This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/nmpgPMBFt9dLqNX0M81_MpAwEgA.roa File: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (raw, json) Hash identifier: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg= Subject key identifier: 9E:6A:60:3C:C0:45:B7:D7:4B:A8:D5:F4:33:CD:7F:32:90:30:12:00 Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Certificate serial: 019B7E37BF86BE8EC4FF3B222A205D863B9E Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/nmpgPMBFt9dLqNX0M81_MpAwEgA.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206388 IP address blocks: 194.110.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bf:86:be:8e:c4:ff:3b:22:2a:20:5d:86:3b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e6a603cc045b7d74ba8d5f433cd7f3290301200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:e7:f2:2b:c5:20:f9:ae:4e:29:5b:9d:0d: 11:d7:e0:ad:dd:76:ef:96:bb:7e:11:e5:96:dd:9f: f8:71:12:e6:8b:df:c1:a1:c7:14:30:99:44:20:0c: b4:7a:aa:90:5c:db:ea:21:b8:84:2e:71:e8:ee:cb: 03:c2:6e:70:4a:be:22:dc:33:e6:68:13:d9:33:4f: c0:35:76:59:9e:59:3e:4f:84:bd:25:c7:ab:12:e3: 1b:d2:3e:73:06:d6:c2:f2:40:5a:43:3b:b2:a4:12: 48:3e:da:8b:28:c2:93:b9:20:11:f7:6b:4e:27:46: c5:f8:a1:33:16:8d:6e:33:c2:38:ee:08:bc:7f:f2: 2e:27:5a:4e:96:b0:15:77:cc:e8:d4:99:38:dc:c8: 17:eb:20:5e:6a:f1:d2:de:eb:7a:54:6b:3e:31:80: 3f:c8:d9:75:cc:8a:71:54:d5:7a:ee:e0:8a:96:f7: dc:83:e2:1b:d0:8a:65:d9:4e:4c:75:2c:27:28:ae: 13:24:2b:10:1f:4d:bd:27:15:db:9a:d3:56:16:fd: 90:e4:f7:d6:c1:45:14:a3:a5:50:fd:d5:45:f0:e3: d1:3f:02:fc:c5:25:03:26:34:a2:ae:d4:37:a5:36: 6e:9b:a9:04:75:66:3c:d5:d6:18:da:39:12:19:1b: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6A:60:3C:C0:45:B7:D7:4B:A8:D5:F4:33:CD:7F:32:90:30:12:00 X509v3 Authority Key Identifier: keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/nmpgPMBFt9dLqNX0M81_MpAwEgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.118.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c6:4b:93:6a:c5:fc:ab:57:30:73:83:b9:eb:e9:10:5f:38: 6e:04:d8:98:8b:a9:4a:d3:98:3e:74:85:1c:9d:14:5e:45:e7: a3:6a:ff:23:bd:a4:91:b2:97:f9:15:36:ad:f9:41:ff:5f:27: f8:2a:6a:7d:de:29:eb:38:8f:04:50:e2:d0:2a:12:5d:ea:c6: 7e:91:f9:28:b3:2f:50:36:6a:3f:4d:67:ec:c9:85:ab:75:01: 0a:41:8b:90:49:63:84:40:88:20:8f:2d:8b:86:e0:ef:e3:c2: d4:b6:e0:34:9b:81:03:cc:cf:ab:8f:14:32:cd:e3:2f:8b:3d: 37:b6:db:e0:cc:b2:ef:2c:ae:c2:ec:27:96:60:c7:73:32:66: 46:29:62:19:60:c1:17:64:03:a2:a7:26:1d:dc:1d:9c:e0:c1: 8c:a0:ae:62:c1:c4:8e:1f:02:60:54:52:3a:82:2c:e9:30:7b: f0:4c:56:5e:e8:2c:3d:9e:a8:f9:13:37:9c:00:da:7e:d3:c9: f1:36:b9:23:e0:0d:bd:51:82:bf:ba:4e:28:5f:41:45:d3:22: 86:56:b2:ec:c2:64:92:a8:3d:aa:32:33:d9:bc:91:45:f7:ac: f2:0b:9d:e3:de:fd:7c:41:c9:a2:ea:17:c7:f6:2f:5f:11:fc: a0:25:36:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7+Gvo7E/zsiKiBdhjueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOGNjYzhkODE3OGM5ZTlkMmZmYzUzMmZjYjVjZDY4YmVh YTc3NmQwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTZhNjAzY2MwNDViN2Q3NGJhOGQ1ZjQzM2NkN2YzMjkwMzAxMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju7n8ivFIPmuTilbnQ0R1+Ct3Xbv lrt+EeWW3Z/4cRLmi9/BoccUMJlEIAy0eqqQXNvqIbiELnHo7ssDwm5wSr4i3DPm aBPZM0/ANXZZnlk+T4S9JcerEuMb0j5zBtbC8kBaQzuypBJIPtqLKMKTuSAR92tO J0bF+KEzFo1uM8I47gi8f/IuJ1pOlrAVd8zo1Jk43MgX6yBeavHS3ut6VGs+MYA/ yNl1zIpxVNV67uCKlvfcg+Ib0Ipl2U5MdSwnKK4TJCsQH029JxXbmtNWFv2Q5PfW wUUUo6VQ/dVF8OPRPwL8xSUDJjSirtQ3pTZum6kEdWY81dYY2jkSGRta1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5qYDzARbfXS6jV9DPNfzKQMBIAMB8GA1UdIwQY MBaAFAKMzI2BeMnp0v/FMvy1zWi+qndtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYt NWE0YjdiNWU0MDA3LzEvbm1wZ1BNQkZ0OWRMcU5YME04MV9NcEF3RWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYtNWE0YjdiNWU0MDA3 LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm52MA0G CSqGSIb3DQEBCwUAA4IBAQByxkuTasX8q1cwc4O56+kQXzhuBNiYi6lK05g+dIUc nRReReejav8jvaSRspf5FTat+UH/Xyf4Kmp93inrOI8EUOLQKhJd6sZ+kfkosy9Q Nmo/TWfsyYWrdQEKQYuQSWOEQIggjy2LhuDv48LUtuA0m4EDzM+rjxQyzeMviz03 ttvgzLLvLK7C7CeWYMdzMmZGKWIZYMEXZAOipyYd3B2c4MGMoK5iwcSOHwJgVFI6 gizpMHvwTFZe6Cw9nqj5EzecANp+08nxNrkj4A29UYK/uk4oX0FF0yKGVrLswmSS qD2qMjPZvJFF96zyC53j3v18Qcmi6hfH9i9fEfygJTak -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:48 2026 by rpki-client