This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/N5am5wrkiSP1GrunfwkjhlqFrrU.roa File: N5am5wrkiSP1GrunfwkjhlqFrrU.roa (raw, json) Hash identifier: ObzH+/zx9yr5qFKYcu8v7Ece6mrJH8MNbO1Ya2RrxAk= Subject key identifier: 37:96:A6:E7:0A:E4:89:23:F5:1A:BB:A7:7F:09:23:86:5A:85:AE:B5 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019C0EC31086626FC3EF058FFFB5095877F4 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/N5am5wrkiSP1GrunfwkjhlqFrrU.roa Signing time: Fri 30 Jan 2026 11:56:30 +0000 ROA not before: Fri 30 Jan 2026 11:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202585 IP address blocks: 185.244.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:c3:10:86:62:6f:c3:ef:05:8f:ff:b5:09:58:77:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 30 11:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3796a6e70ae48923f51abba77f0923865a85aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:ff:7a:64:43:2d:f7:52:1a:42:af:27:b8: 80:5d:be:c1:e3:01:e3:01:fd:8a:89:66:91:bc:ff: 47:0c:67:a9:75:3c:80:66:47:29:37:00:31:2e:b8: 3a:11:b7:50:16:a7:ec:0c:6c:e9:97:05:34:cd:60: 98:9b:90:3d:23:e8:36:36:79:85:0c:41:92:6e:be: bb:49:f5:45:26:f5:92:6a:1d:bd:77:47:e0:e6:c9: ae:c8:3d:0c:d1:f0:f5:e7:7d:89:65:e4:9e:61:4e: 95:81:28:06:0d:c7:72:bd:5b:87:95:9c:6b:2c:6d: b3:36:3e:89:f5:9f:26:e3:85:1b:65:a2:b2:fe:2f: 68:a5:23:5c:4f:9a:fa:1c:e8:83:6a:68:c5:25:b6: 9d:62:a1:05:73:24:87:b2:42:5e:49:5e:8a:5f:b7: 0c:b5:1b:bb:e8:0f:31:3c:17:3d:01:a5:52:af:72: 4b:7b:31:ea:06:4a:c7:30:4d:5d:10:6a:2e:11:ca: b9:a9:88:6f:da:53:4b:2c:ee:50:1b:a6:df:62:9a: bd:20:d0:dc:44:ba:2f:68:8e:1f:8b:b7:5f:e2:15: 23:f2:71:bd:4f:4b:12:ec:53:27:1f:b9:f4:55:29: f1:7e:e3:c9:bf:1f:e8:c9:ed:83:64:dd:93:67:b2: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:96:A6:E7:0A:E4:89:23:F5:1A:BB:A7:7F:09:23:86:5A:85:AE:B5 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/N5am5wrkiSP1GrunfwkjhlqFrrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.24.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:40:e1:ed:bc:75:6c:87:af:f9:fb:20:2e:29:42:76:47:c7: f5:ed:b5:69:b9:11:f7:66:b8:eb:fa:82:1e:27:d9:21:04:a9: ec:37:4f:46:3f:6f:af:17:c9:dc:5d:a9:e6:b5:36:69:f0:42: d5:5e:78:7b:1d:ac:cf:2e:29:f8:a4:40:bc:62:e8:3d:45:51: 77:d9:cf:e6:5a:05:84:22:97:28:f0:07:07:01:b1:41:62:63: 58:6d:58:2c:63:b4:7f:99:74:5e:65:7b:5a:d6:08:9c:fc:28: 53:1c:0e:5a:e0:df:f4:31:06:5a:21:f3:5f:a0:0f:d6:6c:4a: 45:c6:44:51:11:84:f2:7c:e6:64:ea:44:d2:bf:f2:9d:9d:3b: 65:88:4e:16:49:c3:c8:57:7b:6f:ce:33:d7:fd:7c:c7:b0:94: d7:24:9e:7b:46:80:11:97:34:4c:b7:f1:79:7c:36:0a:ae:d4: 5c:d0:46:cc:26:03:a8:3e:e1:9d:71:65:41:5b:2c:21:58:3f: 3b:ba:f7:ad:a0:23:af:01:cb:45:ba:6d:95:38:cb:fd:cd:eb: cf:da:44:02:53:56:f3:4d:a9:a3:04:8b:82:85:f5:25:bd:2f: 18:62:b8:22:a7:de:87:8f:3f:20:4f:47:ab:13:69:c0:4b:b6: 60:a5:e6:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwOwxCGYm/D7wWP/7UJWHf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTMwMTE1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzk2YTZlNzBhZTQ4OTIzZjUxYWJiYTc3ZjA5MjM4NjVhODVhZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWL/emRDLfdSGkKvJ7iAXb7B4wHj Af2KiWaRvP9HDGepdTyAZkcpNwAxLrg6EbdQFqfsDGzplwU0zWCYm5A9I+g2NnmF DEGSbr67SfVFJvWSah29d0fg5smuyD0M0fD1532JZeSeYU6VgSgGDcdyvVuHlZxr LG2zNj6J9Z8m44UbZaKy/i9opSNcT5r6HOiDamjFJbadYqEFcySHskJeSV6KX7cM tRu76A8xPBc9AaVSr3JLezHqBkrHME1dEGouEcq5qYhv2lNLLO5QG6bfYpq9INDc RLovaI4fi7df4hUj8nG9T0sS7FMnH7n0VSnxfuPJvx/oye2DZN2TZ7Iz7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeWpucK5Ikj9Rq7p38JI4Zaha61MB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvTjVhbTV3cmtpU1AxR3J1bmZ3a2pobHFGcnJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQYMA0G CSqGSIb3DQEBCwUAA4IBAQBeQOHtvHVsh6/5+yAuKUJ2R8f17bVpuRH3Zrjr+oIe J9khBKnsN09GP2+vF8ncXanmtTZp8ELVXnh7HazPLin4pEC8Yug9RVF32c/mWgWE Ipco8AcHAbFBYmNYbVgsY7R/mXReZXta1gic/ChTHA5a4N/0MQZaIfNfoA/WbEpF xkRREYTyfOZk6kTSv/KdnTtliE4WScPIV3tvzjPX/XzHsJTXJJ57RoARlzRMt/F5 fDYKrtRc0EbMJgOoPuGdcWVBWywhWD87uvetoCOvActFum2VOMv9zevP2kQCU1bz TamjBIuChfUlvS8YYrgip96Hjz8gT0erE2nAS7Zgpeb4 -----END CERTIFICATE-----Generated at Mon Feb 2 08:01:10 2026 by rpki-client