This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa File: Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa (raw, json) Hash identifier: NqeN3nGFqChISvovOPomv7J85KVugMZmXFAJ2wHhcOc= Subject key identifier: 37:3D:EB:34:57:3F:0B:A8:CA:CB:AC:6D:13:78:4B:A5:DC:CA:C3:F2 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019B7BA35685E169DD17884685C3A8AFF5A4 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52468 IP address blocks: 185.213.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:56:85:e1:69:dd:17:88:46:85:c3:a8:af:f5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=373deb34573f0ba8cacbac6d13784ba5dccac3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:11:6f:bd:62:d2:e0:1c:85:1e:63:95:b9:33: 89:85:14:01:a0:2e:f9:2f:a7:b9:fa:d5:eb:a5:55: d8:92:d0:ae:6f:6d:66:e2:8c:d7:80:be:f2:2e:4e: 4d:a9:8d:84:50:96:5a:de:9d:68:6e:e8:8d:02:ec: b6:23:f0:ef:64:22:67:53:d7:23:25:97:8a:ce:fc: 6c:d9:46:e4:e8:73:3b:3e:bc:b7:20:2d:ac:16:04: 9c:c1:aa:64:08:ca:f5:6d:bf:a2:1e:6f:f0:d7:07: b1:ef:d4:51:1c:ed:3d:2e:d1:3f:17:7b:bd:d1:4b: 6f:ae:02:9e:50:1e:93:8e:79:97:40:b8:1a:fd:86: 55:55:20:d9:af:a0:57:e1:de:ab:fa:03:e4:cd:89: be:10:db:d6:18:ed:16:23:da:3d:d9:d5:e1:77:1a: 28:d9:fc:ca:d7:0b:ae:9d:60:e3:21:a3:2b:95:56: b1:b1:48:14:2c:85:e0:e5:23:42:c1:75:a9:ed:29: 32:9c:80:13:26:57:ea:25:92:77:67:d9:53:ff:52: e0:5e:6b:d6:4c:9c:90:91:fc:0f:d3:06:c3:f0:07: 4a:58:c3:20:b3:25:0d:39:fb:e3:58:7b:a6:36:68: e4:06:2d:23:3d:2a:b3:d3:b3:a6:6e:d3:f3:12:e8: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3D:EB:34:57:3F:0B:A8:CA:CB:AC:6D:13:78:4B:A5:DC:CA:C3:F2 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/Nz3rNFc_C6jKy6xtE3hLpdzKw_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.220.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:dd:09:27:9d:17:f5:e5:6d:0d:9c:9f:2a:18:b1:73:55:ee: 4f:0a:b5:f1:7e:bf:14:dc:c4:38:31:1a:dd:88:44:64:24:5a: be:df:23:19:f6:2b:46:df:b6:9f:b8:0c:eb:0f:b1:3b:a5:b6: 1d:ce:c5:d7:8a:89:c3:cd:2d:96:ef:3c:35:9a:46:83:0e:23: 7b:d5:ff:8f:95:e9:9c:3d:2b:df:21:2b:92:28:1e:1f:90:7b: ab:fc:20:6b:6e:81:ae:e4:a6:37:3c:49:eb:df:6b:15:76:3c: f3:bb:f4:8f:b1:ff:aa:2c:9a:70:2b:b2:ef:31:1c:a8:c9:1c: 5d:e9:c7:6c:a5:61:d9:b1:7d:3a:04:c5:05:7d:dc:63:e5:2d: 79:5a:b3:89:ac:6b:40:80:60:06:c6:6f:28:69:91:53:b0:8c: d0:b4:53:23:a8:b3:19:af:35:41:2e:ce:7a:3d:55:25:3f:85: c8:c9:3e:18:f6:6a:55:a9:25:cc:8a:12:c1:bd:81:a1:c2:69: f0:6a:c4:8c:0c:7a:9b:62:05:c9:c3:e2:35:92:f0:5d:87:87: ea:81:00:d1:79:c4:a2:32:20:86:81:c9:f1:3c:1c:1d:10:6d: 65:59:16:db:ad:fe:bb:5f:78:a0:f9:10:8b:34:ba:75:2e:cf: 44:f3:f8:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1aF4WndF4hGhcOor/WkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzNkZWIzNDU3M2YwYmE4Y2FjYmFjNmQxMzc4NGJhNWRjY2FjM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hFvvWLS4ByFHmOVuTOJhRQBoC75 L6e5+tXrpVXYktCub21m4ozXgL7yLk5NqY2EUJZa3p1obuiNAuy2I/DvZCJnU9cj JZeKzvxs2Ubk6HM7Pry3IC2sFgScwapkCMr1bb+iHm/w1wex79RRHO09LtE/F3u9 0UtvrgKeUB6TjnmXQLga/YZVVSDZr6BX4d6r+gPkzYm+ENvWGO0WI9o92dXhdxoo 2fzK1wuunWDjIaMrlVaxsUgULIXg5SNCwXWp7SkynIATJlfqJZJ3Z9lT/1LgXmvW TJyQkfwP0wbD8AdKWMMgsyUNOfvjWHumNmjkBi0jPSqz07OmbtPzEugGaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDc96zRXPwuoysusbRN4S6XcysPyMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvTnozck5GY19DNmpLeTZ4dEUzaExwZHpLd19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudXcMA0G CSqGSIb3DQEBCwUAA4IBAQA+3QknnRf15W0NnJ8qGLFzVe5PCrXxfr8U3MQ4MRrd iERkJFq+3yMZ9itG37afuAzrD7E7pbYdzsXXionDzS2W7zw1mkaDDiN71f+Plemc PSvfISuSKB4fkHur/CBrboGu5KY3PEnr32sVdjzzu/SPsf+qLJpwK7LvMRyoyRxd 6cdspWHZsX06BMUFfdxj5S15WrOJrGtAgGAGxm8oaZFTsIzQtFMjqLMZrzVBLs56 PVUlP4XIyT4Y9mpVqSXMihLBvYGhwmnwasSMDHqbYgXJw+I1kvBdh4fqgQDRecSi MiCGgcnxPBwdEG1lWRbbrf67X3ig+RCLNLp1Ls9E8/g8 -----END CERTIFICATE-----Generated at Tue Jan 20 15:34:00 2026 by rpki-client