This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/Na30MdB5zwEKr_r0SUKu8zdQTw4.roa File: Na30MdB5zwEKr_r0SUKu8zdQTw4.roa (raw, json) Hash identifier: xfnkXnSAbtguyfEj9MIvTb5o3BtX77AXLc2VZsYQIqg= Subject key identifier: 35:AD:F4:31:D0:79:CF:01:0A:AF:FA:F4:49:42:AE:F3:37:50:4F:0E Certificate issuer: /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d Certificate serial: 019B7F15D008BA9E9FE2ADB771B4D9CC953F Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/Na30MdB5zwEKr_r0SUKu8zdQTw4.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136557 IP address blocks: 185.184.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d0:08:ba:9e:9f:e2:ad:b7:71:b4:d9:cc:95:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35adf431d079cf010aaffaf44942aef337504f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:c9:e0:2f:b2:9e:6f:60:86:24:4c:96:d7: d9:29:bc:33:5d:15:b2:d3:13:bc:0f:a5:ad:71:e6: 8d:18:8a:e3:a4:1a:4e:40:55:26:2f:1f:ab:f5:8b: 69:8d:9b:ac:15:88:a7:fd:73:85:c4:a3:18:fa:6d: 61:af:58:9e:cb:1a:87:23:f7:84:ce:19:5e:a9:7d: 49:4c:98:e8:9e:47:e9:9d:f5:81:1f:a2:5a:5f:ea: 12:5f:3a:e8:06:c8:3f:a0:5f:ba:ea:40:89:75:fa: 39:9d:0d:16:0b:5c:99:ff:2b:34:e9:3e:a5:ed:d7: dd:a0:4b:c7:9d:77:06:5c:9e:24:b1:7f:01:3c:93: 14:7e:a9:e4:29:46:de:b3:4d:5d:ef:e5:fd:19:7d: 71:f3:39:ad:6d:31:73:2c:b9:fb:74:ab:db:a2:d3: 3c:ef:fe:15:1b:0a:bb:4c:a0:7b:bb:05:f6:43:34: 35:e5:1b:b7:57:99:bf:22:9f:45:e4:9f:9e:45:9e: ad:57:5f:74:1e:3a:d5:0e:41:f5:50:71:71:63:7f: de:39:f2:3b:3f:8f:c2:f8:cb:0d:fe:c9:8e:3a:f5: 62:f4:ab:e4:e9:4b:fe:23:eb:0e:e7:61:b8:5a:48: 96:da:4e:85:fe:dc:72:ef:cb:c0:55:56:54:1a:57: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AD:F4:31:D0:79:CF:01:0A:AF:FA:F4:49:42:AE:F3:37:50:4F:0E X509v3 Authority Key Identifier: keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/Na30MdB5zwEKr_r0SUKu8zdQTw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.152.0/24 Signature Algorithm: sha256WithRSAEncryption be:34:c4:d7:7a:05:9c:e9:73:76:3f:b1:3f:19:02:b1:81:77: 84:33:b1:ea:33:f8:37:1f:56:c3:9d:55:d4:f2:ef:09:c1:86: d1:dc:8d:18:3c:fb:4d:fa:ea:8c:d5:63:1d:78:7c:7f:80:f3: e3:ca:a9:db:5f:b1:34:b2:a5:4b:31:22:d1:ef:97:72:dd:54: 6b:b0:0f:f8:cf:b9:70:91:d5:25:7b:e7:d6:88:b7:c3:f7:3b: 47:d0:3c:27:9c:85:ee:c3:e4:4f:82:34:16:73:76:09:8e:54: 79:75:3c:55:5c:cb:ea:67:b5:59:db:a1:22:6d:0b:16:d8:a0: 98:50:ac:94:80:a0:f7:62:53:b6:b4:84:86:1f:64:dc:6b:f1: ec:3b:aa:ad:04:53:b4:7d:a8:56:6e:15:35:61:95:fa:14:28: 7c:9b:12:9d:80:b8:8f:d8:59:e8:68:4a:cb:ce:a2:3f:7c:94: ae:1e:44:1c:9c:35:e0:d1:85:76:a2:78:d7:2c:9b:43:24:71: 85:60:28:da:6e:01:5f:c3:34:dd:71:87:e3:75:e3:cb:c1:fe: 20:19:a5:f6:f1:e1:c1:ae:ba:75:22:9a:8c:64:e5:f0:81:d3: 12:da:75:63:24:3b:97:76:fb:f0:0c:16:19:bb:fe:0a:06:0e: da:b0:a4:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdAIup6f4q23cbTZzJU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzdjY2Q3YTk0NDE1ZGZjNjhjY2NhODc0ZTk0YzJlOGMy MjIwMmQwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWFkZjQzMWQwNzljZjAxMGFhZmZhZjQ0OTQyYWVmMzM3NTA0ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY7J4C+ynm9ghiRMltfZKbwzXRWy 0xO8D6WtceaNGIrjpBpOQFUmLx+r9YtpjZusFYin/XOFxKMY+m1hr1ieyxqHI/eE zhleqX1JTJjonkfpnfWBH6JaX+oSXzroBsg/oF+66kCJdfo5nQ0WC1yZ/ys06T6l 7dfdoEvHnXcGXJ4ksX8BPJMUfqnkKUbes01d7+X9GX1x8zmtbTFzLLn7dKvbotM8 7/4VGwq7TKB7uwX2QzQ15Ru3V5m/Ip9F5J+eRZ6tV190HjrVDkH1UHFxY3/eOfI7 P4/C+MsN/smOOvVi9Kvk6Uv+I+sO52G4WkiW2k6F/txy78vAVVZUGlfiEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWt9DHQec8BCq/69ElCrvM3UE8OMB8GA1UdIwQY MBaAFE13zNepRBXfxozMqHTpTC6MIiAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjIt MTBlNTdmNTZhMTdhLzEvTmEzME1kQjV6d0VLcl9yMFNVS3U4emRRVHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjItMTBlNTdmNTZhMTdh LzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubiYMA0G CSqGSIb3DQEBCwUAA4IBAQC+NMTXegWc6XN2P7E/GQKxgXeEM7HqM/g3H1bDnVXU 8u8JwYbR3I0YPPtN+uqM1WMdeHx/gPPjyqnbX7E0sqVLMSLR75dy3VRrsA/4z7lw kdUle+fWiLfD9ztH0DwnnIXuw+RPgjQWc3YJjlR5dTxVXMvqZ7VZ26EibQsW2KCY UKyUgKD3YlO2tISGH2Tca/HsO6qtBFO0fahWbhU1YZX6FCh8mxKdgLiP2FnoaErL zqI/fJSuHkQcnDXg0YV2onjXLJtDJHGFYCjabgFfwzTdcYfjdePLwf4gGaX28eHB rrp1IpqMZOXwgdMS2nVjJDuXdvvwDBYZu/4KBg7asKTD -----END CERTIFICATE-----Generated at Wed Jan 21 11:24:45 2026 by rpki-client