This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/NSff8QmOR5QMbXmvv0vT3cO30Vo.roa File: NSff8QmOR5QMbXmvv0vT3cO30Vo.roa (raw, json) Hash identifier: 9Im0oh/WcFti35mYlpYTmDh/TqslAAcAQyxVVkByg1w= Subject key identifier: 35:27:DF:F1:09:8E:47:94:0C:6D:79:AF:BF:4B:D3:DD:C3:B7:D1:5A Certificate issuer: /CN=795a18641a916b306074d1e11fd0b10e9dfdc430 Certificate serial: 019B76EADA0B418DD3C455EFED7C174839E0 Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/NSff8QmOR5QMbXmvv0vT3cO30Vo.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59750 IP address blocks: 194.1.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:da:0b:41:8d:d3:c4:55:ef:ed:7c:17:48:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3527dff1098e47940c6d79afbf4bd3ddc3b7d15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:cd:16:fd:5a:cd:6c:f9:7a:51:de:d5:8e: 1e:80:bf:88:6d:7b:cf:1f:dd:db:39:13:65:cd:c2: 22:35:09:bd:d8:22:5d:f0:07:2f:ef:50:85:93:f2: 35:97:08:ca:ac:59:92:6a:c4:bb:3d:25:d4:80:78: f8:ce:9c:64:c7:ef:a2:ad:1f:82:11:9c:4f:9c:05: 58:48:c9:30:84:00:6f:2d:76:a7:44:b1:c5:53:b1: 57:99:14:4d:71:e7:3f:35:6a:5b:62:f4:b8:45:b8: 17:c1:ee:d6:8a:31:0f:cc:de:28:e5:d3:c3:d2:d3: 03:81:73:9b:e4:ad:79:56:3a:a0:7b:ce:f2:ec:ee: 50:83:60:77:97:52:69:bb:02:15:de:df:55:0b:98: 7f:8a:c5:ed:dd:03:aa:cf:e5:41:73:28:ad:ff:8f: 13:7e:25:bd:27:eb:e5:bd:e9:13:41:34:bd:0d:98: f7:87:fb:89:79:32:64:18:72:cb:5c:29:cc:52:93: 93:7e:84:e1:a3:c3:f5:bd:8e:31:2e:ae:62:2b:e3: b8:03:02:b7:69:d4:2d:23:7b:11:54:bd:62:f9:c0: f0:48:7b:03:83:96:28:a2:d0:4d:60:48:dd:3d:2b: 76:eb:71:72:e8:5f:7b:62:b1:f4:85:f4:12:f5:d5: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:27:DF:F1:09:8E:47:94:0C:6D:79:AF:BF:4B:D3:DD:C3:B7:D1:5A X509v3 Authority Key Identifier: keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/NSff8QmOR5QMbXmvv0vT3cO30Vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.247.0/24 Signature Algorithm: sha256WithRSAEncryption 49:79:fb:97:bb:2f:9c:68:78:55:b4:92:c5:44:58:dc:e8:36: 7a:e6:aa:7b:58:f5:ae:13:f4:5a:16:62:c4:69:1d:1c:22:4a: 6e:16:d0:1a:97:47:da:09:03:35:a9:1b:fd:a3:f0:a4:b4:be: c1:32:91:79:b7:bb:09:f0:e2:81:0f:9a:7b:cf:a8:be:8c:c2: 14:1f:f2:50:ae:6d:99:e1:a9:53:dc:4e:a9:b9:1a:4e:9a:f8: 20:67:ba:4c:c9:c0:45:c8:e5:44:fa:f3:25:d9:6f:33:aa:cf: 4d:42:d0:fe:ce:8d:36:50:9b:87:0d:e1:c3:fc:cb:1c:ac:dc: c2:26:d1:47:2f:79:49:fc:ce:49:b5:75:bb:97:41:ef:09:3e: 98:4f:8d:65:3d:75:85:02:b3:5d:b4:6e:1d:0a:f2:c0:a2:fb: fc:a9:a9:96:c9:ce:66:d2:d6:38:4d:2c:65:57:87:d6:8d:0a: bc:f9:93:9e:81:34:92:43:6c:a6:80:0b:3a:d4:66:f2:02:18: 59:6d:a7:62:fe:b2:d4:1d:da:8e:2f:81:91:9c:6e:0a:71:f8: 4a:df:c8:cb:8d:d3:d5:09:00:89:18:44:fe:49:b9:b8:89:6a: 78:4a:7e:23:62:0a:cc:f0:61:9b:5d:d6:0e:3b:f5:88:65:3d: 9b:4c:8a:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26toLQY3TxFXv7XwXSDngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NWExODY0MWE5MTZiMzA2MDc0ZDFlMTFmZDBiMTBlOWRm ZGM0MzAwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTI3ZGZmMTA5OGU0Nzk0MGM2ZDc5YWZiZjRiZDNkZGMzYjdkMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoHNFv1azWz5elHe1Y4egL+IbXvP H93bORNlzcIiNQm92CJd8Acv71CFk/I1lwjKrFmSasS7PSXUgHj4zpxkx++irR+C EZxPnAVYSMkwhABvLXanRLHFU7FXmRRNcec/NWpbYvS4RbgXwe7WijEPzN4o5dPD 0tMDgXOb5K15Vjqge87y7O5Qg2B3l1JpuwIV3t9VC5h/isXt3QOqz+VBcyit/48T fiW9J+vlvekTQTS9DZj3h/uJeTJkGHLLXCnMUpOTfoTho8P1vY4xLq5iK+O4AwK3 adQtI3sRVL1i+cDwSHsDg5YootBNYEjdPSt263Fy6F97YrH0hfQS9dW/dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUn3/EJjkeUDG15r79L093Dt9FaMB8GA1UdIwQY MBaAFHlaGGQakWswYHTR4R/QsQ6d/cQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTct MDlmYjhmZTcyZjRhLzEvTlNmZjhRbU9SNVFNYlhtdnYwdlQzY08zMFZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTctMDlmYjhmZTcyZjRh LzEvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgH3MA0G CSqGSIb3DQEBCwUAA4IBAQBJefuXuy+caHhVtJLFRFjc6DZ65qp7WPWuE/RaFmLE aR0cIkpuFtAal0faCQM1qRv9o/CktL7BMpF5t7sJ8OKBD5p7z6i+jMIUH/JQrm2Z 4alT3E6puRpOmvggZ7pMycBFyOVE+vMl2W8zqs9NQtD+zo02UJuHDeHD/MscrNzC JtFHL3lJ/M5JtXW7l0HvCT6YT41lPXWFArNdtG4dCvLAovv8qamWyc5m0tY4TSxl V4fWjQq8+ZOegTSSQ2ymgAs61GbyAhhZbadi/rLUHdqOL4GRnG4KcfhK38jLjdPV CQCJGET+Sbm4iWp4Sn4jYgrM8GGbXdYOO/WIZT2bTIog -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:56 2026 by rpki-client