This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/nnxiFtwqx8GnsAuhyqsBzy-CKHk.roa File: nnxiFtwqx8GnsAuhyqsBzy-CKHk.roa (raw, json) Hash identifier: a4O6X7QudSaMxrAiVWZoV6/Apq2rXIJ1YdJgf4/PVxA= Subject key identifier: 9E:7C:62:16:DC:2A:C7:C1:A7:B0:0B:A1:CA:AB:01:CF:2F:82:28:79 Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334 Certificate serial: 019B7F15F480FA51387135CF6399911CB426 Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/nnxiFtwqx8GnsAuhyqsBzy-CKHk.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24707 IP address blocks: 185.122.80.0/22 maxlen: 22 185.122.80.0/23 maxlen: 23 185.122.80.0/24 maxlen: 24 185.122.81.0/24 maxlen: 24 185.122.82.0/23 maxlen: 23 185.122.82.0/24 maxlen: 24 185.122.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f4:80:fa:51:38:71:35:cf:63:99:91:1c:b4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e7c6216dc2ac7c1a7b00ba1caab01cf2f822879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:60:d7:1c:b3:29:86:66:cb:20:cb:09:4e: ce:86:93:1b:34:a6:92:b7:05:0c:71:77:05:94:5c: 53:2a:b4:e1:17:46:ec:d3:05:61:24:cf:a8:cf:66: ea:34:9d:b3:97:36:32:54:37:ec:39:d5:5b:1a:b1: 71:66:5b:8f:58:d0:41:c1:bd:fe:23:eb:2e:8e:30: e6:4d:e4:63:85:39:1d:d7:98:45:6e:59:21:49:cf: 70:f4:43:d3:20:69:a0:10:f1:26:6b:67:be:09:e5: 5d:0d:73:5d:5d:d1:56:5a:eb:56:6a:0d:89:86:68: ec:17:55:9f:9d:d7:a6:bd:b2:3b:42:d9:6a:f7:79: 1e:5d:37:dd:9d:ce:6c:9d:93:6e:29:8b:cb:81:16: 60:65:d6:32:df:0e:fb:da:86:89:13:39:1a:aa:e6: 07:e2:1f:2a:5a:1e:39:53:6d:6a:28:b3:f5:ee:28: 12:ec:12:57:a6:50:1d:77:a5:8f:a2:d3:28:6f:0a: 36:77:d0:2e:ca:7d:55:fc:4d:0e:fb:e5:0a:74:61: 3e:d6:65:1f:ac:07:1a:4d:5a:a1:d4:37:87:7e:e7: f6:15:04:3f:19:05:42:30:02:18:5d:82:e0:5e:a6: 25:00:77:5c:52:6e:fe:c8:f5:65:5f:88:9b:df:42: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:62:16:DC:2A:C7:C1:A7:B0:0B:A1:CA:AB:01:CF:2F:82:28:79 X509v3 Authority Key Identifier: keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/nnxiFtwqx8GnsAuhyqsBzy-CKHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.80.0/22 Signature Algorithm: sha256WithRSAEncryption 02:25:05:d3:82:d3:69:bf:30:92:7a:cb:c2:9e:0b:23:a1:8d: 3e:9c:78:29:1d:e3:26:a3:4b:d8:b6:92:d0:96:f7:05:c3:52: de:68:1a:3b:84:23:b6:4e:4f:42:65:f5:85:f7:92:a7:ee:fb: 80:f6:95:d4:3c:be:9e:e9:99:05:c6:44:f0:da:15:29:f9:27: 6f:2e:6e:42:11:22:b6:74:a2:ed:bc:e7:3b:e1:57:81:65:b5: 83:5a:f5:10:db:63:31:33:c6:63:4e:08:08:1b:e4:32:33:43: e0:59:eb:6d:ec:51:39:e7:ff:e3:6f:3e:13:f0:2e:a4:8e:78: 8f:16:95:4e:78:6c:62:5d:75:13:bd:52:c7:4b:f7:2b:d2:f7: ee:1a:66:7c:d6:42:8d:d4:21:d4:93:6a:48:72:09:94:bd:e0: 7c:4e:c0:c4:bb:67:94:66:15:0d:1b:c7:16:d3:a9:09:57:c7: f0:d6:3a:31:4b:3c:53:df:6d:e3:24:9d:46:62:8c:3a:0e:5d: 08:21:7e:65:96:93:6d:85:aa:eb:3d:7e:92:cb:b3:de:aa:d9: c8:10:82:1d:2d:5b:f6:8c:8b:54:79:4b:64:ec:e5:14:f6:fe: 6f:83:ac:f5:0a:5e:74:eb:fb:ce:49:ac:13:87:ee:a2:78:b4: ff:ef:ab:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfSA+lE4cTXPY5mRHLQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNDVjZTQwODVmMDJlYjhhMGVkMWFmZDJiNzk5MWE4YWE5 OTgzMzQwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTdjNjIxNmRjMmFjN2MxYTdiMDBiYTFjYWFiMDFjZjJmODIyODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwppg1xyzKYZmyyDLCU7OhpMbNKaS twUMcXcFlFxTKrThF0bs0wVhJM+oz2bqNJ2zlzYyVDfsOdVbGrFxZluPWNBBwb3+ I+sujjDmTeRjhTkd15hFblkhSc9w9EPTIGmgEPEma2e+CeVdDXNdXdFWWutWag2J hmjsF1WfndemvbI7Qtlq93keXTfdnc5snZNuKYvLgRZgZdYy3w772oaJEzkaquYH 4h8qWh45U21qKLP17igS7BJXplAdd6WPotMobwo2d9Auyn1V/E0O++UKdGE+1mUf rAcaTVqh1DeHfuf2FQQ/GQVCMAIYXYLgXqYlAHdcUm7+yPVlX4ib30JbcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ58YhbcKsfBp7ALocqrAc8vgih5MB8GA1UdIwQY MBaAFDxFzkCF8C64oO0a/St5kaiqmYM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODIt ZDg2NzZhODBjZmM3LzEvbm54aUZ0d3F4OEduc0F1aHlxc0J6eS1DS0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODItZDg2NzZhODBjZmM3 LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXpQMA0G CSqGSIb3DQEBCwUAA4IBAQACJQXTgtNpvzCSesvCngsjoY0+nHgpHeMmo0vYtpLQ lvcFw1LeaBo7hCO2Tk9CZfWF95Kn7vuA9pXUPL6e6ZkFxkTw2hUp+SdvLm5CESK2 dKLtvOc74VeBZbWDWvUQ22MxM8ZjTggIG+QyM0PgWett7FE55//jbz4T8C6kjniP FpVOeGxiXXUTvVLHS/cr0vfuGmZ81kKN1CHUk2pIcgmUveB8TsDEu2eUZhUNG8cW 06kJV8fw1joxSzxT323jJJ1GYow6Dl0IIX5llpNtharrPX6Sy7PeqtnIEIIdLVv2 jItUeUtk7OUU9v5vg6z1Cl506/vOSawTh+6ieLT/76tw -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:45 2026 by rpki-client