This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/NGm2691GZapBpm1gs6Z4jmfhBoM.roa File: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (raw, json) Hash identifier: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc= Subject key identifier: 34:69:B6:EB:DD:46:65:AA:41:A6:6D:60:B3:A6:78:8E:67:E1:06:83 Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e Certificate serial: 019B7D5B9A992D546C3E3B49F6DC6C159D30 Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/NGm2691GZapBpm1gs6Z4jmfhBoM.roa Signing time: Fri 02 Jan 2026 06:18:33 +0000 ROA not before: Fri 02 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31424 IP address blocks: 193.9.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:9a:99:2d:54:6c:3e:3b:49:f6:dc:6c:15:9d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e Validity Not Before: Jan 2 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3469b6ebdd4665aa41a66d60b3a6788e67e10683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:d9:de:c9:7e:e8:ad:65:a1:0f:1f:47:bf: 47:0f:70:23:e8:fa:16:af:22:b1:59:32:52:fa:c7: 9f:b1:98:09:78:4c:aa:46:00:de:a0:b8:48:01:9f: d1:c1:58:50:b8:51:47:46:0d:b3:2a:76:1e:fc:ed: da:96:b7:01:74:e7:20:61:3c:a8:24:a6:c0:3d:39: 5d:1d:3c:1c:4c:70:40:56:11:9e:cd:bd:e1:6d:8a: 9e:7f:d6:f2:88:79:2a:ec:f4:d2:4e:dd:22:c2:e7: ae:88:98:c2:dc:b4:44:4d:8a:ca:37:df:e2:76:a4: a8:76:88:87:59:54:94:fb:d5:11:72:a4:2e:8e:1a: da:8b:01:77:5e:43:60:02:86:d6:82:eb:8a:44:fd: de:e4:22:d4:ac:33:8d:61:00:7f:df:fc:59:05:c9: 2a:9d:35:79:e8:8a:a6:ba:c9:c0:0c:93:ac:89:30: 04:5b:b6:20:99:5c:95:f0:9a:30:53:82:51:fe:4b: 53:7e:50:ae:c5:9c:56:09:21:b6:de:f6:ef:14:c5: 7f:52:89:5e:7b:e3:6f:1c:cf:54:13:03:e6:31:e9: 6b:51:22:cb:97:6e:58:3f:9e:16:e0:88:30:7f:3d: 7d:13:6c:ee:30:27:61:12:98:ab:26:67:56:73:c2: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:69:B6:EB:DD:46:65:AA:41:A6:6D:60:B3:A6:78:8E:67:E1:06:83 X509v3 Authority Key Identifier: keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/NGm2691GZapBpm1gs6Z4jmfhBoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.122.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:f5:8b:4f:3a:b5:fc:d6:ff:b3:52:ee:e5:a9:11:2c:9e:bd: c6:9c:ef:3f:76:a6:ed:02:f1:aa:a4:97:17:9b:ae:88:f7:b1: ca:b7:ea:e1:72:22:0d:bf:59:65:19:a9:d2:00:b2:8e:d0:9d: b0:e7:1f:fd:3d:70:cc:bc:f8:37:be:7b:91:60:4d:a3:d6:0a: d3:2f:09:7a:13:63:d2:d4:50:30:17:3a:6d:f6:5e:e1:3e:38: 1a:ff:7b:7a:9b:bc:80:0f:9e:d7:d8:6c:1d:b5:12:05:0a:cd: ea:23:ed:d2:b6:ea:d2:c8:fe:c4:e5:08:3f:29:d7:16:60:f7: 23:0e:18:be:74:48:2e:f2:3d:4c:e5:30:b5:7f:fa:e4:05:54: eb:12:37:db:16:96:ba:bc:8c:59:70:1a:c3:18:fe:79:aa:40: b8:8b:27:a3:0d:17:f1:fc:93:08:6e:d2:2a:28:ab:79:b3:26: b8:49:68:b8:ac:a3:35:45:1e:71:66:8c:b1:45:16:6f:23:7d: 2c:b7:b2:d8:3a:ca:a5:fb:cc:8f:9f:d2:a2:de:b9:8a:b6:36: 34:dd:d6:a7:c7:63:db:14:20:be:03:7e:44:fc:df:7c:7f:b6: 20:cd:68:9a:7c:f0:ad:c5:86:f4:a1:f9:0a:94:62:41:92:6a: c4:da:a5:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W5qZLVRsPjtJ9txsFZ0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4 ZmJmN2UwHhcNMjYwMTAyMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDY5YjZlYmRkNDY2NWFhNDFhNjZkNjBiM2E2Nzg4ZTY3ZTEwNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYLZ3sl+6K1loQ8fR79HD3Aj6PoW ryKxWTJS+sefsZgJeEyqRgDeoLhIAZ/RwVhQuFFHRg2zKnYe/O3alrcBdOcgYTyo JKbAPTldHTwcTHBAVhGezb3hbYqef9byiHkq7PTSTt0iwueuiJjC3LRETYrKN9/i dqSodoiHWVSU+9URcqQujhraiwF3XkNgAobWguuKRP3e5CLUrDONYQB/3/xZBckq nTV56IqmusnADJOsiTAEW7YgmVyV8JowU4JR/ktTflCuxZxWCSG23vbvFMV/Uole e+NvHM9UEwPmMelrUSLLl25YP54W4Igwfz19E2zuMCdhEpirJmdWc8JFDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRptuvdRmWqQaZtYLOmeI5n4QaDMB8GA1UdIwQY MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt MWNjYzljMjk1ZThlLzEvTkdtMjY5MUdaYXBCcG0xZ3M2WjRqbWZoQm9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQl6MA0G CSqGSIb3DQEBCwUAA4IBAQAu9YtPOrX81v+zUu7lqREsnr3GnO8/dqbtAvGqpJcX m66I97HKt+rhciINv1llGanSALKO0J2w5x/9PXDMvPg3vnuRYE2j1grTLwl6E2PS 1FAwFzpt9l7hPjga/3t6m7yAD57X2GwdtRIFCs3qI+3SturSyP7E5Qg/KdcWYPcj Dhi+dEgu8j1M5TC1f/rkBVTrEjfbFpa6vIxZcBrDGP55qkC4iyejDRfx/JMIbtIq KKt5sya4SWi4rKM1RR5xZoyxRRZvI30st7LYOsql+8yPn9Ki3rmKtjY03danx2Pb FCC+A35E/N98f7YgzWiafPCtxYb0ofkKlGJBkmrE2qX7 -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:10 2026 by rpki-client