This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/Nmm0wQ31BITD2tnmMqSugE8jni8.roa File: Nmm0wQ31BITD2tnmMqSugE8jni8.roa (raw, json) Hash identifier: MBXWfJMMkKif3mZN2luokBtXQW1CjWwle34mvCaFiDo= Subject key identifier: 36:69:B4:C1:0D:F5:04:84:C3:DA:D9:E6:32:A4:AE:80:4F:23:9E:2F Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Certificate serial: 019B7E3903C96FEB2E22CDA705CBBA0FECBA Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/Nmm0wQ31BITD2tnmMqSugE8jni8.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216348 IP address blocks: 2a0a:9740:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:03:c9:6f:eb:2e:22:cd:a7:05:cb:ba:0f:ec:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3669b4c10df50484c3dad9e632a4ae804f239e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5e:15:ad:54:3b:3a:7b:db:54:44:2d:be:74: 4b:61:be:9d:55:6a:34:9e:f2:48:7d:90:28:1a:ff: 78:8c:a1:0d:5d:37:ea:8c:18:a8:96:ea:c1:1e:d2: 01:46:75:21:25:39:cf:5d:51:59:da:c2:0d:c7:e9: 94:5d:0b:dd:27:fc:0b:13:47:e1:83:01:51:a3:14: 0a:34:5b:39:da:09:69:da:22:45:fc:4b:85:fb:28: 96:25:68:07:e2:64:58:32:c2:9c:26:be:46:02:a9: e5:86:6e:7a:e2:a7:69:37:d6:b9:94:99:de:c2:00: c0:04:65:f1:94:82:99:07:5e:bd:54:a2:83:09:68: f0:48:8d:06:7b:06:d3:4f:49:60:5d:75:ae:68:d0: 1a:d0:bb:bb:f8:4f:88:3c:97:4f:52:a2:97:d9:9f: 52:b6:90:57:51:0b:64:14:56:e7:3c:85:e8:f4:1c: da:58:94:a6:e4:83:e6:4b:47:2c:f6:f4:fe:83:35: d8:c7:19:7c:bb:f1:6a:e0:dd:07:0f:af:ea:a2:93: 79:97:f3:53:44:ec:26:04:c0:78:dc:a1:cb:28:54: 8a:24:c6:8a:8a:2d:39:8b:9b:b3:12:a5:eb:ac:79: 18:fc:00:46:60:7f:15:e9:0c:f7:a4:47:83:2b:8f: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:69:B4:C1:0D:F5:04:84:C3:DA:D9:E6:32:A4:AE:80:4F:23:9E:2F X509v3 Authority Key Identifier: keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/Nmm0wQ31BITD2tnmMqSugE8jni8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:9740:dead::/48 Signature Algorithm: sha256WithRSAEncryption 3d:50:d1:c7:d1:9b:1a:87:c3:0e:f2:59:a2:dd:86:3a:69:38: 88:94:5d:08:58:67:58:a3:f4:bd:d3:04:66:7a:24:0f:e1:18: 29:2e:4f:7a:b2:58:8c:46:d5:fb:06:dd:20:f0:bd:82:ff:a5: 8e:aa:f9:42:3a:31:d2:1e:8b:eb:90:38:4d:37:60:94:1e:e2: af:71:ae:a4:11:aa:07:9d:f1:11:48:12:87:35:6d:6b:41:bf: 27:a5:fd:1a:ec:7b:2b:56:54:7c:27:14:53:43:36:6e:e5:39: d4:26:4b:66:4d:d4:69:a5:49:91:ab:d1:26:1f:eb:fb:06:b5: c6:ea:99:ca:1c:27:c8:4a:d3:53:39:dd:2e:97:a2:5c:95:7f: 1e:1e:99:d9:0a:e7:dd:c8:ec:68:be:c6:27:97:49:18:fc:49: 2d:05:44:a2:83:4c:eb:5a:48:a0:1d:ab:f6:96:72:8e:c8:58: 81:81:c0:6a:b8:b7:75:20:4f:0a:45:91:a0:c3:dd:ec:bf:b3: fb:c3:90:a0:51:3b:0e:aa:27:36:df:e0:9c:eb:16:ef:0a:e4: 0e:41:58:10:76:5e:bd:7b:33:c7:15:d2:55:9b:58:f7:3f:01: 8b:ed:20:3b:cb:5d:c5:22:7f:83:33:df:27:af:d4:66:13:a3: b8:05:df:a0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OQPJb+suIs2nBcu6D+y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MmZhMDE5MDJmNGU4YzM0N2YyMTE2ZTQ2NDVkYTFhNmI0 ZTA5NjIwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjY5YjRjMTBkZjUwNDg0YzNkYWQ5ZTYzMmE0YWU4MDRmMjM5ZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l4VrVQ7OnvbVEQtvnRLYb6dVWo0 nvJIfZAoGv94jKENXTfqjBiolurBHtIBRnUhJTnPXVFZ2sINx+mUXQvdJ/wLE0fh gwFRoxQKNFs52glp2iJF/EuF+yiWJWgH4mRYMsKcJr5GAqnlhm564qdpN9a5lJne wgDABGXxlIKZB169VKKDCWjwSI0GewbTT0lgXXWuaNAa0Lu7+E+IPJdPUqKX2Z9S tpBXUQtkFFbnPIXo9BzaWJSm5IPmS0cs9vT+gzXYxxl8u/Fq4N0HD6/qopN5l/NT ROwmBMB43KHLKFSKJMaKii05i5uzEqXrrHkY/ABGYH8V6Qz3pEeDK4/ujQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDZptMEN9QSEw9rZ5jKkroBPI54vMB8GA1UdIwQY MBaAFIgvoBkC9OjDR/IRbkZF2hprTgliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAt NWMyZDI2NTcwNWUwLzEvTm1tMHdRMzFCSVREMnRubU1xU3VnRThqbmk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAtNWMyZDI2NTcwNWUw LzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgqXQN6t MA0GCSqGSIb3DQEBCwUAA4IBAQA9UNHH0Zsah8MO8lmi3YY6aTiIlF0IWGdYo/S9 0wRmeiQP4RgpLk96sliMRtX7Bt0g8L2C/6WOqvlCOjHSHovrkDhNN2CUHuKvca6k EaoHnfERSBKHNW1rQb8npf0a7HsrVlR8JxRTQzZu5TnUJktmTdRppUmRq9EmH+v7 BrXG6pnKHCfIStNTOd0ul6JclX8eHpnZCufdyOxovsYnl0kY/EktBUSig0zrWkig Hav2lnKOyFiBgcBquLd1IE8KRZGgw93sv7P7w5CgUTsOqic23+Cc6xbvCuQOQVgQ dl69ezPHFdJVm1j3PwGL7SA7y13FIn+DM98nr9RmE6O4Bd+g -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:50 2026 by rpki-client