This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/_NPYi_tgDVixqRihfPCnzEyteiA.roa File: _NPYi_tgDVixqRihfPCnzEyteiA.roa (raw, json) Hash identifier: a/DOqggraEPPchKDiC0Upq/MDsgJ2XWYLDm3YdovFlo= Subject key identifier: FC:D3:D8:8B:FB:60:0D:58:B1:A9:18:A1:7C:F0:A7:CC:4C:AD:7A:20 Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019B77C71503FD73831BB94094C055C7C940 Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/_NPYi_tgDVixqRihfPCnzEyteiA.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 185.15.209.0/24 maxlen: 24 185.15.210.0/24 maxlen: 24 185.15.211.0/24 maxlen: 24 185.142.32.0/24 maxlen: 24 185.142.34.0/23 maxlen: 23 185.142.35.0/24 maxlen: 24 194.213.24.0/24 maxlen: 24 194.242.33.0/24 maxlen: 24 194.242.38.0/24 maxlen: 24 2a03:afc0:1::/48 maxlen: 48 2a03:afc0:2::/48 maxlen: 48 2a03:afc0:3::/48 maxlen: 48 2a03:afc0:5::/48 maxlen: 48 2a03:afc0:6::/48 maxlen: 48 2a03:afc0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:15:03:fd:73:83:1b:b9:40:94:c0:55:c7:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcd3d88bfb600d58b1a918a17cf0a7cc4cad7a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:c5:72:c5:55:e0:19:83:29:17:27:76:c1: d1:bf:e5:58:f2:18:3e:a0:99:5b:ea:e6:ce:47:97: 32:78:19:e9:be:ae:a1:37:7e:91:9e:65:f6:98:67: 5e:2d:4d:8c:dd:b4:39:c5:8e:7c:28:05:4c:85:07: 5f:24:bb:b1:92:08:0d:9b:2e:7d:1d:f9:e8:b3:b3: ad:e0:d1:5c:2e:c4:6a:53:d1:48:50:cd:43:eb:89: b5:be:fb:00:31:8e:19:c3:76:81:f3:94:f0:f5:3d: 48:7a:f4:2f:6c:23:0c:3e:76:ae:64:88:27:f9:4e: 08:cf:40:b7:ed:c8:10:ea:91:11:93:ad:2c:02:d6: 87:a1:08:c7:72:a9:9f:71:6b:2d:2e:80:5d:71:e4: 01:84:76:af:36:ea:84:ae:c6:b9:3a:0f:86:80:57: 0f:9c:bd:c1:a5:41:aa:58:20:db:54:33:5b:4a:f7: 18:61:c8:0f:d2:64:71:d6:41:21:7d:aa:2d:e6:f1: 3f:a6:cb:ea:6b:e8:b2:53:e1:49:7c:6d:60:d7:83: 35:90:49:bf:3c:91:37:b9:e7:bd:1b:a6:3c:7f:94: e8:36:f0:57:d0:b9:2d:20:77:7b:c6:71:7a:e6:b1: d6:fa:b0:9d:da:5a:8e:8d:a8:30:1d:f3:43:e3:e0: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:D8:8B:FB:60:0D:58:B1:A9:18:A1:7C:F0:A7:CC:4C:AD:7A:20 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/_NPYi_tgDVixqRihfPCnzEyteiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.209.0-185.15.211.255 185.142.32.0/24 185.142.34.0/23 194.213.24.0/24 194.242.33.0/24 194.242.38.0/24 IPv6: 2a03:afc0:1::-2a03:afc0:3:ffff:ffff:ffff:ffff:ffff 