This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NNFn_quTbzPVK-7TC7oFip2C1QI.roa File: NNFn_quTbzPVK-7TC7oFip2C1QI.roa (raw, json) Hash identifier: F7DFc/zMMrC7GJZNLZtGAluCM78ENBsn+bFnj2O+hxM= Subject key identifier: 34:D1:67:FE:AB:93:6F:33:D5:2B:EE:D3:0B:BA:05:8A:9D:82:D5:02 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C136AA09E08A4AC02AEEA7DBA2D7065 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NNFn_quTbzPVK-7TC7oFip2C1QI.roa Signing time: Fri 02 Jan 2026 00:20:05 +0000 ROA not before: Fri 02 Jan 2026 00:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35699 IP address blocks: 194.26.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:6a:a0:9e:08:a4:ac:02:ae:ea:7d:ba:2d:70:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34d167feab936f33d52beed30bba058a9d82d502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:41:7c:76:04:3e:86:54:d7:41:57:60:ff: 7e:aa:1e:60:87:c5:e0:11:4f:6b:80:2a:a0:b7:07: 9f:f2:a1:8d:83:b5:07:c0:1a:df:7c:c8:ff:1a:84: 49:29:41:61:bb:5e:d3:13:96:5f:1e:e9:c0:dd:d1: 01:f6:5b:b4:60:eb:09:f4:c3:20:4a:28:86:83:d0: 75:ee:89:71:de:3d:c9:67:91:82:ec:69:3e:09:96: fc:47:f2:c6:ec:bf:45:f2:65:75:47:bb:c4:04:5c: 40:2d:4c:44:54:b0:cf:dd:59:02:a0:18:80:4a:c1: 06:f3:fd:72:67:2c:a9:1c:5a:a2:ff:49:50:8a:3a: 70:0f:be:6b:5c:4f:ab:4c:93:2d:36:a2:f9:ee:a1: c5:85:77:37:00:fd:d7:96:73:5d:ca:de:18:67:90: 6a:69:ef:77:35:e1:b1:93:65:86:f2:21:f9:1a:02: bf:e3:a9:b1:7e:9d:8d:68:8e:d4:c5:05:04:70:0d: ee:fe:68:78:a6:cf:6d:e6:77:3b:24:7a:86:b2:d3: d1:41:18:48:dd:b4:c9:79:f2:23:9f:96:05:67:23: dd:4d:93:6d:11:5f:b0:47:ce:0b:13:2b:67:83:27: 4e:55:2b:be:6f:e7:61:cf:ca:94:5f:a6:e4:82:5a: f8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:67:FE:AB:93:6F:33:D5:2B:EE:D3:0B:BA:05:8A:9D:82:D5:02 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NNFn_quTbzPVK-7TC7oFip2C1QI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.175.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:8a:27:2c:4a:c6:f3:b8:14:7b:85:95:09:57:f9:a7:71:9f: cc:90:56:5a:c2:42:87:0b:70:16:75:35:bb:fd:71:e8:5b:06: e0:49:50:be:3b:df:64:f2:da:b5:18:f5:eb:34:bf:9c:69:02: 45:ca:16:9b:c9:e5:ec:6d:90:de:8f:27:d1:9c:81:74:8f:70: d5:dc:2f:9d:00:f9:c2:54:d3:b5:70:b6:b7:8d:81:3e:d5:08: 18:8a:43:d2:f8:2b:d1:f2:60:05:94:c9:00:af:cc:e1:ae:ec: 1d:49:7c:78:e8:54:93:f3:f0:9d:2a:38:9f:09:b8:5e:4e:e9: 8a:8f:2b:a0:39:68:ba:d9:d6:8e:98:32:7a:33:5d:00:59:a7: 6d:41:b2:6c:85:bc:65:53:af:cb:97:8e:75:26:25:50:f2:56: 3b:14:f2:b3:c8:cf:8d:31:35:b3:12:2e:c3:64:28:dc:17:c2: 53:7c:44:5a:15:8f:86:47:d5:d9:21:dc:9f:4e:1d:44:da:5c: 6f:c8:84:b8:eb:ae:48:8f:1d:90:1d:e8:cd:26:c1:c2:b0:1d: bc:c5:e1:97:d1:97:b0:f3:4a:bb:2e:25:94:da:f5:a5:ef:91: 19:e6:39:86:f9:69:d2:82:b9:26:83:13:66:04:26:4c:6f:e0: 77:9c:b8:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2qgngikrAKu6n26LXBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGQxNjdmZWFiOTM2ZjMzZDUyYmVlZDMwYmJhMDU4YTlkODJkNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HBBfHYEPoZU10FXYP9+qh5gh8Xg EU9rgCqgtwef8qGNg7UHwBrffMj/GoRJKUFhu17TE5ZfHunA3dEB9lu0YOsJ9MMg SiiGg9B17olx3j3JZ5GC7Gk+CZb8R/LG7L9F8mV1R7vEBFxALUxEVLDP3VkCoBiA SsEG8/1yZyypHFqi/0lQijpwD75rXE+rTJMtNqL57qHFhXc3AP3XlnNdyt4YZ5Bq ae93NeGxk2WG8iH5GgK/46mxfp2NaI7UxQUEcA3u/mh4ps9t5nc7JHqGstPRQRhI 3bTJefIjn5YFZyPdTZNtEV+wR84LEytngydOVSu+b+dhz8qUX6bkglr4wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTRZ/6rk28z1Svu0wu6BYqdgtUCMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvTk5Gbl9xdVRielBWSy03VEM3b0ZpcDJDMVFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhqvMA0G CSqGSIb3DQEBCwUAA4IBAQBOiicsSsbzuBR7hZUJV/mncZ/MkFZawkKHC3AWdTW7 /XHoWwbgSVC+O99k8tq1GPXrNL+caQJFyhabyeXsbZDejyfRnIF0j3DV3C+dAPnC VNO1cLa3jYE+1QgYikPS+CvR8mAFlMkAr8zhruwdSXx46FST8/CdKjifCbheTumK jyugOWi62daOmDJ6M10AWadtQbJshbxlU6/Ll451JiVQ8lY7FPKzyM+NMTWzEi7D ZCjcF8JTfERaFY+GR9XZIdyfTh1E2lxvyIS4665Ijx2QHejNJsHCsB28xeGX0Zew 80q7LiWU2vWl75EZ5jmG+WnSgrkmgxNmBCZMb+B3nLgD -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:29 2026 by rpki-client