This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Nq1BcK_TBfctZqH1GqLfiUqYptI.roa File: Nq1BcK_TBfctZqH1GqLfiUqYptI.roa (raw, json) Hash identifier: YI10pnpt3E5e2O0RZkac5zllaXZnQsShjlgC3Bdl8wY= Subject key identifier: 36:AD:41:70:AF:D3:05:F7:2D:66:A1:F5:1A:A2:DF:89:4A:98:A6:D2 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1344731C54C0FCC8C8B3B4D4E3E97E Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Nq1BcK_TBfctZqH1GqLfiUqYptI.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273167 IP address blocks: 171.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:44:73:1c:54:c0:fc:c8:c8:b3:b4:d4:e3:e9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36ad4170afd305f72d66a1f51aa2df894a98a6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:f2:fa:ed:3f:cf:42:d5:0a:40:9d:8f:57: 75:1f:73:c8:6a:6d:91:e5:d8:67:e8:4c:08:39:39: 04:a8:4a:ab:f8:f3:ed:a5:5c:5a:47:1b:36:b0:e6: 3c:c3:32:36:a8:71:8a:c6:03:ac:9b:54:e0:c0:12: 3c:ae:7a:bd:d3:58:32:27:22:e6:5d:4f:ef:32:7f: 33:f0:7a:b1:0b:a9:03:ae:91:1e:9e:eb:f4:a2:02: 0f:01:01:f9:8f:c1:54:f6:11:d0:bf:46:c4:d9:a3: 04:86:f4:68:46:f9:89:20:53:df:e5:7b:e2:b6:dc: 12:a5:bb:ee:51:3b:22:0f:f7:97:38:58:43:a8:67: 97:63:6f:d0:f4:d7:6f:79:ce:a5:86:b1:f3:4e:12: 74:8d:30:6f:71:4f:42:b4:3c:2b:a9:88:57:13:40: ac:b4:fa:3a:52:aa:e0:71:1e:55:71:3a:49:6d:c3: fa:4b:3a:f8:a5:89:7d:4a:27:94:47:ee:7a:86:8d: 63:82:37:4b:1d:8d:2f:1d:c2:2b:c6:08:de:aa:47: 7f:f5:7e:c6:e3:1e:ad:5b:72:a4:f2:ab:24:95:91: c4:4d:66:05:41:ba:4d:b1:1c:79:db:63:a6:76:b1: c1:d2:40:5d:f3:ba:4f:f4:ae:75:86:e9:ba:48:7b: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AD:41:70:AF:D3:05:F7:2D:66:A1:F5:1A:A2:DF:89:4A:98:A6:D2 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Nq1BcK_TBfctZqH1GqLfiUqYptI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.165.0/24 Signature Algorithm: sha256WithRSAEncryption be:24:2a:e3:31:4c:ce:9b:4c:c0:bb:d1:26:d4:68:df:8a:c9: 2e:75:a3:3e:9d:03:db:05:db:66:23:b4:99:4f:e8:08:65:dc: 2c:e0:1a:c2:fe:5c:0b:45:21:bd:5e:ca:f7:87:a2:54:93:3c: 2a:9f:89:25:91:05:e3:32:6e:69:b1:ad:af:8e:b3:8b:9c:23: 15:07:1b:17:d7:45:6d:38:4a:35:23:21:78:a2:70:f7:5e:07: 89:53:a4:44:aa:2f:6c:cc:88:06:ee:a1:5c:c5:eb:40:67:f1: 3e:49:38:e9:ad:81:1f:2e:68:15:59:8b:3b:2f:77:13:05:0c: e5:42:e0:5a:73:d1:df:dc:b0:3c:a7:ea:d4:76:bf:07:ae:50: ba:13:14:79:38:a5:d0:a6:af:57:2f:6c:93:1b:6f:82:4a:cf: 5b:9b:78:9f:fe:08:2e:19:da:01:45:71:3d:f1:74:b8:01:e6: 31:3d:55:59:d0:d2:91:73:d6:f0:41:11:a4:46:26:01:7e:b5: cf:3d:59:f9:0b:8f:ea:ce:33:c7:e9:eb:f0:06:c9:26:97:ae: 46:ba:17:cd:f2:6a:e6:f3:3e:20:6a:a2:91:9e:7d:0d:11:d2: 36:ef:fe:1d:6b:4d:0a:9c:62:80:e6:6b:e9:c8:b1:1a:05:c1: 0a:d9:0d:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0RzHFTA/MjIs7TU4+l+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmFkNDE3MGFmZDMwNWY3MmQ2NmExZjUxYWEyZGY4OTRhOThhNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSry+u0/z0LVCkCdj1d1H3PIam2R 5dhn6EwIOTkEqEqr+PPtpVxaRxs2sOY8wzI2qHGKxgOsm1TgwBI8rnq901gyJyLm XU/vMn8z8HqxC6kDrpEenuv0ogIPAQH5j8FU9hHQv0bE2aMEhvRoRvmJIFPf5Xvi ttwSpbvuUTsiD/eXOFhDqGeXY2/Q9Ndvec6lhrHzThJ0jTBvcU9CtDwrqYhXE0Cs tPo6UqrgcR5VcTpJbcP6Szr4pYl9SieUR+56ho1jgjdLHY0vHcIrxgjeqkd/9X7G 4x6tW3Kk8qsklZHETWYFQbpNsRx522OmdrHB0kBd87pP9K51hum6SHvtTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDatQXCv0wX3LWah9Rqi34lKmKbSMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvTnExQmNLX1RCZmN0WnFIMUdxTGZpVXFZcHRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxalMA0G CSqGSIb3DQEBCwUAA4IBAQC+JCrjMUzOm0zAu9Em1GjfiskudaM+nQPbBdtmI7SZ T+gIZdws4BrC/lwLRSG9Xsr3h6JUkzwqn4klkQXjMm5psa2vjrOLnCMVBxsX10Vt OEo1IyF4onD3XgeJU6REqi9szIgG7qFcxetAZ/E+STjprYEfLmgVWYs7L3cTBQzl QuBac9Hf3LA8p+rUdr8HrlC6ExR5OKXQpq9XL2yTG2+CSs9bm3if/gguGdoBRXE9 8XS4AeYxPVVZ0NKRc9bwQRGkRiYBfrXPPVn5C4/qzjPH6evwBskml65GuhfN8mrm 8z4gaqKRnn0NEdI27/4da00KnGKA5mvpyLEaBcEK2Q0k -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:38 2026 by rpki-client