This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/N3UnlwMOiCPor8fOEr__gAYIrSM.roa File: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (raw, json) Hash identifier: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs= Subject key identifier: 37:75:27:97:03:0E:88:23:E8:AF:C7:CE:12:BF:FF:80:06:08:AD:23 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED97EA8B421C80BF16EFB5C235E85D Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/N3UnlwMOiCPor8fOEr__gAYIrSM.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49391 IP address blocks: 194.90.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:97:ea:8b:42:1c:80:bf:16:ef:b5:c2:35:e8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37752797030e8823e8afc7ce12bfff800608ad23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f1:80:d1:29:c7:0b:52:3c:29:10:b9:c7:bd: d2:0c:9c:53:89:73:23:01:9f:70:a5:f9:52:1b:0a: d3:9d:b0:d0:0c:df:fd:83:83:7a:5d:36:2a:44:e1: c1:bc:76:8c:f2:7b:98:89:b6:55:3c:f8:e3:65:f8: 30:45:b6:2b:6d:39:47:1d:cd:37:2c:e8:59:9f:c4: 49:eb:07:9f:bb:55:6d:31:11:3f:e2:29:fa:c7:ee: f7:10:fe:68:f2:ae:d3:98:05:cb:9f:69:c0:cd:cd: 3e:2a:6d:16:df:1e:a8:0a:05:7b:6b:58:ba:3c:9d: 3f:3e:53:0c:f1:26:21:1d:b5:7c:45:ed:d2:d4:11: c1:04:45:ef:7e:b3:dc:f8:aa:f3:a6:86:60:97:ca: 2c:45:d0:05:96:ae:56:ca:f7:9f:70:f8:2a:3c:81: 4c:8c:56:94:21:81:15:31:07:85:8f:89:7f:48:44: 61:53:a8:5c:cc:aa:b7:6f:cc:b5:a2:9b:3d:45:18: ba:d2:8f:0b:59:61:c5:c1:65:57:f9:20:cb:4e:bd: 48:0c:cc:26:87:76:81:a6:10:d5:be:80:99:54:2d: 55:99:a8:68:76:15:d6:1d:dc:00:e1:a6:2a:e7:cd: 68:e4:fa:25:6f:e0:89:eb:11:9e:8d:5a:99:47:5f: 3f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:75:27:97:03:0E:88:23:E8:AF:C7:CE:12:BF:FF:80:06:08:AD:23 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/N3UnlwMOiCPor8fOEr__gAYIrSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.90.84.0/22 Signature Algorithm: sha256WithRSAEncryption 00:6f:5c:a2:d9:d0:aa:57:ca:f6:be:c1:5b:d1:0d:ae:5c:91: 72:6d:0c:7b:ba:67:c6:c3:53:dc:1b:81:72:ad:67:dd:90:37: 40:3f:8a:48:1e:f4:de:9a:2f:c1:29:76:3c:bf:62:03:de:7b: 19:e7:e5:7c:61:3e:40:96:ef:f2:0f:e4:1e:8e:62:d2:37:a7: 1f:4b:9d:24:79:4b:f6:f1:0e:b0:ad:72:28:4b:0d:e2:5f:89: 81:90:ac:ba:a7:37:bf:c3:8f:4d:69:a3:38:1b:e6:f9:9c:29: fb:74:37:13:41:4b:a3:47:6c:e2:de:1d:f0:34:b8:b1:9d:bc: 1a:e1:b6:5a:3e:c7:f3:e7:ee:ce:d1:d4:7d:e6:e3:70:24:24: 4c:84:0c:21:c4:62:1f:31:01:ad:2b:d7:a7:b9:c9:bb:f0:d1: cd:34:25:b1:3c:49:8e:54:78:eb:4b:15:5a:66:b8:f3:c8:ac: 03:62:b5:f8:8f:05:00:41:ca:a1:3b:95:1d:2a:67:95:82:c9: 78:30:06:b1:ba:76:61:0c:56:3c:1b:f5:50:af:77:d2:88:83: 99:da:63:25:d3:e3:8f:ab:5e:cc:45:58:75:14:e6:a4:c4:3c: 8e:0b:51:da:10:33:a4:13:12:7b:c1:08:b8:8b:3f:df:bd:d6: ba:51:c9:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Zfqi0IcgL8W77XCNehdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzc1Mjc5NzAzMGU4ODIzZThhZmM3Y2UxMmJmZmY4MDA2MDhhZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PGA0SnHC1I8KRC5x73SDJxTiXMj AZ9wpflSGwrTnbDQDN/9g4N6XTYqROHBvHaM8nuYibZVPPjjZfgwRbYrbTlHHc03 LOhZn8RJ6wefu1VtMRE/4in6x+73EP5o8q7TmAXLn2nAzc0+Km0W3x6oCgV7a1i6 PJ0/PlMM8SYhHbV8Re3S1BHBBEXvfrPc+KrzpoZgl8osRdAFlq5WyvefcPgqPIFM jFaUIYEVMQeFj4l/SERhU6hczKq3b8y1ops9RRi60o8LWWHFwWVX+SDLTr1IDMwm h3aBphDVvoCZVC1VmahodhXWHdwA4aYq581o5Polb+CJ6xGejVqZR18/PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDd1J5cDDogj6K/HzhK//4AGCK0jMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvTjNVbmx3TU9pQ1BvcjhmT0VyX19nQVlJclNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwlpUMA0G CSqGSIb3DQEBCwUAA4IBAQAAb1yi2dCqV8r2vsFb0Q2uXJFybQx7umfGw1PcG4Fy rWfdkDdAP4pIHvTemi/BKXY8v2ID3nsZ5+V8YT5Alu/yD+QejmLSN6cfS50keUv2 8Q6wrXIoSw3iX4mBkKy6pze/w49NaaM4G+b5nCn7dDcTQUujR2zi3h3wNLixnbwa 4bZaPsfz5+7O0dR95uNwJCRMhAwhxGIfMQGtK9enucm78NHNNCWxPEmOVHjrSxVa ZrjzyKwDYrX4jwUAQcqhO5UdKmeVgsl4MAaxunZhDFY8G/VQr3fSiIOZ2mMl0+OP q17MRVh1FOakxDyOC1HaEDOkExJ7wQi4iz/fvda6Ucma -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:11 2026 by rpki-client