This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/nHM0DFEdkMMw68BfCu8SxI-WKpo.roa File: nHM0DFEdkMMw68BfCu8SxI-WKpo.roa (raw, json) Hash identifier: lV1ZePN72sIOtMuPDcQdRq/kQ5D5g83a0m3tXbtpunw= Subject key identifier: 9C:73:34:0C:51:1D:90:C3:30:EB:C0:5F:0A:EF:12:C4:8F:96:2A:9A Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af Certificate serial: 019B77C75582121A86B0974E2B18EC67B893 Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/nHM0DFEdkMMw68BfCu8SxI-WKpo.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20794 IP address blocks: 217.12.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:55:82:12:1a:86:b0:97:4e:2b:18:ec:67:b8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c73340c511d90c330ebc05f0aef12c48f962a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:60:7f:58:37:18:9d:8a:97:54:70:91:ab: 6c:14:21:37:f6:71:9b:ed:2d:da:5a:86:ba:f0:55: 84:05:0d:65:73:6f:91:ce:04:69:ef:b6:13:68:61: 5c:a2:1e:ae:cd:c6:94:03:90:97:96:f8:85:32:44: 5f:69:bd:b2:90:b2:08:c9:c6:93:6a:93:2f:bf:be: c8:a4:9c:63:49:e8:9c:b4:46:1e:5a:ba:c9:5a:b0: 8e:f9:1f:35:58:bc:b4:33:db:36:9d:12:6b:56:45: ab:27:35:36:e5:7c:3e:e6:21:45:44:85:99:3f:d7: 26:eb:15:74:2e:78:68:35:e2:d2:ca:86:a2:ff:ac: 06:e7:99:a1:99:4e:ed:23:1e:03:de:58:19:f8:a9: cc:31:8c:89:2c:0f:8b:3d:32:84:37:4f:5f:21:45: 7b:33:ea:87:c6:f2:64:ca:a0:c8:a1:04:9b:aa:7e: 3b:1d:34:b1:81:ec:a3:e0:30:b4:1a:df:fe:c8:91: d2:d2:e3:54:9b:47:01:9f:94:52:7f:57:eb:89:12: 34:36:97:88:fd:ac:c9:a7:1f:ca:f5:a5:dd:fb:98: 50:d9:d6:f6:ed:22:9f:e2:70:ee:9b:7c:4a:f6:af: ef:9c:06:46:0f:58:4e:5d:60:eb:b0:7d:d6:15:e1: c7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:73:34:0C:51:1D:90:C3:30:EB:C0:5F:0A:EF:12:C4:8F:96:2A:9A X509v3 Authority Key Identifier: keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/nHM0DFEdkMMw68BfCu8SxI-WKpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.12.160.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:de:05:58:8e:f4:a7:d6:d6:f2:28:de:90:e4:1e:a5:d6:ff: f0:8b:ff:9f:74:c0:8d:17:39:be:e7:bb:8a:41:86:83:e9:a3: da:c7:a7:d5:80:0e:28:e6:41:f1:9b:5b:a5:ec:09:a5:0b:b6: 4e:ce:f7:6a:88:aa:2a:50:0b:3c:7d:ab:26:ae:ea:48:79:18: 91:12:a3:c2:ab:19:da:b5:48:da:d6:25:21:35:47:08:a9:dc: 42:eb:8f:54:ae:47:cd:88:83:29:e3:37:fe:43:c0:f6:bc:ec: 7f:36:1a:73:83:07:41:d3:7e:08:5f:d2:c6:7d:54:52:92:3b: e6:ee:ae:86:7b:27:87:4f:f5:31:f8:cb:37:91:c6:96:81:31: e6:d3:f2:da:ca:85:01:d3:97:7c:60:08:a6:66:aa:c6:8e:3f: de:cf:83:b5:2c:98:f4:ce:5c:1c:0c:62:cb:43:fa:12:d0:4b: ee:8c:df:0a:28:a8:17:78:30:ee:d0:7b:4e:1c:f1:58:99:e8: 65:5c:f6:2f:12:20:bf:a7:08:00:02:e6:97:13:c5:44:02:24: 4d:42:3c:9e:8f:6e:35:43:c9:53:d2:86:32:52:3b:a9:84:37: b7:1b:dc:7a:f7:d7:ff:38:b1:20:79:74:28:75:ef:27:89:29: 6d:31:66:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1WCEhqGsJdOKxjsZ7iTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYmZhZDk3YTU4Y2I1MGNiZmM4NGVjODY1YWYzZDcxYzhi MTg1YWYwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzczMzQwYzUxMWQ5MGMzMzBlYmMwNWYwYWVmMTJjNDhmOTYyYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuFgf1g3GJ2Kl1RwkatsFCE39nGb 7S3aWoa68FWEBQ1lc2+RzgRp77YTaGFcoh6uzcaUA5CXlviFMkRfab2ykLIIycaT apMvv77IpJxjSeictEYeWrrJWrCO+R81WLy0M9s2nRJrVkWrJzU25Xw+5iFFRIWZ P9cm6xV0LnhoNeLSyoai/6wG55mhmU7tIx4D3lgZ+KnMMYyJLA+LPTKEN09fIUV7 M+qHxvJkyqDIoQSbqn47HTSxgeyj4DC0Gt/+yJHS0uNUm0cBn5RSf1friRI0NpeI /azJpx/K9aXd+5hQ2db27SKf4nDum3xK9q/vnAZGD1hOXWDrsH3WFeHHowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxzNAxRHZDDMOvAXwrvEsSPliqaMB8GA1UdIwQY MBaAFEG/rZeljLUMv8hOyGWvPXHIsYWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAt YmY3OGJiODVhNjllLzEvbkhNMERGRWRrTU13NjhCZkN1OFN4SS1XS3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAtYmY3OGJiODVhNjll LzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QygMA0G CSqGSIb3DQEBCwUAA4IBAQBa3gVYjvSn1tbyKN6Q5B6l1v/wi/+fdMCNFzm+57uK QYaD6aPax6fVgA4o5kHxm1ul7AmlC7ZOzvdqiKoqUAs8fasmrupIeRiREqPCqxna tUja1iUhNUcIqdxC649UrkfNiIMp4zf+Q8D2vOx/NhpzgwdB034IX9LGfVRSkjvm 7q6GeyeHT/Ux+Ms3kcaWgTHm0/LayoUB05d8YAimZqrGjj/ez4O1LJj0zlwcDGLL Q/oS0EvujN8KKKgXeDDu0HtOHPFYmehlXPYvEiC/pwgAAuaXE8VEAiRNQjyej241 Q8lT0oYyUjuphDe3G9x699f/OLEgeXQode8niSltMWYh -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:31 2026 by rpki-client