This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/nyqLqit5oB_bMTURFw941vObpAs.roa File: nyqLqit5oB_bMTURFw941vObpAs.roa (raw, json) Hash identifier: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0= Subject key identifier: 9F:2A:8B:AA:2B:79:A0:1F:DB:31:35:11:17:0F:78:D6:F3:9B:A4:0B Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C70CC537F8B3DC230AB5546B4529AB Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/nyqLqit5oB_bMTURFw941vObpAs.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204019 IP address blocks: 185.107.66.0/24 maxlen: 24 194.1.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0c:c5:37:f8:b3:dc:23:0a:b5:54:6b:45:29:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f2a8baa2b79a01fdb313511170f78d6f39ba40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:76:a6:71:c5:76:7e:d6:10:88:19:ef:59: cb:10:8d:f0:22:21:15:02:fe:55:58:8d:d0:e8:b5: eb:07:5d:cb:dd:4d:40:6e:17:48:42:d7:c3:a1:cc: 24:3a:a3:a7:9f:b2:d5:c4:5b:ac:ff:d1:e4:89:f7: 93:b3:51:d5:55:5f:b4:14:a0:6d:a8:14:02:4e:23: 4e:f2:64:66:bd:1a:78:05:46:c9:90:e5:ac:f5:cf: 2a:74:5a:14:29:18:4a:24:26:58:db:1a:be:51:83: 10:ff:99:bf:39:17:34:fa:28:32:38:de:d1:28:38: a7:b5:ff:1a:c5:28:d2:c1:53:eb:80:b4:5e:2f:da: 23:cd:9b:71:b4:d9:2f:b2:bf:fb:a1:49:94:a6:ee: 91:70:09:6a:95:69:d3:0a:61:ee:3b:93:2b:7c:c9: 9d:c0:60:28:fa:c3:ba:89:c9:57:52:e0:e3:b2:8a: 7f:00:a0:34:cd:bd:68:be:9e:f2:95:68:38:3b:01: 28:15:70:fc:5a:d0:f9:55:a0:e7:af:15:45:f9:b4: b7:bf:7c:ce:34:26:1b:18:8b:72:74:39:0d:c0:42: 56:cc:18:74:5c:1a:66:00:d2:28:63:ac:84:d3:37: b9:73:a2:57:db:e7:aa:0b:4a:79:97:34:64:ba:cb: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:8B:AA:2B:79:A0:1F:DB:31:35:11:17:0F:78:D6:F3:9B:A4:0B X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/nyqLqit5oB_bMTURFw941vObpAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.66.0/24 194.1.253.0/24 Signature Algorithm: sha256WithRSAEncryption 48:a7:75:7e:c3:c9:34:ed:ac:74:f3:40:f6:83:1e:2c:2c:ef: 33:33:b4:85:5b:4e:90:29:12:20:99:be:1e:71:e6:75:3b:05: 41:21:ea:4d:b1:6d:b5:c4:90:bb:f9:50:99:49:8f:be:c1:44: 60:49:8a:2d:68:ad:21:27:85:52:c0:c5:c1:1b:de:34:16:ff: 9f:91:8d:ab:57:1a:60:5c:d8:7e:a0:e2:ff:77:4d:6e:a7:43: 31:f2:89:90:7f:b7:2c:f6:2f:c6:47:ba:9c:4a:37:1e:40:58: 27:e8:1f:d7:4b:dd:cf:91:6b:27:c9:e0:d2:1a:e3:2f:e2:c1: 61:d3:ef:bf:6c:56:6a:9a:af:c7:cf:57:09:80:de:d7:f3:1b: 7b:04:f1:d8:79:22:3e:69:5d:10:d6:12:4e:68:2b:d5:c3:d8: b5:21:d5:cc:ee:fe:0d:48:53:46:87:40:cf:7b:46:e5:73:b8: 08:bf:6d:af:f0:1b:8b:cf:de:07:26:e4:ff:47:8d:c3:6e:b4: 2a:bd:4a:25:0a:b8:d6:9b:bb:69:c7:8c:8c:0c:50:26:d1:ca: fd:1d:c3:e3:92:a4:02:72:81:9c:8c:8c:68:22:b1:41:b2:b6: da:9a:e7:2d:86:cf:8e:ed:34:d5:c6:41:18:01:92:2b:87:41: b4:53:95:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xwzFN/iz3CMKtVRrRSmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJhOGJhYTJiNzlhMDFmZGIzMTM1MTExNzBmNzhkNmYzOWJhNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAp2pnHFdn7WEIgZ71nLEI3wIiEV Av5VWI3Q6LXrB13L3U1AbhdIQtfDocwkOqOnn7LVxFus/9HkifeTs1HVVV+0FKBt qBQCTiNO8mRmvRp4BUbJkOWs9c8qdFoUKRhKJCZY2xq+UYMQ/5m/ORc0+igyON7R KDintf8axSjSwVPrgLReL9ojzZtxtNkvsr/7oUmUpu6RcAlqlWnTCmHuO5MrfMmd wGAo+sO6iclXUuDjsop/AKA0zb1ovp7ylWg4OwEoFXD8WtD5VaDnrxVF+bS3v3zO NCYbGItydDkNwEJWzBh0XBpmANIoY6yE0ze5c6JX2+eqC0p5lzRkusuVeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ8qi6oreaAf2zE1ERcPeNbzm6QLMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvbnlxTHFpdDVvQl9iTVRVUkZ3OTQxdk9icEFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWtCAwQA wgH9MA0GCSqGSIb3DQEBCwUAA4IBAQBIp3V+w8k07ax080D2gx4sLO8zM7SFW06Q KRIgmb4eceZ1OwVBIepNsW21xJC7+VCZSY++wURgSYotaK0hJ4VSwMXBG940Fv+f kY2rVxpgXNh+oOL/d01up0Mx8omQf7cs9i/GR7qcSjceQFgn6B/XS93PkWsnyeDS GuMv4sFh0++/bFZqmq/Hz1cJgN7X8xt7BPHYeSI+aV0Q1hJOaCvVw9i1IdXM7v4N SFNGh0DPe0blc7gIv22v8BuLz94HJuT/R43DbrQqvUolCrjWm7tpx4yMDFAm0cr9 HcPjkqQCcoGcjIxoIrFBsrbamucths+O7TTVxkEYAZIrh0G0U5UX -----END CERTIFICATE-----Generated at Tue Jan 27 04:22:49 2026 by rpki-client