This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/_NLIFql8UUtF6G08tYKMp6D5ryE.roa File: _NLIFql8UUtF6G08tYKMp6D5ryE.roa (raw, json) Hash identifier: 2eEokZKG4mibWExmbuDz6Q/LrDTuFm+PXBKGxQPaBHE= Subject key identifier: FC:D2:C8:16:A9:7C:51:4B:45:E8:6D:3C:B5:82:8C:A7:A0:F9:AF:21 Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c Certificate serial: 019B7EA6A2777733785B720EED9893E03574 Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/_NLIFql8UUtF6G08tYKMp6D5ryE.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197731 IP address blocks: 185.233.172.0/22 maxlen: 24 2a0c:eb00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a2:77:77:33:78:5b:72:0e:ed:98:93:e0:35:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcd2c816a97c514b45e86d3cb5828ca7a0f9af21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:50:75:07:d4:cc:f8:47:de:f7:31:89:49: 99:31:a9:e8:90:df:d1:bb:4b:3a:92:8c:64:a0:d9: 32:27:9f:57:4e:e0:5f:c9:7d:27:47:80:eb:05:b5: a1:e4:d1:b2:a1:99:d4:f9:00:e1:aa:72:82:9c:9f: 76:18:25:87:ae:d0:55:12:c7:93:3a:f3:64:7e:6f: 3d:cd:44:98:91:e7:32:72:f4:29:b2:50:8a:db:72: 27:58:e1:62:e4:6a:20:7d:eb:82:63:11:b4:cc:6c: 9f:b7:14:22:a8:d4:fa:6f:c6:bf:10:65:69:9a:15: 1d:82:64:6d:c5:83:2b:52:38:ed:02:d2:44:2a:89: 8c:c6:10:f4:df:ec:bd:0e:1d:62:a2:cc:2c:f5:92: 2a:d5:c2:8d:7b:1b:34:a0:5e:bd:47:b9:8b:b3:2f: c4:d7:4e:6f:8a:0c:e6:2d:9c:b5:7f:df:58:38:a8: b7:c7:9c:b4:c8:b0:46:1e:48:61:b8:4f:f9:07:ca: c0:e7:48:39:0d:c4:9a:79:54:d3:88:1d:79:66:a9: 35:f9:cd:5d:2e:c2:57:7f:5b:28:7e:43:96:e6:4f: ae:5a:07:2a:5f:07:ed:18:1d:5a:fc:d4:5c:b6:f6: 5d:a3:3b:7a:59:8c:38:63:44:a4:bd:a4:15:95:3e: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D2:C8:16:A9:7C:51:4B:45:E8:6D:3C:B5:82:8C:A7:A0:F9:AF:21 X509v3 Authority Key Identifier: keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/_NLIFql8UUtF6G08tYKMp6D5ryE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.172.0/22 IPv6: 2a0c:eb00::/32 Signature Algorithm: sha256WithRSAEncryption 5b:1b:d0:56:c7:1b:f1:da:72:99:7d:bc:2d:5e:1a:22:6b:29: c5:c2:f9:dc:1f:d6:56:2a:90:6b:62:fe:e9:b2:7f:6a:a3:32: 6c:75:10:d5:65:53:cd:ec:aa:03:04:fe:7c:8f:91:a0:5b:2b: 4d:6a:b3:20:c0:80:6c:1c:1b:cf:a6:88:8b:41:5c:3c:f6:39: 34:5c:90:28:9c:80:45:d5:b8:51:ab:04:ab:50:a4:a2:16:6f: 3c:da:e6:8c:c5:b0:0d:37:ea:01:ff:ff:a0:83:c4:78:a9:79: 85:ca:a3:c2:05:09:49:73:a2:7b:47:11:6f:a9:68:9c:38:99: cf:3e:4a:90:f0:16:22:71:be:f1:b2:5b:f6:09:29:98:bb:be: f3:a6:00:ee:ac:d3:c2:09:e0:46:10:b3:0d:89:ec:81:53:35: 70:51:91:db:59:6f:87:92:f3:34:e2:b8:69:a8:91:e1:27:2d: a1:85:94:7d:68:ee:94:56:d1:0f:72:2e:e3:ec:5b:b8:38:b7: af:c3:a1:52:3e:2f:3b:75:0a:8b:96:f7:ff:7c:f1:85:1e:79: 3c:eb:4d:95:dc:a9:e0:9b:1f:81:99:55:ee:cc:5d:1e:42:46: d1:31:ea:95:8d:84:87:c2:38:f5:16:ca:ce:ed:a6:6b:03:bb: 7d:57:25:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pqJ3dzN4W3IO7ZiT4DV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNmU0NTM4ZjFkZGVhNzdmNTczOTZiYjkzYjkwN2YxNTJk ZjY5N2MwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2QyYzgxNmE5N2M1MTRiNDVlODZkM2NiNTgyOGNhN2EwZjlhZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZdQdQfUzPhH3vcxiUmZManokN/R u0s6koxkoNkyJ59XTuBfyX0nR4DrBbWh5NGyoZnU+QDhqnKCnJ92GCWHrtBVEseT OvNkfm89zUSYkecycvQpslCK23InWOFi5GogfeuCYxG0zGyftxQiqNT6b8a/EGVp mhUdgmRtxYMrUjjtAtJEKomMxhD03+y9Dh1iosws9ZIq1cKNexs0oF69R7mLsy/E 105vigzmLZy1f99YOKi3x5y0yLBGHkhhuE/5B8rA50g5DcSaeVTTiB15Zqk1+c1d LsJXf1sofkOW5k+uWgcqXwftGB1a/NRctvZdozt6WYw4Y0SkvaQVlT4OJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPzSyBapfFFLRehtPLWCjKeg+a8hMB8GA1UdIwQY MBaAFNJuRTjx3ep39XOWu5O5B/FS32l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2Qt NWRlOTlhNTJhYTM5LzEvX05MSUZxbDhVVXRGNkcwOHRZS01wNkQ1cnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2QtNWRlOTlhNTJhYTM5 LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuemsMA0E AgACMAcDBQAqDOsAMA0GCSqGSIb3DQEBCwUAA4IBAQBbG9BWxxvx2nKZfbwtXhoi aynFwvncH9ZWKpBrYv7psn9qozJsdRDVZVPN7KoDBP58j5GgWytNarMgwIBsHBvP poiLQVw89jk0XJAonIBF1bhRqwSrUKSiFm882uaMxbANN+oB//+gg8R4qXmFyqPC BQlJc6J7RxFvqWicOJnPPkqQ8BYicb7xslv2CSmYu77zpgDurNPCCeBGELMNieyB UzVwUZHbWW+HkvM04rhpqJHhJy2hhZR9aO6UVtEPci7j7Fu4OLevw6FSPi87dQqL lvf/fPGFHnk8602V3Kngmx+BmVXuzF0eQkbRMeqVjYSHwjj1FsrO7aZrA7t9VyVr -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:16 2026 by rpki-client