This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/NrZvHsFOgiPwleOeVbwWyHfV_L4.roa File: NrZvHsFOgiPwleOeVbwWyHfV_L4.roa (raw, json) Hash identifier: n6jDQhCNCBmdeDrJBLdu1D1nSKApcLfSNNDXjNz/ofc= Subject key identifier: 36:B6:6F:1E:C1:4E:82:23:F0:95:E3:9E:55:BC:16:C8:77:D5:FC:BE Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B7E383A5AF7C33FE92A23829E8064F2C3 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/NrZvHsFOgiPwleOeVbwWyHfV_L4.roa Signing time: Fri 02 Jan 2026 10:19:32 +0000 ROA not before: Fri 02 Jan 2026 10:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 37.72.135.0/24 maxlen: 24 146.19.189.0/24 maxlen: 24 195.225.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3a:5a:f7:c3:3f:e9:2a:23:82:9e:80:64:f2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b66f1ec14e8223f095e39e55bc16c877d5fcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:56:16:06:02:2e:a4:6e:46:4c:52:b3:18: 04:86:76:ed:85:e1:9e:37:15:9d:cf:0d:b3:71:bd: 1d:2a:a2:46:dc:11:d8:ec:8a:b1:1b:b1:f7:d2:df: 04:4f:34:d5:b9:cb:f6:f7:e6:33:88:4c:f0:73:32: 67:1f:b5:a2:e0:29:82:51:01:88:85:5c:f4:32:f6: e6:c8:51:ff:c0:d6:68:0f:fb:86:69:13:bc:75:41: 6a:bf:a9:03:4f:01:0a:26:28:d7:5b:0f:a4:63:74: f6:ce:53:95:3b:3d:93:6f:1e:a2:87:39:40:a9:2d: 3c:94:56:83:4a:48:ec:61:52:2b:b4:e0:51:8d:e8: 31:17:02:93:c2:da:56:95:50:86:a7:fa:87:d3:09: ac:98:97:f6:42:34:e3:f1:39:02:9e:ef:fe:e9:36: a8:87:38:6e:7f:a2:c0:5b:47:d7:74:ab:f0:8c:7a: 7d:4a:5e:a0:ea:17:a4:ad:11:a1:aa:f5:b9:cb:e9: 8e:ea:fb:90:4a:d7:0a:05:53:b4:be:c9:c8:33:25: 5a:e1:7f:77:53:29:8d:da:08:3a:61:bd:80:9b:8d: 33:3c:10:58:b5:a5:c4:99:0b:d3:7c:64:17:24:fd: a6:88:66:c1:b8:74:0a:e2:c5:37:ff:47:25:0b:0b: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B6:6F:1E:C1:4E:82:23:F0:95:E3:9E:55:BC:16:C8:77:D5:FC:BE X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/NrZvHsFOgiPwleOeVbwWyHfV_L4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.135.0/24 146.19.189.0/24 195.225.98.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:7c:d5:83:ba:58:86:8d:be:81:c0:1a:04:3a:a8:6b:86:8f: bc:d5:3d:97:ee:40:54:7d:ce:e1:61:f0:1b:53:b5:61:59:f7: 67:88:5d:1e:db:c0:e4:7d:9c:58:32:fc:51:99:e7:8d:48:85: 3d:e1:63:9c:31:fb:f8:c8:a7:a7:c7:80:2f:9c:07:41:61:00: 5b:3f:6c:2c:ab:1d:03:b2:ca:e7:6f:cf:a2:7a:99:e1:2e:7e: f8:1c:e6:12:c5:71:9c:9e:c7:dc:ea:f0:39:f3:c6:64:92:6f: 59:05:fd:84:10:e3:ef:4c:1c:07:24:e6:34:87:3a:3a:20:b2: 8a:f0:e8:9a:30:2e:99:ee:49:da:88:ad:1c:df:7c:ae:21:bb: c3:15:cc:2c:94:43:46:67:20:b6:f2:55:2c:26:f2:2a:a3:4a: 54:c7:0d:7b:89:d9:2d:23:67:84:b8:20:a6:76:6a:0c:b8:15: 83:d4:57:96:86:dd:77:e1:2f:04:83:30:18:7a:c3:72:dc:b1: 74:f9:83:05:b1:8a:7e:ad:ef:bf:99:9a:76:9d:cf:71:04:c2: 03:1b:df:2f:75:f2:77:b2:30:37:0c:d7:4d:07:35:03:44:c8: cc:2b:1e:a1:46:0a:0c:cd:da:78:f6:d7:d6:0e:37:05:e1:52: 29:63:53:58 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+ODpa98M/6Sojgp6AZPLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI2NmYxZWMxNGU4MjIzZjA5NWUzOWU1NWJjMTZjODc3ZDVmY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrFWFgYCLqRuRkxSsxgEhnbtheGe NxWdzw2zcb0dKqJG3BHY7IqxG7H30t8ETzTVucv29+YziEzwczJnH7Wi4CmCUQGI hVz0MvbmyFH/wNZoD/uGaRO8dUFqv6kDTwEKJijXWw+kY3T2zlOVOz2Tbx6ihzlA qS08lFaDSkjsYVIrtOBRjegxFwKTwtpWlVCGp/qH0wmsmJf2QjTj8TkCnu/+6Tao hzhuf6LAW0fXdKvwjHp9Sl6g6hekrRGhqvW5y+mO6vuQStcKBVO0vsnIMyVa4X93 UymN2gg6Yb2Am40zPBBYtaXEmQvTfGQXJP2miGbBuHQK4sU3/0clCwuptwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDa2bx7BToIj8JXjnlW8Fsh31fy+MB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvTnJadkhzRk9naVB3bGVPZVZid1d5SGZWX0w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJUiHAwQA khO9AwQAw+FiMA0GCSqGSIb3DQEBCwUAA4IBAQAbfNWDuliGjb6BwBoEOqhrho+8 1T2X7kBUfc7hYfAbU7VhWfdniF0e28DkfZxYMvxRmeeNSIU94WOcMfv4yKenx4Av nAdBYQBbP2wsqx0Dssrnb8+iepnhLn74HOYSxXGcnsfc6vA588Zkkm9ZBf2EEOPv TBwHJOY0hzo6ILKK8OiaMC6Z7knaiK0c33yuIbvDFcwslENGZyC28lUsJvIqo0pU xw17idktI2eEuCCmdmoMuBWD1FeWht134S8EgzAYesNy3LF0+YMFsYp+re+/mZp2 nc9xBMIDG98vdfJ3sjA3DNdNBzUDRMjMKx6hRgoMzdp49tfWDjcF4VIpY1NY -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:48 2026 by rpki-client