This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/nMOMLSKNHZWnqOpaztV5tvRIW_0.roa File: nMOMLSKNHZWnqOpaztV5tvRIW_0.roa (raw, json) Hash identifier: hzcdgrRKntQ9Q0+tx+TtRx6J7FNm7FNdX1mkQMztsyI= Subject key identifier: 9C:C3:8C:2D:22:8D:1D:95:A7:A8:EA:5A:CE:D5:79:B6:F4:48:5B:FD Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f Certificate serial: 019B7CED0CEDC110FA822F75C7AE6D29E2C1 Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/nMOMLSKNHZWnqOpaztV5tvRIW_0.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20792 IP address blocks: 212.237.228.0/24 maxlen: 24 2a0f:fa42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0c:ed:c1:10:fa:82:2f:75:c7:ae:6d:29:e2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cc38c2d228d1d95a7a8ea5aced579b6f4485bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:53:97:6f:89:75:20:20:10:a6:7a:2f:3e: f4:66:f8:eb:48:3b:98:12:fa:3c:18:c1:8e:ac:83: 7d:39:0b:73:36:2d:09:79:6c:0c:c4:c4:4a:02:ef: f8:03:32:b0:21:38:70:7a:4f:56:27:49:9c:86:f5: 1a:dd:a1:e4:49:0a:69:55:1c:df:0a:1f:00:9e:27: 76:a9:f2:e9:ec:b4:92:84:26:1b:cd:7b:0e:b8:e2: e0:f2:de:e7:24:13:96:25:a3:d2:94:c1:cb:1b:39: a6:06:95:3b:05:0c:99:e0:2b:f6:d7:9a:14:23:8b: 65:42:5e:e2:42:ea:2e:0f:d4:6b:32:ac:9f:92:fc: 7e:04:0d:68:28:a7:ef:1e:de:0e:b7:a0:f7:16:36: 52:48:82:35:d6:87:d2:4c:05:c4:a1:99:e2:e6:92: 40:dd:e9:6b:be:a0:20:ff:b1:a8:7d:7f:5f:b9:7b: c1:76:d9:03:1a:c0:fc:52:3f:c4:59:34:58:f6:4a: 5b:5b:98:d2:9c:18:69:ce:60:2e:00:f2:6b:42:59: 2b:d0:ba:53:3e:18:e7:5f:ab:0d:e1:25:04:71:af: 4a:0b:2b:68:b6:82:6d:16:e0:97:29:86:45:b6:92: 62:8b:63:ab:3f:cd:d9:6b:b8:0c:44:d6:6c:f6:d1: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:8C:2D:22:8D:1D:95:A7:A8:EA:5A:CE:D5:79:B6:F4:48:5B:FD X509v3 Authority Key Identifier: keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/nMOMLSKNHZWnqOpaztV5tvRIW_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.237.228.0/24 IPv6: 2a0f:fa42::/32 Signature Algorithm: sha256WithRSAEncryption 55:54:0a:b3:1d:b7:83:3d:44:4c:47:f3:52:64:83:1d:62:ef: e3:2e:5b:2b:7b:03:a3:ec:04:bc:5f:91:f5:80:92:c8:c2:90: 9e:8d:6b:c9:05:6a:f0:81:fa:cc:e0:03:ab:79:ff:8d:3c:70: 89:af:39:fd:72:e0:32:a3:5f:88:23:3e:f7:fc:e0:5a:7c:7c: d2:56:22:2c:70:d4:ee:74:95:15:50:2c:e1:4c:c2:4e:4b:30: 23:0c:b4:24:40:58:fe:c0:21:2b:a0:45:da:dc:59:7a:d2:45: 29:e3:49:54:6e:aa:db:cd:a7:33:d9:8b:b0:17:26:a3:e7:7e: 7e:60:5c:ca:2c:40:6a:3c:d1:7e:17:fc:e6:02:ed:a6:16:5e: dd:70:6f:6e:4a:21:6c:5e:4b:b6:b4:fa:d2:d7:0b:7f:7e:d4: 79:46:8c:78:a0:99:6b:ba:c4:42:60:c8:87:a6:a6:42:00:ce: 4d:9c:82:2c:37:7d:ec:cb:0e:b5:40:ae:e0:1a:b0:a2:14:89: 83:79:b3:5e:6f:b1:52:c4:ba:7b:20:72:c7:f6:f4:47:2e:5e: 8e:8b:e5:10:fc:4c:c8:3b:9e:65:6a:29:c8:f5:9a:fc:4d:a3: 4c:5c:b8:6a:07:68:d8:5a:cf:38:11:11:26:02:c3:1f:c6:95: 0c:ee:58:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87QztwRD6gi91x65tKeLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl ZDM3OWYwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2MzOGMyZDIyOGQxZDk1YTdhOGVhNWFjZWQ1NzliNmY0NDg1YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/dTl2+JdSAgEKZ6Lz70ZvjrSDuY Evo8GMGOrIN9OQtzNi0JeWwMxMRKAu/4AzKwIThwek9WJ0mchvUa3aHkSQppVRzf Ch8Anid2qfLp7LSShCYbzXsOuOLg8t7nJBOWJaPSlMHLGzmmBpU7BQyZ4Cv215oU I4tlQl7iQuouD9RrMqyfkvx+BA1oKKfvHt4Ot6D3FjZSSII11ofSTAXEoZni5pJA 3elrvqAg/7GofX9fuXvBdtkDGsD8Uj/EWTRY9kpbW5jSnBhpzmAuAPJrQlkr0LpT PhjnX6sN4SUEca9KCytotoJtFuCXKYZFtpJii2OrP83Za7gMRNZs9tEcAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJzDjC0ijR2Vp6jqWs7Vebb0SFv9MB8GA1UdIwQY MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt MTI2NDFmOWU2ZmMwLzEvbk1PTUxTS05IWlducU9wYXp0VjV0dlJJV18wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1O3kMA0E AgACMAcDBQAqD/pCMA0GCSqGSIb3DQEBCwUAA4IBAQBVVAqzHbeDPURMR/NSZIMd Yu/jLlsrewOj7AS8X5H1gJLIwpCejWvJBWrwgfrM4AOref+NPHCJrzn9cuAyo1+I Iz73/OBafHzSViIscNTudJUVUCzhTMJOSzAjDLQkQFj+wCEroEXa3Fl60kUp40lU bqrbzacz2YuwFyaj535+YFzKLEBqPNF+F/zmAu2mFl7dcG9uSiFsXku2tPrS1wt/ ftR5Rox4oJlrusRCYMiHpqZCAM5NnIIsN33syw61QK7gGrCiFImDebNeb7FSxLp7 IHLH9vRHLl6Oi+UQ/EzIO55lainI9Zr8TaNMXLhqB2jYWs84EREmAsMfxpUM7ljm -----END CERTIFICATE-----Generated at Thu Jan 8 16:45:08 2026 by rpki-client