This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/NIPM7aKL5uexVcL90KLAP5wDjZQ.roa File: NIPM7aKL5uexVcL90KLAP5wDjZQ.roa (raw, json) Hash identifier: 9ZYrM11j7nntBzeZqvmkRCiHqz1k+TWVJfFzgJNUNng= Subject key identifier: 34:83:CC:ED:A2:8B:E6:E7:B1:55:C2:FD:D0:A2:C0:3F:9C:03:8D:94 Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b Certificate serial: 019B7F142328489058D318AEDF1111D339F0 Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/NIPM7aKL5uexVcL90KLAP5wDjZQ.roa Signing time: Fri 02 Jan 2026 14:19:44 +0000 ROA not before: Fri 02 Jan 2026 14:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61006 IP address blocks: 185.96.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:23:28:48:90:58:d3:18:ae:df:11:11:d3:39:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b Validity Not Before: Jan 2 14:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3483cceda28be6e7b155c2fdd0a2c03f9c038d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:96:f6:b1:15:c9:27:b4:c1:9a:a5:06:c9: 1c:45:fb:7d:c8:09:90:32:8f:9c:60:d6:66:ac:5c: ac:b3:a6:53:d7:d7:3c:53:69:7c:9d:50:8a:34:4c: 51:3a:48:12:f6:ee:88:0a:ee:ce:de:dd:a5:12:1a: 81:45:dc:ce:5e:76:94:25:e5:ef:59:2a:6b:87:12: 9e:96:c8:41:99:5b:2d:87:45:e2:b7:df:6d:1d:19: 3e:c0:fe:fb:76:95:30:e8:2a:59:3b:c0:e7:21:a5: 93:a4:b0:3a:a8:8e:95:3e:dc:d1:91:ad:f7:a7:07: df:1c:25:f9:03:a6:ae:b4:4f:cf:f5:c9:9c:45:51: cd:c7:ba:6c:91:38:e4:d5:86:07:96:25:f6:6d:38: 81:09:c6:ec:ba:28:71:dd:8a:c0:7e:66:14:02:93: 13:4a:20:39:c3:d5:bf:d2:fe:86:4d:8e:8a:19:1b: cb:6a:9c:aa:b4:4d:13:01:83:c1:74:cb:5b:de:25: 14:f0:dc:3e:8b:54:06:54:0c:88:e6:87:84:4b:68: 5f:c0:ed:7e:26:91:5a:8c:88:c5:3c:a0:4f:7a:d0: fc:24:ac:91:7d:76:fc:c1:a4:b3:c4:d1:07:0a:34: ee:69:60:0a:0b:7d:ac:c3:cd:7b:2a:28:51:dd:2e: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:CC:ED:A2:8B:E6:E7:B1:55:C2:FD:D0:A2:C0:3F:9C:03:8D:94 X509v3 Authority Key Identifier: keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/NIPM7aKL5uexVcL90KLAP5wDjZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.72.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:e5:76:aa:03:e7:b7:6c:4d:3e:e9:4a:f7:ad:43:40:4b:c7: ba:8c:9f:43:d9:73:90:7e:00:67:a4:c6:6c:ec:6b:b3:05:48: a5:37:d2:28:09:86:eb:8a:b6:fb:6a:8b:6e:62:c5:40:14:b6: 70:19:e3:03:a8:cb:02:b1:79:64:50:46:c5:33:2c:13:d5:d8: 06:81:c3:6c:e5:8c:dc:38:76:65:a4:14:62:59:60:ab:e6:db: 42:5e:fa:1f:e0:87:bc:ae:b8:1d:51:35:92:df:97:40:92:ca: 6e:2e:dc:bd:36:9f:3c:03:16:7c:2d:3b:d2:51:9a:3b:44:e4: 17:26:3d:28:c1:46:fe:dd:79:6d:1f:b9:2b:e9:b2:ac:46:47: 3b:5b:39:ff:70:73:84:b4:22:bb:9d:8b:8b:0d:86:9f:f3:a9: 46:cc:14:17:6d:d1:1d:e4:66:e4:74:1f:43:ea:db:ec:19:81: 05:b8:79:8c:13:b7:63:13:b9:51:c5:48:6d:7e:69:90:88:d5: 9d:ca:22:2e:5a:ff:2d:16:05:38:b9:93:0e:e9:fe:19:61:e1: 82:79:c9:c4:76:dc:7b:9f:47:a6:83:e0:a7:b7:2b:a3:d3:3d: f3:d4:a3:83:d5:e9:99:25:9d:a6:f5:35:49:4a:eb:50:89:d9: 04:f6:03:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FCMoSJBY0xiu3xER0znwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTdlMDM5ZjAyNWEyNWFhNmU5OTIzOTFkOTI0MjYwNjk5 YmE2N2IwHhcNMjYwMTAyMTQxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDgzY2NlZGEyOGJlNmU3YjE1NWMyZmRkMGEyYzAzZjljMDM4ZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOiW9rEVySe0wZqlBskcRft9yAmQ Mo+cYNZmrFyss6ZT19c8U2l8nVCKNExROkgS9u6ICu7O3t2lEhqBRdzOXnaUJeXv WSprhxKelshBmVsth0Xit99tHRk+wP77dpUw6CpZO8DnIaWTpLA6qI6VPtzRka33 pwffHCX5A6autE/P9cmcRVHNx7pskTjk1YYHliX2bTiBCcbsuihx3YrAfmYUApMT SiA5w9W/0v6GTY6KGRvLapyqtE0TAYPBdMtb3iUU8Nw+i1QGVAyI5oeES2hfwO1+ JpFajIjFPKBPetD8JKyRfXb8waSzxNEHCjTuaWAKC32sw817KihR3S5GSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSDzO2ii+bnsVXC/dCiwD+cA42UMB8GA1UdIwQY MBaAFDeX4DnwJaJapumSOR2SQmBpm6Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEt YzFjMDVjZGI3ODQxLzEvTklQTTdhS0w1dWV4VmNMOTBLTEFQNXdEalpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEtYzFjMDVjZGI3ODQx LzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWBIMA0G CSqGSIb3DQEBCwUAA4IBAQBK5XaqA+e3bE0+6Ur3rUNAS8e6jJ9D2XOQfgBnpMZs 7GuzBUilN9IoCYbrirb7aotuYsVAFLZwGeMDqMsCsXlkUEbFMywT1dgGgcNs5Yzc OHZlpBRiWWCr5ttCXvof4Ie8rrgdUTWS35dAkspuLty9Np88AxZ8LTvSUZo7ROQX Jj0owUb+3XltH7kr6bKsRkc7Wzn/cHOEtCK7nYuLDYaf86lGzBQXbdEd5GbkdB9D 6tvsGYEFuHmME7djE7lRxUhtfmmQiNWdyiIuWv8tFgU4uZMO6f4ZYeGCecnEdtx7 n0emg+Cntyuj0z3z1KOD1emZJZ2m9TVJSutQidkE9gNd -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:51 2026 by rpki-client