This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/nge1u5LMthh69_mO6tYKWBjnSBE.roa File: nge1u5LMthh69_mO6tYKWBjnSBE.roa (raw, json) Hash identifier: qNcn7K4jDXvzhu4do4cfBL/ruII09KDI1rZLPsg+Hug= Subject key identifier: 9E:07:B5:BB:92:CC:B6:18:7A:F7:F9:8E:EA:D6:0A:58:18:E7:48:11 Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Certificate serial: 019BF9E988F58747D8A12866F5E148C68239 Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/nge1u5LMthh69_mO6tYKWBjnSBE.roa Signing time: Mon 26 Jan 2026 10:46:30 +0000 ROA not before: Mon 26 Jan 2026 10:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18186 IP address blocks: 185.238.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:e9:88:f5:87:47:d8:a1:28:66:f5:e1:48:c6:82:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Validity Not Before: Jan 26 10:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e07b5bb92ccb6187af7f98eead60a5818e74811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:d7:d2:85:7e:e1:08:ad:5e:99:5f:c7:cd: 80:43:8c:88:85:df:80:eb:25:1d:0a:75:45:4e:3d: 51:16:85:64:5c:30:16:07:1b:7b:71:a5:1a:c5:d8: ee:ec:09:ef:65:97:51:45:93:47:c3:f0:7e:7d:67: 31:f5:d1:e6:91:c4:67:8c:de:f8:32:4c:de:af:a4: 57:44:97:19:84:90:19:59:c5:00:1a:dc:b8:e1:38: 3e:73:7d:c8:5e:8a:d7:a0:da:14:e7:58:d7:35:08: 1d:b5:81:5f:15:a5:6b:03:c2:92:31:3b:16:35:0b: b0:4e:18:3e:fa:d6:03:76:03:cb:cd:96:3e:3e:95: dc:0b:18:59:35:41:da:0d:b3:45:23:d1:58:34:ac: f0:9e:f5:f4:09:89:e6:5e:a3:12:6f:2b:fa:3d:dc: 1b:3f:09:1b:da:f7:91:41:d6:1f:2f:f3:70:91:75: 7b:35:f4:12:61:46:ef:1e:47:92:5a:8a:ec:6f:99: 2d:21:3b:15:8d:cd:ac:2c:0f:02:ff:6b:c3:08:4b: 08:19:ac:5a:30:80:4b:20:b1:cc:e0:ed:e0:f7:41: d7:2b:a0:89:18:75:23:69:a5:4b:e9:d7:16:21:35: 28:3b:ad:57:0e:02:e7:b1:ab:59:e6:07:40:1a:14: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:07:B5:BB:92:CC:B6:18:7A:F7:F9:8E:EA:D6:0A:58:18:E7:48:11 X509v3 Authority Key Identifier: keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/nge1u5LMthh69_mO6tYKWBjnSBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.212.0/23 Signature Algorithm: sha256WithRSAEncryption a3:7f:b0:15:53:bf:c2:65:f9:78:33:f0:97:be:f0:02:c9:75: ae:74:2d:aa:17:14:bf:51:b0:9d:67:cf:94:e5:b6:38:06:f3: de:37:8b:a7:66:da:97:8a:b4:2e:c4:7f:9c:09:4d:d0:79:f1: fe:e1:43:6c:f0:ee:9a:cf:e5:61:e3:0e:f2:15:c2:a7:2b:0d: 3c:bb:f8:ec:7b:b7:1d:12:44:e1:26:42:77:e6:0a:a7:33:5b: f4:ea:6d:e5:e1:ff:49:88:a4:57:8d:f9:af:69:1e:3c:c6:3f: d1:c1:f8:04:f0:8c:65:71:1c:0a:24:a8:5f:95:a9:b5:be:bf: d1:ba:63:f1:b6:ef:8c:3b:77:84:1b:7d:80:91:1f:44:37:87: d6:f3:bd:09:45:d2:07:8d:ae:47:b2:3e:34:46:15:45:25:df: aa:20:b0:81:37:33:e4:3e:08:f4:0a:9d:00:1f:ba:e4:13:b5: 17:31:30:67:1f:a7:f4:fb:f3:09:a4:1b:e3:4e:8e:a7:b1:32: e6:48:39:02:c3:f5:35:d7:bd:f2:27:c4:89:05:30:e3:6f:32: 8e:6e:33:2b:1a:7e:3a:00:3e:38:17:11:42:9c:26:07:70:b3: fa:2f:0e:fc:49:95:21:75:4b:cf:30:fe:69:02:bf:4e:f9:48: a5:09:d6:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv56Yj1h0fYoShm9eFIxoI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5 NjdhMTkwHhcNMjYwMTI2MTA0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTA3YjViYjkyY2NiNjE4N2FmN2Y5OGVlYWQ2MGE1ODE4ZTc0ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMLX0oV+4QitXplfx82AQ4yIhd+A 6yUdCnVFTj1RFoVkXDAWBxt7caUaxdju7AnvZZdRRZNHw/B+fWcx9dHmkcRnjN74 Mkzer6RXRJcZhJAZWcUAGty44Tg+c33IXorXoNoU51jXNQgdtYFfFaVrA8KSMTsW NQuwThg++tYDdgPLzZY+PpXcCxhZNUHaDbNFI9FYNKzwnvX0CYnmXqMSbyv6Pdwb Pwkb2veRQdYfL/NwkXV7NfQSYUbvHkeSWorsb5ktITsVjc2sLA8C/2vDCEsIGaxa MIBLILHM4O3g90HXK6CJGHUjaaVL6dcWITUoO61XDgLnsatZ5gdAGhRQNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4HtbuSzLYYevf5jurWClgY50gRMB8GA1UdIwQY MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt YmQ2ZTNiMDI2YzM3LzEvbmdlMXU1TE10aGg2OV9tTzZ0WUtXQmpuU0JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3 LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue7UMA0G CSqGSIb3DQEBCwUAA4IBAQCjf7AVU7/CZfl4M/CXvvACyXWudC2qFxS/UbCdZ8+U 5bY4BvPeN4unZtqXirQuxH+cCU3QefH+4UNs8O6az+Vh4w7yFcKnKw08u/jse7cd EkThJkJ35gqnM1v06m3l4f9JiKRXjfmvaR48xj/RwfgE8IxlcRwKJKhflam1vr/R umPxtu+MO3eEG32AkR9EN4fW870JRdIHja5Hsj40RhVFJd+qILCBNzPkPgj0Cp0A H7rkE7UXMTBnH6f0+/MJpBvjTo6nsTLmSDkCw/U1173yJ8SJBTDjbzKObjMrGn46 AD44FxFCnCYHcLP6Lw78SZUhdUvPMP5pAr9O+UilCdZr -----END CERTIFICATE-----Generated at Fri Jan 30 22:22:29 2026 by rpki-client