This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/NaC2EXhqguVissfFb8R9GK-pfWk.roa File: NaC2EXhqguVissfFb8R9GK-pfWk.roa (raw, json) Hash identifier: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8= Subject key identifier: 35:A0:B6:11:78:6A:82:E5:62:B2:C7:C5:6F:C4:7D:18:AF:A9:7D:69 Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd Certificate serial: 019B7BA39824BA17EBAAB8B9DB7AA379FBAD Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/NaC2EXhqguVissfFb8R9GK-pfWk.roa Signing time: Thu 01 Jan 2026 22:17:57 +0000 ROA not before: Thu 01 Jan 2026 22:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208704 IP address blocks: 45.87.176.0/22 maxlen: 22 45.87.176.0/24 maxlen: 24 45.87.177.0/24 maxlen: 24 45.87.178.0/24 maxlen: 24 45.87.179.0/24 maxlen: 24 193.56.184.0/24 maxlen: 24 2a02:f2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:98:24:ba:17:eb:aa:b8:b9:db:7a:a3:79:fb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd Validity Not Before: Jan 1 22:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35a0b611786a82e562b2c7c56fc47d18afa97d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:91:75:6a:c4:25:4a:54:d3:08:b6:b6:15: bb:bf:30:ef:c6:3e:6e:11:cc:8f:0f:86:e5:b2:34: b2:f2:14:76:d3:51:73:a4:1b:e5:84:9b:13:ff:d6: 7c:d8:cf:f6:3e:e0:8f:7f:ec:8d:83:80:f6:c0:d7: 14:2e:3c:07:fe:73:c3:0b:f0:44:33:da:88:38:2e: f8:7f:1e:8f:4b:6f:dd:25:da:5c:64:f6:19:ac:35: 1a:95:a2:42:1e:96:1a:f5:55:43:7b:52:3d:57:c0: e4:8c:d6:d7:31:9d:9b:dc:07:89:fa:ca:29:dd:fa: f7:9d:86:98:8b:f8:e9:16:be:1f:4c:79:78:06:8e: fb:31:26:4e:d6:6d:cf:1d:e6:91:15:78:7d:3e:a4: b0:2b:d2:c7:f4:c1:42:2a:bf:f1:fa:fc:a1:94:dd: 4c:19:f6:a4:d9:29:b9:6e:a4:34:81:8d:09:72:e2: 58:d3:d0:52:28:68:a2:9f:e9:da:a2:05:2c:33:f0: 95:3d:dd:be:d4:42:e1:3a:39:d4:9c:f8:57:da:be: 7b:34:ba:3d:a4:30:47:d2:a8:ce:fc:ab:10:41:b0: 00:41:2b:ad:20:68:06:d9:25:0c:49:5a:a4:eb:d0: 65:67:38:eb:13:89:b1:49:66:34:56:f3:89:b3:ee: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A0:B6:11:78:6A:82:E5:62:B2:C7:C5:6F:C4:7D:18:AF:A9:7D:69 X509v3 Authority Key Identifier: keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/NaC2EXhqguVissfFb8R9GK-pfWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.176.0/22 193.56.184.0/24 IPv6: 2a02:f2c0::/29 Signature Algorithm: sha256WithRSAEncryption 2d:4f:2e:db:98:5c:a9:d5:b6:f5:5e:fd:4a:05:d7:61:39:6d: eb:9c:3a:3b:d8:30:03:0f:48:a0:cb:af:27:ad:7a:31:16:f7: 2c:eb:31:f3:b2:23:49:d0:e5:40:2d:72:d4:14:bf:18:38:c8: f5:ae:c3:f8:8d:5b:80:39:c5:b8:f9:b4:e3:cf:a1:a2:08:2d: 6b:92:4c:f7:b9:2a:73:e2:61:89:65:d5:5e:22:26:cb:cc:97: 95:4c:11:ee:bb:4a:1b:f1:c8:b3:88:0c:37:ae:fc:0d:18:27: 69:a4:c1:51:4e:26:04:7a:db:58:37:79:e2:a7:a9:bb:19:64: cc:a9:f3:1a:14:2b:ff:9f:b5:f9:ab:86:d1:74:77:25:14:04: 7b:f3:b6:d6:b9:95:c9:df:c5:cf:52:ba:c8:e8:de:60:c6:7c: 1d:87:15:80:74:49:58:5b:82:e7:5c:5a:c1:96:2f:35:ac:18: 77:f3:9d:94:13:eb:23:8d:ab:33:c9:fb:52:c0:80:01:04:8c: 36:21:c5:25:41:d6:df:ad:50:b2:6a:15:c4:11:93:17:cf:e6: 55:c0:56:2e:ec:53:47:78:3e:22:04:5f:5f:14:25:91:b7:2f: 9f:ca:89:1f:ee:3c:c2:0c:3a:20:fd:a9:a2:2d:a5:b5:2c:ae: dc:d4:fd:af -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o5gkuhfrqri523qjefutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGZmZWU3ZTc2MmY5YTA2ZmUyZjQ3ZTdhMWU1MmQ5ZWJh N2ZhZmQwHhcNMjYwMTAxMjIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWEwYjYxMTc4NmE4MmU1NjJiMmM3YzU2ZmM0N2QxOGFmYTk3ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNeRdWrEJUpU0wi2thW7vzDvxj5u EcyPD4blsjSy8hR201FzpBvlhJsT/9Z82M/2PuCPf+yNg4D2wNcULjwH/nPDC/BE M9qIOC74fx6PS2/dJdpcZPYZrDUalaJCHpYa9VVDe1I9V8DkjNbXMZ2b3AeJ+sop 3fr3nYaYi/jpFr4fTHl4Bo77MSZO1m3PHeaRFXh9PqSwK9LH9MFCKr/x+vyhlN1M Gfak2Sm5bqQ0gY0JcuJY09BSKGiin+naogUsM/CVPd2+1ELhOjnUnPhX2r57NLo9 pDBH0qjO/KsQQbAAQSutIGgG2SUMSVqk69BlZzjrE4mxSWY0VvOJs+6znQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDWgthF4aoLlYrLHxW/EfRivqX1pMB8GA1UdIwQY MBaAFNNP/ufnYvmgb+L0fnoeUtnrp/r9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzkt ODdlMWYzODY2MzYyLzEvTmFDMkVYaHFndVZpc3NmRmI4UjlHSy1wZldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzktODdlMWYzODY2MzYy LzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVewAwQA wTi4MA0EAgACMAcDBQMqAvLAMA0GCSqGSIb3DQEBCwUAA4IBAQAtTy7bmFyp1bb1 Xv1KBddhOW3rnDo72DADD0igy68nrXoxFvcs6zHzsiNJ0OVALXLUFL8YOMj1rsP4 jVuAOcW4+bTjz6GiCC1rkkz3uSpz4mGJZdVeIibLzJeVTBHuu0ob8ciziAw3rvwN GCdppMFRTiYEettYN3nip6m7GWTMqfMaFCv/n7X5q4bRdHclFAR787bWuZXJ38XP UrrI6N5gxnwdhxWAdElYW4LnXFrBli81rBh3852UE+sjjaszyftSwIABBIw2IcUl QdbfrVCyahXEEZMXz+ZVwFYu7FNHeD4iBF9fFCWRty+fyokf7jzCDDog/amiLaW1 LK7c1P2v -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:49 2026 by rpki-client