This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa File: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (raw, json) Hash identifier: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4= Subject key identifier: 34:39:A1:5F:36:7C:B8:4B:91:F6:D8:C2:B5:C2:AC:10:A0:E0:CB:2C Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Certificate serial: 019C28632F4EACD0878BFB4795E950F16C3B Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa Signing time: Wed 04 Feb 2026 11:21:54 +0000 ROA not before: Wed 04 Feb 2026 11:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201746 IP address blocks: 45.66.212.0/23 maxlen: 23 45.66.212.0/24 maxlen: 24 45.66.213.0/24 maxlen: 24 45.131.28.0/24 maxlen: 24 45.131.29.0/24 maxlen: 24 94.158.253.0/24 maxlen: 24 94.158.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:63:2f:4e:ac:d0:87:8b:fb:47:95:e9:50:f1:6c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Validity Not Before: Feb 4 11:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3439a15f367cb84b91f6d8c2b5c2ac10a0e0cb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:2e:62:01:23:63:7d:4f:db:3a:6a:e6:8a: 8c:ae:c3:83:14:47:ca:b3:d4:65:eb:7f:7e:f8:69: 26:b1:b0:0f:a4:75:71:c0:4b:19:bf:4b:57:5a:1e: 47:8d:30:74:af:65:8f:88:38:98:aa:a7:67:f5:e1: ca:da:7e:53:cc:cd:19:13:d9:e0:54:60:25:58:23: 39:34:eb:03:de:93:85:ed:9c:57:9c:f3:71:6b:ec: 6d:8f:fc:37:0d:67:4e:aa:41:97:8f:71:01:89:e5: d2:72:a0:56:01:96:1d:e1:5b:11:89:19:d2:33:17: 37:48:99:a1:17:7f:d2:f2:43:79:92:d0:e9:72:3d: 47:c8:25:3a:16:a7:0c:3f:62:bb:23:68:8b:09:36: cf:27:8f:2f:37:7b:ad:9a:20:99:12:20:9c:5d:c7: 33:69:66:04:29:61:ee:20:f9:a0:52:8a:ed:63:f0: b4:17:62:fa:eb:ff:f5:0c:04:75:61:5a:91:21:c8: 42:21:c7:92:b8:dc:74:1c:92:0d:96:84:27:8b:c9: c2:07:b9:5b:13:54:fd:df:3a:5e:9d:e9:d3:8a:4f: 7e:56:bb:9c:e0:2d:93:6d:e3:00:60:58:9a:1c:39: c6:10:69:74:08:01:be:89:9d:67:9f:d3:5d:04:d4: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:A1:5F:36:7C:B8:4B:91:F6:D8:C2:B5:C2:AC:10:A0:E0:CB:2C X509v3 Authority Key Identifier: keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.212.0/23 45.131.28.0/23 94.158.253.0-94.158.254.255 Signature Algorithm: sha256WithRSAEncryption 9e:61:a8:47:ba:7e:92:c0:c1:cc:af:7b:6b:3e:6c:45:7c:13: cf:0f:60:e5:61:25:0f:e4:7c:6f:94:a8:d6:c4:66:14:f7:48: 39:d4:f9:b6:f1:0c:05:d6:67:99:25:02:41:4d:ab:dc:86:73: c8:2e:28:39:82:59:7f:69:a9:1f:b6:03:b4:ec:cf:26:f9:fc: c1:f9:c8:08:e9:12:1a:33:61:21:44:9b:87:36:72:98:31:64: 20:d0:d9:38:8f:f0:63:42:55:78:ee:56:d1:51:4c:7e:e9:d4: c5:e2:d8:c5:4f:72:2b:7d:f7:4f:a5:bc:d1:bf:8f:07:71:fe: 23:66:e4:80:e2:fa:8d:8d:50:40:fc:72:c4:31:b3:ee:bc:7c: e8:e9:01:19:0e:6b:00:24:ea:f1:14:85:af:2a:b2:ec:f1:5e: 61:11:f5:7b:3d:a2:bd:88:e9:7f:12:b9:60:4c:53:66:49:35: 85:ca:13:95:cc:a4:99:11:fb:2f:76:85:81:32:85:61:26:b6: eb:0e:ad:c5:04:03:85:2e:d0:af:ab:ba:7f:1a:b9:a6:7c:f0: b7:3c:f8:38:c4:55:19:99:a5:90:52:46:89:26:3a:fb:c2:cd: 78:a0:bb:a4:c0:dd:ab:57:47:e6:2d:ff:8d:dc:5b:a4:6b:05: 4a:fd:80:bf -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZwoYy9OrNCHi/tHlelQ8Ww7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw ODA2OGMwHhcNMjYwMjA0MTEyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDM5YTE1ZjM2N2NiODRiOTFmNmQ4YzJiNWMyYWMxMGEwZTBjYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8UuYgEjY31P2zpq5oqMrsODFEfK s9Rl639++GkmsbAPpHVxwEsZv0tXWh5HjTB0r2WPiDiYqqdn9eHK2n5TzM0ZE9ng VGAlWCM5NOsD3pOF7ZxXnPNxa+xtj/w3DWdOqkGXj3EBieXScqBWAZYd4VsRiRnS Mxc3SJmhF3/S8kN5ktDpcj1HyCU6FqcMP2K7I2iLCTbPJ48vN3utmiCZEiCcXccz aWYEKWHuIPmgUortY/C0F2L66//1DAR1YVqRIchCIceSuNx0HJINloQni8nCB7lb E1T93zpenenTik9+Vruc4C2TbeMAYFiaHDnGEGl0CAG+iZ1nn9NdBNTzcwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDQ5oV82fLhLkfbYwrXCrBCg4MssMB8GA1UdIwQY MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt NjQ4MGMzZDFmNGU0LzEvTkRtaFh6Wjh1RXVSOXRqQ3RjS3NFS0RneXl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0 LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBLULUAwQB LYMcMAwDBABenv0DBABenv4wDQYJKoZIhvcNAQELBQADggEBAJ5hqEe6fpLAwcyv e2s+bEV8E88PYOVhJQ/kfG+UqNbEZhT3SDnU+bbxDAXWZ5klAkFNq9yGc8guKDmC WX9pqR+2A7Tszyb5/MH5yAjpEhozYSFEm4c2cpgxZCDQ2TiP8GNCVXjuVtFRTH7p 1MXi2MVPcit990+lvNG/jwdx/iNm5IDi+o2NUED8csQxs+68fOjpARkOawAk6vEU ha8qsuzxXmER9Xs9or2I6X8SuWBMU2ZJNYXKE5XMpJkR+y92hYEyhWEmtusOrcUE A4Uu0K+run8auaZ88Lc8+DjEVRmZpZBSRokmOvvCzXigu6TA3atXR+Yt/43cW6Rr BUr9gL8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:00 2026 by rpki-client