This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/NjX2RLAIRMtA2YdPzBY5Qad3vcA.roa File: NjX2RLAIRMtA2YdPzBY5Qad3vcA.roa (raw, json) Hash identifier: 6ByCyDNR0v/Hzx8WLuCZxJyQGZM+yYwXqPzJBnTMYzw= Subject key identifier: 36:35:F6:44:B0:08:44:CB:40:D9:87:4F:CC:16:39:41:A7:77:BD:C0 Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B7AC89CE6FBD3A25D9010519ED283D9E1 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/NjX2RLAIRMtA2YdPzBY5Qad3vcA.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 146.19.142.0/24 maxlen: 24 185.218.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9c:e6:fb:d3:a2:5d:90:10:51:9e:d2:83:d9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3635f644b00844cb40d9874fcc163941a777bdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:13:64:a0:89:29:38:b8:e6:ee:9b:bb:57:9b: d0:55:d3:81:1f:52:1c:3e:ff:a8:c2:88:6b:c9:b3: 31:39:d0:0d:fd:88:f5:65:a0:78:74:fc:7d:b4:56: 7e:a6:a4:2e:0d:49:73:fa:a2:25:49:86:f5:0b:cc: ec:57:02:3b:9a:38:93:03:a3:50:f0:13:3c:40:fd: d9:6b:41:c4:e3:cf:fb:ff:72:2d:d6:0a:5a:6d:d0: a9:61:6f:55:6e:44:f5:8d:d7:1a:10:c7:7a:66:d5: ff:35:94:75:67:b7:69:24:27:be:cb:60:1b:26:4e: 1a:79:b8:62:f8:d7:9a:e5:5d:7d:8f:3e:69:ce:dc: 33:8d:8e:7e:61:30:be:58:f4:28:df:cc:63:ec:2e: 0f:f4:bc:d3:93:db:0b:98:1d:5f:be:e8:40:fa:3e: d3:39:d9:7c:7c:61:06:64:60:e3:e3:96:77:b9:3f: 8c:f9:b0:ce:ff:77:54:4b:f7:98:d3:4e:3a:7c:b9: 13:d6:d2:f1:a2:9f:86:d1:f9:57:da:48:0d:b6:05: 55:93:8c:c4:b7:f1:5e:cd:df:9d:df:69:d9:7d:43: 03:1a:d4:a5:98:e7:ea:42:f5:32:19:c0:33:06:29: 86:17:d4:33:9a:cf:bc:e5:c4:e6:40:cc:ef:23:91: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:F6:44:B0:08:44:CB:40:D9:87:4F:CC:16:39:41:A7:77:BD:C0 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/NjX2RLAIRMtA2YdPzBY5Qad3vcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.142.0/24 185.218.184.0/24 Signature Algorithm: sha256WithRSAEncryption c1:bb:e0:f5:e1:86:8b:4f:1b:36:1d:05:7d:58:f4:9d:e1:a1: 87:32:23:40:04:62:59:12:22:31:0a:5f:42:c8:b5:6d:ec:0b: 87:df:2e:8a:5b:08:45:ae:11:af:8a:d5:2d:16:76:ac:5d:01: 51:31:91:49:80:1f:56:0f:37:2b:50:7b:2e:09:a5:8f:87:21: 72:95:d3:ca:27:76:a4:09:ca:94:19:33:ee:72:7b:05:2d:92: 43:73:27:fc:bb:93:23:bf:e1:a8:e2:69:f0:80:f1:1f:75:3d: b1:cc:9e:98:5d:c5:c8:9b:29:81:ae:9f:67:e2:00:f4:4e:af: 04:53:ce:34:ee:44:0e:c5:d2:ce:61:d5:f8:a5:58:77:b5:f4: ef:53:d7:69:27:43:6a:e0:9a:86:3c:f3:0a:8d:3c:96:73:64: 77:3c:4b:26:06:56:17:43:3c:7a:83:92:9b:d9:cf:6b:cc:bb: ae:0b:71:8c:88:e5:70:23:84:c8:28:85:d5:1c:b6:fe:37:28: 2c:e9:20:90:54:2a:77:65:50:7a:fd:e5:90:d7:d8:87:10:39: 53:df:ec:c3:38:6d:20:ff:3b:5e:c7:01:6d:3f:b1:02:cd:dd: 74:5c:52:a5:ed:c6:9b:e9:f4:a4:65:cb:e4:0d:83:ba:aa:c2: 33:b8:00:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yJzm+9OiXZAQUZ7Sg9nhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjM1ZjY0NGIwMDg0NGNiNDBkOTg3NGZjYzE2Mzk0MWE3NzdiZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhNkoIkpOLjm7pu7V5vQVdOBH1Ic Pv+owohrybMxOdAN/Yj1ZaB4dPx9tFZ+pqQuDUlz+qIlSYb1C8zsVwI7mjiTA6NQ 8BM8QP3Za0HE48/7/3It1gpabdCpYW9VbkT1jdcaEMd6ZtX/NZR1Z7dpJCe+y2Ab Jk4aebhi+Nea5V19jz5pztwzjY5+YTC+WPQo38xj7C4P9LzTk9sLmB1fvuhA+j7T Odl8fGEGZGDj45Z3uT+M+bDO/3dUS/eY0046fLkT1tLxop+G0flX2kgNtgVVk4zE t/Fezd+d32nZfUMDGtSlmOfqQvUyGcAzBimGF9Qzms+85cTmQMzvI5HemwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDY19kSwCETLQNmHT8wWOUGnd73AMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvTmpYMlJMQUlSTXRBMllkUHpCWTVRYWQzdmNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhOOAwQA udq4MA0GCSqGSIb3DQEBCwUAA4IBAQDBu+D14YaLTxs2HQV9WPSd4aGHMiNABGJZ EiIxCl9CyLVt7AuH3y6KWwhFrhGvitUtFnasXQFRMZFJgB9WDzcrUHsuCaWPhyFy ldPKJ3akCcqUGTPucnsFLZJDcyf8u5Mjv+Go4mnwgPEfdT2xzJ6YXcXImymBrp9n 4gD0Tq8EU8407kQOxdLOYdX4pVh3tfTvU9dpJ0Nq4JqGPPMKjTyWc2R3PEsmBlYX Qzx6g5Kb2c9rzLuuC3GMiOVwI4TIKIXVHLb+Nygs6SCQVCp3ZVB6/eWQ19iHEDlT 3+zDOG0g/ztexwFtP7ECzd10XFKl7cab6fSkZcvkDYO6qsIzuAC/ -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:57 2026 by rpki-client