This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/N_zuLdKl0mVys_-UyedRBT3UcVw.roa File: N_zuLdKl0mVys_-UyedRBT3UcVw.roa (raw, json) Hash identifier: aNJIdzfkQM3kZ7Cerr5TRJz+OYKGezZ09uDQfRvE0nk= Subject key identifier: 37:FC:EE:2D:D2:A5:D2:65:72:B3:FF:94:C9:E7:51:05:3D:D4:71:5C Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E0E24F9FC40B3BDB0A55BEF95D5EC Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/N_zuLdKl0mVys_-UyedRBT3UcVw.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397032 IP address blocks: 212.192.28.0/24 maxlen: 24 212.192.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0e:24:f9:fc:40:b3:bd:b0:a5:5b:ef:95:d5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37fcee2dd2a5d26572b3ff94c9e751053dd4715c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:ee:12:8f:a7:12:68:5a:ed:58:51:b3:9e: 23:dd:a0:4f:98:76:f2:8e:db:99:40:b3:5a:4d:a6: 81:1b:0b:5a:c0:ea:71:ca:77:bd:7e:98:85:bc:c8: a5:76:8d:4a:41:82:a6:e7:19:00:29:a0:b5:61:b4: a4:f0:f2:e2:97:9d:85:0b:e1:74:24:7f:54:ab:6b: b3:39:f5:9a:6b:5d:d2:d6:c4:51:a6:64:27:5a:a5: b2:f4:66:cc:e8:95:0e:e1:6a:09:03:73:7a:43:de: 80:5c:44:22:2b:7d:3c:ea:29:c1:33:d2:91:50:2a: e2:a4:76:4d:11:2e:a0:60:97:a9:56:8e:38:66:2d: 6a:51:b3:79:1b:20:14:1a:3e:b4:bf:57:26:ec:da: eb:f7:56:95:3d:cd:a5:2c:7d:dc:bb:0f:48:c3:9b: 91:5a:8c:59:8e:61:60:2d:fb:e3:a0:59:61:df:be: 0c:f2:15:a8:0e:d1:bd:c2:4d:e0:3c:d3:82:1e:b6: 4a:a5:51:d2:85:2f:d6:46:59:c2:24:e0:93:45:d5: 9f:5a:d1:68:1d:8b:bd:97:2e:9b:6e:4b:db:d9:c8: 82:5f:f9:9b:72:70:76:8e:b0:47:1c:80:43:3f:ac: 8c:01:28:c8:52:29:bc:a0:4e:19:b6:23:80:03:b6: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:EE:2D:D2:A5:D2:65:72:B3:FF:94:C9:E7:51:05:3D:D4:71:5C X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/N_zuLdKl0mVys_-UyedRBT3UcVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.28.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:98:a4:8b:a4:ad:6f:50:c3:2d:1e:11:80:89:55:53:18:24: 6a:10:cb:dc:af:04:81:c5:83:96:c3:c7:0f:3e:a7:85:cf:25: b2:51:52:b1:43:36:ef:b2:a7:6c:ec:f4:e5:d4:25:3e:5d:19: 22:c2:c4:b1:8c:ec:c3:69:fa:01:df:09:8c:97:00:85:11:eb: 9c:1e:39:5d:e1:33:ff:1c:b4:a2:d6:1f:40:ed:e6:ad:47:cd: bb:cf:ce:d3:91:0c:ae:ab:eb:00:ff:a3:44:dd:09:a8:36:9d: c3:82:63:5f:d6:82:32:c1:6c:78:9f:0a:12:02:60:78:f5:a4: d8:3a:ee:c6:3f:3c:8c:f6:d5:ca:70:28:9e:a9:97:b3:b2:c8: 88:0c:e7:9e:66:5b:05:12:cd:c6:37:03:fc:cc:53:73:ec:47: a2:da:30:5d:e3:f1:a2:ef:c4:50:31:ea:60:9c:b8:c2:54:d3: 90:98:d7:19:12:1e:2a:a4:e2:e4:81:d1:79:cb:0b:6a:9b:e8: 58:f8:27:0f:e3:7f:4d:d7:73:37:c5:61:98:8b:63:79:f5:3e: 79:7d:57:de:cc:1c:05:62:f7:09:29:05:42:3f:94:8e:03:89: ad:38:01:ea:d6:67:06:fb:42:12:e9:82:49:7b:eb:c8:a3:b4: 99:2a:2d:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fg4k+fxAs72wpVvvldXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2ZjZWUyZGQyYTVkMjY1NzJiM2ZmOTRjOWU3NTEwNTNkZDQ3MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3fuEo+nEmha7VhRs54j3aBPmHby jtuZQLNaTaaBGwtawOpxyne9fpiFvMildo1KQYKm5xkAKaC1YbSk8PLil52FC+F0 JH9Uq2uzOfWaa13S1sRRpmQnWqWy9GbM6JUO4WoJA3N6Q96AXEQiK3086inBM9KR UCripHZNES6gYJepVo44Zi1qUbN5GyAUGj60v1cm7Nrr91aVPc2lLH3cuw9Iw5uR WoxZjmFgLfvjoFlh374M8hWoDtG9wk3gPNOCHrZKpVHShS/WRlnCJOCTRdWfWtFo HYu9ly6bbkvb2ciCX/mbcnB2jrBHHIBDP6yMASjIUim8oE4ZtiOAA7Y8kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDf87i3SpdJlcrP/lMnnUQU91HFcMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvTl96dUxkS2wwbVZ5c18tVXllZFJCVDNVY1Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1MAcMA0G CSqGSIb3DQEBCwUAA4IBAQBKmKSLpK1vUMMtHhGAiVVTGCRqEMvcrwSBxYOWw8cP PqeFzyWyUVKxQzbvsqds7PTl1CU+XRkiwsSxjOzDafoB3wmMlwCFEeucHjld4TP/ HLSi1h9A7eatR827z87TkQyuq+sA/6NE3QmoNp3DgmNf1oIywWx4nwoSAmB49aTY Ou7GPzyM9tXKcCieqZezssiIDOeeZlsFEs3GNwP8zFNz7Eei2jBd4/Gi78RQMepg nLjCVNOQmNcZEh4qpOLkgdF5ywtqm+hY+CcP439N13M3xWGYi2N59T55fVfezBwF YvcJKQVCP5SOA4mtOAHq1mcG+0IS6YJJe+vIo7SZKi2x -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:31 2026 by rpki-client