This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NDN0MgLX5cbwYD1Dg-YSY-Svy9A.roa File: NDN0MgLX5cbwYD1Dg-YSY-Svy9A.roa (raw, json) Hash identifier: kLwecF3MPBnVTsvNvhpu+84hlUt8H9zdnXAj7P9kyE0= Subject key identifier: 34:33:74:32:02:D7:E5:C6:F0:60:3D:43:83:E6:12:63:E4:AF:CB:D0 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B7154CDA6B1602EBFBA07961D6AF Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NDN0MgLX5cbwYD1Dg-YSY-Svy9A.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209456 IP address blocks: 194.62.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b7:15:4c:da:6b:16:02:eb:fb:a0:79:61:d6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3433743202d7e5c6f0603d4383e61263e4afcbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ab:47:0f:87:42:be:a4:cd:21:29:3f:9a:be: e2:fb:42:af:83:8d:d5:9f:42:5b:5d:fe:51:d7:eb: 2d:5a:c9:30:fd:cf:f7:49:96:fc:d1:1d:00:19:31: 09:87:ff:61:47:72:8a:b8:6f:45:59:0d:c7:92:e6: 8d:c1:f7:d9:54:73:15:7f:d1:0e:84:80:79:fc:c2: 52:2a:8e:b1:67:e3:13:c4:2b:a7:83:48:e5:aa:ba: 57:4d:95:48:73:1b:ce:8d:77:33:39:af:b8:13:23: 58:b7:35:6a:e5:8b:e4:7d:e1:d7:14:bd:a4:1d:d4: ea:54:c9:11:f1:07:4b:43:47:65:70:b6:09:48:64: f9:fb:f0:ea:6a:a5:80:0e:72:52:73:fe:04:99:b8: 44:7e:03:d9:f2:7d:e5:cc:77:4e:a1:e2:f4:24:ed: 3e:06:8f:65:44:a3:31:41:a8:3d:a1:d1:31:20:cd: bb:b2:13:ef:6f:0d:fc:68:7c:8b:99:4f:2b:30:fb: a9:fb:41:d6:78:75:de:1a:26:bb:a2:f8:53:0b:ea: 79:04:ed:72:59:af:b4:ed:1a:5c:59:5d:28:93:ac: e5:21:4f:a7:45:d2:99:d2:a0:63:7e:7c:6c:1a:f4: 66:84:a6:48:90:b0:eb:1a:e3:da:91:f7:5d:ca:e4: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:74:32:02:D7:E5:C6:F0:60:3D:43:83:E6:12:63:E4:AF:CB:D0 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NDN0MgLX5cbwYD1Dg-YSY-Svy9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.55.0/24 Signature Algorithm: sha256WithRSAEncryption 38:68:c8:da:4e:cf:ba:2d:c6:7c:4e:3f:9a:90:f5:7a:13:8b: 32:86:eb:f3:05:37:ad:ad:2c:6b:25:ab:e1:bd:b8:8b:32:f1: 39:f3:b2:2a:27:28:39:13:ac:24:b0:d0:7c:81:a9:33:e9:94: 5b:53:b7:2a:45:9c:f7:fe:b3:0c:77:e9:bf:86:51:68:a7:b5: 4d:04:49:e7:ca:14:69:86:9c:40:4a:48:42:40:3c:b5:2c:ef: 05:c5:26:29:e0:57:82:99:c5:64:34:1e:7e:e6:76:5d:21:fc: c9:66:52:22:c9:cd:05:c0:17:13:76:9c:62:de:33:7a:0a:59: b0:95:97:a1:14:3d:f4:0c:28:a0:f1:8d:c9:a1:ec:72:e9:f2: da:a4:9f:89:a3:eb:aa:69:1c:be:58:84:af:c9:67:a7:30:28: 09:77:d8:b5:47:fb:5d:6e:8d:32:85:01:39:0c:9b:3b:2e:ae: cd:0a:d0:d8:47:d8:15:f6:5a:3d:71:34:47:26:18:a1:d4:f7: 48:59:7c:3b:4d:a2:99:af:1f:b8:ba:4c:a9:a0:70:f8:84:51: bd:38:fb:2f:4f:21:f8:66:af:fc:7d:84:ff:a5:a5:68:c3:89: 77:51:f7:12:a8:b2:40:80:50:2e:1b:07:cc:92:be:7e:80:16: 73:ac:5c:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLcVTNprFgLr+6B5YdavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDMzNzQzMjAyZDdlNWM2ZjA2MDNkNDM4M2U2MTI2M2U0YWZjYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qtHD4dCvqTNISk/mr7i+0Kvg43V n0JbXf5R1+stWskw/c/3SZb80R0AGTEJh/9hR3KKuG9FWQ3HkuaNwffZVHMVf9EO hIB5/MJSKo6xZ+MTxCung0jlqrpXTZVIcxvOjXczOa+4EyNYtzVq5YvkfeHXFL2k HdTqVMkR8QdLQ0dlcLYJSGT5+/DqaqWADnJSc/4EmbhEfgPZ8n3lzHdOoeL0JO0+ Bo9lRKMxQag9odExIM27shPvbw38aHyLmU8rMPup+0HWeHXeGia7ovhTC+p5BO1y Wa+07RpcWV0ok6zlIU+nRdKZ0qBjfnxsGvRmhKZIkLDrGuPakfddyuSQSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQzdDIC1+XG8GA9Q4PmEmPkr8vQMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvTkROME1nTFg1Y2J3WUQxRGctWVNZLVN2eTlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj43MA0G CSqGSIb3DQEBCwUAA4IBAQA4aMjaTs+6LcZ8Tj+akPV6E4syhuvzBTetrSxrJavh vbiLMvE587IqJyg5E6wksNB8gakz6ZRbU7cqRZz3/rMMd+m/hlFop7VNBEnnyhRp hpxASkhCQDy1LO8FxSYp4FeCmcVkNB5+5nZdIfzJZlIiyc0FwBcTdpxi3jN6Clmw lZehFD30DCig8Y3Joexy6fLapJ+Jo+uqaRy+WISvyWenMCgJd9i1R/tdbo0yhQE5 DJs7Lq7NCtDYR9gV9lo9cTRHJhih1PdIWXw7TaKZrx+4ukypoHD4hFG9OPsvTyH4 Zq/8fYT/paVow4l3UfcSqLJAgFAuGwfMkr5+gBZzrFzo -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:04 2026 by rpki-client