This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa File: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (raw, json) Hash identifier: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs= Subject key identifier: 9D:57:2B:42:38:56:42:F6:6F:DC:CA:62:12:EE:CE:03:77:6A:12:C5 Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Certificate serial: 019B7DCA14A73EEA8E2AD4505B6E92378242 Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa Signing time: Fri 02 Jan 2026 08:19:14 +0000 ROA not before: Fri 02 Jan 2026 08:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 188.244.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:14:a7:3e:ea:8e:2a:d4:50:5b:6e:92:37:82:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3 Validity Not Before: Jan 2 08:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d572b42385642f66fdcca6212eece03776a12c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:53:c6:58:8c:71:05:25:ec:5e:26:fa:2c: 88:09:c9:9f:4b:8b:e3:11:c4:f2:0d:c9:f9:44:39: 19:b3:8b:54:f8:2c:2c:d2:67:7a:b7:73:88:a7:34: b0:dc:d2:cf:77:a8:32:9e:6a:67:6e:07:5a:09:60: 32:7f:cd:c7:3d:15:f3:94:43:3b:a3:1b:5b:13:03: 5f:c3:29:a7:78:d1:6b:ff:6e:2a:2b:7e:fc:b1:d0: 98:35:3c:ab:4c:35:3e:a6:73:f2:21:ea:c5:0f:fb: 4a:71:e3:5d:8e:12:0d:31:86:92:60:75:d9:3a:1f: 6e:4d:26:ee:f9:1e:82:48:ac:e4:c8:76:24:2b:37: dd:f2:29:b3:4b:61:6e:b8:c3:c2:0c:f8:71:6a:86: 84:8c:c2:b9:ac:11:5d:1e:c6:30:2c:35:ee:9d:55: 19:99:cc:d3:38:a4:ba:96:86:30:4f:82:7a:0f:0c: 3d:fb:b0:4d:c9:2b:77:5f:e3:1d:5f:5f:65:7b:dc: f3:d8:36:2c:19:0e:63:4e:e9:65:c6:89:01:4d:19: a7:8d:f7:ff:40:91:f2:ea:57:e3:c4:eb:3c:72:13: 11:48:52:73:70:dc:27:cc:65:03:88:75:8c:f4:3d: 75:e9:2c:97:81:ba:77:1a:20:cd:9b:1f:41:57:30: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:57:2B:42:38:56:42:F6:6F:DC:CA:62:12:EE:CE:03:77:6A:12:C5 X509v3 Authority Key Identifier: keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.244.120.0/24 Signature Algorithm: sha256WithRSAEncryption 05:f9:6f:a3:92:6d:77:25:6f:60:3b:3f:ed:9a:10:28:03:79: 13:a6:cb:e2:02:fd:a9:bd:ca:80:c2:42:a1:e6:84:48:6a:6d: 7d:f5:16:a4:89:f6:e3:d4:ab:bd:de:39:2f:91:4e:56:15:69: 54:b3:00:74:71:7c:b6:df:1d:75:0d:be:ba:6c:4c:d2:7b:42: dc:e3:f3:06:f3:4b:41:5c:e7:3f:de:0e:d7:7b:e1:cd:40:e5: bc:7e:ad:d4:eb:f9:71:2f:0f:dc:70:57:bf:dc:49:fc:b3:1f: cd:93:61:e8:02:72:09:77:24:ca:1c:a5:ba:8c:4c:ae:37:f3: 09:13:e6:ab:c7:b2:b0:6f:9c:ef:74:bd:27:70:64:13:70:a5: 76:02:db:e4:c7:4a:e6:59:9d:4d:ce:d0:6c:f7:25:d1:58:b0: 8b:0b:bf:53:4b:1c:44:78:e3:5b:c3:88:da:a5:ee:f3:21:c0: 0f:4f:3f:63:13:b2:d8:10:a9:20:6f:0b:9d:f3:a9:91:7a:42: 4a:fc:5c:bf:34:9a:52:04:da:35:d3:30:6a:89:0f:b7:f5:01: 80:ef:16:94:f0:26:6a:a2:f8:40:d6:02:57:67:58:9f:2e:ad: 5b:44:88:74:37:58:c4:b4:15:a3:59:d2:f8:73:7a:d2:a9:f8: 0e:e7:96:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yhSnPuqOKtRQW26SN4JCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2 ZjUxZjMwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDU3MmI0MjM4NTY0MmY2NmZkY2NhNjIxMmVlY2UwMzc3NmExMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodZTxliMcQUl7F4m+iyICcmfS4vj EcTyDcn5RDkZs4tU+Cws0md6t3OIpzSw3NLPd6gynmpnbgdaCWAyf83HPRXzlEM7 oxtbEwNfwymneNFr/24qK378sdCYNTyrTDU+pnPyIerFD/tKceNdjhINMYaSYHXZ Oh9uTSbu+R6CSKzkyHYkKzfd8imzS2FuuMPCDPhxaoaEjMK5rBFdHsYwLDXunVUZ mczTOKS6loYwT4J6Dww9+7BNySt3X+MdX19le9zz2DYsGQ5jTullxokBTRmnjff/ QJHy6lfjxOs8chMRSFJzcNwnzGUDiHWM9D116SyXgbp3GiDNmx9BVzB8mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1XK0I4VkL2b9zKYhLuzgN3ahLFMB8GA1UdIwQY MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt NTFiMmFhNTk4MGJlLzEvblZjclFqaFdRdlp2M01waUV1N09BM2RxRXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPR4MA0G CSqGSIb3DQEBCwUAA4IBAQAF+W+jkm13JW9gOz/tmhAoA3kTpsviAv2pvcqAwkKh 5oRIam199Rakifbj1Ku93jkvkU5WFWlUswB0cXy23x11Db66bEzSe0Lc4/MG80tB XOc/3g7Xe+HNQOW8fq3U6/lxLw/ccFe/3En8sx/Nk2HoAnIJdyTKHKW6jEyuN/MJ E+arx7Kwb5zvdL0ncGQTcKV2Atvkx0rmWZ1NztBs9yXRWLCLC79TSxxEeONbw4ja pe7zIcAPTz9jE7LYEKkgbwud86mRekJK/Fy/NJpSBNo10zBqiQ+39QGA7xaU8CZq ovhA1gJXZ1ifLq1bRIh0N1jEtBWjWdL4c3rSqfgO55aU -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:16 2026 by rpki-client