This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/7Na1prGJ4FkiFdW0x9CfNk6_xWg.roa File: 7Na1prGJ4FkiFdW0x9CfNk6_xWg.roa (raw, json) Hash identifier: +rpN0xtGV1MKYV/A1+8x9wSd5PmNaR+b6CBOkrX1H6A= Subject key identifier: EC:D6:B5:A6:B1:89:E0:59:22:15:D5:B4:C7:D0:9F:36:4E:BF:C5:68 Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df Certificate serial: 019B79ECA3FE1D3CAC21C9939A2C742CFDF3 Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/7Na1prGJ4FkiFdW0x9CfNk6_xWg.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206978 IP address blocks: 149.249.12.0/22 maxlen: 22 149.249.12.0/24 maxlen: 24 149.249.13.0/24 maxlen: 24 149.249.15.0/24 maxlen: 24 185.196.29.0/24 maxlen: 24 2a03:e440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a3:fe:1d:3c:ac:21:c9:93:9a:2c:74:2c:fd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecd6b5a6b189e0592215d5b4c7d09f364ebfc568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:f9:19:5d:c1:78:73:c9:dc:71:b8:ca:bf: aa:9a:3b:21:03:dd:ad:75:02:15:4e:69:4b:b6:07: 9b:e3:df:b7:81:63:84:92:ea:c4:2c:61:50:15:10: 28:4d:1a:61:8a:6b:8f:83:11:4a:a0:fb:ac:b7:f0: c6:c0:92:de:c2:8a:22:a6:21:6e:d5:f5:11:35:0d: ae:8d:3d:71:27:9e:74:97:d0:f8:e0:aa:a1:54:07: 98:89:16:fc:b6:69:13:7f:e6:af:5e:35:8b:c5:87: 38:bf:bd:74:39:07:db:24:e1:09:76:06:ab:76:b0: e1:0c:d8:9a:0d:44:f3:b1:35:71:e6:a4:da:9b:e3: 7c:6b:08:86:8d:7d:36:4a:c5:0c:00:2e:29:75:b4: b4:8f:35:d8:90:00:8b:e6:ee:5b:40:1a:60:e3:7c: 6c:e9:4d:9c:0f:72:be:0d:89:e2:8a:ce:87:33:a5: 52:d1:3c:70:33:ca:21:b3:b9:f9:c4:b2:95:af:1d: 1e:b7:ac:40:5d:ad:62:c3:63:f5:35:24:40:71:f0: a7:08:e4:fd:65:51:dc:03:84:99:eb:4b:fb:e6:1f: d9:13:2c:0b:91:d9:6d:28:7f:61:59:ae:d2:fe:b6: 89:2c:f3:fa:79:3f:75:eb:4a:d5:56:44:00:c8:85: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:B5:A6:B1:89:E0:59:22:15:D5:B4:C7:D0:9F:36:4E:BF:C5:68 X509v3 Authority Key Identifier: keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/7Na1prGJ4FkiFdW0x9CfNk6_xWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.12.0/22 185.196.29.0/24 IPv6: 2a03:e440::/29 Signature Algorithm: sha256WithRSAEncryption 2b:c1:5b:e6:c9:71:60:2f:ca:b2:07:1a:b3:0d:ba:d4:bc:c2: 21:da:87:21:6b:9f:b9:08:27:e8:3f:02:87:ec:c7:07:17:7e: 87:c3:34:db:e7:1c:f5:3a:8d:0a:6a:34:a9:65:36:23:76:33: 58:73:d4:39:03:14:34:0e:66:9a:53:23:e2:66:7e:c9:79:c1: 42:37:e8:7f:09:45:ed:26:f3:d5:bc:97:62:b5:c3:81:77:9e: cd:2b:7e:f8:28:e7:d2:34:59:b9:27:01:47:e6:35:16:67:e3: 43:87:4c:fc:3c:ac:9d:b0:ad:1f:5e:82:80:fb:6c:bd:8c:bd: e9:6d:1b:b5:7f:6e:73:de:4e:59:b2:1a:48:af:9c:a1:e3:d4: 6b:d0:c4:02:97:49:b2:9c:05:c9:cf:3e:00:65:ec:38:55:4f: b9:58:10:21:f5:fc:bd:b3:46:79:71:67:b9:54:cd:38:d6:0f: ec:6d:9b:1a:07:a4:73:4e:89:5b:73:99:1d:1c:93:25:d0:30: a3:64:b0:cc:7c:67:c5:06:32:12:09:e5:73:96:4f:d7:48:29: 16:51:17:d9:8f:2d:b3:00:65:35:06:5d:99:de:d3:cd:19:02: a9:90:82:62:e8:99:4a:ac:e1:d4:c9:c3:5d:44:ac:31:dd:60: 96:29:7d:3d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57KP+HTysIcmTmix0LP3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjE0YTkwZDQwOTVmZDI2NzY1Y2MwZTRkZjg5OWU4YzQ2 YzA2ZGYwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2Q2YjVhNmIxODllMDU5MjIxNWQ1YjRjN2QwOWYzNjRlYmZjNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zn5GV3BeHPJ3HG4yr+qmjshA92t dQIVTmlLtgeb49+3gWOEkurELGFQFRAoTRphimuPgxFKoPust/DGwJLewooipiFu 1fURNQ2ujT1xJ550l9D44KqhVAeYiRb8tmkTf+avXjWLxYc4v710OQfbJOEJdgar drDhDNiaDUTzsTVx5qTam+N8awiGjX02SsUMAC4pdbS0jzXYkACL5u5bQBpg43xs 6U2cD3K+DYniis6HM6VS0TxwM8ohs7n5xLKVrx0et6xAXa1iw2P1NSRAcfCnCOT9 ZVHcA4SZ60v75h/ZEywLkdltKH9hWa7S/raJLPP6eT9160rVVkQAyIVt8wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOzWtaaxieBZIhXVtMfQnzZOv8VoMB8GA1UdIwQY MBaAFJIhSpDUCV/SZ2XMDk34mejEbAbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEt NTdkODAzMGI2MWUxLzEvN05hMXByR0o0RmtpRmRXMHg5Q2ZOazZfeFdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEtNTdkODAzMGI2MWUx LzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQClfkMAwQA ucQdMA0EAgACMAcDBQMqA+RAMA0GCSqGSIb3DQEBCwUAA4IBAQArwVvmyXFgL8qy BxqzDbrUvMIh2ocha5+5CCfoPwKH7McHF36HwzTb5xz1Oo0KajSpZTYjdjNYc9Q5 AxQ0DmaaUyPiZn7JecFCN+h/CUXtJvPVvJditcOBd57NK374KOfSNFm5JwFH5jUW Z+NDh0z8PKydsK0fXoKA+2y9jL3pbRu1f25z3k5ZshpIr5yh49Rr0MQCl0mynAXJ zz4AZew4VU+5WBAh9fy9s0Z5cWe5VM041g/sbZsaB6RzTolbc5kdHJMl0DCjZLDM fGfFBjISCeVzlk/XSCkWURfZjy2zAGU1Bl2Z3tPNGQKpkIJi6JlKrOHUycNdRKwx 3WCWKX09 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:29 2026 by rpki-client