This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/nwCKURFvKAdbQU38fWCHq9Su4qo.roa File: nwCKURFvKAdbQU38fWCHq9Su4qo.roa (raw, json) Hash identifier: C9xiWCIHazX19G/OBW1EkzJey6ARQXArUE2/+FTm9Z4= Subject key identifier: 9F:00:8A:51:11:6F:28:07:5B:41:4D:FC:7D:60:87:AB:D4:AE:E2:AA Certificate issuer: /CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d Certificate serial: 019B7A5A886FC11882C8CCAA0DCFB88C9FF4 Authority key identifier: 95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/nwCKURFvKAdbQU38fWCHq9Su4qo.roa Signing time: Thu 01 Jan 2026 16:18:32 +0000 ROA not before: Thu 01 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57443 IP address blocks: 193.57.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:88:6f:c1:18:82:c8:cc:aa:0d:cf:b8:8c:9f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d Validity Not Before: Jan 1 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f008a51116f28075b414dfc7d6087abd4aee2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:76:01:ce:41:79:70:ad:af:92:56:fa:9e: c3:c6:be:f6:50:73:7b:76:82:a0:e5:9d:db:80:bb: 9e:10:88:d6:83:e8:76:06:c9:ab:7d:72:85:5b:ad: 3d:90:e6:8f:3d:b0:55:38:91:2e:93:ce:fd:f9:69: d0:1e:9b:6b:57:34:f5:86:d3:2b:c9:e9:18:0d:b6: 18:e1:d0:3a:21:41:77:6d:06:85:28:6d:6d:b4:dc: 94:f0:73:ae:b7:a5:55:6c:ce:2a:6f:c0:f5:4c:e1: 40:08:1f:46:40:8c:cc:64:4d:24:ff:c7:88:c4:53: 9f:d1:b0:72:bc:94:3b:28:9e:8f:7a:f6:fe:88:e4: 92:33:8e:d3:17:c3:e1:99:bd:b3:76:91:40:1e:c2: 66:d1:61:11:9b:e3:21:1f:a4:95:7b:35:4d:cf:41: 0d:db:9b:b7:8d:d3:b8:4e:14:14:df:80:02:2a:0b: e3:59:34:06:e4:23:81:a3:c0:e0:db:0d:2c:52:21: 48:a2:23:09:f6:43:75:f6:7d:20:79:66:12:17:0b: 81:af:77:5a:e3:ba:8f:f6:01:d0:e0:89:4a:bc:a4: fe:06:ff:4a:84:e4:86:ed:57:06:d3:8d:f6:6b:21: 3d:1f:c4:d4:26:fe:76:e8:85:06:c5:84:24:4f:1e: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:00:8A:51:11:6F:28:07:5B:41:4D:FC:7D:60:87:AB:D4:AE:E2:AA X509v3 Authority Key Identifier: keyid:95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/nwCKURFvKAdbQU38fWCHq9Su4qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.208.0/22 Signature Algorithm: sha256WithRSAEncryption d5:79:2d:30:2f:73:74:16:03:cf:91:39:f5:0b:3e:9a:6f:30: 91:0d:a7:f2:6e:0e:ad:6f:f9:6d:af:65:91:f9:5a:ab:f8:08: a1:77:1a:13:a4:76:28:5f:47:99:25:c7:10:9f:68:32:5a:dc: 7c:7f:aa:98:61:ec:36:c1:8c:92:94:0b:50:09:c2:cc:f7:bf: d5:95:e9:f0:27:8c:e3:a6:0d:ad:98:4c:de:64:4b:ba:58:7f: 5e:6d:a6:c2:0e:db:61:ee:2a:9c:84:8f:71:a6:4b:f9:11:47: 95:8b:af:82:bf:af:3a:96:24:78:d1:94:57:3d:4c:47:d4:d4: cf:f1:8f:39:e4:10:fd:69:8b:2c:1f:3e:85:c8:fc:34:8d:52: 32:93:84:30:39:01:ae:32:b5:71:a3:5a:7a:9f:b6:d1:b4:16: db:c9:31:c4:99:2d:6c:db:59:ac:99:f0:80:dc:66:66:82:5f: 0a:ef:cf:ae:78:83:c9:e8:e4:48:71:aa:0d:92:19:09:d7:14: 1f:b1:2c:5f:16:35:43:ec:fd:45:ef:39:6d:ef:f7:95:20:e1: 30:e6:ce:99:30:62:43:37:ea:a0:5c:18:83:bc:20:50:c7:a2: 97:b7:38:de:03:bf:39:78:24:73:a7:7a:c2:1f:9c:7e:98:43: 08:b8:dd:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WohvwRiCyMyqDc+4jJ/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODhmYjRiMGZiMDdiMmI1MmUzMGQ5MjE5ODk4ZjI4Y2Zi YzlhMmQwHhcNMjYwMTAxMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjAwOGE1MTExNmYyODA3NWI0MTRkZmM3ZDYwODdhYmQ0YWVlMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRl2Ac5BeXCtr5JW+p7Dxr72UHN7 doKg5Z3bgLueEIjWg+h2BsmrfXKFW609kOaPPbBVOJEuk879+WnQHptrVzT1htMr yekYDbYY4dA6IUF3bQaFKG1ttNyU8HOut6VVbM4qb8D1TOFACB9GQIzMZE0k/8eI xFOf0bByvJQ7KJ6Pevb+iOSSM47TF8Phmb2zdpFAHsJm0WERm+MhH6SVezVNz0EN 25u3jdO4ThQU34ACKgvjWTQG5COBo8Dg2w0sUiFIoiMJ9kN19n0geWYSFwuBr3da 47qP9gHQ4IlKvKT+Bv9KhOSG7VcG0432ayE9H8TUJv526IUGxYQkTx4HmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8AilERbygHW0FN/H1gh6vUruKqMB8GA1UdIwQY MBaAFJWI+0sPsHsrUuMNkhmJjyjPvJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mYjg1ZDMtNjY2MC00MzBlLTlhYzct ODZkMmMzMTFkYjE3LzEvbndDS1VSRnZLQWRiUVUzOGZXQ0hxOVN1NHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mYjg1ZDMtNjY2MC00MzBlLTlhYzctODZkMmMzMTFkYjE3 LzEvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTnQMA0G CSqGSIb3DQEBCwUAA4IBAQDVeS0wL3N0FgPPkTn1Cz6abzCRDafybg6tb/ltr2WR +Vqr+AihdxoTpHYoX0eZJccQn2gyWtx8f6qYYew2wYySlAtQCcLM97/VlenwJ4zj pg2tmEzeZEu6WH9ebabCDtth7iqchI9xpkv5EUeVi6+Cv686liR40ZRXPUxH1NTP 8Y855BD9aYssHz6FyPw0jVIyk4QwOQGuMrVxo1p6n7bRtBbbyTHEmS1s21msmfCA 3GZmgl8K78+ueIPJ6ORIcaoNkhkJ1xQfsSxfFjVD7P1F7zlt7/eVIOEw5s6ZMGJD N+qgXBiDvCBQx6KXtzjeA785eCRzp3rCH5x+mEMIuN1y -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:49 2026 by rpki-client