This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/ND_QmrCQ_rk92oqsFIZ1cCB4dfY.roa File: ND_QmrCQ_rk92oqsFIZ1cCB4dfY.roa (raw, json) Hash identifier: b7b4ERuVbiLEKj/BAih0yKS3cGFbj/OJa0CNsna6Igs= Subject key identifier: 34:3F:D0:9A:B0:90:FE:B9:3D:DA:8A:AC:14:86:75:70:20:78:75:F6 Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26 Certificate serial: 019B7C1353A5C94EC39F03B380978491634A Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/ND_QmrCQ_rk92oqsFIZ1cCB4dfY.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199490 IP address blocks: 185.14.232.0/22 maxlen: 22 2a02:f000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:53:a5:c9:4e:c3:9f:03:b3:80:97:84:91:63:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbb63df06de00c843da63977349595471e51a26 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=343fd09ab090feb93dda8aac14867570207875f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:47:6c:c9:c3:26:d5:44:5e:df:5d:b2:ea: c8:53:fe:ca:06:4e:03:2f:cb:91:0c:61:65:e3:2e: 98:67:07:8d:5e:ce:c2:24:48:a5:22:82:41:c2:0b: 4d:d4:51:57:bc:64:a1:70:64:39:82:65:9d:b8:78: 46:4c:06:d6:df:c3:23:c3:02:c9:b7:d2:61:23:bd: 09:23:e2:9c:dd:6a:fb:0b:56:68:f2:d8:e0:7d:16: 32:29:c7:6c:80:05:ba:ce:71:56:3a:29:aa:0a:d2: 54:56:ba:32:71:9f:d0:de:af:ed:2a:1b:1f:1e:33: f6:42:85:d0:ba:cd:20:33:46:dd:7e:42:95:8a:85: bf:89:c6:a9:9d:1e:2a:f6:76:60:f9:6c:05:d5:41: a2:01:04:db:83:8d:16:f2:ca:fd:5d:c1:07:86:92: 30:83:68:3d:ba:3e:26:4c:d6:eb:e5:28:be:3d:00: 51:f5:75:73:ad:43:3a:87:7f:c7:bc:1d:52:0b:42: 3b:34:3c:ae:b0:b9:c8:24:b3:5d:1f:e0:c5:f7:d5: 50:3b:28:a4:b0:cc:95:98:70:63:98:70:d3:07:56: 69:38:20:e3:05:6a:4b:a5:a5:59:a9:ed:58:50:8a: cc:e9:27:0c:fd:12:46:3a:ab:52:f4:0f:ca:67:49: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3F:D0:9A:B0:90:FE:B9:3D:DA:8A:AC:14:86:75:70:20:78:75:F6 X509v3 Authority Key Identifier: keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/ND_QmrCQ_rk92oqsFIZ1cCB4dfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.232.0/22 IPv6: 2a02:f000::/32 Signature Algorithm: sha256WithRSAEncryption 46:bc:ec:ca:9b:0c:0c:af:66:53:1b:dd:ed:f9:d2:45:1a:ff: 59:38:27:ca:ff:bb:ce:e5:2f:a1:df:bf:d9:99:68:fb:4e:9a: 3f:9c:c3:35:95:41:94:ee:8b:32:b5:80:c1:54:8d:60:db:84: af:3d:fe:7d:a5:9f:a5:ea:b3:20:6a:bf:b3:3f:26:4b:e3:c1: 13:86:e2:63:7b:c3:f1:99:83:35:de:02:5d:59:14:a4:d2:99: 8e:77:02:d0:89:26:4e:90:28:9d:87:06:4d:78:84:4d:01:ea: 5d:09:72:4b:d8:cc:67:8e:3d:90:f1:3f:d6:6f:1f:54:27:f3: 99:9f:19:ff:f3:34:57:9f:a1:78:91:3b:26:62:12:60:11:65: 96:25:75:f0:7f:08:6c:cd:7c:34:0a:c9:59:44:cf:a4:fc:ab: a9:8d:78:ec:45:c8:34:89:38:08:2a:22:d8:fc:9e:83:bd:4b: f3:e3:35:87:a4:66:15:5b:95:e0:48:bb:26:fe:63:13:21:35: dc:be:b4:79:0d:3f:a2:ed:9b:1d:40:0b:13:b5:4f:87:cd:00: 0e:08:9c:d3:08:dd:f8:6c:83:0d:69:f5:73:db:b4:67:7d:26: 77:cf:07:ba:57:fd:26:61:05:91:d9:c9:99:fd:fd:cb:a7:b5: 61:3d:78:6a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8E1OlyU7DnwOzgJeEkWNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmI2M2RmMDZkZTAwYzg0M2RhNjM5NzczNDk1OTU0NzFl NTFhMjYwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDNmZDA5YWIwOTBmZWI5M2RkYThhYWMxNDg2NzU3MDIwNzg3NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt29HbMnDJtVEXt9dsurIU/7KBk4D L8uRDGFl4y6YZweNXs7CJEilIoJBwgtN1FFXvGShcGQ5gmWduHhGTAbW38MjwwLJ t9JhI70JI+Kc3Wr7C1Zo8tjgfRYyKcdsgAW6znFWOimqCtJUVroycZ/Q3q/tKhsf HjP2QoXQus0gM0bdfkKVioW/icapnR4q9nZg+WwF1UGiAQTbg40W8sr9XcEHhpIw g2g9uj4mTNbr5Si+PQBR9XVzrUM6h3/HvB1SC0I7NDyusLnIJLNdH+DF99VQOyik sMyVmHBjmHDTB1ZpOCDjBWpLpaVZqe1YUIrM6ScM/RJGOqtS9A/KZ0msSQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDQ/0JqwkP65PdqKrBSGdXAgeHX2MB8GA1UdIwQY MBaAFE+7Y98G3gDIQ9pjl3NJWVRx5RomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMt Yjk0NzJhMmM1YjNlLzEvTkRfUW1yQ1Ffcms5Mm9xc0ZJWjFjQ0I0ZGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMtYjk0NzJhMmM1YjNl LzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQ7oMA0E AgACMAcDBQAqAvAAMA0GCSqGSIb3DQEBCwUAA4IBAQBGvOzKmwwMr2ZTG93t+dJF Gv9ZOCfK/7vO5S+h37/ZmWj7Tpo/nMM1lUGU7osytYDBVI1g24SvPf59pZ+l6rMg ar+zPyZL48EThuJje8PxmYM13gJdWRSk0pmOdwLQiSZOkCidhwZNeIRNAepdCXJL 2Mxnjj2Q8T/Wbx9UJ/OZnxn/8zRXn6F4kTsmYhJgEWWWJXXwfwhszXw0CslZRM+k /KupjXjsRcg0iTgIKiLY/J6DvUvz4zWHpGYVW5XgSLsm/mMTITXcvrR5DT+i7Zsd QAsTtU+HzQAOCJzTCN34bIMNafVz27RnfSZ3zwe6V/0mYQWR2cmZ/f3Lp7VhPXhq -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:18 2026 by rpki-client