This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/NIYrG37trab2P9JVD0eE6NO-0Dk.roa File: NIYrG37trab2P9JVD0eE6NO-0Dk.roa (raw, json) Hash identifier: tSXqLOKf3W/YzIEC+Y4rvZIML+H/1ngQ/p6IkWH1HL8= Subject key identifier: 34:86:2B:1B:7E:ED:AD:A6:F6:3F:D2:55:0F:47:84:E8:D3:BE:D0:39 Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72 Certificate serial: 019B76EB5582E9D6151A1A87A7F67C563D64 Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/NIYrG37trab2P9JVD0eE6NO-0Dk.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200713 IP address blocks: 185.66.108.0/22 maxlen: 22 185.117.168.0/22 maxlen: 22 2a0e:f0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:55:82:e9:d6:15:1a:1a:87:a7:f6:7c:56:3d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34862b1b7eedada6f63fd2550f4784e8d3bed039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:bd:03:17:a0:a9:4f:e7:e4:bd:48:5f:0d: 4a:c1:4b:1f:c4:4c:3f:b6:e6:63:9f:f6:fa:56:fa: d4:cb:8d:f7:d9:40:46:e9:db:0e:23:f6:67:05:46: 2c:47:9e:dd:af:66:76:84:85:54:e8:b7:be:37:50: ef:dd:a3:65:85:33:64:63:d8:24:bb:ee:98:77:66: 86:01:79:9b:6c:ea:f2:a8:bb:1f:12:28:3b:ba:d5: c0:50:21:98:68:d2:10:5c:61:1f:30:ec:04:1c:0e: 48:f9:ae:8d:19:9e:89:50:95:52:5c:25:eb:dd:43: dd:8e:21:f6:32:e5:46:0d:fc:e5:2a:53:ba:ff:dc: 13:a2:27:3f:1a:d8:c6:1d:9c:07:d5:f9:bf:5f:85: f4:17:5b:d8:f9:04:1f:97:48:38:04:41:0d:dd:e4: db:2e:f7:82:32:46:51:28:e5:b2:41:a4:11:20:82: 32:28:73:65:16:3c:96:b0:66:d7:dc:72:9d:3a:b1: e2:1a:51:1a:be:af:35:c3:c9:a6:3f:3a:be:fc:86: 5a:a9:78:23:94:2c:11:a0:31:9b:b6:d9:c8:f7:bf: 62:cf:c0:95:41:de:de:0f:39:e0:e5:ed:a3:14:ba: ab:3b:de:1d:f5:59:c6:95:21:78:69:fc:d4:e9:4f: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:86:2B:1B:7E:ED:AD:A6:F6:3F:D2:55:0F:47:84:E8:D3:BE:D0:39 X509v3 Authority Key Identifier: keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/NIYrG37trab2P9JVD0eE6NO-0Dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.108.0/22 185.117.168.0/22 IPv6: 2a0e:f0c0::/29 Signature Algorithm: sha256WithRSAEncryption 10:64:55:87:d0:39:f4:55:86:48:32:fa:33:66:10:dc:c5:03: 5d:23:f0:da:60:4b:e9:80:cc:7a:b0:b9:6d:2e:97:a8:bc:72: ee:ca:24:92:30:2a:25:d1:d3:b6:f3:f5:6e:41:b0:91:07:0c: 8a:ed:2d:82:38:dd:8a:77:ea:ba:52:7a:8e:08:9b:14:74:9e: d5:4f:40:ab:91:fb:67:6b:f5:f9:c3:55:19:5a:49:6b:12:da: b8:9c:1c:9a:56:b7:64:43:0d:58:b9:40:49:d2:09:5e:41:39: bd:ae:a4:c0:ee:c9:69:d4:12:9b:b7:79:89:af:7b:7b:39:1d: ca:4c:01:dd:6d:6a:86:c8:d9:b5:af:e5:b0:b7:75:ab:c8:e4: 1f:fc:d8:5c:96:36:95:8b:f2:f9:36:ff:d7:bf:50:a7:0b:20: 51:ca:96:9f:71:46:a4:e7:41:f6:b1:5a:26:c2:d1:2f:f4:c3: 73:53:5f:fc:51:7b:a3:8b:87:22:73:4d:73:9e:d1:c2:bc:95: fc:76:27:13:63:69:1d:70:0e:7a:0d:a9:62:3b:ca:a3:9f:df: c0:df:22:d6:c8:df:91:56:0e:6c:72:dd:ec:ff:a9:64:c8:0e: 33:13:ee:57:a7:be:13:a1:13:dc:50:96:05:2d:34:20:81:14: 31:d4:63:fb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt261WC6dYVGhqHp/Z8Vj1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzY0MGRhN2YxYmMyM2VkNDU5OWY4NGEwODUzYzgzOTlm MzVkNzIwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg2MmIxYjdlZWRhZGE2ZjYzZmQyNTUwZjQ3ODRlOGQzYmVkMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9u9AxegqU/n5L1IXw1KwUsfxEw/ tuZjn/b6VvrUy4332UBG6dsOI/ZnBUYsR57dr2Z2hIVU6Le+N1Dv3aNlhTNkY9gk u+6Yd2aGAXmbbOryqLsfEig7utXAUCGYaNIQXGEfMOwEHA5I+a6NGZ6JUJVSXCXr 3UPdjiH2MuVGDfzlKlO6/9wToic/GtjGHZwH1fm/X4X0F1vY+QQfl0g4BEEN3eTb LveCMkZRKOWyQaQRIIIyKHNlFjyWsGbX3HKdOrHiGlEavq81w8mmPzq+/IZaqXgj lCwRoDGbttnI979iz8CVQd7eDzng5e2jFLqrO94d9VnGlSF4afzU6U//OQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDSGKxt+7a2m9j/SVQ9HhOjTvtA5MB8GA1UdIwQY MBaAFJ82QNp/G8I+1FmfhKCFPIOZ811yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMt ZWRjMzM2NjUyZWQ3LzEvTklZckczN3RyYWIyUDlKVkQwZUU2Tk8tMERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMtZWRjMzM2NjUyZWQ3 LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUJsAwQC uXWoMA0EAgACMAcDBQMqDvDAMA0GCSqGSIb3DQEBCwUAA4IBAQAQZFWH0Dn0VYZI MvozZhDcxQNdI/DaYEvpgMx6sLltLpeovHLuyiSSMCol0dO28/VuQbCRBwyK7S2C ON2Kd+q6UnqOCJsUdJ7VT0Crkftna/X5w1UZWklrEtq4nByaVrdkQw1YuUBJ0gle QTm9rqTA7slp1BKbt3mJr3t7OR3KTAHdbWqGyNm1r+Wwt3WryOQf/NhcljaVi/L5 Nv/Xv1CnCyBRypafcUak50H2sVomwtEv9MNzU1/8UXuji4cic01zntHCvJX8dicT Y2kdcA56DaliO8qjn9/A3yLWyN+RVg5sct3s/6lkyA4zE+5Xp74ToRPcUJYFLTQg gRQx1GP7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:44 2026 by rpki-client