This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/nC0BklgM5Gqb773_4KE7YEJa48o.roa File: nC0BklgM5Gqb773_4KE7YEJa48o.roa (raw, json) Hash identifier: iFvusL2e+CmA5BNVVcVR79wn1MKJILkJWhtD9a5znMw= Subject key identifier: 9C:2D:01:92:58:0C:E4:6A:9B:EF:BD:FF:E0:A1:3B:60:42:5A:E3:CA Certificate issuer: /CN=2e1c94ea2f896c1bdf706f1e1c3c59a4c6afc22c Certificate serial: 019C0E494BF74FD9A5A5FA21ABA022FE1015 Authority key identifier: 2E:1C:94:EA:2F:89:6C:1B:DF:70:6F:1E:1C:3C:59:A4:C6:AF:C2:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/nC0BklgM5Gqb773_4KE7YEJa48o.roa Signing time: Fri 30 Jan 2026 09:43:30 +0000 ROA not before: Fri 30 Jan 2026 09:43:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209940 IP address blocks: 194.62.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:49:4b:f7:4f:d9:a5:a5:fa:21:ab:a0:22:fe:10:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1c94ea2f896c1bdf706f1e1c3c59a4c6afc22c Validity Not Before: Jan 30 09:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c2d0192580ce46a9befbdffe0a13b60425ae3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:60:f1:94:b8:6d:93:ef:5a:1d:17:f8:50:bf: 90:42:6f:d8:1f:50:46:5f:34:d3:ed:be:3a:90:fb: 6c:cb:e9:1b:fb:f6:1d:c6:11:b9:47:09:2d:a9:90: 06:d5:41:a3:92:2d:48:6f:34:ac:ad:fb:7d:5b:42: 5a:84:52:24:9c:15:42:6d:c2:3c:7a:2a:a0:1c:79: 15:e6:31:25:6d:c7:e3:16:25:30:ca:86:f6:e8:00: 18:00:5d:30:c0:0a:ba:d8:ff:e6:c9:d0:a9:aa:c3: f9:bc:8a:f4:02:a1:d9:af:57:41:01:8e:53:a7:09: 86:49:b6:b5:7b:14:35:1e:0b:d1:0a:4b:1e:38:0c: 98:ba:12:ca:6b:45:76:3e:af:40:74:36:0d:42:c7: fb:a3:83:bc:0f:ed:d3:72:c4:78:4a:c8:b1:e6:da: b8:4d:ab:08:bf:dc:c4:96:5b:2d:f9:0e:c5:9c:79: e3:3a:da:2f:85:e1:a5:6e:e1:63:cc:6a:01:7a:ec: fa:f7:0a:51:20:b4:72:79:89:58:07:8c:42:da:09: db:20:5b:66:36:f8:39:0e:f8:9b:ec:2e:27:5c:0e: 41:fd:2d:53:c3:d0:e5:ed:a6:25:6d:9b:92:1d:6f: 33:9e:18:b5:25:2b:04:67:ae:46:07:cc:f0:c5:9b: 7d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2D:01:92:58:0C:E4:6A:9B:EF:BD:FF:E0:A1:3B:60:42:5A:E3:CA X509v3 Authority Key Identifier: keyid:2E:1C:94:EA:2F:89:6C:1B:DF:70:6F:1E:1C:3C:59:A4:C6:AF:C2:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/nC0BklgM5Gqb773_4KE7YEJa48o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.7.