This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nQQyVVLcvPs3CJnrtvlWOD_a6sE.roa File: nQQyVVLcvPs3CJnrtvlWOD_a6sE.roa (raw, json) Hash identifier: sRoLMgKOfOavMKSOTfa0uG9y0GTCbRFq3d4JyAwxnVU= Subject key identifier: 9D:04:32:55:52:DC:BC:FB:37:08:99:EB:B6:F9:56:38:3F:DA:EA:C1 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C736DF963AC3ECB27B6BA5B38E2E41 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nQQyVVLcvPs3CJnrtvlWOD_a6sE.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45029 IP address blocks: 193.232.166.0/24 maxlen: 24 2a0c:a9c7:166::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:36:df:96:3a:c3:ec:b2:7b:6b:a5:b3:8e:2e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d04325552dcbcfb370899ebb6f956383fdaeac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:f9:72:67:03:0e:3d:44:e0:7d:0d:ec:80: 5b:10:1d:74:0e:74:f5:18:85:da:2e:32:00:bc:e3: 29:58:16:80:0c:c8:9d:e4:89:b7:af:ec:a6:d3:ba: aa:1c:22:c6:c0:2e:be:a3:d9:08:7b:c9:06:8e:d8: 63:0a:c0:51:c5:ff:01:8d:ef:b9:55:51:05:02:bd: 78:4e:d7:a1:34:60:87:12:a6:ce:44:2f:fe:9e:4f: 0e:26:4a:45:ec:5c:3c:fb:cd:d8:0f:db:b0:d2:fb: b5:e9:05:75:a8:7c:15:fc:7a:db:e2:6c:57:8a:26: 0d:e5:b6:0e:c8:54:c0:71:4c:93:7a:a7:d6:39:eb: 97:27:b4:f5:e8:5d:2a:41:33:0b:66:64:fa:b6:50: 2d:d3:9c:21:ce:1c:6b:60:69:bd:89:49:2c:ed:11: 4e:9a:66:80:6a:97:4e:82:1f:00:ca:5d:a5:66:2b: fc:b7:30:74:0f:36:a5:67:e5:8a:fd:a4:94:0e:80: bc:af:e3:ce:43:bf:29:d1:4a:87:ed:73:28:68:45: b5:ae:9e:4f:89:83:ee:5a:c7:55:a0:16:37:0d:a3: 72:0e:63:35:6c:dc:e0:bb:16:56:00:ba:bf:59:a1: 79:36:8f:22:df:77:76:6d:9d:32:40:1d:4b:20:a2: 9d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:04:32:55:52:DC:BC:FB:37:08:99:EB:B6:F9:56:38:3F:DA:EA:C1 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nQQyVVLcvPs3CJnrtvlWOD_a6sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.166.0/24 IPv6: 2a0c:a9c7:166::/48 Signature Algorithm: sha256WithRSAEncryption 42:0c:15:98:74:87:15:f1:a5:bf:45:2e:23:10:ac:70:8f:5d: f0:95:af:06:47:57:a9:85:2d:9f:2c:a5:bf:f6:9e:f0:ae:22: 9a:46:f7:56:fa:cc:59:76:3b:c9:fe:07:dc:43:05:4b:6b:3a: 3c:95:b5:96:f8:03:cb:5b:4a:eb:82:84:5d:da:3e:8e:b8:b5: a3:13:9a:00:54:93:05:66:1c:6d:90:3b:4b:72:8f:3a:d7:89: 4a:e9:da:55:a0:8e:f7:21:23:45:1e:26:3b:c9:f2:88:10:0c: 04:e7:a3:3e:fd:4e:76:81:41:99:c4:67:e7:9e:0d:79:8d:d5: 3b:5c:78:87:b0:64:14:6f:93:e4:ec:d2:24:e6:d2:72:27:35: 9c:aa:15:ed:7d:35:c7:57:4a:1b:4b:f5:94:9d:bb:0f:21:50: a0:d9:58:c1:11:00:9f:a3:53:af:a2:48:c4:08:96:cb:89:38: b9:ef:05:4f:d6:63:f8:dc:14:cd:3a:6f:11:45:1d:46:a3:c4: 4a:3c:55:10:7e:09:8c:97:b9:46:62:1d:f3:da:d5:19:eb:d3: 4d:d9:b0:16:e2:7e:d6:e0:89:db:b2:73:2d:c3:7e:e9:c4:37: f6:15:ee:d5:01:ab:8c:cc:ff:14:0f:4c:8d:e7:39:96:54:cb: d0:f1:43:c3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xzbfljrD7LJ7a6Wzji5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDA0MzI1NTUyZGNiY2ZiMzcwODk5ZWJiNmY5NTYzODNmZGFlYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfr5cmcDDj1E4H0N7IBbEB10DnT1 GIXaLjIAvOMpWBaADMid5Im3r+ym07qqHCLGwC6+o9kIe8kGjthjCsBRxf8Bje+5 VVEFAr14TtehNGCHEqbORC/+nk8OJkpF7Fw8+83YD9uw0vu16QV1qHwV/Hrb4mxX iiYN5bYOyFTAcUyTeqfWOeuXJ7T16F0qQTMLZmT6tlAt05whzhxrYGm9iUks7RFO mmaAapdOgh8Ayl2lZiv8tzB0DzalZ+WK/aSUDoC8r+POQ78p0UqH7XMoaEW1rp5P iYPuWsdVoBY3DaNyDmM1bNzguxZWALq/WaF5No8i33d2bZ0yQB1LIKKdPwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ0EMlVS3Lz7NwiZ67b5Vjg/2urBMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvblFReVZWTGN2UHMzQ0pucnR2bFdPRF9hNnNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweimMA8E AgACMAkDBwAqDKnHAWYwDQYJKoZIhvcNAQELBQADggEBAEIMFZh0hxXxpb9FLiMQ rHCPXfCVrwZHV6mFLZ8spb/2nvCuIppG91b6zFl2O8n+B9xDBUtrOjyVtZb4A8tb SuuChF3aPo64taMTmgBUkwVmHG2QO0tyjzrXiUrp2lWgjvchI0UeJjvJ8ogQDATn oz79TnaBQZnEZ+eeDXmN1TtceIewZBRvk+Ts0iTm0nInNZyqFe19NcdXShtL9ZSd uw8hUKDZWMERAJ+jU6+iSMQIlsuJOLnvBU/WY/jcFM06bxFFHUajxEo8VRB+CYyX uUZiHfPa1Rnr003ZsBbiftbgiduycy3DfunEN/YV7tUBq4zM/xQPTI3nOZZUy9Dx Q8M= -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:00 2026 by rpki-client