This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/naYBcrufp-6L3JkDN-CeOQG1p1I.roa File: naYBcrufp-6L3JkDN-CeOQG1p1I.roa (raw, json) Hash identifier: fPvBEEB4GWYhpwRMLZebL8dNCBfHcJIGVXJAvo/Y6LY= Subject key identifier: 9D:A6:01:72:BB:9F:A7:EE:8B:DC:99:03:37:E0:9E:39:01:B5:A7:52 Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87 Certificate serial: 019B7E39268D50CAAB1E5AE6F585615B4BDF Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/naYBcrufp-6L3JkDN-CeOQG1p1I.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215782 IP address blocks: 185.221.246.0/24 maxlen: 24 2a04:3f83:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:26:8d:50:ca:ab:1e:5a:e6:f5:85:61:5b:4b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9da60172bb9fa7ee8bdc990337e09e3901b5a752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:9c:92:87:a0:b4:4b:51:d2:bf:aa:04:c8: ed:1a:fb:39:11:e1:92:3b:1f:0e:52:fc:6b:af:c8: e2:0f:3e:53:07:6e:6e:7d:00:ed:39:fb:4c:90:82: 48:d4:80:16:2a:07:2b:2f:11:4a:96:f1:0b:0e:91: 30:d9:c7:0b:a7:f8:ed:fb:41:ca:c0:81:46:8d:ee: 06:36:f9:35:48:25:3d:2e:46:1d:40:f4:a9:7b:fc: d4:40:db:92:33:4c:39:44:df:8a:c8:63:51:2f:3b: bd:b7:db:1c:d6:b7:45:78:41:26:3a:bd:3e:e2:37: 6b:3d:62:ad:eb:26:14:5f:b5:79:52:af:a5:39:03: 30:22:84:7b:3e:cd:73:71:8f:07:f8:d9:56:f9:7c: ec:56:ac:94:46:da:d2:4d:56:1d:2d:66:80:13:16: d4:2c:02:9c:20:f4:16:2c:dd:19:23:d6:38:7b:d4: 3e:20:25:e5:63:18:81:d8:ce:40:6d:20:fb:27:66: e2:cb:67:f1:7a:7b:f1:e8:0a:99:c4:00:d9:27:86: 51:42:53:26:54:32:4f:46:cd:a3:6e:40:c2:58:bc: 02:13:4e:96:f4:d5:03:e0:51:f5:4e:9a:79:62:96: 7d:81:c2:3b:d3:84:9a:a0:fd:37:cd:40:2a:86:86: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A6:01:72:BB:9F:A7:EE:8B:DC:99:03:37:E0:9E:39:01:B5:A7:52 X509v3 Authority Key Identifier: keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/naYBcrufp-6L3JkDN-CeOQG1p1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.246.0/24 IPv6: 2a04:3f83:41::/48 Signature Algorithm: sha256WithRSAEncryption 16:a2:42:ec:f6:2a:08:26:0d:8e:1f:31:d8:dc:20:af:f1:27: 5f:f3:de:61:77:86:fb:71:ed:84:c1:c9:35:b6:d1:7d:89:92: 2a:a4:96:02:ca:5d:b6:da:91:71:44:e0:4e:a9:f3:34:a1:49: e6:26:3e:9f:9f:96:68:a0:81:d6:44:c5:a5:69:37:0d:75:b5: e5:bb:d9:16:31:3e:ee:3e:f5:03:f5:d1:94:64:94:7b:ee:69: a6:ff:56:f2:1e:0c:39:8e:e6:e5:26:dc:73:79:b0:1c:08:40: 03:c5:66:7d:5e:f1:9f:61:cf:c9:e4:a4:d9:25:5a:40:34:bf: c5:30:9c:35:9a:60:47:84:04:a0:d1:1c:2f:82:bb:18:0a:46: 82:cb:d6:9c:7d:18:55:e5:13:a2:4d:75:6f:07:c0:18:6d:1d: b4:df:67:e2:b2:66:91:09:32:95:c2:3f:e4:f3:70:23:1d:04: 13:40:d2:17:8e:78:e7:ca:ac:74:f6:27:9a:5b:3f:7d:dc:20: de:ca:e9:f8:63:a5:b9:51:9b:4f:e6:c1:ca:9b:b2:c1:87:29: 71:5b:ce:4c:b3:70:22:57:64:5e:93:46:ba:d3:15:2d:28:2d: 1b:84:d0:46:d3:23:9d:4f:6a:71:32:57:a2:b3:d4:52:2a:22: b6:de:b8:e9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OSaNUMqrHlrm9YVhW0vfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjFkMGRiZTA5M2M3MjIzNTA2MThmNDA0NWMyNWJhOTQz MTdmODcwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGE2MDE3MmJiOWZhN2VlOGJkYzk5MDMzN2UwOWUzOTAxYjVhNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxackoegtEtR0r+qBMjtGvs5EeGS Ox8OUvxrr8jiDz5TB25ufQDtOftMkIJI1IAWKgcrLxFKlvELDpEw2ccLp/jt+0HK wIFGje4GNvk1SCU9LkYdQPSpe/zUQNuSM0w5RN+KyGNRLzu9t9sc1rdFeEEmOr0+ 4jdrPWKt6yYUX7V5Uq+lOQMwIoR7Ps1zcY8H+NlW+XzsVqyURtrSTVYdLWaAExbU LAKcIPQWLN0ZI9Y4e9Q+ICXlYxiB2M5AbSD7J2biy2fxenvx6AqZxADZJ4ZRQlMm VDJPRs2jbkDCWLwCE06W9NUD4FH1Tpp5YpZ9gcI704SaoP03zUAqhob32wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ2mAXK7n6fui9yZAzfgnjkBtadSMB8GA1UdIwQY MBaAFBDx0Nvgk8ciNQYY9ARcJbqUMX+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYt MmYwYTZiZGJiZTUxLzEvbmFZQmNydWZwLTZMM0prRE4tQ2VPUUcxcDFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYtMmYwYTZiZGJiZTUx LzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAud32MA8E AgACMAkDBwAqBD+DAEEwDQYJKoZIhvcNAQELBQADggEBABaiQuz2KggmDY4fMdjc IK/xJ1/z3mF3hvtx7YTByTW20X2JkiqklgLKXbbakXFE4E6p8zShSeYmPp+flmig gdZExaVpNw11teW72RYxPu4+9QP10ZRklHvuaab/VvIeDDmO5uUm3HN5sBwIQAPF Zn1e8Z9hz8nkpNklWkA0v8UwnDWaYEeEBKDRHC+CuxgKRoLL1px9GFXlE6JNdW8H wBhtHbTfZ+KyZpEJMpXCP+TzcCMdBBNA0heOeOfKrHT2J5pbP33cIN7K6fhjpblR m0/mwcqbssGHKXFbzkyzcCJXZF6TRrrTFS0oLRuE0EbTI51PanEyV6Kz1FIqIrbe uOk= -----END CERTIFICATE-----Generated at Mon Feb 2 08:05:06 2026 by rpki-client