This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa File: nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa (raw, json) Hash identifier: kwgj2EY4C+VKLivxvxueFyLeX+WYaalA75ogbGHFJJY= Subject key identifier: 9C:62:E9:01:BC:CF:21:AD:1F:60:80:2F:06:9D:8D:99:FB:0C:2C:C6 Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889 Certificate serial: 019B7E387993BE370D5E74042FD4214E02CE Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25459 IP address blocks: 185.44.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:79:93:be:37:0d:5e:74:04:2f:d4:21:4e:02:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c62e901bccf21ad1f60802f069d8d99fb0c2cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:72:47:87:0a:bb:eb:57:97:d7:66:7c:51: 98:d8:9e:a1:69:ec:7f:aa:bf:60:bd:85:04:54:1f: 5d:23:4f:e8:6f:22:84:3c:57:74:1b:2f:7d:93:33: 6f:bb:6a:6f:7a:e4:51:f6:e3:3a:da:a4:e4:fe:2a: 3f:2c:7f:c5:e8:14:48:d9:a9:fd:df:d5:e7:7e:66: 41:88:4c:74:67:94:b1:ce:03:08:2b:85:fd:18:b2: ef:6c:3f:9c:1a:51:9e:20:3c:17:6e:35:7e:38:4c: 03:e0:aa:88:ce:83:21:76:7e:c9:18:cf:1d:69:93: a7:d8:b4:b0:71:af:2f:19:00:8a:ea:c0:8e:a6:11: ac:16:71:a4:0b:dc:6c:25:42:3e:8e:ef:4c:58:79: 79:cd:90:1e:0e:79:7f:43:31:57:c7:fe:39:fb:59: c8:23:41:c4:94:9b:ee:58:81:bb:d4:fb:65:51:d3: 14:62:09:0f:b0:6e:b7:aa:12:fe:a1:b6:7e:6c:c1: fd:66:10:5b:d0:59:b3:cd:e1:43:a0:ca:09:16:97: 16:1c:0d:96:e0:0e:14:fd:bc:a4:bf:02:3d:e0:9f: 6b:4b:4f:6a:9d:a8:be:3c:e9:9e:e4:d7:7f:d1:62: 43:b2:01:6c:7b:e7:db:30:b0:22:8c:f3:27:74:05: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:62:E9:01:BC:CF:21:AD:1F:60:80:2F:06:9D:8D:99:FB:0C:2C:C6 X509v3 Authority Key Identifier: keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.168.0/22 Signature Algorithm: sha256WithRSAEncryption 80:9b:52:b4:0a:d0:b5:e9:3d:cf:07:49:cd:b0:07:29:d9:54: be:20:ac:22:bd:6c:29:f0:28:61:db:74:d3:9f:05:bd:cc:71: 16:15:cc:41:cd:20:a1:6c:f1:97:eb:d8:27:bc:18:08:39:a6: dc:e9:b8:35:9b:bc:24:5b:8b:66:83:18:20:59:c2:9f:91:83: b2:f3:5c:11:40:c7:32:53:ed:39:55:eb:44:7c:41:03:39:f0: ad:74:57:5e:75:a6:0b:05:a4:12:a3:2c:19:c1:7a:15:b0:97: e4:ff:d1:f3:6e:6c:14:09:be:d1:c3:40:91:62:31:38:9d:8a: da:a5:a5:01:4c:da:23:68:48:78:ec:8e:e1:c3:c8:65:e9:0c: 21:55:5c:59:5e:92:67:75:14:33:f9:85:3b:01:d2:58:3b:3f: 27:09:76:58:ef:44:f7:50:d4:5c:9e:2e:de:e0:f2:32:ce:fc: ed:a4:be:8d:45:39:94:3d:d3:dc:d3:75:e0:d4:22:98:08:7f: a0:fb:e1:6a:ad:92:82:ad:9e:72:9d:5b:0c:45:25:3a:40:fc: 1f:a1:f8:ac:b4:f9:8f:a4:8a:6d:c2:dc:bb:1a:52:1f:55:97: a6:1d:13:ce:6a:34:82:f9:a5:d0:ae:ba:2d:51:e0:fd:8c:e9: 05:39:12:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHmTvjcNXnQEL9QhTgLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYWQ0Yzg5ZjdhZWQ4NjgxZDAyMDJkMjI0NzlkODZlMTQ2 MmY4ODkwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzYyZTkwMWJjY2YyMWFkMWY2MDgwMmYwNjlkOGQ5OWZiMGMyY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRFyR4cKu+tXl9dmfFGY2J6haex/ qr9gvYUEVB9dI0/obyKEPFd0Gy99kzNvu2pveuRR9uM62qTk/io/LH/F6BRI2an9 39XnfmZBiEx0Z5SxzgMIK4X9GLLvbD+cGlGeIDwXbjV+OEwD4KqIzoMhdn7JGM8d aZOn2LSwca8vGQCK6sCOphGsFnGkC9xsJUI+ju9MWHl5zZAeDnl/QzFXx/45+1nI I0HElJvuWIG71PtlUdMUYgkPsG63qhL+obZ+bMH9ZhBb0FmzzeFDoMoJFpcWHA2W 4A4U/bykvwI94J9rS09qnai+POme5Nd/0WJDsgFse+fbMLAijPMndAXiWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxi6QG8zyGtH2CALwadjZn7DCzGMB8GA1UdIwQY MBaAFN6tTIn3rthoHQIC0iR52G4UYviJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUt NWJjZmNlNWNhMmM3LzEvbkdMcEFielBJYTBmWUlBdkJwMk5tZnNNTE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUtNWJjZmNlNWNhMmM3 LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSyoMA0G CSqGSIb3DQEBCwUAA4IBAQCAm1K0CtC16T3PB0nNsAcp2VS+IKwivWwp8Chh23TT nwW9zHEWFcxBzSChbPGX69gnvBgIOabc6bg1m7wkW4tmgxggWcKfkYOy81wRQMcy U+05VetEfEEDOfCtdFdedaYLBaQSoywZwXoVsJfk/9HzbmwUCb7Rw0CRYjE4nYra paUBTNojaEh47I7hw8hl6QwhVVxZXpJndRQz+YU7AdJYOz8nCXZY70T3UNRcni7e 4PIyzvztpL6NRTmUPdPc03Xg1CKYCH+g++FqrZKCrZ5ynVsMRSU6QPwfofistPmP pIptwty7GlIfVZemHRPOajSC+aXQrrotUeD9jOkFORLi -----END CERTIFICATE-----Generated at Mon Jan 26 21:47:55 2026 by rpki-client