This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sJ7naDICCTd8gUzQaSzUE_kQjqA.roa File: sJ7naDICCTd8gUzQaSzUE_kQjqA.roa (raw, json) Hash identifier: W6Ru5P76BWFrTgVl0HsJ91+KHzJa3/W2o0O15ugaC2s= Subject key identifier: B0:9E:E7:68:32:02:09:37:7C:81:4C:D0:69:2C:D4:13:F9:10:8E:A0 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5746D9E642E6022C46BC0FF2D2B8 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sJ7naDICCTd8gUzQaSzUE_kQjqA.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206804 IP address blocks: 192.159.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:57:46:d9:e6:42:e6:02:2c:46:bc:0f:f2:d2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b09ee768320209377c814cd0692cd413f9108ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:92:f0:d1:19:7e:eb:58:32:27:74:d2:96: 48:cc:1a:73:c8:53:61:4a:ab:e1:31:72:f4:64:99: 09:86:a2:15:e9:c5:84:fd:92:cc:b4:86:96:67:56: f0:01:48:6e:9a:bf:d2:92:2f:35:14:25:6b:06:56: c0:8a:99:de:8e:15:31:6e:ec:09:8b:91:8d:c9:e5: a5:55:a9:94:d3:6f:34:7b:79:23:61:13:48:d1:7d: 94:6c:1b:89:97:4e:22:23:7b:dd:29:b5:fa:69:ff: 7e:b5:60:23:3b:e0:b9:a3:ba:b3:84:33:5e:73:b1: 78:d8:51:fb:a2:a1:88:fa:3a:cb:29:d6:08:b9:01: 6b:68:9a:b2:95:65:42:66:4a:09:24:06:e4:51:07: ee:a5:06:2a:e4:86:2c:ed:20:3d:12:0e:01:e3:d0: 7a:df:2e:e3:93:60:c2:92:09:98:41:37:ce:c6:60: 88:15:d5:fe:3e:1e:b9:ff:75:24:6e:24:14:90:16: 2d:6c:99:a4:84:d0:0a:bf:f3:8a:1b:2b:dc:e5:87: 15:70:be:c8:fb:32:f8:d9:b4:b7:3a:dc:47:04:3c: 25:bf:1c:55:dc:16:54:7e:c0:00:81:7c:77:78:3c: e1:6c:f3:24:c6:b5:3c:4a:a7:4e:7d:20:da:4c:7e: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9E:E7:68:32:02:09:37:7C:81:4C:D0:69:2C:D4:13:F9:10:8E:A0 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sJ7naDICCTd8gUzQaSzUE_kQjqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.159.100.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:1b:54:1c:d8:c1:08:cc:37:3a:51:c6:d1:9d:b4:e3:18:ef: 99:f4:b4:a4:68:0e:24:f8:71:11:8e:b7:7d:ad:79:92:a5:2d: d5:3a:ee:8e:bb:76:cf:eb:c5:71:15:b5:f3:ad:ec:ed:a4:08: 4e:76:f4:b3:b3:28:f0:d4:1f:8d:ea:ec:82:a5:c5:1c:c6:97: 9b:98:90:13:fa:06:11:c0:ee:6d:86:a3:c2:10:f7:a9:f5:41: 5f:cb:20:4d:1b:eb:aa:15:d7:84:c4:29:3a:be:ef:32:f2:0f: 41:bd:59:59:1e:4a:15:c8:af:7a:08:91:83:dd:d2:86:36:d3: d1:8a:e0:c6:03:14:76:4c:36:fc:1b:ea:68:6b:48:2f:1c:d7: df:aa:5c:dc:4f:55:6d:73:e5:62:30:42:5d:b5:4b:f5:68:55: 8c:f6:bd:99:fc:b1:42:2d:d4:30:20:ef:57:70:75:69:ee:26: 62:23:7d:7b:2a:58:bf:3e:cc:79:3c:bd:50:8b:8e:07:82:b3: 5a:f6:74:3c:a2:3c:f9:43:4e:d9:eb:65:61:be:66:3f:f0:82: 0b:66:9f:89:e3:3b:c6:23:b4:f1:10:ce:16:3c:02:49:c7:a5: da:d8:19:e3:49:cb:05:63:77:1d:8d:af:54:32:2a:1f:e5:45: 2b:84:48:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVdG2eZC5gIsRrwP8tK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDllZTc2ODMyMDIwOTM3N2M4MTRjZDA2OTJjZDQxM2Y5MTA4ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE2S8NEZfutYMid00pZIzBpzyFNh SqvhMXL0ZJkJhqIV6cWE/ZLMtIaWZ1bwAUhumr/Ski81FCVrBlbAipnejhUxbuwJ i5GNyeWlVamU0280e3kjYRNI0X2UbBuJl04iI3vdKbX6af9+tWAjO+C5o7qzhDNe c7F42FH7oqGI+jrLKdYIuQFraJqylWVCZkoJJAbkUQfupQYq5IYs7SA9Eg4B49B6 3y7jk2DCkgmYQTfOxmCIFdX+Ph65/3UkbiQUkBYtbJmkhNAKv/OKGyvc5YcVcL7I +zL42bS3OtxHBDwlvxxV3BZUfsAAgXx3eDzhbPMkxrU8SqdOfSDaTH6FnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLCe52gyAgk3fIFM0Gks1BP5EI6gMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvc0o3bmFESUNDVGQ4Z1V6UWFTelVFX2tRanFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ9kMA0G CSqGSIb3DQEBCwUAA4IBAQA8G1Qc2MEIzDc6UcbRnbTjGO+Z9LSkaA4k+HERjrd9 rXmSpS3VOu6Ou3bP68VxFbXzreztpAhOdvSzsyjw1B+N6uyCpcUcxpebmJAT+gYR wO5thqPCEPep9UFfyyBNG+uqFdeExCk6vu8y8g9BvVlZHkoVyK96CJGD3dKGNtPR iuDGAxR2TDb8G+poa0gvHNffqlzcT1Vtc+ViMEJdtUv1aFWM9r2Z/LFCLdQwIO9X cHVp7iZiI317Kli/Psx5PL1Qi44HgrNa9nQ8ojz5Q07Z62VhvmY/8IILZp+J4zvG I7TxEM4WPAJJx6Xa2BnjScsFY3cdja9UMiof5UUrhEg5 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:05 2026 by rpki-client