This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/NhrnmLNt3an0IpFoDz-zJe6YFwY.roa File: NhrnmLNt3an0IpFoDz-zJe6YFwY.roa (raw, json) Hash identifier: ZgZEuJac2hSv6b6Lumyy52RbL6AyfgoQUadQhidKXEs= Subject key identifier: 36:1A:E7:98:B3:6D:DD:A9:F4:22:91:68:0F:3F:B3:25:EE:98:17:06 Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Certificate serial: 019B7FF07EF1D63507EBB619B9555FFB7677 Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/NhrnmLNt3an0IpFoDz-zJe6YFwY.roa Signing time: Fri 02 Jan 2026 18:20:26 +0000 ROA not before: Fri 02 Jan 2026 18:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 188.64.17.0/24 maxlen: 24 188.64.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:7e:f1:d6:35:07:eb:b6:19:b9:55:5f:fb:76:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Validity Not Before: Jan 2 18:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=361ae798b36ddda9f42291680f3fb325ee981706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9f:7f:11:66:d1:c6:4a:e9:49:61:42:39:65: ca:dc:09:de:64:1b:5a:62:21:1a:1b:72:ab:d5:de: 68:38:ba:15:0d:ad:90:e7:b3:cf:5e:57:5a:e0:34: 2f:76:ad:dd:a4:ef:04:73:58:5d:78:84:a5:1a:8f: c7:69:4a:6c:29:2c:ef:56:f0:f4:e0:d6:e5:b9:d9: d9:6a:bd:d3:34:14:83:9a:0a:ea:cc:fb:7c:6e:5f: de:d2:3a:3f:97:fc:92:4e:1a:e2:43:90:b8:11:25: b0:f3:52:26:9a:36:14:37:57:e2:63:43:e0:96:17: 53:4b:2b:6e:25:ec:34:36:ba:e2:ed:5f:2d:fc:76: c8:19:74:90:fd:d8:4a:60:6b:9e:26:37:fd:fb:8b: be:17:86:db:96:10:51:42:42:72:ab:a5:06:cd:0c: 20:97:0f:05:c5:b7:8c:90:35:e2:e1:34:32:09:6d: c3:35:dc:a8:4f:d2:6a:33:9a:e6:df:da:04:51:50: 5b:62:73:71:8e:c7:0a:8c:c3:fe:7d:af:3c:e8:f4: f4:11:f4:90:e7:de:55:e5:55:18:45:71:c9:cd:b1: dd:fd:66:21:f3:a4:2f:95:fb:b6:96:e2:ea:18:b0: 9b:06:fe:ce:d3:a9:bc:59:c7:e2:a9:e7:b4:0a:41: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1A:E7:98:B3:6D:DD:A9:F4:22:91:68:0F:3F:B3:25:EE:98:17:06 X509v3 Authority Key Identifier: keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/NhrnmLNt3an0IpFoDz-zJe6YFwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.17.0-188.64.18.255 Signature Algorithm: sha256WithRSAEncryption 7e:1a:71:7d:51:e7:50:c0:09:47:94:b4:48:fe:90:d6:17:85: aa:71:31:be:e0:d6:80:34:b0:c6:7e:56:74:cf:22:7d:ea:7e: 60:e0:c6:77:a1:38:4f:79:15:6f:04:ee:69:35:8e:0f:e6:35: 3b:c2:ac:47:9a:fc:a5:ab:12:93:bd:ee:48:24:ad:34:d5:07: ed:21:d2:9c:a3:c7:c4:25:86:7d:e2:24:7f:85:a2:48:2a:e3: 46:7a:92:85:5b:d3:97:e8:ba:50:a1:8f:ae:42:b4:d1:67:41: 9b:7b:6b:56:05:89:45:4a:8f:38:a8:4f:69:6b:10:fa:32:fd: 31:0b:c3:c4:56:86:09:7a:af:4d:17:3f:07:ca:47:40:9b:e6: 5d:ce:46:5a:93:9b:5b:78:43:cc:eb:5b:62:91:c9:90:5e:70: a9:72:9d:11:7a:ae:8b:2a:c5:0d:69:eb:95:a8:d8:e5:14:5a: 69:40:1a:c4:f4:31:ed:5d:3b:61:df:07:50:bb:9e:b8:3f:ed: 67:a2:81:ee:9f:a9:8e:f0:e2:84:4f:a8:c1:d8:6b:ca:e1:1c: 08:9c:fe:26:4f:1c:29:1e:30:ee:ef:59:7a:e3:98:e5:57:55: af:d0:1f:d2:9d:6f:08:cd:a3:48:1a:bc:69:20:c2:53:7f:f3: bd:9a:b6:2a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8H7x1jUH67YZuVVf+3Z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3 NmUzNzUwHhcNMjYwMTAyMTgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjFhZTc5OGIzNmRkZGE5ZjQyMjkxNjgwZjNmYjMyNWVlOTgxNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg59/EWbRxkrpSWFCOWXK3AneZBta YiEaG3Kr1d5oOLoVDa2Q57PPXlda4DQvdq3dpO8Ec1hdeISlGo/HaUpsKSzvVvD0 4NbludnZar3TNBSDmgrqzPt8bl/e0jo/l/ySThriQ5C4ESWw81ImmjYUN1fiY0Pg lhdTSytuJew0Nrri7V8t/HbIGXSQ/dhKYGueJjf9+4u+F4bblhBRQkJyq6UGzQwg lw8FxbeMkDXi4TQyCW3DNdyoT9JqM5rm39oEUVBbYnNxjscKjMP+fa886PT0EfSQ 595V5VUYRXHJzbHd/WYh86Qvlfu2luLqGLCbBv7O06m8Wcfiqee0CkGaaQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDYa55izbd2p9CKRaA8/syXumBcGMB8GA1UdIwQY MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt NmE4YzNiNjc2YjU3LzEvTmhybm1MTnQzYW4wSXBGb0R6LXpKZTZZRndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3 LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC8QBED BAC8QBIwDQYJKoZIhvcNAQELBQADggEBAH4acX1R51DACUeUtEj+kNYXhapxMb7g 1oA0sMZ+VnTPIn3qfmDgxnehOE95FW8E7mk1jg/mNTvCrEea/KWrEpO97kgkrTTV B+0h0pyjx8Qlhn3iJH+Fokgq40Z6koVb05foulChj65CtNFnQZt7a1YFiUVKjzio T2lrEPoy/TELw8RWhgl6r00XPwfKR0Cb5l3ORlqTm1t4Q8zrW2KRyZBecKlynRF6 rosqxQ1p65Wo2OUUWmlAGsT0Me1dO2HfB1C7nrg/7Weige6fqY7w4oRPqMHYa8rh HAic/iZPHCkeMO7vWXrjmOVXVa/QH9KdbwjNo0gavGkgwlN/872atio= -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:12 2026 by rpki-client