This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa File: Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa (raw, json) Hash identifier: E0krvPCL+AC9YfaXQIlTvkeNOsHIRhUhj8ZYv72osZM= Subject key identifier: 35:BD:52:E2:B2:09:CA:D3:59:F4:4C:86:D4:5A:BD:A0:21:9C:84:A9 Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395 Certificate serial: 019B7E3776BDCAE477DEA82147FE17C8876D Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa Signing time: Fri 02 Jan 2026 10:18:42 +0000 ROA not before: Fri 02 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203221 IP address blocks: 185.141.248.0/24 maxlen: 24 185.141.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:76:bd:ca:e4:77:de:a8:21:47:fe:17:c8:87:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395 Validity Not Before: Jan 2 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35bd52e2b209cad359f44c86d45abda0219c84a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:0a:54:62:a7:89:30:a3:f0:ae:c4:d1:b7: 7a:8f:6b:ad:f4:15:bd:d2:26:f8:9e:4f:c9:61:89: d2:be:ba:5c:6b:4e:03:77:0b:f4:c4:c0:a4:e4:81: 34:53:54:13:a4:c4:7a:88:3f:42:76:a2:52:2a:28: 11:c6:ed:62:9c:27:f0:93:51:a0:ad:4c:7a:c9:74: 71:4c:ed:bc:ec:a6:4b:d2:49:35:09:f6:71:07:a7: 6c:0c:38:3f:70:13:ec:f9:64:89:5d:b2:dc:c8:af: 4a:0a:df:5f:f6:51:a2:3f:31:2f:e5:c1:6b:b4:7d: 39:ae:fb:be:9e:36:c0:0f:1e:e2:cc:3a:98:ac:7f: b2:07:b6:6c:2f:45:da:04:3c:56:40:6c:60:b9:44: 37:f6:fd:ef:9d:ef:8f:b4:f0:d4:ad:dd:48:25:db: 1a:3b:61:a9:be:e0:d8:c1:76:f3:a2:48:76:92:b2: 19:5f:d2:c8:65:9e:a6:17:0b:27:ad:8d:3d:ca:87: 6a:ce:e9:d8:70:18:ff:9d:c6:4c:50:44:13:d0:b9: 9f:38:bb:1d:6a:6d:30:9e:6a:c0:56:5c:5a:05:54: 9c:8d:73:18:25:80:6a:dc:d8:41:3c:2e:84:f9:e3: ce:20:3d:42:6d:ec:d6:57:95:c8:8d:c1:63:09:b5: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BD:52:E2:B2:09:CA:D3:59:F4:4C:86:D4:5A:BD:A0:21:9C:84:A9 X509v3 Authority Key Identifier: keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.248.0/23 Signature Algorithm: sha256WithRSAEncryption 19:32:b5:85:50:91:4b:0a:6d:f7:15:00:5e:07:6f:85:ab:92: 13:81:5a:3f:1b:63:03:5e:34:d4:72:17:62:41:53:10:6e:a0: db:32:e6:88:46:e2:c9:13:4c:97:32:a0:2e:38:42:77:bb:d4: f3:81:0a:18:60:6c:8d:e6:54:b7:1b:a3:1c:1d:6a:1c:32:1a: 84:6f:a3:b6:49:4c:d2:df:31:73:a6:33:bf:b3:43:c1:da:53: 18:02:0e:31:ad:25:06:ae:4c:39:1c:ed:2b:5b:eb:24:14:e3: 42:28:6b:81:5e:1f:c5:4e:73:5f:f5:eb:cc:3d:58:6f:4c:7f: 3d:51:75:4e:d7:69:75:05:80:b5:02:25:90:b7:f8:74:17:9c: 15:39:ec:eb:f7:ed:23:b3:bf:8f:2b:9a:f8:da:70:7a:80:25: 76:a1:1a:c3:e0:52:e3:fa:41:d9:62:59:5c:37:01:39:54:69: 17:86:31:c5:f8:64:33:b8:be:36:d1:87:1b:10:21:a5:2b:17: 2c:8d:66:c6:09:0e:4b:29:59:d9:9a:08:8d:b1:8e:c0:f1:10: b5:43:75:9c:3c:23:c3:8a:19:66:49:fb:60:d1:4b:b9:04:24: b8:bc:36:c1:ce:37:ac:49:75:bd:2b:b1:0c:d0:af:fe:1b:3b: de:00:69:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N3a9yuR33qghR/4XyIdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5M2IwNjNmYzYzZThhMWFiYTFmNDMwYjJkMDc0ZGJlMjcw YmUzOTUwHhcNMjYwMTAyMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWJkNTJlMmIyMDljYWQzNTlmNDRjODZkNDVhYmRhMDIxOWM4NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUIKVGKniTCj8K7E0bd6j2ut9BW9 0ib4nk/JYYnSvrpca04Ddwv0xMCk5IE0U1QTpMR6iD9CdqJSKigRxu1inCfwk1Gg rUx6yXRxTO287KZL0kk1CfZxB6dsDDg/cBPs+WSJXbLcyK9KCt9f9lGiPzEv5cFr tH05rvu+njbADx7izDqYrH+yB7ZsL0XaBDxWQGxguUQ39v3vne+PtPDUrd1IJdsa O2GpvuDYwXbzokh2krIZX9LIZZ6mFwsnrY09yodqzunYcBj/ncZMUEQT0LmfOLsd am0wnmrAVlxaBVScjXMYJYBq3NhBPC6E+ePOID1CbezWV5XIjcFjCbU2aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDW9UuKyCcrTWfRMhtRavaAhnISpMB8GA1UdIwQY MBaAFMk7Bj/GPooauh9DCy0HTb4nC+OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMt OTQwYmM4MTkxNjU5LzEvTmIxUzRySUp5dE5aOUV5RzFGcTlvQ0djaEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMtOTQwYmM4MTkxNjU5 LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuY34MA0G CSqGSIb3DQEBCwUAA4IBAQAZMrWFUJFLCm33FQBeB2+Fq5ITgVo/G2MDXjTUchdi QVMQbqDbMuaIRuLJE0yXMqAuOEJ3u9TzgQoYYGyN5lS3G6McHWocMhqEb6O2SUzS 3zFzpjO/s0PB2lMYAg4xrSUGrkw5HO0rW+skFONCKGuBXh/FTnNf9evMPVhvTH89 UXVO12l1BYC1AiWQt/h0F5wVOezr9+0js7+PK5r42nB6gCV2oRrD4FLj+kHZYllc NwE5VGkXhjHF+GQzuL420YcbECGlKxcsjWbGCQ5LKVnZmgiNsY7A8RC1Q3WcPCPD ihlmSftg0Uu5BCS4vDbBzjesSXW9K7EM0K/+GzveAGn2 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:45 2026 by rpki-client