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:89:b5:f7:cc:96:41:de:56:b6:56:8d:7b:16:ce:c7:c0:4c: 25:4f:f7:da:c6:4a:9e:79:f5:25:1a:48:7d:47:b1:d5:35:1c: f1:ef:36:2c:82:0d:12:9e:29:7d:e0:6f:14:20:8b:1f:1d:3c: b8:61:4b:f3:55:2f:5f:55:e8:2d:6b:2d:58:2a:e7:b2:53:2c: c0:67:9f:a0:73:d3:b9:1b:a2:10:c8:d5:64:7b:10:b4:eb:16: 1e:e6:37:26:94:eb:af:1a:69:7d:67:9a:36:dd:66:ad:49:8d: b3:69:ec:dc:e9:a1:d0:49:ba:49:aa:bf:62:71:f3:75:93:2c: c3:a6:12:7e:01:ae:b3:6b:ea:5d:29:a8:fb:a3:82:4e:ad:49: 87:ac:73:1d:ea:c7:85:46:8f:c3:c8:ed:08:25:f4:a6:28:cc: 78:09:01:05:a9:3c:d1:ed:f9:47:bc:d7:ed:ca:2b:c3:58:9c: 61:dd:82:01:7f:ae:33:9b:e3:06:af:e0:f2:75:55:ff:ee:a8: 15:c9:f8:09:ed:cc:7b:d3:16:00:f1:6d:b2:35:81:69:12:84: 83:9e:ab:dc:21:da:1b:ff:aa:97:3d:41:2e:87:63:d3:ce:67: f1:6c:76:ee:f4:63:d8:7f:c4:c5:48:5a:de:ca:09:17:71:9c: 2f:53:19:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwOSUv3T9mlpfohq6Ai/hAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMWM5NGVhMmY4OTZjMWJkZjcwNmYxZTFjM2M1OWE0YzZh ZmMyMmMwHhcNMjYwMTMwMDk0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzJkMDE5MjU4MGNlNDZhOWJlZmJkZmZlMGExM2I2MDQyNWFlM2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WDxlLhtk+9aHRf4UL+QQm/YH1BG XzTT7b46kPtsy+kb+/YdxhG5RwktqZAG1UGjki1IbzSsrft9W0JahFIknBVCbcI8 eiqgHHkV5jElbcfjFiUwyob26AAYAF0wwAq62P/mydCpqsP5vIr0AqHZr1dBAY5T pwmGSba1exQ1HgvRCkseOAyYuhLKa0V2Pq9AdDYNQsf7o4O8D+3TcsR4Ssix5tq4 TasIv9zEllst+Q7FnHnjOtovheGlbuFjzGoBeuz69wpRILRyeYlYB4xC2gnbIFtm Nvg5Dvib7C4nXA5B/S1Tw9Dl7aYlbZuSHW8znhi1JSsEZ65GB8zwxZt9iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJwtAZJYDORqm++9/+ChO2BCWuPKMB8GA1UdIwQY MBaAFC4clOoviWwb33BvHhw8WaTGr8IsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGh5VTZpLUpiQnZmY0c4ZUhEeFpwTWF2d2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mZTRmMDMtMDMzZC00OTNhLTgxNzYt MDA2ZTUyZmY3N2RmLzEvbkMwQmtsZ001R3FiNzczXzRLRTdZRUphNDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mZTRmMDMtMDMzZC00OTNhLTgxNzYtMDA2ZTUyZmY3N2Rm LzEvTGh5VTZpLUpiQnZmY0c4ZUhEeFpwTWF2d2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj4HMA0G CSqGSIb3DQEBCwUAA4IBAQCbibX3zJZB3la2Vo17Fs7HwEwlT/faxkqeefUlGkh9 R7HVNRzx7zYsgg0Snil94G8UIIsfHTy4YUvzVS9fVegtay1YKueyUyzAZ5+gc9O5 G6IQyNVkexC06xYe5jcmlOuvGml9Z5o23WatSY2zaezc6aHQSbpJqr9icfN1kyzD phJ+Aa6za+pdKaj7o4JOrUmHrHMd6seFRo/DyO0IJfSmKMx4CQEFqTzR7flHvNft yivDWJxh3YIBf64zm+MGr+DydVX/7qgVyfgJ7cx70xYA8W2yNYFpEoSDnqvcIdob /6qXPUEuh2PTzmfxbHbu9GPYf8TFSFreygkXcZwvUxkY -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:48 2026 by rpki-client