This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/nN-ju_64Z90TCxYhBDeQTLTn6vo.roa File: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (raw, json) Hash identifier: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko= Subject key identifier: 9C:DF:A3:BB:FE:B8:67:DD:13:0B:16:21:04:37:90:4C:B4:E7:EA:FA Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749 Certificate serial: 019B7C7EF158AD9D4F86E452C2C4A3728874 Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/nN-ju_64Z90TCxYhBDeQTLTn6vo.roa Signing time: Fri 02 Jan 2026 02:17:32 +0000 ROA not before: Fri 02 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211148 IP address blocks: 193.242.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f1:58:ad:9d:4f:86:e4:52:c2:c4:a3:72:88:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749 Validity Not Before: Jan 2 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cdfa3bbfeb867dd130b16210437904cb4e7eafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:79:2d:f0:f8:7c:44:cb:5f:51:90:01:17: b3:7d:8e:d0:29:eb:62:c5:6a:44:be:e4:15:4b:16: 6e:e1:09:55:49:76:c6:55:83:f8:33:94:4a:32:85: 4d:3d:39:1c:7c:d5:01:88:5e:ad:bc:80:49:06:e9: 3b:27:11:f7:d3:aa:d6:cd:2b:3d:eb:b1:0f:d2:41: af:59:a7:cb:27:f9:a0:11:02:0f:38:7b:18:66:a6: 88:0f:ac:bc:8f:e7:19:d3:51:71:44:d8:b7:29:51: ee:09:0d:07:03:cc:ff:1d:e1:b6:80:78:b6:00:9c: e0:e2:da:a6:b0:13:72:f7:66:3c:72:eb:ff:d4:48: 0b:ee:c9:9e:4e:81:7e:b9:46:c9:4a:61:df:ff:e5: d6:2f:9e:ef:0d:0e:a9:db:8f:19:1b:5d:e6:e6:59: f0:41:e3:d9:9e:f3:d9:3f:be:a4:fc:8d:ec:81:ed: 98:4a:e7:9c:a8:31:27:b0:a7:7d:6f:34:79:de:dc: 10:29:db:aa:68:61:93:34:b3:44:8e:83:22:a0:d0: d9:b1:7e:3a:6b:40:7e:c7:b6:28:58:17:b0:4d:8e: 28:81:eb:90:7c:4a:74:e7:18:ad:cc:0e:79:1f:01: f2:13:c1:cb:98:a6:b9:02:3d:21:b8:1a:02:e7:02: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DF:A3:BB:FE:B8:67:DD:13:0B:16:21:04:37:90:4C:B4:E7:EA:FA X509v3 Authority Key Identifier: keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/nN-ju_64Z90TCxYhBDeQTLTn6vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.186.0/24 Signature Algorithm: sha256WithRSAEncryption b9:90:ac:db:20:8f:fc:d0:25:a1:bd:89:6c:d7:2d:0b:19:e5: d9:dd:08:54:5b:75:c5:9b:75:35:dd:86:c2:b0:ec:0c:99:1f: 50:64:0d:f5:b3:86:2e:d9:74:64:7d:fa:33:1c:e2:ee:f8:6d: 8e:12:82:af:a7:8c:9f:30:fe:c6:c3:9d:04:a3:91:c8:af:18: 30:bd:ea:9c:f8:56:33:4d:56:3f:41:a1:bc:b6:de:fc:75:90: 5a:4d:a9:1e:e4:9c:6a:e0:e7:63:1c:75:8b:0b:62:e5:74:6e: dc:b8:e3:30:0d:58:95:8b:cc:2e:8f:4c:37:58:a4:e2:df:94: 79:9a:45:e9:8c:ea:3b:46:d2:2c:2d:53:36:d3:43:47:a0:b7: 49:2b:9a:73:2b:3c:a0:85:72:f9:5a:26:31:41:b6:cd:7e:61: f0:33:5a:38:5a:03:02:fa:9c:0b:1e:fe:17:04:87:49:0c:b3: 3a:90:3a:2f:68:1e:68:3a:6d:76:43:2a:97:4a:25:c5:20:74: 8e:17:66:51:de:f7:77:72:c8:a3:c7:1d:73:59:07:b1:cc:fc: a5:cb:8e:f9:66:6f:a7:74:9b:31:90:09:d0:63:0e:00:c3:49: 7a:38:49:e4:b5:c3:ed:97:2d:d7:36:da:8d:e7:1a:9c:3d:23: 5a:44:71:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvFYrZ1PhuRSwsSjcoh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWRjZTFjMDVhMTQzZmRkODU4NDc0MDA0YzQ3ZjZmM2Jm ZmY3NDkwHhcNMjYwMTAyMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2RmYTNiYmZlYjg2N2RkMTMwYjE2MjEwNDM3OTA0Y2I0ZTdlYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvZ5LfD4fETLX1GQARezfY7QKeti xWpEvuQVSxZu4QlVSXbGVYP4M5RKMoVNPTkcfNUBiF6tvIBJBuk7JxH306rWzSs9 67EP0kGvWafLJ/mgEQIPOHsYZqaID6y8j+cZ01FxRNi3KVHuCQ0HA8z/HeG2gHi2 AJzg4tqmsBNy92Y8cuv/1EgL7smeToF+uUbJSmHf/+XWL57vDQ6p248ZG13m5lnw QePZnvPZP76k/I3sge2YSuecqDEnsKd9bzR53twQKduqaGGTNLNEjoMioNDZsX46 a0B+x7YoWBewTY4ogeuQfEp05xitzA55HwHyE8HLmKa5Aj0huBoC5wKL4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzfo7v+uGfdEwsWIQQ3kEy05+r6MB8GA1UdIwQY MBaAFNedzhwFoUP92FhHQATEf287//dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEt YTc1NjkyOWE4ZGM4LzEvbk4tanVfNjRaOTBUQ3hZaEJEZVFUTFRuNnZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEtYTc1NjkyOWE4ZGM4 LzEvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfK6MA0G CSqGSIb3DQEBCwUAA4IBAQC5kKzbII/80CWhvYls1y0LGeXZ3QhUW3XFm3U13YbC sOwMmR9QZA31s4Yu2XRkffozHOLu+G2OEoKvp4yfMP7Gw50Eo5HIrxgwveqc+FYz TVY/QaG8tt78dZBaTake5Jxq4OdjHHWLC2LldG7cuOMwDViVi8wuj0w3WKTi35R5 mkXpjOo7RtIsLVM200NHoLdJK5pzKzyghXL5WiYxQbbNfmHwM1o4WgMC+pwLHv4X BIdJDLM6kDovaB5oOm12QyqXSiXFIHSOF2ZR3vd3csijxx1zWQexzPyly475Zm+n dJsxkAnQYw4Aw0l6OEnktcPtly3XNtqN5xqcPSNaRHF+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:06 2026 by rpki-client