This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/NisAJYg5bZVpAvIXpflZqUHqsFc.roa File: NisAJYg5bZVpAvIXpflZqUHqsFc.roa (raw, json) Hash identifier: A7zNcZfNfAMjmIRZixj0R7xH2c3AgISVBIKIfcejIq8= Subject key identifier: 36:2B:00:25:88:39:6D:95:69:02:F2:17:A5:F9:59:A9:41:EA:B0:57 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839A1B054723FA4A59B6660026AA8E Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/NisAJYg5bZVpAvIXpflZqUHqsFc.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34597 IP address blocks: 37.230.232.0/24 maxlen: 24 37.230.246.0/24 maxlen: 24 141.101.243.0/24 maxlen: 24 178.170.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9a:1b:05:47:23:fa:4a:59:b6:66:00:26:aa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=362b002588396d956902f217a5f959a941eab057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:9f:77:c7:f6:52:c1:e4:a2:4c:48:c6:3c: f3:e5:1c:18:53:73:13:e5:fd:fb:e3:9d:28:e2:b9: 02:e7:88:b2:0b:fb:d0:6b:4a:4c:a5:79:84:17:a5: a3:e0:23:91:13:aa:3f:b6:e6:57:4d:24:05:eb:a2: 61:11:26:a3:af:80:4e:b9:1f:1b:55:31:b6:ac:01: 7a:8d:68:6a:b0:fc:3a:ba:0f:6f:4d:f3:b8:a1:cb: 85:26:c1:a5:f2:4c:fd:6e:30:bd:da:72:3e:80:6d: 02:9a:32:82:c6:97:1c:81:b2:e5:f2:e9:a6:89:f5: 95:0e:c3:83:8d:11:ee:22:91:8a:c5:a3:02:34:ca: ad:e5:c1:45:ea:25:b8:d3:64:8f:0a:0f:e2:13:c8: 55:63:46:82:03:9f:cd:1f:b4:fc:26:5d:4c:a6:5c: d8:4f:ab:38:5f:6f:79:b0:1f:ce:eb:83:d5:b5:8e: 55:da:e0:49:c9:83:a5:48:74:a2:4b:11:14:a1:45: c6:37:38:45:8d:36:59:3b:01:ee:8f:e8:60:0f:69: 57:2b:ad:35:40:38:23:fc:32:52:c8:82:4d:a4:51: 29:69:e4:08:d6:23:a0:bc:09:18:4d:65:9c:77:43: c4:56:cb:a0:6e:ac:ce:75:47:d7:d8:10:55:0c:e1: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2B:00:25:88:39:6D:95:69:02:F2:17:A5:F9:59:A9:41:EA:B0:57 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/NisAJYg5bZVpAvIXpflZqUHqsFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.232.0/24 37.230.246.0/24 141.101.243.0/24 178.170.173.0/24 Signature Algorithm: sha256WithRSAEncryption 16:54:d9:dc:ce:4c:77:30:70:e7:16:f6:18:ea:e5:b1:86:ca: bd:f4:45:f7:aa:a1:3d:4f:7a:c2:d5:62:2a:dc:e2:0c:f1:96: 93:4e:61:c5:65:20:d2:92:8b:01:f9:5a:4d:16:a5:0b:8a:21: 6e:ac:15:e2:86:97:fc:e1:4f:7e:ef:31:dd:8b:1d:75:fa:6b: c0:75:30:d0:76:62:ed:d2:64:2d:54:aa:cd:35:d4:f0:c2:74: c9:fe:53:30:17:74:e7:1a:fa:3f:20:c1:fb:69:64:cc:00:6d: 1c:37:5a:ef:c8:e2:3b:07:f8:33:b3:0a:33:2c:b0:76:4a:ad: d6:fe:80:ff:39:59:8a:d1:eb:fc:b3:6b:30:e8:ef:bc:10:1e: d7:95:68:d5:cb:b0:16:e8:52:86:89:bf:ca:10:4a:7a:3b:c9: 09:12:45:27:83:fe:c0:09:03:c6:29:80:a7:65:a2:27:24:02: bf:bd:25:7d:6c:8f:43:89:b9:3c:9b:28:7d:8a:12:d1:61:b2: 3f:e6:45:04:99:66:08:90:53:2e:e9:86:74:01:2e:3f:04:2d: 0b:0e:93:03:48:5f:a5:1b:96:98:a5:e1:a7:69:d5:4b:9f:c2: 0f:ea:d5:d4:c4:0c:e7:ea:2e:e8:d1:d4:4a:46:7d:ec:cc:be: b3:b4:af:ba -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/g5obBUcj+kpZtmYAJqqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjJiMDAyNTg4Mzk2ZDk1NjkwMmYyMTdhNWY5NTlhOTQxZWFiMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qCfd8f2UsHkokxIxjzz5RwYU3MT 5f37450o4rkC54iyC/vQa0pMpXmEF6Wj4CORE6o/tuZXTSQF66JhESajr4BOuR8b VTG2rAF6jWhqsPw6ug9vTfO4ocuFJsGl8kz9bjC92nI+gG0CmjKCxpccgbLl8umm ifWVDsODjRHuIpGKxaMCNMqt5cFF6iW402SPCg/iE8hVY0aCA5/NH7T8Jl1MplzY T6s4X295sB/O64PVtY5V2uBJyYOlSHSiSxEUoUXGNzhFjTZZOwHuj+hgD2lXK601 QDgj/DJSyIJNpFEpaeQI1iOgvAkYTWWcd0PEVsugbqzOdUfX2BBVDOFauQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDYrACWIOW2VaQLyF6X5WalB6rBXMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvTmlzQUpZZzViWlZwQXZJWHBmbFpxVUhxc0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJeboAwQA Jeb2AwQAjWXzAwQAsqqtMA0GCSqGSIb3DQEBCwUAA4IBAQAWVNnczkx3MHDnFvYY 6uWxhsq99EX3qqE9T3rC1WIq3OIM8ZaTTmHFZSDSkosB+VpNFqULiiFurBXihpf8 4U9+7zHdix11+mvAdTDQdmLt0mQtVKrNNdTwwnTJ/lMwF3TnGvo/IMH7aWTMAG0c N1rvyOI7B/gzswozLLB2Sq3W/oD/OVmK0ev8s2sw6O+8EB7XlWjVy7AW6FKGib/K EEp6O8kJEkUng/7ACQPGKYCnZaInJAK/vSV9bI9Dibk8myh9ihLRYbI/5kUEmWYI kFMu6YZ0AS4/BC0LDpMDSF+lG5aYpeGnadVLn8IP6tXUxAzn6i7o0dRKRn3szL6z tK+6 -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:25 2026 by rpki-client