This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Na_ozAcWu6ZVRTfzNvM2ICtye2Y.roa File: Na_ozAcWu6ZVRTfzNvM2ICtye2Y.roa (raw, json) Hash identifier: 6MBrxW0BKA+vioWFxO1PZaS20qgrgGxGwFg9B23P52o= Subject key identifier: 35:AF:E8:CC:07:16:BB:A6:55:45:37:F3:36:F3:36:20:2B:72:7B:66 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019BBBAB864244A9B2A27BC09E72AD593C48 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Na_ozAcWu6ZVRTfzNvM2ICtye2Y.roa Signing time: Wed 14 Jan 2026 08:42:18 +0000 ROA not before: Wed 14 Jan 2026 08:42:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44522 IP address blocks: 193.232.133.0/24 maxlen: 24 2001:67c:1009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:ab:86:42:44:a9:b2:a2:7b:c0:9e:72:ad:59:3c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 14 08:42:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35afe8cc0716bba6554537f336f336202b727b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:7b:6e:94:86:1b:bc:3d:5f:09:5e:68:61: c1:09:fd:7a:fb:0a:00:c3:b2:c3:99:08:20:e3:4b: ce:85:f7:b7:4f:d8:2b:bc:51:7b:f8:cb:b6:67:ba: 79:82:6a:8b:bf:c7:03:24:4e:1f:f5:7c:08:ef:90: 13:e7:f2:70:bd:c1:3e:f8:0d:52:dc:92:4d:b9:45: d6:d1:c0:9f:32:77:ae:ff:8f:dd:3e:ef:07:42:88: 9c:d5:8d:2c:1d:c6:37:7f:7d:92:c9:13:6b:d2:31: e7:84:45:f8:12:33:87:d7:5f:4e:7f:a8:44:5a:65: 3b:ff:db:1c:13:da:7a:86:52:24:f8:61:fa:50:71: 3d:4f:8e:cf:b3:bf:4f:95:f2:3e:30:05:4d:04:ae: 41:65:0f:73:a3:76:91:85:bc:1c:cd:e7:d1:ed:af: 36:97:cc:e6:72:f0:4c:93:a5:9d:97:f4:8c:e5:73: 84:52:72:5b:09:c3:c8:97:2f:c1:c6:1a:31:7e:9a: 2e:5a:f8:fc:14:a5:46:4e:eb:30:5b:b5:fb:7f:99: 5b:dd:10:dc:3e:5a:ac:48:f6:da:33:27:ae:8a:fb: 47:b4:c2:4d:7d:70:17:f1:dc:a6:f6:bc:3e:56:96: 76:64:37:dd:43:eb:53:a9:9e:5e:ef:47:55:45:d5: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AF:E8:CC:07:16:BB:A6:55:45:37:F3:36:F3:36:20:2B:72:7B:66 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Na_ozAcWu6ZVRTfzNvM2ICtye2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.133.0/24 IPv6: 2001:67c:1009::/48 Signature Algorithm: sha256WithRSAEncryption b3:50:1a:9e:b5:e5:69:97:49:7c:82:ee:84:b2:c1:48:07:14: 38:1c:ef:0e:42:df:13:15:93:63:a5:3e:18:21:10:75:ee:58: f3:8d:18:f1:cf:c0:9c:7a:d6:dd:ab:30:72:cc:a6:9f:9f:d9: f1:ce:5a:b3:06:29:53:35:8b:9f:cf:15:62:17:d0:98:5c:bc: f6:3f:94:a7:f0:8a:34:36:0d:c7:36:27:31:f4:1b:ae:d4:db: e6:f6:9b:33:11:03:01:93:26:3c:73:be:1d:53:06:ab:ba:51: b1:70:d6:12:99:40:9b:91:66:ee:66:7e:91:ec:b6:f6:14:37: 71:ff:b7:96:ad:a3:2c:59:15:b1:5c:63:66:46:74:b1:a9:ec: 00:e7:95:ca:b3:82:57:ba:eb:d0:c3:67:74:b9:7c:7d:81:45: 78:1f:88:e9:6b:eb:df:57:2d:81:17:7f:8b:40:84:6b:ea:05: 33:2b:cb:9a:30:30:51:63:1e:49:7e:82:d5:7f:52:c8:a7:ca: 6e:8b:c7:52:0d:51:ad:cb:c9:33:1f:15:99:c1:d9:b8:97:e8: 8e:8e:b4:52:dc:0a:f1:ea:c0:ac:d2:af:29:c0:ca:01:c3:7c: fe:8f:2a:35:a7:de:4c:44:13:6f:cf:e2:23:c6:3b:dd:ea:b4: 18:d8:9c:89 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZu7q4ZCRKmyonvAnnKtWTxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTE0MDg0MjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWFmZThjYzA3MTZiYmE2NTU0NTM3ZjMzNmYzMzYyMDJiNzI3YjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd17bpSGG7w9XwleaGHBCf16+woA w7LDmQgg40vOhfe3T9grvFF7+Mu2Z7p5gmqLv8cDJE4f9XwI75AT5/JwvcE++A1S 3JJNuUXW0cCfMneu/4/dPu8HQoic1Y0sHcY3f32SyRNr0jHnhEX4EjOH119Of6hE WmU7/9scE9p6hlIk+GH6UHE9T47Ps79PlfI+MAVNBK5BZQ9zo3aRhbwczefR7a82 l8zmcvBMk6Wdl/SM5XOEUnJbCcPIly/BxhoxfpouWvj8FKVGTuswW7X7f5lb3RDc PlqsSPbaMyeuivtHtMJNfXAX8dym9rw+VpZ2ZDfdQ+tTqZ5e70dVRdUwTQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDWv6MwHFrumVUU38zbzNiArcntmMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvTmFfb3pBY1d1NlpWUlRmek52TTJJQ3R5ZTJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweiFMA8E AgACMAkDBwAgAQZ8EAkwDQYJKoZIhvcNAQELBQADggEBALNQGp615WmXSXyC7oSy wUgHFDgc7w5C3xMVk2OlPhghEHXuWPONGPHPwJx61t2rMHLMpp+f2fHOWrMGKVM1 i5/PFWIX0JhcvPY/lKfwijQ2Dcc2JzH0G67U2+b2mzMRAwGTJjxzvh1TBqu6UbFw 1hKZQJuRZu5mfpHstvYUN3H/t5atoyxZFbFcY2ZGdLGp7ADnlcqzgle669DDZ3S5 fH2BRXgfiOlr699XLYEXf4tAhGvqBTMry5owMFFjHkl+gtV/Usinym6Lx1INUa3L yTMfFZnB2biX6I6OtFLcCvHqwKzSrynAygHDfP6PKjWn3kxEE2/P4iPGO93qtBjY nIk= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:47 2026 by rpki-client