2a03:afc0:5::-2a03:afc0:6:ffff:ffff:ffff:ffff:ffff 2a03:afc0:8::/48 Signature Algorithm: sha256WithRSAEncryption 3f:7d:d2:db:cd:9f:48:f6:31:71:51:e1:f9:55:5e:35:bb:e8: a3:34:29:cf:61:5f:81:03:0a:0f:14:66:f0:4f:2c:b8:ea:97: 23:02:19:49:70:db:74:2f:14:0f:28:b8:ec:f9:d1:02:23:3c: 6b:be:94:2f:ec:29:ca:a9:cf:74:08:eb:56:5f:75:4b:a4:40: 7a:ef:e0:7b:31:e8:ea:4e:81:e2:2a:9d:d2:bb:13:2a:f5:0a: 56:3c:28:cc:fc:1b:9e:ab:57:75:ae:05:b3:00:69:92:19:aa: b7:12:0a:16:e6:e8:d5:e9:bc:73:a7:02:51:75:bd:c1:26:cc: 11:a8:f8:f7:43:7f:40:db:a2:aa:ec:f9:70:65:00:31:8f:4c: 1b:5c:9c:60:7d:e9:68:f4:7b:6f:7c:f6:be:a3:32:95:1f:df: 37:f6:b9:25:52:77:8e:77:2f:08:1e:d0:a5:62:bb:f8:a6:d2: 49:a1:c8:10:b3:d7:a8:0d:59:4a:59:72:32:9c:6e:18:08:a0: f2:cd:91:0a:9f:0c:97:37:2a:97:63:d5:48:8b:ac:17:de:5c: 60:9b:95:46:97:12:f0:73:89:f2:0e:7b:90:c2:03:21:9d:dd: e3:55:4b:4f:25:c6:62:20:bf:c9:58:56:05:72:da:f1:dc:af: b7:6c:01:9c -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt3xxUD/XODG7lAlMBVx8lAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2QzZDg4YmZiNjAwZDU4YjFhOTE4YTE3Y2YwYTdjYzRjYWQ3YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt/FcsVV4BmDKRcndsHRv+VY8hg+ oJlb6ubOR5cyeBnpvq6hN36RnmX2mGdeLU2M3bQ5xY58KAVMhQdfJLuxkggNmy59 Hfnos7Ot4NFcLsRqU9FIUM1D64m1vvsAMY4Zw3aB85Tw9T1IevQvbCMMPnauZIgn +U4Iz0C37cgQ6pERk60sAtaHoQjHcqmfcWstLoBdceQBhHavNuqErsa5Og+GgFcP nL3BpUGqWCDbVDNbSvcYYcgP0mRx1kEhfaot5vE/psvqa+iyU+FJfG1g14M1kEm/ PJE3uee9G6Y8f5ToNvBX0LktIHd7xnF65rHW+rCd2lqOjagwHfND4+CK0wIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFPzT2Iv7YA1YsakYoXzwp8xMrXogMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvX05QWWlfdGdEVml4cVJpaGZQQ256RXl0ZWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTAyBAIAATAsMAwDBAC5D9ED BAK5D9ADBAC5jiADBAG5jiIDBADC1RgDBADC8iEDBADC8iYwNwQCAAIwMTASAwcA KgOvwAABAwcCKgOvwAAAMBIDBwAqA6/AAAUDBwAqA6/AAAYDBwAqA6/AAAgwDQYJ KoZIhvcNAQELBQADggEBAD990tvNn0j2MXFR4flVXjW76KM0Kc9hX4EDCg8UZvBP LLjqlyMCGUlw23QvFA8ouOz50QIjPGu+lC/sKcqpz3QI61ZfdUukQHrv4Hsx6OpO geIqndK7Eyr1ClY8KMz8G56rV3WuBbMAaZIZqrcSChbm6NXpvHOnAlF1vcEmzBGo +PdDf0Dboqrs+XBlADGPTBtcnGB96Wj0e2989r6jMpUf3zf2uSVSd453Lwge0KVi u/im0kmhyBCz16gNWUpZcjKcbhgIoPLNkQqfDJc3Kpdj1UiLrBfeXGCblUaXEvBz ifIOe5DCAyGd3eNVS08lxmIgv8lYVgVy2vHcr7dsAZw= -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:41 2026 by rpki-client