This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/nm8pFEpWXGPLmBGfEmff0mnlzsw.roa File: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (raw, json) Hash identifier: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q= Subject key identifier: 9E:6F:29:14:4A:56:5C:63:CB:98:11:9F:12:67:DF:D2:69:E5:CE:CC Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41 Certificate serial: 019B7C126D37EC9C20C9B74F23A676700C48 Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/nm8pFEpWXGPLmBGfEmff0mnlzsw.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213658 IP address blocks: 185.130.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6d:37:ec:9c:20:c9:b7:4f:23:a6:76:70:0c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e6f29144a565c63cb98119f1267dfd269e5cecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:4d:e9:49:14:ab:74:4c:3c:b2:63:34:08: 9f:37:3d:88:12:cf:5e:cf:f9:23:c1:94:e3:da:86: 38:85:70:c0:46:b8:ca:b5:db:e5:c0:cf:e3:d8:70: 59:1b:fb:0e:0b:92:c7:77:1a:66:23:bb:cd:05:79: 18:4e:63:9c:97:73:22:b4:30:a0:21:83:0a:cc:32: 98:85:0a:a5:e0:bb:ac:f1:66:ed:a1:7e:a7:c0:73: 4b:b9:25:75:a3:82:38:df:c4:95:fb:84:84:18:6b: ce:1d:e4:df:4c:44:82:2e:47:96:ed:e2:a0:b6:42: 69:11:de:7f:68:ae:51:57:0d:b2:86:ce:18:b8:7c: 1a:df:64:03:aa:c9:d7:5c:c4:bb:11:ab:14:1c:d5: f4:62:bc:35:b5:e3:ca:a7:c6:ee:d4:a9:c1:03:e7: e3:a3:83:1d:b3:24:94:74:54:e1:77:f2:fd:30:90: dc:0c:dd:21:24:27:6d:b5:5b:09:7a:56:80:0b:c1: 66:b6:e3:a1:49:9d:3a:c7:2d:94:42:81:e9:d8:57: 4c:66:d2:fa:b2:6e:e0:b5:7a:b3:aa:1d:f1:70:6d: 1b:1f:00:ca:f8:46:8d:25:c4:10:37:d0:d5:cc:53: 37:d8:8f:dc:9b:7c:bc:09:e1:8b:dd:65:14:69:3c: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:29:14:4A:56:5C:63:CB:98:11:9F:12:67:DF:D2:69:E5:CE:CC X509v3 Authority Key Identifier: keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/nm8pFEpWXGPLmBGfEmff0mnlzsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.102.0/24 Signature Algorithm: sha256WithRSAEncryption b2:67:e5:61:c6:11:c6:ed:2a:23:11:ae:39:ec:02:9e:7a:e0: 15:6f:0f:49:0d:3c:2c:0a:b6:77:ce:f4:5b:7f:0a:01:da:35: ad:8d:ec:98:fa:36:5b:87:98:ef:63:18:28:cd:9b:e0:d5:ea: 9e:78:fa:7b:69:4c:e3:3c:7b:15:41:d7:24:ab:74:bc:7b:9a: ab:6e:13:42:98:e2:f2:1c:12:86:77:39:aa:56:47:4c:8b:a5: 91:9f:87:78:3d:0a:fe:e4:84:70:02:2f:81:e5:39:f0:21:76: e9:eb:68:4c:cc:f2:19:c3:24:b4:c5:c3:19:a6:2f:f9:e3:cf: 31:e2:40:f4:3c:cf:3f:76:82:f7:29:db:6c:d0:1f:98:12:d3: 31:9a:12:1e:6f:d5:4e:6b:59:b3:be:93:a6:0b:11:e3:4f:e7: 9d:ac:21:10:54:f3:f8:90:8d:c5:99:1d:16:1c:f1:69:45:59: d4:95:a3:00:34:42:f5:31:2e:f4:64:79:f9:15:10:c0:00:f7: 14:80:98:1d:9c:2d:68:54:fd:92:e6:42:a7:99:fc:38:3d:05: b3:39:cf:3b:a3:4a:fc:b0:70:66:de:d1:41:e4:a0:81:0d:66: e5:5e:b0:b4:33:b7:9e:74:d1:d3:02:5c:76:6e:8d:d5:6c:78: 70:5f:8f:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Em037JwgybdPI6Z2cAxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5 YmRkNDEwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTZmMjkxNDRhNTY1YzYzY2I5ODExOWYxMjY3ZGZkMjY5ZTVjZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraJN6UkUq3RMPLJjNAifNz2IEs9e z/kjwZTj2oY4hXDARrjKtdvlwM/j2HBZG/sOC5LHdxpmI7vNBXkYTmOcl3MitDCg IYMKzDKYhQql4Lus8WbtoX6nwHNLuSV1o4I438SV+4SEGGvOHeTfTESCLkeW7eKg tkJpEd5/aK5RVw2yhs4YuHwa32QDqsnXXMS7EasUHNX0Yrw1tePKp8bu1KnBA+fj o4MdsySUdFThd/L9MJDcDN0hJCdttVsJelaAC8FmtuOhSZ06xy2UQoHp2FdMZtL6 sm7gtXqzqh3xcG0bHwDK+EaNJcQQN9DVzFM32I/cm3y8CeGL3WUUaTzS9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5vKRRKVlxjy5gRnxJn39Jp5c7MMB8GA1UdIwQY MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt OTE4NGE5MWI4YWUxLzEvbm04cEZFcFdYR1BMbUJHZkVtZmYwbW5senN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYJmMA0G CSqGSIb3DQEBCwUAA4IBAQCyZ+VhxhHG7SojEa457AKeeuAVbw9JDTwsCrZ3zvRb fwoB2jWtjeyY+jZbh5jvYxgozZvg1eqeePp7aUzjPHsVQdckq3S8e5qrbhNCmOLy HBKGdzmqVkdMi6WRn4d4PQr+5IRwAi+B5TnwIXbp62hMzPIZwyS0xcMZpi/5488x 4kD0PM8/doL3Kdts0B+YEtMxmhIeb9VOa1mzvpOmCxHjT+edrCEQVPP4kI3FmR0W HPFpRVnUlaMANEL1MS70ZHn5FRDAAPcUgJgdnC1oVP2S5kKnmfw4PQWzOc87o0r8 sHBm3tFB5KCBDWblXrC0M7eedNHTAlx2bo3VbHhwX4/A -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:26 2026 by rpki-client