This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/Na4Gy6UIsHxIjVJ4JZkHTGt_YMI.roa File: Na4Gy6UIsHxIjVJ4JZkHTGt_YMI.roa (raw, json) Hash identifier: 7cEPbpdCkfIXgLMOzwquxVKbvV/70yCisgijxQttsKA= Subject key identifier: 35:AE:06:CB:A5:08:B0:7C:48:8D:52:78:25:99:07:4C:6B:7F:60:C2 Certificate issuer: /CN=d66bf5004840c33b6b1f2109dc249bf5b390f319 Certificate serial: 019B7EA533542699CDCF5729F839CE944342 Authority key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/Na4Gy6UIsHxIjVJ4JZkHTGt_YMI.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57612 IP address blocks: 81.162.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:33:54:26:99:cd:cf:57:29:f8:39:ce:94:43:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319 Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35ae06cba508b07c488d52782599074c6b7f60c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:cd:25:c0:73:97:c2:3f:91:7e:2d:aa:05: b1:ac:e8:2c:63:58:21:32:75:c8:ab:ca:4d:9a:44: e3:dd:7b:8d:24:a9:94:ce:1a:d4:34:72:38:60:b6: 83:4b:5b:6e:dc:40:72:ea:9d:7d:df:95:7b:f0:6e: 8f:ef:d5:73:2a:06:aa:7e:92:75:4a:df:e5:64:49: f5:33:ca:75:ce:20:d2:54:28:0d:53:50:e4:a4:8d: 0d:94:f5:8c:2f:d9:7c:d3:cc:0e:2f:37:6f:ed:9a: 50:81:da:4c:52:af:61:13:a0:a5:db:d3:1e:73:11: 50:4b:79:3c:92:bc:8b:86:4c:40:56:7b:5d:c0:ef: a7:e6:d7:ac:4d:6f:6a:c0:f8:93:98:37:93:3f:02: 48:f3:cb:90:df:65:dd:b7:06:38:5f:e1:34:fe:35: 47:c6:97:b2:a3:c1:22:50:b6:18:93:46:99:68:4f: 58:94:79:55:b0:33:68:b0:f4:b5:e7:62:1e:f4:08: e2:82:17:c9:c0:b4:f6:b4:df:97:42:75:70:99:d7: 5a:4c:49:25:f0:cc:23:f5:9e:ed:de:bb:4b:20:27: 38:ca:4f:29:94:90:1d:64:9e:bb:e1:57:f7:21:e0: 61:f1:0f:88:31:9c:99:a1:ef:59:51:3a:0b:06:f2: 21:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AE:06:CB:A5:08:B0:7C:48:8D:52:78:25:99:07:4C:6B:7F:60:C2 X509v3 Authority Key Identifier: keyid:D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/Na4Gy6UIsHxIjVJ4JZkHTGt_YMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.162.216.0/21 Signature Algorithm: sha256WithRSAEncryption 77:9b:b6:f2:18:ab:6c:14:c7:07:3e:f0:7d:70:f4:d2:8a:c3: 4c:8a:3f:45:01:43:4a:72:c6:c1:b5:c4:79:b8:3e:33:bc:2e: 6b:ed:23:4e:11:95:fa:d5:3d:5f:3c:90:41:b0:92:98:43:e0: 6c:2e:a1:ba:76:e7:39:48:7c:3f:58:9e:09:3c:9c:21:d9:95: 99:2b:18:bd:59:e8:c0:18:e6:39:bd:e0:7c:93:26:59:83:7d: 9a:ee:5b:e0:19:61:6d:ba:66:6b:09:f7:8f:d5:95:1f:67:fb: 4a:eb:ec:b9:d3:42:1a:4f:c3:fb:78:85:b7:52:33:fb:0b:11: 9a:2c:5e:24:74:b5:4b:86:45:34:9d:aa:f7:b3:2f:0d:cb:fa: a8:b8:1d:f2:ed:80:40:3d:db:14:e2:6e:a2:0c:af:99:44:86: a1:e5:97:54:b2:68:33:91:f7:5e:85:5c:a6:ab:1a:52:89:2d: 3f:b9:2f:f9:24:8f:44:60:ad:0b:c7:c3:f8:3a:26:c9:d8:76: 6d:c0:8d:fe:96:88:29:d3:ed:94:bb:11:03:a5:2c:87:fa:30: e6:60:25:81:93:15:98:2a:03:b8:85:46:f3:4f:78:c7:fa:22: 7b:e1:dd:11:01:db:cf:c2:7c:1c:3d:55:54:b4:0b:63:77:ed: 11:2a:f2:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pTNUJpnNz1cp+DnOlENCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NmJmNTAwNDg0MGMzM2I2YjFmMjEwOWRjMjQ5YmY1YjM5 MGYzMTkwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWFlMDZjYmE1MDhiMDdjNDg4ZDUyNzgyNTk5MDc0YzZiN2Y2MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJfNJcBzl8I/kX4tqgWxrOgsY1gh MnXIq8pNmkTj3XuNJKmUzhrUNHI4YLaDS1tu3EBy6p1935V78G6P79VzKgaqfpJ1 St/lZEn1M8p1ziDSVCgNU1DkpI0NlPWML9l808wOLzdv7ZpQgdpMUq9hE6Cl29Me cxFQS3k8kryLhkxAVntdwO+n5tesTW9qwPiTmDeTPwJI88uQ32XdtwY4X+E0/jVH xpeyo8EiULYYk0aZaE9YlHlVsDNosPS152Ie9AjighfJwLT2tN+XQnVwmddaTEkl 8Mwj9Z7t3rtLICc4yk8plJAdZJ674Vf3IeBh8Q+IMZyZoe9ZUToLBvIh3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWuBsulCLB8SI1SeCWZB0xrf2DCMB8GA1UdIwQY MBaAFNZr9QBIQMM7ax8hCdwkm/WzkPMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjct ZjViOTkyNGQ2Y2YxLzEvTmE0R3k2VUlzSHhJalZKNEpaa0hUR3RfWU1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjctZjViOTkyNGQ2Y2Yx LzEvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUaLYMA0G CSqGSIb3DQEBCwUAA4IBAQB3m7byGKtsFMcHPvB9cPTSisNMij9FAUNKcsbBtcR5 uD4zvC5r7SNOEZX61T1fPJBBsJKYQ+BsLqG6duc5SHw/WJ4JPJwh2ZWZKxi9WejA GOY5veB8kyZZg32a7lvgGWFtumZrCfeP1ZUfZ/tK6+y500IaT8P7eIW3UjP7CxGa LF4kdLVLhkU0nar3sy8Ny/qouB3y7YBAPdsU4m6iDK+ZRIah5ZdUsmgzkfdehVym qxpSiS0/uS/5JI9EYK0Lx8P4OibJ2HZtwI3+logp0+2UuxEDpSyH+jDmYCWBkxWY KgO4hUbzT3jH+iJ74d0RAdvPwnwcPVVUtAtjd+0RKvIx -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:58 2026 by rpki-client