This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/NMCu69roYebbta4TgeF6AUxwckA.roa File: NMCu69roYebbta4TgeF6AUxwckA.roa (raw, json) Hash identifier: ONrUSUgYIaBZ/uTENX+3YgLDxjUCXiWtMPwugRV2lg4= Subject key identifier: 34:C0:AE:EB:DA:E8:61:E6:DB:B5:AE:13:81:E1:7A:01:4C:70:72:40 Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb Certificate serial: 019B7A59A425334C77B181A19B23907092BD Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/NMCu69roYebbta4TgeF6AUxwckA.roa Signing time: Thu 01 Jan 2026 16:17:33 +0000 ROA not before: Thu 01 Jan 2026 16:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47704 IP address blocks: 185.60.120.0/23 maxlen: 23 185.60.120.0/24 maxlen: 24 185.60.121.0/24 maxlen: 24 185.60.122.0/23 maxlen: 23 185.60.122.0/24 maxlen: 24 185.60.123.0/24 maxlen: 24 185.96.200.0/22 maxlen: 22 2a04:e840::/29 maxlen: 29 2a06:140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:a4:25:33:4c:77:b1:81:a1:9b:23:90:70:92:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb Validity Not Before: Jan 1 16:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34c0aeebdae861e6dbb5ae1381e17a014c707240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:68:ab:1b:a2:7d:8d:f9:95:4c:ac:9e:04:8f: 7c:7a:0d:09:dd:82:28:e2:6f:00:ea:f6:b6:2d:f2: 68:86:67:be:13:26:b3:40:0d:a4:30:0f:26:69:95: 49:61:f7:da:06:90:a9:62:b6:e9:70:8b:7b:72:95: 99:68:dc:36:04:ac:30:36:1b:12:bf:df:70:47:65: e6:68:5a:3d:85:b7:ee:36:8c:45:a0:ae:da:1c:6c: a8:a6:d1:37:1e:48:53:6a:f3:6b:5a:81:9b:d6:ed: d7:f5:e8:06:29:d7:27:c2:5c:8d:65:60:0a:6d:f2: e5:43:05:38:7e:b2:0b:26:db:5d:d4:dc:87:39:a2: f6:11:1e:84:63:de:df:27:18:4e:91:5f:98:a8:6a: 0e:4b:b1:15:5f:67:9c:5c:5a:1a:20:27:04:b8:e7: c5:74:50:c2:7a:8d:c2:14:99:07:df:00:4b:98:f2: fd:04:fa:b6:4a:9b:0c:21:b4:6d:7a:15:fd:de:bd: 66:2f:18:3f:35:c3:0a:e9:05:52:a8:ab:45:0c:81: c7:fc:b8:d5:f4:af:7c:72:80:23:4d:ab:d5:e3:17: 73:80:c9:2b:dd:06:f8:f3:0e:40:0e:ba:ba:33:64: d4:7a:a5:f1:31:c9:35:e0:a4:82:4c:15:95:a5:db: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:AE:EB:DA:E8:61:E6:DB:B5:AE:13:81:E1:7A:01:4C:70:72:40 X509v3 Authority Key Identifier: keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/NMCu69roYebbta4TgeF6AUxwckA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.120.0/22 185.96.200.0/22 IPv6: 2a04:e840::/29 2a06:140::/29 Signature Algorithm: sha256WithRSAEncryption 41:7a:86:96:a9:fd:c5:f7:a3:25:87:91:64:b6:be:02:bc:b4: 6e:3e:a9:5e:ee:be:e9:7d:a1:01:1e:c3:24:e1:93:9d:9e:0d: 61:98:ae:1d:97:cf:2a:16:fb:2b:a2:d0:bb:5d:11:1d:65:f2: 2d:34:b9:00:ed:b7:c0:f2:46:80:7d:38:48:cf:69:83:68:08: d0:a2:b2:f2:5f:a8:46:9b:d5:9d:38:69:87:93:60:ab:1b:34: e7:2f:b7:a9:13:df:89:15:c7:d8:0d:ac:ac:7a:35:58:e7:09: 94:44:58:e1:02:dd:80:d1:79:c4:bd:9a:3a:c0:82:78:d0:47: 15:6f:e2:b1:8d:b8:d9:b1:c4:ae:57:b9:d8:de:79:47:b3:ba: df:14:da:58:8e:ba:cf:af:4f:40:c5:5a:fa:d9:f5:61:e3:c2: 39:21:3a:54:c8:a4:68:cb:a7:c9:6f:65:14:1c:86:58:88:51: 6e:ab:6a:3f:b8:7d:a8:55:09:4c:4c:27:62:14:b0:0c:7c:a2: 31:61:08:f7:65:8e:39:68:56:1b:4e:65:15:b1:ad:57:4a:8a: 52:94:01:86:ca:d9:fa:b8:fa:81:4a:ca:97:19:ab:fd:0d:f4: 6d:55:96:a1:a4:39:41:a1:1e:17:13:2a:ce:4e:86:ff:af:07: 2a:89:2b:51 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6WaQlM0x3sYGhmyOQcJK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1 NGFhZWIwHhcNMjYwMTAxMTYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGMwYWVlYmRhZTg2MWU2ZGJiNWFlMTM4MWUxN2EwMTRjNzA3MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWirG6J9jfmVTKyeBI98eg0J3YIo 4m8A6va2LfJohme+EyazQA2kMA8maZVJYffaBpCpYrbpcIt7cpWZaNw2BKwwNhsS v99wR2XmaFo9hbfuNoxFoK7aHGyoptE3HkhTavNrWoGb1u3X9egGKdcnwlyNZWAK bfLlQwU4frILJttd1NyHOaL2ER6EY97fJxhOkV+YqGoOS7EVX2ecXFoaICcEuOfF dFDCeo3CFJkH3wBLmPL9BPq2SpsMIbRtehX93r1mLxg/NcMK6QVSqKtFDIHH/LjV 9K98coAjTavV4xdzgMkr3Qb48w5ADrq6M2TUeqXxMck14KSCTBWVpdv1AwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDTAruva6GHm27WuE4HhegFMcHJAMB8GA1UdIwQY MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct OTIwZDJhNjIwN2E0LzEvTk1DdTY5cm9ZZWJidGE0VGdlRjZBVXh3Y2tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0 LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuTx4AwQC uWDIMBQEAgACMA4DBQMqBOhAAwUDKgYBQDANBgkqhkiG9w0BAQsFAAOCAQEAQXqG lqn9xfejJYeRZLa+Ary0bj6pXu6+6X2hAR7DJOGTnZ4NYZiuHZfPKhb7K6LQu10R HWXyLTS5AO23wPJGgH04SM9pg2gI0KKy8l+oRpvVnThph5Ngqxs05y+3qRPfiRXH 2A2srHo1WOcJlERY4QLdgNF5xL2aOsCCeNBHFW/isY242bHErle52N55R7O63xTa WI66z69PQMVa+tn1YePCOSE6VMikaMunyW9lFByGWIhRbqtqP7h9qFUJTEwnYhSw DHyiMWEI92WOOWhWG05lFbGtV0qKUpQBhsrZ+rj6gUrKlxmr/Q30bVWWoaQ5QaEe FxMqzk6G/68HKokrUQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:56 2026 by rpki-client