This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/nMHjyzN-cfLTeo2WD1nlSWwfnSg.roa File: nMHjyzN-cfLTeo2WD1nlSWwfnSg.roa (raw, json) Hash identifier: wylnu5StKjnJB/fHrMMm6MTDy+IA0u25QGaNAFPAu5s= Subject key identifier: 9C:C1:E3:CB:33:7E:71:F2:D3:7A:8D:96:0F:59:E5:49:6C:1F:9D:28 Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b Certificate serial: 019C09AE18C8FBC06422B905EFDB65FA9CFD Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/nMHjyzN-cfLTeo2WD1nlSWwfnSg.roa Signing time: Thu 29 Jan 2026 12:15:30 +0000 ROA not before: Thu 29 Jan 2026 12:15:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50274 IP address blocks: 31.171.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:ae:18:c8:fb:c0:64:22:b9:05:ef:db:65:fa:9c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b Validity Not Before: Jan 29 12:15:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cc1e3cb337e71f2d37a8d960f59e5496c1f9d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:ea:32:d2:5e:c1:f5:d1:5e:75:40:66:1b: c9:e0:22:91:9b:f0:c8:dd:db:f9:7f:c9:18:b6:07: 06:c4:6e:4b:08:20:5b:10:e3:2b:e8:e2:06:b8:16: ba:c4:f0:6d:c3:6e:b6:55:50:30:9f:a0:51:0e:bb: 63:23:69:5a:12:f7:58:8d:e9:9b:d4:e1:2b:be:f8: 9e:84:27:71:8e:0a:38:d4:e3:74:ed:f7:c4:64:03: e1:be:91:f5:53:f7:c8:73:f3:df:5f:4b:1b:da:33: fc:e5:01:eb:46:c1:dd:3a:ca:78:82:7b:cd:ed:b8: 31:cf:64:b8:e4:49:96:41:76:c0:4f:5c:f7:dd:a5: 3c:00:2f:5f:4c:3f:d0:99:49:21:c0:13:db:5c:d4: 7e:61:28:55:ae:29:04:0a:5f:22:98:b8:98:8a:52: 5f:23:60:11:e0:5e:d0:c8:f3:98:b2:8e:d3:b5:a6: 55:ed:dc:d5:f6:e7:3a:bd:65:99:8b:e1:d3:8e:ed: a3:e5:76:e4:b6:e1:12:70:8d:e7:d8:82:a7:ce:18: 91:72:37:09:20:f8:c9:a6:63:d0:28:76:7b:6d:4c: 2a:ac:7d:f1:b7:20:bb:ad:d0:ea:39:39:42:f3:64: 08:e1:d3:6d:98:7f:16:61:ae:08:a3:fb:e3:2c:0e: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:E3:CB:33:7E:71:F2:D3:7A:8D:96:0F:59:E5:49:6C:1F:9D:28 X509v3 Authority Key Identifier: keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/nMHjyzN-cfLTeo2WD1nlSWwfnSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.76.0/22 Signature Algorithm: sha256WithRSAEncryption 68:ab:65:22:27:e0:00:a8:ce:65:c8:0d:16:f4:07:33:1d:9c: 6c:f2:ad:4c:78:c2:4d:cc:16:21:34:39:51:62:2c:be:66:90: 88:6e:95:c3:3c:a9:5b:bb:fc:01:72:9f:48:9d:9a:0f:c7:d5: ef:f5:f3:d8:d9:8a:b2:9b:5f:90:48:31:12:de:76:b8:1e:c0: e5:4c:ca:f7:d1:d2:06:14:16:c7:7f:13:4a:73:90:5f:99:32: 5f:a6:4f:a8:95:59:4a:97:ca:0e:7d:a9:52:d0:4b:24:20:19: 79:2f:fd:c2:76:f3:5e:74:b1:dc:0f:7b:89:9e:41:c3:46:09: 71:19:53:cc:9b:f0:ea:60:34:87:63:1b:6f:78:45:ef:68:6f: f1:3a:9b:7c:e5:0c:53:1a:92:e0:27:1a:91:eb:78:6c:41:a6: e5:b1:55:d5:6f:40:ed:9e:40:fe:00:08:a2:98:b1:db:84:c9: 85:bb:90:c0:43:2e:51:e7:75:03:9b:24:01:b4:aa:62:a6:40: e3:46:19:d9:9c:59:b7:e1:04:f9:99:bf:10:ed:62:95:21:5c: 67:aa:a7:26:86:8a:00:87:1f:1b:66:2c:58:e0:b9:ac:ad:de: c5:96:15:48:3a:3c:96:fd:16:8d:46:ba:f9:0e:ac:15:28:c6: 70:f3:be:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwJrhjI+8BkIrkF79tl+pz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0 NjZhOWIwHhcNMjYwMTI5MTIxNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2MxZTNjYjMzN2U3MWYyZDM3YThkOTYwZjU5ZTU0OTZjMWY5ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHLqMtJewfXRXnVAZhvJ4CKRm/DI 3dv5f8kYtgcGxG5LCCBbEOMr6OIGuBa6xPBtw262VVAwn6BRDrtjI2laEvdYjemb 1OErvviehCdxjgo41ON07ffEZAPhvpH1U/fIc/PfX0sb2jP85QHrRsHdOsp4gnvN 7bgxz2S45EmWQXbAT1z33aU8AC9fTD/QmUkhwBPbXNR+YShVrikECl8imLiYilJf I2AR4F7QyPOYso7TtaZV7dzV9uc6vWWZi+HTju2j5XbktuEScI3n2IKnzhiRcjcJ IPjJpmPQKHZ7bUwqrH3xtyC7rdDqOTlC82QI4dNtmH8WYa4Io/vjLA5EHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzB48szfnHy03qNlg9Z5UlsH50oMB8GA1UdIwQY MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt MTZmMTQ2YmVmOTk1LzEvbk1Ianl6Ti1jZkxUZW8yV0QxbmxTV3dmblNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmItMTZmMTQ2YmVmOTk1 LzEvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH6tMMA0G CSqGSIb3DQEBCwUAA4IBAQBoq2UiJ+AAqM5lyA0W9AczHZxs8q1MeMJNzBYhNDlR Yiy+ZpCIbpXDPKlbu/wBcp9InZoPx9Xv9fPY2Yqym1+QSDES3na4HsDlTMr30dIG FBbHfxNKc5BfmTJfpk+olVlKl8oOfalS0EskIBl5L/3CdvNedLHcD3uJnkHDRglx GVPMm/DqYDSHYxtveEXvaG/xOpt85QxTGpLgJxqR63hsQablsVXVb0DtnkD+AAii mLHbhMmFu5DAQy5R53UDmyQBtKpipkDjRhnZnFm34QT5mb8Q7WKVIVxnqqcmhooA hx8bZixY4Lmsrd7FlhVIOjyW/RaNRrr5DqwVKMZw874H -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:00 2026 by rpki-client