This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/crNlSSD3_o_rjDJ4ivFBA9DmxII.roa File: crNlSSD3_o_rjDJ4ivFBA9DmxII.roa (raw, json) Hash identifier: i+4Sbb5mbplP6hBN7BRF7gYb3D64RivwGrpfd57ymKs= Subject key identifier: 72:B3:65:49:20:F7:FE:8F:EB:8C:32:78:8A:F1:41:03:D0:E6:C4:82 Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16 Certificate serial: 019B7A5B7B6E927ABFFA21CFEB5C635F88BC Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/crNlSSD3_o_rjDJ4ivFBA9DmxII.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.102.174.0/24 maxlen: 24 193.103.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:6e:92:7a:bf:fa:21:cf:eb:5c:63:5f:88:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72b3654920f7fe8feb8c32788af14103d0e6c482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:1d:e4:97:76:6c:7e:f3:6e:30:b9:ab:ee: 5e:64:cd:d1:62:93:de:fe:a7:d3:68:fe:24:43:be: 3b:d0:8e:1f:a8:3c:4c:b2:df:e0:5c:12:a5:2b:e8: d0:67:cb:ac:1b:ca:55:9e:a3:5a:63:14:08:62:4f: b7:a4:e5:ee:d0:98:53:68:1c:03:b2:a8:11:68:fa: 4d:d1:f3:03:37:c1:f7:e1:a0:35:a6:3e:21:7f:16: be:fc:53:b4:35:fc:15:bd:db:e5:a3:d1:3a:a9:90: c0:ac:9e:13:77:d2:cf:f1:38:fd:48:0e:d6:9c:3b: b2:82:e8:c6:f8:5b:aa:31:03:24:22:17:e4:c6:35: 74:fd:a9:c7:a6:fa:85:7b:86:ee:78:d9:3a:5c:db: 53:4e:af:46:b3:b6:ae:8a:98:61:59:93:d9:f6:1c: 5e:96:77:9a:20:29:19:4b:8b:c8:72:92:99:13:29: 60:f7:ca:96:15:e2:3d:93:b0:f9:83:dc:31:39:d0: e2:7d:3a:74:56:ac:45:ed:71:f7:a5:55:1e:be:e0: 67:4f:4d:b2:82:76:ca:d7:22:13:df:ec:ae:c2:6c: ad:c4:3c:9f:a6:bd:e4:83:be:26:9b:48:2f:2c:dc: 8b:8c:89:87:cb:e8:3c:be:a6:6f:b8:88:22:a4:a6: ba:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B3:65:49:20:F7:FE:8F:EB:8C:32:78:8A:F1:41:03:D0:E6:C4:82 X509v3 Authority Key Identifier: keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/crNlSSD3_o_rjDJ4ivFBA9DmxII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.102.174.0/24 193.103.129.0/24 Signature Algorithm: sha256WithRSAEncryption b6:8b:8b:2e:48:9e:22:6b:4a:07:63:ed:82:b1:20:cc:02:ec: 71:c3:11:57:c0:6c:7a:3f:c9:27:2c:d0:c9:4a:aa:f3:1a:d0: 95:75:d8:00:aa:0f:b9:41:d0:cf:0d:87:b7:ce:69:74:d5:e5: 4d:47:ee:49:5e:6c:9e:9c:33:6a:2b:fd:59:75:cf:29:65:ff: cf:b9:e9:bc:37:5a:91:ab:50:f4:30:e4:54:66:5d:df:a8:01: 8b:2f:54:d5:20:f8:11:55:68:c6:b7:2b:e0:fc:72:ef:95:e8: 85:f6:99:dd:fb:8a:ce:a8:2a:6f:1e:4c:cf:8c:c4:f1:6c:23: 9f:c8:7a:87:18:cf:d3:9a:40:5f:7d:23:92:1c:74:0d:23:09: a5:16:a8:5b:d2:ab:fc:2f:1f:af:cf:9e:79:ac:52:44:e3:54: 0c:b7:31:4b:6c:da:72:c9:47:7c:3b:d4:20:ee:35:43:fa:cd: d0:6b:fb:8a:e4:5c:ec:3b:b6:65:db:04:13:c4:51:5b:fe:a0: eb:4f:09:96:01:c7:f4:be:c2:73:8d:67:01:a6:48:1c:92:8a: 88:a5:53:61:3a:23:b3:fa:a8:ac:e9:82:2f:7a:73:71:05:83: 43:fc:5c:4f:48:8e:c6:20:e9:7c:b3:24:eb:11:ab:3c:52:a4: 08:73:71:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W3tuknq/+iHP61xjX4i8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NjIwNDNhMzFkZDliZDJiN2NiMTg2MjdlYjRiYWMxMTg0 MGNlMTYwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmIzNjU0OTIwZjdmZThmZWI4YzMyNzg4YWYxNDEwM2QwZTZjNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgwd5Jd2bH7zbjC5q+5eZM3RYpPe /qfTaP4kQ7470I4fqDxMst/gXBKlK+jQZ8usG8pVnqNaYxQIYk+3pOXu0JhTaBwD sqgRaPpN0fMDN8H34aA1pj4hfxa+/FO0NfwVvdvlo9E6qZDArJ4Td9LP8Tj9SA7W nDuygujG+FuqMQMkIhfkxjV0/anHpvqFe4bueNk6XNtTTq9Gs7auiphhWZPZ9hxe lneaICkZS4vIcpKZEylg98qWFeI9k7D5g9wxOdDifTp0VqxF7XH3pVUevuBnT02y gnbK1yIT3+yuwmytxDyfpr3kg74mm0gvLNyLjImHy+g8vqZvuIgipKa6hQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHKzZUkg9/6P64wyeIrxQQPQ5sSCMB8GA1UdIwQY MBaAFDZiBDox3ZvSt8sYYn60usEYQM4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDct ZDliMDdmYmJiYmRiLzEvY3JObFNTRDNfb19yakRKNGl2RkJBOURteElJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDctZDliMDdmYmJiYmRi LzEvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWauAwQA wWeBMA0GCSqGSIb3DQEBCwUAA4IBAQC2i4suSJ4ia0oHY+2CsSDMAuxxwxFXwGx6 P8knLNDJSqrzGtCVddgAqg+5QdDPDYe3zml01eVNR+5JXmyenDNqK/1Zdc8pZf/P uem8N1qRq1D0MORUZl3fqAGLL1TVIPgRVWjGtyvg/HLvleiF9pnd+4rOqCpvHkzP jMTxbCOfyHqHGM/TmkBffSOSHHQNIwmlFqhb0qv8Lx+vz555rFJE41QMtzFLbNpy yUd8O9Qg7jVD+s3Qa/uK5FzsO7Zl2wQTxFFb/qDrTwmWAcf0vsJzjWcBpkgckoqI pVNhOiOz+qis6YIvenNxBYND/FxPSI7GIOl8syTrEas8UqQIc3EU -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:27 2026 by rpki-client