This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/n00gLZ8RizHXHcJP8n5U2lkHl_0.roa File: n00gLZ8RizHXHcJP8n5U2lkHl_0.roa (raw, json) Hash identifier: 7x9iUpgLpEtIBExQu4BUBe9xIOIqTpL6nc56pdzzQrE= Subject key identifier: 9F:4D:20:2D:9F:11:8B:31:D7:1D:C2:4F:F2:7E:54:DA:59:07:97:FD Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Certificate serial: 019B7D5CF50E9D0EEA95F746D8E1FB71A632 Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/n00gLZ8RizHXHcJP8n5U2lkHl_0.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2611 IP address blocks: 185.122.248.0/22 maxlen: 22 193.190.0.0/15 maxlen: 24 193.191.192.0/19 maxlen: 19 193.191.240.0/20 maxlen: 20 2001:6a8::/29 maxlen: 48 2001:6a8:8a00::/48 maxlen: 48 2001:6a8:9200::/48 maxlen: 48 2001:6a8:a001::/48 maxlen: 48 2001:6a8:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f5:0e:9d:0e:ea:95:f7:46:d8:e1:fb:71:a6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f4d202d9f118b31d71dc24ff27e54da590797fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:57:8a:29:e3:72:19:b3:97:56:07:1c:a7: bf:f5:a0:8c:82:94:25:8d:14:9d:d9:7c:37:63:e6: df:dd:50:df:cf:14:a2:5e:c0:dc:ea:ee:58:e5:02: 71:f8:87:b3:06:2a:40:27:fb:4b:80:ab:38:08:92: 4a:b1:b8:d4:7d:00:4b:f3:78:81:b5:81:77:d5:29: 55:9d:a9:40:b0:f8:96:13:07:04:03:c9:00:af:e5: 9b:62:27:be:63:39:42:14:a9:3b:5d:36:cc:0c:34: 01:2a:7c:32:17:ee:11:da:b9:8f:5f:36:b5:87:c6: 70:c1:46:3e:51:cd:50:d6:57:3d:62:bb:d7:0b:a3: 8b:32:3d:45:91:3d:09:7e:ca:a4:78:2f:59:7d:29: 6e:b5:77:f7:92:94:d7:a3:5e:51:a9:f2:07:d1:2f: 2e:a2:7c:fc:8a:a5:d5:40:72:a6:1b:1f:21:97:44: 42:44:4e:b2:d4:b0:bc:de:2f:7c:92:39:6f:d7:b4: 05:7f:c3:11:be:fe:dd:16:70:71:d8:d2:d6:18:88: 4d:dd:76:2b:37:7b:87:ce:f1:46:87:14:1d:e2:cf: 53:59:3a:60:87:61:b3:f8:b4:38:40:84:b7:3e:90: 00:67:4e:d0:ee:82:7b:50:d1:23:54:08:33:9c:72: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4D:20:2D:9F:11:8B:31:D7:1D:C2:4F:F2:7E:54:DA:59:07:97:FD X509v3 Authority Key Identifier: keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/n00gLZ8RizHXHcJP8n5U2lkHl_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.248.0/22 193.190.0.0/15 IPv6: 2001:6a8::/29 Signature Algorithm: sha256WithRSAEncryption 69:7a:33:7b:c8:c7:3d:5c:d0:01:18:db:c1:da:29:11:23:a3: e1:c3:c9:6c:57:c7:6d:c2:f2:ab:ca:3a:02:94:d4:20:cb:62: 3e:3d:31:d2:c5:a6:de:8d:e9:3d:40:29:16:66:f8:ce:7c:35: 66:0c:8d:88:46:98:34:c1:f4:7a:df:3a:d1:e1:62:36:02:ca: 00:4f:11:40:88:43:bf:d8:4c:e5:bd:60:34:e2:40:fd:0a:3c: df:af:22:2d:84:75:94:b5:ed:88:17:81:4b:a5:08:35:0c:6a: da:99:f1:2d:7a:b4:80:1e:a3:43:12:e4:56:a9:c7:0f:54:04: 2b:8a:9a:61:6c:c5:b5:1b:63:c1:0a:9d:f2:c0:29:61:e3:f9: d8:72:01:79:99:ff:1d:23:bc:49:9b:51:8f:bf:ee:da:ab:27: 7d:35:f7:86:75:13:3e:a3:1e:90:18:ae:8b:f9:90:9e:d2:f1: 6f:e8:da:75:20:ac:84:ff:12:d2:af:aa:93:61:1b:a8:d4:38: 1f:e4:3d:a8:89:4a:2f:e5:91:26:af:6d:ab:28:f1:03:04:eb: e4:95:e0:b4:ba:9e:9e:52:23:0e:08:1c:f8:2c:2a:84:f7:5a: a3:49:a3:91:48:2f:4a:95:9a:67:68:04:be:ba:db:87:5c:b8: a5:62:6d:96 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XPUOnQ7qlfdG2OH7caYyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj MmFmZTIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjRkMjAyZDlmMTE4YjMxZDcxZGMyNGZmMjdlNTRkYTU5MDc5N2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKFXiinjchmzl1YHHKe/9aCMgpQl jRSd2Xw3Y+bf3VDfzxSiXsDc6u5Y5QJx+IezBipAJ/tLgKs4CJJKsbjUfQBL83iB tYF31SlVnalAsPiWEwcEA8kAr+WbYie+YzlCFKk7XTbMDDQBKnwyF+4R2rmPXza1 h8ZwwUY+Uc1Q1lc9YrvXC6OLMj1FkT0JfsqkeC9ZfSlutXf3kpTXo15RqfIH0S8u onz8iqXVQHKmGx8hl0RCRE6y1LC83i98kjlv17QFf8MRvv7dFnBx2NLWGIhN3XYr N3uHzvFGhxQd4s9TWTpgh2Gz+LQ4QIS3PpAAZ07Q7oJ7UNEjVAgznHJk2QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJ9NIC2fEYsx1x3CT/J+VNpZB5f9MB8GA1UdIwQY MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It ZmM2NGJmYzNkMmY5LzEvbjAwZ0xaOFJpekhYSGNKUDhuNVUybGtIbF8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5 LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQCuXr4AwMB wb4wDQQCAAIwBwMFAyABBqgwDQYJKoZIhvcNAQELBQADggEBAGl6M3vIxz1c0AEY 28HaKREjo+HDyWxXx23C8qvKOgKU1CDLYj49MdLFpt6N6T1AKRZm+M58NWYMjYhG mDTB9HrfOtHhYjYCygBPEUCIQ7/YTOW9YDTiQP0KPN+vIi2EdZS17YgXgUulCDUM atqZ8S16tIAeo0MS5Fapxw9UBCuKmmFsxbUbY8EKnfLAKWHj+dhyAXmZ/x0jvEmb UY+/7tqrJ30194Z1Ez6jHpAYrov5kJ7S8W/o2nUgrIT/EtKvqpNhG6jUOB/kPaiJ Si/lkSavbaso8QME6+SV4LS6np5SIw4IHPgsKoT3WqNJo5FIL0qVmmdoBL6624dc uKVibZY= -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:37 2026 by rpki-client