This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/ncf5noc6Z3jN3uxBgN10gB_Iu9Y.roa File: ncf5noc6Z3jN3uxBgN10gB_Iu9Y.roa (raw, json) Hash identifier: hkuknMaOvCmMOe16dyHeXBmenOlWRRHOVtQ/LOPxqys= Subject key identifier: 9D:C7:F9:9E:87:3A:67:78:CD:DE:EC:41:80:DD:74:80:1F:C8:BB:D6 Certificate issuer: /CN=996a5f948435acb112a66e2563792263ec8b657e Certificate serial: 019B76EB608CCBC69E53DB084FB5B989E5F0 Authority key identifier: 99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/ncf5noc6Z3jN3uxBgN10gB_Iu9Y.roa Signing time: Thu 01 Jan 2026 00:18:15 +0000 ROA not before: Thu 01 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203616 IP address blocks: 185.129.80.0/23 maxlen: 23 185.129.80.0/24 maxlen: 24 185.129.81.0/24 maxlen: 24 185.129.82.0/23 maxlen: 23 185.129.82.0/24 maxlen: 24 185.129.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:60:8c:cb:c6:9e:53:db:08:4f:b5:b9:89:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996a5f948435acb112a66e2563792263ec8b657e Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc7f99e873a6778cddeec4180dd74801fc8bbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:17:fb:ad:80:46:ff:75:41:5f:db:87:d5: b8:ec:3f:35:4f:b9:33:88:cc:64:12:bb:a2:8c:1d: fd:78:5c:f3:cd:6d:9f:d2:bb:db:5c:aa:c9:6d:65: e2:b6:10:1f:5d:4f:16:df:45:20:89:bc:46:34:ff: e5:02:67:f0:d3:71:83:cc:e7:d1:f1:1e:48:9e:e9: 4a:d9:44:a6:fa:97:d9:12:45:86:a4:71:ff:aa:84: 87:1e:c9:45:15:cf:12:4e:c6:f3:a3:52:2b:69:d9: 67:0b:9a:70:58:d1:66:88:d5:ef:81:d4:ed:8e:fa: c8:44:a8:3c:4c:fb:8a:13:70:cc:99:d1:f2:60:4c: 75:47:a6:71:c1:2e:6f:55:90:2d:24:62:63:e3:36: e9:b9:79:b5:e8:86:1a:7c:3f:d4:d8:0c:9e:13:1b: 9d:fe:1a:11:a7:d8:ec:48:bc:79:89:13:56:28:60: 16:92:e5:19:92:93:11:07:bf:4f:62:7f:75:15:c8: 44:25:3b:3b:ab:02:de:46:22:5f:b0:5a:65:ac:48: fb:4d:d8:de:f6:64:37:39:18:c8:c0:22:62:00:2d: 55:7b:97:35:e5:c1:21:96:8c:ce:05:72:32:45:d0: 9f:f6:8f:61:8b:c1:b2:96:49:28:cf:3d:d0:e7:c0: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C7:F9:9E:87:3A:67:78:CD:DE:EC:41:80:DD:74:80:1F:C8:BB:D6 X509v3 Authority Key Identifier: keyid:99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/ncf5noc6Z3jN3uxBgN10gB_Iu9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.80.0/22 Signature Algorithm: sha256WithRSAEncryption 54:68:7f:50:4e:da:8c:49:dd:36:08:01:1f:77:03:5c:43:3f: 88:a9:06:8e:73:8e:2a:61:2f:50:bd:bc:cd:f3:54:a0:d6:f5: ef:27:e2:9b:b5:de:9a:0b:97:7a:a5:01:41:7c:82:fc:cc:11: a5:56:a5:a9:3d:ac:89:90:fe:43:b3:da:55:bc:9a:81:b5:13: d0:da:2e:8c:a7:7b:52:0e:79:44:19:b1:23:58:20:95:8b:ed: e0:a2:b9:27:22:2a:96:5a:fb:87:fc:42:80:4c:1e:56:ec:07: 7e:61:be:94:40:28:95:74:30:f9:82:2d:93:24:22:0e:92:17: 96:48:dd:29:1a:d0:db:9b:8c:c2:f2:c5:f5:72:38:02:8f:4a: 0c:5a:d5:a7:4a:02:3f:80:45:14:d1:eb:b0:78:90:4a:50:11: 22:14:a9:f7:21:b8:1e:a1:8f:48:33:e2:98:45:83:ed:6e:dc: 74:84:62:40:f2:94:f9:b8:31:a9:fd:fa:29:46:c5:81:63:ea: 55:8e:25:64:6b:0a:d5:30:c5:3b:49:cb:a4:f5:72:f8:6d:96: 31:6e:68:b5:69:75:12:38:05:b8:0f:85:ce:97:91:6b:18:9f: 95:dd:c3:b1:8b:0d:74:1f:34:58:b9:9a:54:27:ce:84:4f:77: b3:a9:42:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262CMy8aeU9sIT7W5ieXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NmE1Zjk0ODQzNWFjYjExMmE2NmUyNTYzNzkyMjYzZWM4 YjY1N2UwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGM3Zjk5ZTg3M2E2Nzc4Y2RkZWVjNDE4MGRkNzQ4MDFmYzhiYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1QX+62ARv91QV/bh9W47D81T7kz iMxkEruijB39eFzzzW2f0rvbXKrJbWXithAfXU8W30UgibxGNP/lAmfw03GDzOfR 8R5InulK2USm+pfZEkWGpHH/qoSHHslFFc8STsbzo1IradlnC5pwWNFmiNXvgdTt jvrIRKg8TPuKE3DMmdHyYEx1R6ZxwS5vVZAtJGJj4zbpuXm16IYafD/U2AyeExud /hoRp9jsSLx5iRNWKGAWkuUZkpMRB79PYn91FchEJTs7qwLeRiJfsFplrEj7Tdje 9mQ3ORjIwCJiAC1Ve5c15cEhlozOBXIyRdCf9o9hi8Gylkkozz3Q58AojwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3H+Z6HOmd4zd7sQYDddIAfyLvWMB8GA1UdIwQY MBaAFJlqX5SENayxEqZuJWN5ImPsi2V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVdwZmxJUTFyTEVTcG00bFkza2lZLXlMWlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYjBmZWEtYjBkYi00ODg2LWJhMGQt NjdjNzk2YWE5N2U5LzEvbmNmNW5vYzZaM2pOM3V4QmdOMTBnQl9JdTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9lYjBmZWEtYjBkYi00ODg2LWJhMGQtNjdjNzk2YWE5N2U5 LzEvbVdwZmxJUTFyTEVTcG00bFkza2lZLXlMWlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYFQMA0G CSqGSIb3DQEBCwUAA4IBAQBUaH9QTtqMSd02CAEfdwNcQz+IqQaOc44qYS9QvbzN 81Sg1vXvJ+Kbtd6aC5d6pQFBfIL8zBGlVqWpPayJkP5Ds9pVvJqBtRPQ2i6Mp3tS DnlEGbEjWCCVi+3gorknIiqWWvuH/EKATB5W7Ad+Yb6UQCiVdDD5gi2TJCIOkheW SN0pGtDbm4zC8sX1cjgCj0oMWtWnSgI/gEUU0euweJBKUBEiFKn3IbgeoY9IM+KY RYPtbtx0hGJA8pT5uDGp/fopRsWBY+pVjiVkawrVMMU7Scuk9XL4bZYxbmi1aXUS OAW4D4XOl5FrGJ+V3cOxiw10HzRYuZpUJ86ET3ezqUJz -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:48 2026 by rpki-client