This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/nZmUNx60tBq0xrGS7jldkZK6ecc.roa File: nZmUNx60tBq0xrGS7jldkZK6ecc.roa (raw, json) Hash identifier: sjJTaq5f6jNHN9R7kd3r95jiTe0+BXzf/lUFmIOlkdY= Subject key identifier: 9D:99:94:37:1E:B4:B4:1A:B4:C6:B1:92:EE:39:5D:91:92:BA:79:C7 Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Certificate serial: 019B7E38337C258D4AB5105E3178A61BCD2A Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/nZmUNx60tBq0xrGS7jldkZK6ecc.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35175 IP address blocks: 85.194.208.0/21 maxlen: 21 85.194.216.0/22 maxlen: 22 185.117.220.0/22 maxlen: 22 2a06:8680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:33:7c:25:8d:4a:b5:10:5e:31:78:a6:1b:cd:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d9994371eb4b41ab4c6b192ee395d9192ba79c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:e5:3a:83:b3:ab:fd:28:bd:c8:0d:72:de: 8c:71:ec:33:54:13:0c:a4:7a:97:84:f2:fd:5b:2e: 97:6a:5d:72:1d:9c:1f:ee:b2:b2:62:ad:9b:b9:f4: ca:69:09:81:b6:ce:51:3e:68:2e:12:cc:9e:ca:de: fb:14:f8:31:f1:ea:47:74:17:55:90:da:80:b3:b6: 94:91:75:f9:18:f0:92:f7:54:4c:b7:e0:d3:15:65: d3:27:cd:57:2c:34:65:5c:38:38:c4:63:a5:3f:af: fe:83:ff:a7:f3:fc:9b:b8:4d:d5:95:57:d6:1c:e9: 9b:00:9c:c3:8d:f3:ea:43:e0:c6:48:00:2c:64:29: d0:fa:11:ff:a0:8f:cb:53:83:62:6e:96:a7:65:61: 8b:1e:3e:aa:d6:80:8f:0c:2f:eb:4f:18:44:33:e9: 90:4d:54:93:0e:0e:ed:c5:22:aa:e8:ed:ca:63:91: 6d:37:df:d2:a0:a9:ef:43:16:81:53:e3:24:f8:6a: 66:9a:5f:e7:5c:39:4e:8b:d8:5d:9d:40:d2:97:8f: 13:d5:01:af:d4:e5:69:3b:fa:04:53:3e:ce:90:02: 68:e2:e2:1f:ca:8a:cd:35:ba:fa:1a:bd:82:41:4a: 9b:2f:06:08:9c:2f:3a:fe:f6:b2:21:e7:4d:77:e2: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:99:94:37:1E:B4:B4:1A:B4:C6:B1:92:EE:39:5D:91:92:BA:79:C7 X509v3 Authority Key Identifier: keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/nZmUNx60tBq0xrGS7jldkZK6ecc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.208.0-85.194.219.255 185.117.220.0/22 IPv6: 2a06:8680::/29 Signature Algorithm: sha256WithRSAEncryption 81:30:e2:45:7f:48:38:ab:22:a0:05:fd:88:ec:29:f9:8f:29: a2:aa:02:ee:0f:f2:72:f1:37:3e:fb:fe:96:b7:e3:34:c0:c8: 2b:47:24:5c:f7:fc:96:8b:2f:c4:8b:b9:8e:88:eb:8a:b8:65: c9:82:71:8e:57:32:13:38:19:f9:4f:9e:e4:37:a1:93:30:1b: af:c1:65:71:96:6d:5d:3f:88:b9:3a:74:14:8e:16:af:f0:eb: be:c8:3e:6f:6d:9b:40:1d:f4:bb:e8:15:df:ef:38:cb:f5:d3: 55:67:00:2b:3e:b7:f6:f1:5c:54:11:cb:0a:63:ae:27:42:7d: 47:2e:eb:5b:26:a4:1d:10:2c:df:3a:1e:11:c5:77:ad:5e:0e: 7f:8e:a7:a2:a9:e5:ae:28:cd:88:e3:64:d1:ce:df:32:de:90: 97:b1:22:3d:4c:89:ea:aa:b9:65:73:d4:31:3c:36:ea:70:82: c1:4d:6c:9c:da:f2:82:03:5f:a7:4a:9e:7f:04:f1:d7:84:76: ce:be:c8:44:c7:5d:1f:5d:15:99:82:fc:3b:66:05:33:16:1f: 14:50:13:a8:d3:3d:aa:3c:a2:84:12:ff:88:9e:56:60:c0:0a: 59:3b:ea:5f:e0:7d:f4:d2:05:6c:a2:67:d7:24:87:63:b6:42: 2d:ca:06:3e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt+ODN8JY1KtRBeMXimG80qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj Mzg1YjAwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDk5OTQzNzFlYjRiNDFhYjRjNmIxOTJlZTM5NWQ5MTkyYmE3OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/lOoOzq/0ovcgNct6McewzVBMM pHqXhPL9Wy6Xal1yHZwf7rKyYq2bufTKaQmBts5RPmguEsyeyt77FPgx8epHdBdV kNqAs7aUkXX5GPCS91RMt+DTFWXTJ81XLDRlXDg4xGOlP6/+g/+n8/ybuE3VlVfW HOmbAJzDjfPqQ+DGSAAsZCnQ+hH/oI/LU4NibpanZWGLHj6q1oCPDC/rTxhEM+mQ TVSTDg7txSKq6O3KY5FtN9/SoKnvQxaBU+Mk+Gpmml/nXDlOi9hdnUDSl48T1QGv 1OVpO/oEUz7OkAJo4uIfyorNNbr6Gr2CQUqbLwYInC86/vayIedNd+LwNwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJ2ZlDcetLQatMaxku45XZGSunnHMB8GA1UdIwQY MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt ZjIyNjEwZTYzYzkyLzEvblptVU54NjB0QnEweHJHUzdqbGRrWks2ZWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBARVwtAD BAJVwtgDBAK5ddwwDQQCAAIwBwMFAyoGhoAwDQYJKoZIhvcNAQELBQADggEBAIEw 4kV/SDirIqAF/YjsKfmPKaKqAu4P8nLxNz77/pa34zTAyCtHJFz3/JaLL8SLuY6I 64q4ZcmCcY5XMhM4GflPnuQ3oZMwG6/BZXGWbV0/iLk6dBSOFq/w677IPm9tm0Ad 9LvoFd/vOMv101VnACs+t/bxXFQRywpjridCfUcu61smpB0QLN86HhHFd61eDn+O p6Kp5a4ozYjjZNHO3zLekJexIj1MieqquWVz1DE8NupwgsFNbJza8oIDX6dKnn8E 8deEds6+yETHXR9dFZmC/DtmBTMWHxRQE6jTPao8ooQS/4ieVmDAClk76l/gffTS BWyiZ9ckh2O2Qi3KBj4= -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:13 2026 by rpki-client