This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Np9crxX0iBywrp9H1C28Eazpftc.roa File: Np9crxX0iBywrp9H1C28Eazpftc.roa (raw, json) Hash identifier: n8A80K07pGMPVTpPdBROZCi99b8fYS/ZfY3tMvf24K8= Subject key identifier: 36:9F:5C:AF:15:F4:88:1C:B0:AE:9F:47:D4:2D:BC:11:AC:E9:7E:D7 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019BE1894EF3C63211CFB26F70563CD5F43F Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Np9crxX0iBywrp9H1C28Eazpftc.roa Signing time: Wed 21 Jan 2026 17:10:30 +0000 ROA not before: Wed 21 Jan 2026 17:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274283 IP address blocks: 185.231.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:89:4e:f3:c6:32:11:cf:b2:6f:70:56:3c:d5:f4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 21 17:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=369f5caf15f4881cb0ae9f47d42dbc11ace97ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:f7:ad:55:ed:51:60:e5:ad:a1:58:f0:b3: 57:c8:cc:a9:4f:a0:66:9f:eb:f5:22:b0:74:f7:76: da:6a:c1:a7:ae:9c:04:e6:ce:79:29:5b:67:29:58: 87:0f:ef:cb:0b:3f:33:6a:15:f8:3e:c4:92:68:c4: 52:b5:80:de:0b:6c:c3:b1:0c:3b:84:03:05:48:41: 1b:e3:85:ad:24:fc:b2:36:c7:54:3e:ad:e9:93:6d: fd:d3:54:1a:d6:07:5b:41:6a:20:e2:59:65:d8:37: 74:d4:79:86:0e:7a:52:a3:51:f7:d7:60:b6:63:6a: 49:a0:f7:9c:39:d7:26:6f:ed:10:0b:f9:e5:54:16: fa:d1:22:f5:86:c1:1f:7a:c9:9c:26:fc:e6:d4:35: 45:3c:1d:b3:80:76:b9:95:b9:52:16:a9:8c:80:aa: e8:59:03:4a:e1:84:ee:5b:ff:f7:4a:56:b7:7c:c0: 94:91:62:5d:cd:9a:71:59:f5:cc:f1:6d:ac:a8:aa: 84:0d:93:b4:51:b7:a0:a6:28:85:29:55:60:82:16: 86:f5:93:3b:a1:55:d2:5b:24:4e:89:5a:ee:5b:59: ee:8d:78:6e:56:b1:3a:84:4f:6d:a1:f6:9b:36:9b: 47:39:b4:cc:e3:55:69:69:aa:4f:3a:fd:f6:7d:38: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9F:5C:AF:15:F4:88:1C:B0:AE:9F:47:D4:2D:BC:11:AC:E9:7E:D7 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Np9crxX0iBywrp9H1C28Eazpftc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.187.0/24 Signature Algorithm: sha256WithRSAEncryption 47:8e:90:66:87:45:ff:c8:b7:07:26:32:fb:a5:57:02:96:3a: 3a:79:45:4d:99:c7:2c:db:66:b4:97:85:1d:b0:2b:53:86:37: 20:dd:4f:d3:7e:63:53:b7:65:4f:5c:da:a5:9b:08:8a:3f:1d: a7:9e:0a:e3:0e:59:5c:ff:e9:fe:1c:e4:37:1b:0d:56:10:50: 40:5d:bd:e5:2d:de:38:6d:94:81:8c:50:6f:bb:9d:f0:1e:66: ca:6d:a6:c3:23:56:3e:9f:bf:24:45:dd:d2:43:1a:cd:63:24: 4b:d4:32:cd:9c:09:bf:03:ca:cf:32:1b:1d:f2:f0:f2:68:af: 4e:e3:e0:8c:96:7b:fe:1b:39:ea:18:63:29:4a:3d:11:50:e6: 13:db:71:f9:ce:27:6c:8e:05:2d:d0:58:e3:90:e7:a2:a3:37: 35:bd:d9:3f:4a:2d:0d:25:ec:1d:94:f1:2f:fb:5d:35:e6:e8: fd:9e:29:99:06:da:87:df:6a:b9:a5:d6:67:0a:cd:e9:42:bd: 84:6c:90:0b:23:c2:f3:06:0c:e0:f9:17:87:58:26:2f:37:e6: 42:9e:70:f3:75:d9:84:4e:b1:73:1f:c6:ae:89:4d:09:e3:a1: 25:00:82:2b:b8:06:73:56:9a:be:f1:ed:5a:a9:30:9e:a9:99: 3c:69:f5:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvhiU7zxjIRz7JvcFY81fQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTIxMTcxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjlmNWNhZjE1ZjQ4ODFjYjBhZTlmNDdkNDJkYmMxMWFjZTk3ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/3rVXtUWDlraFY8LNXyMypT6Bm n+v1IrB093baasGnrpwE5s55KVtnKViHD+/LCz8zahX4PsSSaMRStYDeC2zDsQw7 hAMFSEEb44WtJPyyNsdUPq3pk23901Qa1gdbQWog4lll2Dd01HmGDnpSo1H312C2 Y2pJoPecOdcmb+0QC/nlVBb60SL1hsEfesmcJvzm1DVFPB2zgHa5lblSFqmMgKro WQNK4YTuW//3Sla3fMCUkWJdzZpxWfXM8W2sqKqEDZO0UbegpiiFKVVgghaG9ZM7 oVXSWyROiVruW1nujXhuVrE6hE9tofabNptHObTM41VpaapPOv32fThzfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDafXK8V9IgcsK6fR9QtvBGs6X7XMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvTnA5Y3J4WDBpQnl3cnA5SDFDMjhFYXpwZnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuee7MA0G CSqGSIb3DQEBCwUAA4IBAQBHjpBmh0X/yLcHJjL7pVcCljo6eUVNmccs22a0l4Ud sCtThjcg3U/TfmNTt2VPXNqlmwiKPx2nngrjDllc/+n+HOQ3Gw1WEFBAXb3lLd44 bZSBjFBvu53wHmbKbabDI1Y+n78kRd3SQxrNYyRL1DLNnAm/A8rPMhsd8vDyaK9O 4+CMlnv+GznqGGMpSj0RUOYT23H5zidsjgUt0FjjkOeiozc1vdk/Si0NJewdlPEv +1015uj9nimZBtqH32q5pdZnCs3pQr2EbJALI8LzBgzg+ReHWCYvN+ZCnnDzddmE TrFzH8auiU0J46ElAIIruAZzVpq+8e1aqTCeqZk8afU6 -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:39 2026 by rpki-client