This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa File: D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa (raw, json) Hash identifier: R0V6ZIQY2hcuRRo+byPK6DVVEuSr1ojs/WwAjiQIcr8= Subject key identifier: 0F:53:6F:D9:FF:28:D0:70:2B:FE:76:D5:00:63:ED:46:20:22:DD:CC Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8 Certificate serial: 019B78A2F1EA43EEE9E12421DF2E70007DF1 Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3331 IP address blocks: 185.106.164.0/22 maxlen: 22 2a04:ea40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f1:ea:43:ee:e9:e1:24:21:df:2e:70:00:7d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f536fd9ff28d0702bfe76d50063ed462022ddcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:55:1d:2a:8b:00:41:86:5c:c0:e4:2a:53: 0d:fb:92:4a:34:c5:e8:fa:93:50:9c:c2:f2:47:31: b0:d0:d2:ed:1f:64:ff:93:d8:5e:9d:f4:8b:05:89: 3b:15:8d:6e:40:0c:0e:1d:1f:16:21:c7:07:7a:ee: e8:72:fa:0f:87:0b:e0:15:37:23:a9:d9:70:d5:1d: 0d:86:a6:cf:5c:91:50:f2:a0:75:d6:4e:a4:62:28: 21:55:fd:55:7a:49:80:e4:22:95:16:62:cf:57:59: 73:a0:d9:7c:c1:71:16:89:b1:32:6f:12:e3:ed:d2: 83:7a:f2:3a:d6:6e:38:c9:c4:ee:ff:2f:fa:80:e3: 5c:b8:11:54:71:9a:bd:88:74:46:35:cb:f1:10:74: 63:3d:66:de:e9:ea:4f:38:2a:d3:85:83:7d:3b:a2: cf:6a:5a:e4:fc:e3:be:57:7f:86:83:bd:72:49:ad: 0a:64:4b:63:82:ce:2b:df:f7:df:9d:a2:03:7e:d7: 95:1d:e0:fb:0e:4c:97:3c:16:48:8e:93:e0:43:5b: c4:77:ba:12:e7:cd:fd:39:70:87:4d:0c:ba:4d:23: 5f:fd:bf:fe:38:5a:86:a1:1e:f3:97:3b:d5:16:13: 40:26:c2:2a:e0:ec:3e:2e:e3:a2:6d:6e:da:c5:9f: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:53:6F:D9:FF:28:D0:70:2B:FE:76:D5:00:63:ED:46:20:22:DD:CC X509v3 Authority Key Identifier: keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.164.0/22 IPv6: 2a04:ea40::/29 Signature Algorithm: sha256WithRSAEncryption 9c:7b:7e:02:af:72:16:60:78:e4:d1:1a:03:e0:de:ab:41:c9: 5a:e3:5f:4f:fc:b8:4a:55:df:f4:4e:68:08:55:95:f2:53:48: 45:db:9e:ec:d9:ed:d9:a8:3c:a6:95:a4:ee:de:25:55:70:45: 8e:f1:89:b1:a2:c8:9c:cd:b4:ec:83:e9:20:99:e2:c5:f1:a0: 2a:e2:27:b3:b3:da:84:28:4a:5d:b3:c5:2a:e6:98:d0:6c:ab: f2:8c:e7:28:7d:4e:dc:fc:2c:d0:5f:9e:53:45:49:e7:1e:78: 4b:f0:af:f7:be:0f:80:80:79:fa:a3:1b:b9:ba:8a:11:a2:0b: d9:cc:a0:4a:e5:20:8a:e9:15:42:5c:78:fe:a0:bf:51:42:ce: 23:e5:71:74:ac:55:3b:10:d2:02:7a:94:b7:25:e1:e8:7c:d2: b0:07:37:11:42:b1:57:3d:e8:c9:71:af:66:5d:43:ea:ea:47: 14:bc:2b:9b:fb:9a:d1:fa:b8:c6:bb:1f:2e:70:a0:cd:80:0a: 41:c8:90:bf:ce:1c:85:f7:b7:0a:1c:0a:c2:22:06:1a:c0:ed: 60:26:24:b6:16:12:11:f6:ec:0c:19:65:84:a0:a2:6f:63:2c: 5d:6e:2c:3e:4f:08:4f:cb:01:24:00:a2:35:4e:a2:07:88:01: 80:51:84:5c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ovHqQ+7p4SQh3y5wAH3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl NGYzZjgwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjUzNmZkOWZmMjhkMDcwMmJmZTc2ZDUwMDYzZWQ0NjIwMjJkZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HRVHSqLAEGGXMDkKlMN+5JKNMXo +pNQnMLyRzGw0NLtH2T/k9henfSLBYk7FY1uQAwOHR8WIccHeu7ocvoPhwvgFTcj qdlw1R0NhqbPXJFQ8qB11k6kYighVf1VekmA5CKVFmLPV1lzoNl8wXEWibEybxLj 7dKDevI61m44ycTu/y/6gONcuBFUcZq9iHRGNcvxEHRjPWbe6epPOCrThYN9O6LP alrk/OO+V3+Gg71ySa0KZEtjgs4r3/ffnaIDfteVHeD7DkyXPBZIjpPgQ1vEd7oS 5839OXCHTQy6TSNf/b/+OFqGoR7zlzvVFhNAJsIq4Ow+LuOibW7axZ8OGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA9Tb9n/KNBwK/521QBj7UYgIt3MMB8GA1UdIwQY MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt NDdhNDEyODE1ZmI0LzEvRDFOdjJmOG8wSEFyX25iVkFHUHRSaUFpM2N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0 LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWqkMA0E AgACMAcDBQMqBOpAMA0GCSqGSIb3DQEBCwUAA4IBAQCce34Cr3IWYHjk0RoD4N6r Qcla419P/LhKVd/0TmgIVZXyU0hF257s2e3ZqDymlaTu3iVVcEWO8YmxosiczbTs g+kgmeLF8aAq4iezs9qEKEpds8Uq5pjQbKvyjOcofU7c/CzQX55TRUnnHnhL8K/3 vg+AgHn6oxu5uooRogvZzKBK5SCK6RVCXHj+oL9RQs4j5XF0rFU7ENICepS3JeHo fNKwBzcRQrFXPejJca9mXUPq6kcUvCub+5rR+rjGux8ucKDNgApByJC/zhyF97cK HArCIgYawO1gJiS2FhIR9uwMGWWEoKJvYyxdbiw+TwhPywEkAKI1TqIHiAGAUYRc -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:15 2026 by rpki-client