This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/N9Rs24uFohaLWAJCS-MAHor3P7Y.roa File: N9Rs24uFohaLWAJCS-MAHor3P7Y.roa (raw, json) Hash identifier: nYmoydHMEGkT6vcK6CCR3HuAq2yH0sl4UOzgyYkInDo= Subject key identifier: 37:D4:6C:DB:8B:85:A2:16:8B:58:02:42:4B:E3:00:1E:8A:F7:3F:B6 Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d Certificate serial: 019B797E0C7E35A224E109EA64E37BE25D30 Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/N9Rs24uFohaLWAJCS-MAHor3P7Y.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201404 IP address blocks: 185.49.49.0/24 maxlen: 24 2a04:b700:ca75::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0c:7e:35:a2:24:e1:09:ea:64:e3:7b:e2:5d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37d46cdb8b85a2168b5802424be3001e8af73fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:88:27:6c:17:51:51:06:7f:73:5d:d8:1c: 4a:34:a7:82:a7:40:e4:da:fd:cc:fb:43:07:29:0e: ea:72:98:a8:8a:25:0a:37:8e:07:d0:ef:56:7b:b6: ed:e3:d5:84:e1:11:83:32:dc:8f:24:8a:4a:d0:81: 08:5d:dd:7b:98:85:c3:74:79:d9:71:af:2c:70:80: 72:4a:ad:5e:4b:b5:16:4f:18:f7:f3:9d:49:04:ea: c6:d4:6d:2d:0d:df:b0:3b:64:24:7a:ba:04:20:8a: 25:3e:49:89:82:43:78:57:cd:22:fa:1e:5d:61:3f: cc:4f:4b:9a:a9:0c:58:7d:5f:c1:0b:fe:fe:9b:8a: 78:3d:6a:55:67:02:da:bb:6f:d0:10:fd:0d:26:53: 8c:7b:18:75:d8:74:d4:ab:0b:37:3b:03:c8:53:94: 28:f2:93:a8:ca:ff:bb:32:72:9c:1c:f7:0d:5e:e8: 0d:23:28:2d:8e:c4:b7:d6:fe:dc:f7:97:8c:bb:1d: d3:52:fe:5f:d6:ef:d7:33:3a:61:7e:c8:92:4c:2b: a9:c3:20:8f:74:66:d2:b5:61:e8:20:cf:be:bc:69: 77:db:68:60:b3:4d:81:a9:83:7c:56:41:51:6c:ce: 2a:4b:64:4d:47:85:35:35:75:36:a4:71:ac:c2:eb: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D4:6C:DB:8B:85:A2:16:8B:58:02:42:4B:E3:00:1E:8A:F7:3F:B6 X509v3 Authority Key Identifier: keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/N9Rs24uFohaLWAJCS-MAHor3P7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.49.0/24 IPv6: 2a04:b700:ca75::/48 Signature Algorithm: sha256WithRSAEncryption 96:9d:a4:98:72:af:d6:56:ac:07:55:86:c7:c6:8b:64:72:90: 73:07:75:21:6a:84:59:94:a6:39:3d:87:69:87:60:3c:81:c0: 78:a7:6a:ec:d3:6e:b0:87:dd:4b:76:34:d6:b4:06:1d:c8:f7: 89:f5:56:44:09:d3:b3:78:00:f6:ca:b1:70:57:66:d7:9e:83: 73:4d:27:83:ff:b8:60:ed:39:60:8b:03:21:46:46:ad:4d:ae: 57:e8:bc:1a:b0:9d:51:79:ee:f4:cf:f4:55:2c:c7:a7:3c:70: d4:3f:3b:4c:d6:fa:b9:5e:4c:74:0a:09:04:bb:99:15:3d:f4: e6:aa:5e:99:fd:cb:5f:52:41:4e:5f:30:d8:d5:23:d7:96:85: 46:ab:38:5e:93:60:a0:9c:1e:c7:3b:ee:eb:24:0e:e0:22:67: 75:9a:88:b0:09:90:3d:53:21:0a:e9:e9:c7:69:ad:77:f9:67: 9a:d8:a7:e8:9f:67:77:1c:ac:99:b0:e8:d3:f2:c5:37:fa:aa: 4d:eb:10:df:68:56:ba:ab:73:27:9f:e1:7e:35:8c:df:a9:d7: f4:57:26:a9:5f:c0:95:93:c1:2d:d1:83:14:45:22:47:53:21: 2b:53:69:e6:c8:d6:82:e6:ea:d2:bf:68:d6:97:b1:15:b6:d9: 4c:a0:af:00 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fgx+NaIk4QnqZON74l0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4 NWQwMGQwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2Q0NmNkYjhiODVhMjE2OGI1ODAyNDI0YmUzMDAxZThhZjczZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6mIJ2wXUVEGf3Nd2BxKNKeCp0Dk 2v3M+0MHKQ7qcpioiiUKN44H0O9We7bt49WE4RGDMtyPJIpK0IEIXd17mIXDdHnZ ca8scIBySq1eS7UWTxj3851JBOrG1G0tDd+wO2QkeroEIIolPkmJgkN4V80i+h5d YT/MT0uaqQxYfV/BC/7+m4p4PWpVZwLau2/QEP0NJlOMexh12HTUqws3OwPIU5Qo 8pOoyv+7MnKcHPcNXugNIygtjsS31v7c95eMux3TUv5f1u/XMzphfsiSTCupwyCP dGbStWHoIM++vGl322hgs02BqYN8VkFRbM4qS2RNR4U1NXU2pHGswus6aQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDfUbNuLhaIWi1gCQkvjAB6K9z+2MB8GA1UdIwQY MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt MTA3NzdmOWUzNjg1LzEvTjlSczI0dUZvaGFMV0FKQ1MtTUFIb3IzUDdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1 LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuTExMA8E AgACMAkDBwAqBLcAynUwDQYJKoZIhvcNAQELBQADggEBAJadpJhyr9ZWrAdVhsfG i2RykHMHdSFqhFmUpjk9h2mHYDyBwHinauzTbrCH3Ut2NNa0Bh3I94n1VkQJ07N4 APbKsXBXZteeg3NNJ4P/uGDtOWCLAyFGRq1NrlfovBqwnVF57vTP9FUsx6c8cNQ/ O0zW+rleTHQKCQS7mRU99OaqXpn9y19SQU5fMNjVI9eWhUarOF6TYKCcHsc77usk DuAiZ3WaiLAJkD1TIQrp6cdprXf5Z5rYp+ifZ3ccrJmw6NPyxTf6qk3rEN9oVrqr cyef4X41jN+p1/RXJqlfwJWTwS3RgxRFIkdTIStTaebI1oLm6tK/aNaXsRW22Uyg rwA= -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:43 2026 by rpki-client