This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa File: N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa (raw, json) Hash identifier: a7GxJ/DHXtzeo/5dQNp0athcwGWDpOFXNyta+KLkn5s= Subject key identifier: 37:83:2D:4B:FA:CE:EE:14:FC:46:96:36:D5:8C:BB:32:4F:16:2B:A0 Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553 Certificate serial: 019B76EB2C2B7FA0EE90FFB51CE88604A152 Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208065 IP address blocks: 193.8.40.0/23 maxlen: 23 193.8.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2c:2b:7f:a0:ee:90:ff:b5:1c:e8:86:04:a1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553 Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37832d4bfaceee14fc469636d58cbb324f162ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:8f:b6:57:99:fc:0f:28:4a:28:b1:ee:b9: fb:71:bc:83:4d:ab:ad:53:1a:02:36:67:46:86:75: 47:a5:b7:eb:5f:3f:3d:e6:7f:0f:28:77:b2:0e:28: 49:7e:a3:31:e3:c3:3e:7a:83:1f:97:b8:10:6e:b0: e1:83:e6:73:3c:e2:d2:66:b4:8b:97:4a:3e:34:7c: 0a:cc:85:0d:4e:78:a1:d1:45:ba:57:25:56:1a:16: eb:64:90:0a:8a:3b:f7:6b:6f:b9:28:e1:c8:0b:c0: 79:a5:18:83:42:96:cb:04:67:90:18:c6:33:8d:63: fa:e6:20:c4:ef:62:80:75:10:29:01:8f:c3:07:7b: ce:f1:a0:70:f4:e5:2b:ec:c2:c5:ac:09:05:0a:fb: 73:04:9f:22:bf:74:28:d3:81:77:9b:3b:ed:8f:f6: 3a:0d:e4:c8:8f:75:8a:fe:bd:c1:f1:65:05:4d:45: b2:43:ed:5a:5a:aa:f2:74:7f:ac:01:b9:f0:8b:66: 88:90:b2:89:35:fa:f8:33:03:d6:0d:d2:21:3b:48: 09:aa:06:12:48:54:48:f9:8e:c4:d5:b2:a6:b5:92: 77:78:b6:a1:35:44:b8:5e:03:28:12:55:b0:a2:e5: ae:31:96:32:88:3c:3a:54:c5:e9:b1:59:e2:54:9e: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:83:2D:4B:FA:CE:EE:14:FC:46:96:36:D5:8C:BB:32:4F:16:2B:A0 X509v3 Authority Key Identifier: keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/N4MtS_rO7hT8RpY21Yy7Mk8WK6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.40.0/23 193.8.44.0/24 Signature Algorithm: sha256WithRSAEncryption 72:65:70:ef:66:02:6f:37:00:51:1b:7a:d3:1e:74:8a:e6:0b: 39:d5:d1:c8:d1:37:05:93:4f:f0:29:91:7d:c6:40:5a:69:e1: 15:de:ea:d5:06:c3:57:dd:88:52:84:1f:99:07:4d:49:77:cf: 66:cf:7f:f5:cf:ea:87:05:f5:6e:5f:bc:60:f4:5a:53:93:23: ab:36:ab:9e:ef:01:11:ca:62:b7:6f:d9:81:6b:d5:ef:d1:90: f1:44:79:e1:ca:ad:9a:27:98:4a:9c:a2:13:09:92:2b:19:9f: 76:9d:b2:58:4d:ba:25:3d:90:c4:0e:bc:6e:1b:12:71:fc:99: 78:53:59:73:d5:a9:ef:1b:8b:ad:dd:a1:29:d8:8a:51:3a:00: 19:8b:b3:c1:8b:a2:cf:6e:6b:c3:1c:11:37:7a:40:0c:4a:9e: cc:a3:b8:05:58:fc:40:12:4d:b5:07:ba:f9:74:b5:4b:d4:fc: f3:91:1f:ee:0b:d5:09:bb:20:2b:38:58:74:a4:76:d2:5e:03: d9:9e:29:48:9a:74:a4:7e:69:83:36:c2:d4:a7:e4:37:c6:79: f1:89:12:53:4c:4a:9f:d8:dd:4c:38:4c:4a:69:64:b8:2d:2f: 32:a6:bb:df:86:ee:c1:f5:dc:b1:86:70:73:63:67:8a:ca:fb: 2d:e3:9a:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26ywrf6DukP+1HOiGBKFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjdjMDJkZTdmYzhkMTFhMWFmZTdhZTYyYzU4NTRkMTc3 Njc1NTMwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzgzMmQ0YmZhY2VlZTE0ZmM0Njk2MzZkNThjYmIzMjRmMTYyYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24WPtleZ/A8oSiix7rn7cbyDTaut UxoCNmdGhnVHpbfrXz895n8PKHeyDihJfqMx48M+eoMfl7gQbrDhg+ZzPOLSZrSL l0o+NHwKzIUNTnih0UW6VyVWGhbrZJAKijv3a2+5KOHIC8B5pRiDQpbLBGeQGMYz jWP65iDE72KAdRApAY/DB3vO8aBw9OUr7MLFrAkFCvtzBJ8iv3Qo04F3mzvtj/Y6 DeTIj3WK/r3B8WUFTUWyQ+1aWqrydH+sAbnwi2aIkLKJNfr4MwPWDdIhO0gJqgYS SFRI+Y7E1bKmtZJ3eLahNUS4XgMoElWwouWuMZYyiDw6VMXpsVniVJ6+0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDeDLUv6zu4U/EaWNtWMuzJPFiugMB8GA1UdIwQY MBaAFJtnwC3n/I0Roa/nrmLFhU0XdnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYt YzgxNzQzYjJjYWU2LzEvTjRNdFNfck83aFQ4UnBZMjFZeTdNazhXSzZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYtYzgxNzQzYjJjYWU2 LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwQgoAwQA wQgsMA0GCSqGSIb3DQEBCwUAA4IBAQByZXDvZgJvNwBRG3rTHnSK5gs51dHI0TcF k0/wKZF9xkBaaeEV3urVBsNX3YhShB+ZB01Jd89mz3/1z+qHBfVuX7xg9FpTkyOr Nque7wERymK3b9mBa9Xv0ZDxRHnhyq2aJ5hKnKITCZIrGZ92nbJYTbolPZDEDrxu GxJx/Jl4U1lz1anvG4ut3aEp2IpROgAZi7PBi6LPbmvDHBE3ekAMSp7Mo7gFWPxA Ek21B7r5dLVL1PzzkR/uC9UJuyArOFh0pHbSXgPZnilImnSkfmmDNsLUp+Q3xnnx iRJTTEqf2N1MOExKaWS4LS8yprvfhu7B9dyxhnBzY2eKyvst45qC -----END CERTIFICATE-----Generated at Sun Jan 18 22:34:33 2026 by rpki-client