This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nIz39vWdGg_FQSsEtaVQCpKx8Gw.roa File: nIz39vWdGg_FQSsEtaVQCpKx8Gw.roa (raw, json) Hash identifier: axxUuLaJ5nzVFrI1RG417yJSVTMRSt2pFod+sbvaifI= Subject key identifier: 9C:8C:F7:F6:F5:9D:1A:0F:C5:41:2B:04:B5:A5:50:0A:92:B1:F0:6C Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D3FCD5211884C605A36DC1D1B7D93 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nIz39vWdGg_FQSsEtaVQCpKx8Gw.roa Signing time: Fri 02 Jan 2026 06:20:21 +0000 ROA not before: Fri 02 Jan 2026 06:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45929 IP address blocks: 185.245.112.0/22 maxlen: 22 195.38.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3f:cd:52:11:88:4c:60:5a:36:dc:1d:1b:7d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c8cf7f6f59d1a0fc5412b04b5a5500a92b1f06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:cd:c8:dc:0f:4d:dd:7b:04:1b:a4:0c:33: 23:44:91:1e:f8:f4:df:43:d0:b8:4f:72:61:25:83: c1:26:cd:60:13:7a:e0:8b:c4:05:2c:c2:71:75:55: f1:ec:c6:03:6c:b7:85:11:4c:32:b0:52:d7:0c:99: 85:c8:23:b6:75:8b:26:53:dd:2c:52:34:b3:9a:d0: c0:98:f2:2b:e7:9a:ff:ce:86:1f:b7:3c:8e:70:dd: 81:cb:4b:9d:9a:ba:d7:ef:82:d1:76:8f:e8:f3:ba: 02:ac:e0:5e:72:33:31:16:5b:56:e8:9c:59:35:0b: 58:12:cb:a0:96:c7:84:2b:78:30:f6:ec:95:54:97: ca:53:ca:e9:8b:7f:2d:02:87:29:32:a4:df:06:04: ec:d4:92:a6:66:37:3d:cd:dc:be:01:25:36:0e:87: b4:5b:ff:05:44:f4:14:cb:6f:22:77:8f:71:41:3a: d5:96:8e:26:7c:69:c2:86:ef:32:7f:06:30:60:d1: 8e:cc:5f:9f:27:1f:d7:12:67:e4:d8:99:84:6a:d8: 17:01:44:1c:8f:45:30:8e:9d:6a:bc:31:7b:fe:ac: 09:82:a0:97:73:52:45:7e:31:f5:f3:8d:a4:4c:ce: 87:1b:11:ef:92:bb:73:28:81:bf:95:1a:a8:13:6a: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8C:F7:F6:F5:9D:1A:0F:C5:41:2B:04:B5:A5:50:0A:92:B1:F0:6C X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nIz39vWdGg_FQSsEtaVQCpKx8Gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.112.0/22 195.38.4.0/22 Signature Algorithm: sha256WithRSAEncryption 71:92:fd:e7:bc:ab:9c:af:1f:db:f7:e1:99:5f:51:0a:e6:9a: 42:c2:9d:32:02:39:b7:b9:30:77:60:cb:28:20:e8:4d:91:3e: bf:1e:2b:24:f7:4e:1c:3b:06:5c:66:e8:d2:27:f0:29:9b:62: 06:6b:6a:28:a3:12:41:e1:6e:e7:f7:ba:01:df:4b:f6:02:5b: 38:0f:11:8c:ce:bb:01:9d:02:78:21:88:4b:8a:63:d9:73:f3: 74:54:b1:23:ab:88:3f:37:1f:a8:f9:f3:aa:b0:bb:c2:2f:a7: bc:a2:6a:5d:40:55:1a:cf:e7:6d:29:39:26:a5:cd:80:30:ea: d7:67:44:30:2a:d9:42:3f:02:21:69:85:86:aa:7e:c3:84:da: 78:81:4e:3d:16:95:d5:45:c0:0b:94:d8:6e:d1:92:00:08:02: 58:af:fa:8b:20:85:c9:f9:b3:ae:18:9a:99:d0:c3:2a:e9:69: 2a:27:ec:bb:8d:b4:5d:98:26:3a:62:28:72:1a:b5:28:36:1d: c7:bb:09:94:49:9a:91:99:b3:fe:4f:50:dd:48:e5:df:73:a4: 6c:bb:c2:5e:f8:2c:17:72:66:04:74:3e:85:8f:ab:5f:7d:94: 44:e8:96:bc:2f:09:5d:0e:16:c8:8e:86:69:4d:db:b5:5b:73: 01:b3:c5:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XT/NUhGITGBaNtwdG32TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzhjZjdmNmY1OWQxYTBmYzU0MTJiMDRiNWE1NTAwYTkyYjFmMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sXNyNwPTd17BBukDDMjRJEe+PTf Q9C4T3JhJYPBJs1gE3rgi8QFLMJxdVXx7MYDbLeFEUwysFLXDJmFyCO2dYsmU90s UjSzmtDAmPIr55r/zoYftzyOcN2By0udmrrX74LRdo/o87oCrOBecjMxFltW6JxZ NQtYEsuglseEK3gw9uyVVJfKU8rpi38tAocpMqTfBgTs1JKmZjc9zdy+ASU2Doe0 W/8FRPQUy28id49xQTrVlo4mfGnChu8yfwYwYNGOzF+fJx/XEmfk2JmEatgXAUQc j0Uwjp1qvDF7/qwJgqCXc1JFfjH1842kTM6HGxHvkrtzKIG/lRqoE2q8BwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJyM9/b1nRoPxUErBLWlUAqSsfBsMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvbkl6Mzl2V2RHZ19GUVNzRXRhVlFDcEt4OEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCufVwAwQC wyYEMA0GCSqGSIb3DQEBCwUAA4IBAQBxkv3nvKucrx/b9+GZX1EK5ppCwp0yAjm3 uTB3YMsoIOhNkT6/Hisk904cOwZcZujSJ/Apm2IGa2oooxJB4W7n97oB30v2Als4 DxGMzrsBnQJ4IYhLimPZc/N0VLEjq4g/Nx+o+fOqsLvCL6e8ompdQFUaz+dtKTkm pc2AMOrXZ0QwKtlCPwIhaYWGqn7DhNp4gU49FpXVRcALlNhu0ZIACAJYr/qLIIXJ +bOuGJqZ0MMq6WkqJ+y7jbRdmCY6YihyGrUoNh3HuwmUSZqRmbP+T1DdSOXfc6Rs u8Je+CwXcmYEdD6Fj6tffZRE6Ja8LwldDhbIjoZpTdu1W3MBs8Vs -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:47 2026 by rpki-client