA0G CSqGSIb3DQEBCwUAA4IBAQAJMI2fSiYT/cgf0fwL++lQ++1L96gZ0dA7K/c95xIA qGhBXIjAsHe+V8BmJpZFpabZNpb+ZIve7CIOIbTQg2oyC4peopet5NuZcDJxg5Za wV1wiex34bLhllS14OpgATe1LLN5uBVBF+tMVtgT0qHToX23qXAFcKxGuFbrnbz6 hSEWUAv0zp4C+CdyevgVu4zVMWcBKeQb4qc3bp/tXBNxl2sjscwuJBeCcDaW0C1g uUkL1d5c+N7UtekTjEat16tBrl3bCWrSBnEOuU223chuBW7hS8OqkOo/2fiEn3jG rCpFoeLpQxqkDPZzq0E/aeCsIhIfU6Z7CUtBJDJh2qLS -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:04 2026 by rpki-client