This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa File: NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa (raw, json) Hash identifier: C+90WWb/JQ7zrn55n+w4S16JKtkV7Mdgc4eSRqUFD2w= Subject key identifier: 36:22:B0:15:76:2F:8D:B2:BE:52:DC:C8:C7:16:DC:74:A5:93:99:3F Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Certificate serial: 019B78A26DDF9A3B9D4C9F542627A5FCDD4A Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199328 IP address blocks: 185.20.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6d:df:9a:3b:9d:4c:9f:54:26:27:a5:fc:dd:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3622b015762f8db2be52dcc8c716dc74a593993f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:fe:9a:5b:80:11:b4:58:d9:52:bd:6c:77: 48:48:1a:f8:b6:04:15:c5:70:67:07:df:72:31:0f: e1:ef:df:6a:2c:5d:bb:49:d5:b7:f6:be:0a:a6:c4: 84:8d:4f:91:81:57:5b:3b:31:69:cc:e6:7e:dc:8e: 27:7a:87:19:ce:3a:84:ab:43:c2:52:b2:93:11:f7: 73:2c:e6:6b:3a:5b:35:3b:94:df:f0:fd:f0:9f:92: 39:57:e9:04:fb:1e:2a:23:9f:30:c9:94:40:1f:2b: be:c1:90:cf:92:8e:9b:01:53:ca:42:ce:e6:d8:c6: 54:5c:27:86:05:a3:14:60:fb:d1:a0:1a:cf:9f:ac: 85:f6:ba:e8:3b:03:c6:b7:90:2c:94:89:15:da:85: 23:89:b1:be:72:6e:d7:77:63:ea:cb:04:e5:5f:ba: 49:e6:01:b8:11:a6:32:94:59:50:ee:0f:f0:de:a5: 26:2c:ea:a0:41:f1:23:3f:a0:d2:91:bd:5d:0b:38: 82:95:e5:8c:bb:3f:53:88:71:3b:18:64:56:73:13: d6:33:08:0d:11:c0:52:84:7b:72:03:4a:2d:67:ec: 60:ff:5d:33:35:df:c4:19:e8:72:8c:d1:6a:5f:94: dc:e3:43:49:18:5d:82:d9:19:43:58:92:df:a5:f6: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:22:B0:15:76:2F:8D:B2:BE:52:DC:C8:C7:16:DC:74:A5:93:99:3F X509v3 Authority Key Identifier: keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.100.0/24 Signature Algorithm: sha256WithRSAEncryption 24:24:59:6a:48:00:43:ef:a2:73:64:e4:8d:ed:64:9f:85:6c: 63:97:57:3a:5a:d2:8a:c7:b2:d4:75:3e:71:d7:37:60:e2:73: d8:b7:00:1c:8e:0a:a0:a8:35:03:17:97:98:f1:10:13:95:06: bb:27:b1:85:07:38:8c:d1:86:10:56:7f:c6:ee:73:86:8b:3d: 7e:65:1e:b2:5b:6f:ea:3b:27:95:11:3f:73:dc:2e:b1:2e:e0: 20:de:2b:e4:e1:de:4f:42:04:db:d0:8a:20:88:d8:73:d1:68: 76:d3:1e:10:e1:4a:f6:1c:fe:b5:4c:43:69:39:24:8b:aa:60: 9b:c1:a1:00:a6:2c:7c:91:8e:ac:a3:87:9a:5e:8a:30:a5:91: 4f:dc:6b:7e:cb:d5:cd:0a:81:af:98:01:5d:36:66:12:80:8a: 21:67:a4:51:cf:20:ac:86:b8:16:44:1d:05:14:1b:ca:5c:a5: 21:cc:5b:7f:41:aa:96:f1:4e:40:2e:65:e1:4d:b5:4f:29:3d: 7a:ee:50:bd:12:71:23:a4:f4:53:28:7a:dd:b5:04:07:54:f5: 6b:cb:27:f9:c6:1f:a9:5e:41:f1:b2:ac:d8:7e:95:15:2c:a7: 9f:16:10:e6:13:1d:73:d0:89:17:1b:5f:4a:ab:10:e6:e9:2b: 0d:30:0c:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4om3fmjudTJ9UJiel/N1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGM1ODg5NTEyNjBhMTFhM2VmYmQ2ZDgxNmJkNTZmODJm MmZjMzQwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjIyYjAxNTc2MmY4ZGIyYmU1MmRjYzhjNzE2ZGM3NGE1OTM5OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/+mluAEbRY2VK9bHdISBr4tgQV xXBnB99yMQ/h799qLF27SdW39r4KpsSEjU+RgVdbOzFpzOZ+3I4neocZzjqEq0PC UrKTEfdzLOZrOls1O5Tf8P3wn5I5V+kE+x4qI58wyZRAHyu+wZDPko6bAVPKQs7m 2MZUXCeGBaMUYPvRoBrPn6yF9rroOwPGt5AslIkV2oUjibG+cm7Xd2PqywTlX7pJ 5gG4EaYylFlQ7g/w3qUmLOqgQfEjP6DSkb1dCziCleWMuz9TiHE7GGRWcxPWMwgN EcBShHtyA0otZ+xg/10zNd/EGehyjNFqX5Tc40NJGF2C2RlDWJLfpfYGIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYisBV2L42yvlLcyMcW3HSlk5k/MB8GA1UdIwQY MBaAFCqMWIlRJgoRo++9bYFr1W+C8vw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEt MWU4ZDIxOWY4N2FmLzEvTmlLd0ZYWXZqYkstVXR6SXh4YmNkS1dUbVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEtMWU4ZDIxOWY4N2Fm LzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRRkMA0G CSqGSIb3DQEBCwUAA4IBAQAkJFlqSABD76JzZOSN7WSfhWxjl1c6WtKKx7LUdT5x 1zdg4nPYtwAcjgqgqDUDF5eY8RATlQa7J7GFBziM0YYQVn/G7nOGiz1+ZR6yW2/q OyeVET9z3C6xLuAg3ivk4d5PQgTb0IogiNhz0Wh20x4Q4Ur2HP61TENpOSSLqmCb waEApix8kY6so4eaXoowpZFP3Gt+y9XNCoGvmAFdNmYSgIohZ6RRzyCshrgWRB0F FBvKXKUhzFt/QaqW8U5ALmXhTbVPKT167lC9EnEjpPRTKHrdtQQHVPVryyf5xh+p XkHxsqzYfpUVLKefFhDmEx1z0IkXG19KqxDm6SsNMAxr -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:15 2026 by rpki-client