This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/N2tOJ7vurApQ5vxYFVhm0DZtm8g.roa File: N2tOJ7vurApQ5vxYFVhm0DZtm8g.roa (raw, json) Hash identifier: ZkTLqJFMFeUdKEsfhX975xa7i4/nEZ6uZDnG9Iqiw5E= Subject key identifier: 37:6B:4E:27:BB:EE:AC:0A:50:E6:FC:58:15:58:66:D0:36:6D:9B:C8 Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Certificate serial: 019B77595F1CC1728E901F4B86AC49F34876 Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/N2tOJ7vurApQ5vxYFVhm0DZtm8g.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 185.129.208.0/22 maxlen: 22 185.199.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5f:1c:c1:72:8e:90:1f:4b:86:ac:49:f3:48:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=376b4e27bbeeac0a50e6fc58155866d0366d9bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:3c:a2:ad:1c:8e:9c:69:6b:9e:a7:e1:60: 47:12:2f:c5:c5:e9:3d:52:13:b3:aa:5d:e9:f8:50: 8b:80:d0:01:ee:21:82:0e:ad:1f:46:6e:fa:6b:20: b0:d2:ba:dd:43:f6:05:37:b4:ed:ed:1d:12:57:32: 83:64:96:88:4b:6d:22:c0:50:90:db:ec:37:12:77: ca:5f:d3:17:66:2e:1d:51:38:4a:66:74:31:d5:f3: 6e:35:e9:b3:c9:14:cd:92:af:38:08:83:07:68:77: 5e:af:07:6f:df:19:a0:40:f6:c0:d5:46:12:eb:ee: 7b:fb:73:b7:96:4b:0c:30:df:2b:c9:35:1c:ac:c3: 04:e5:19:09:ca:2d:b4:73:52:2b:69:b6:63:c4:22: d9:1a:2e:8f:d5:24:ed:66:e2:ba:ee:b4:cd:44:2a: 3d:b1:53:c8:1b:cd:ab:38:a9:e5:26:75:30:15:57: 2f:31:65:1e:ff:42:05:75:da:29:6f:c5:41:7e:f1: 41:36:9b:1a:5c:9b:9b:b8:fa:5c:13:26:7a:85:7a: e8:53:ca:7c:ee:08:b6:0d:be:b0:71:5f:b7:7e:79: 09:f0:a5:05:fe:e1:a1:cc:1e:22:53:a9:ca:51:d0: 39:2e:4e:cd:3d:c8:5d:ce:7d:69:ec:88:4d:54:62: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6B:4E:27:BB:EE:AC:0A:50:E6:FC:58:15:58:66:D0:36:6D:9B:C8 X509v3 Authority Key Identifier: keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/N2tOJ7vurApQ5vxYFVhm0DZtm8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.208.0/22 185.199.196.0/22 Signature Algorithm: sha256WithRSAEncryption 58:eb:66:fb:8d:5e:7d:0e:17:67:95:9b:29:f6:53:eb:f9:38: 17:e6:53:57:a7:b1:0b:e9:c7:36:8d:93:b7:5a:ef:c3:ae:a8: 05:c9:f4:35:79:6a:cc:28:54:b1:31:cf:3e:97:90:7e:90:ef: fb:eb:ce:55:b3:68:35:d1:a9:a3:20:26:47:e4:35:c8:63:a2: 00:1f:c0:17:ba:91:13:49:4b:87:3a:da:ea:09:23:fd:a7:71: 14:80:1c:22:d7:45:e1:29:3b:23:9c:f4:71:21:4f:05:62:c5: 83:e4:4f:17:63:8a:0e:b1:3c:1c:5f:e1:1d:85:ef:78:b3:df: 62:a5:a2:58:d0:7f:55:26:bc:3b:5e:01:76:2b:7b:87:e5:3d: f0:03:57:0d:ac:5d:1c:20:ec:41:cc:b9:7a:08:a5:c6:83:b9: 3b:28:81:e2:25:23:29:02:a0:78:31:3a:c7:8d:38:70:96:d5: ff:ce:fd:87:e2:4c:36:92:e2:82:34:0c:2d:f3:d7:b2:ee:2e: 07:ed:89:4f:03:e8:f0:87:84:a3:f8:54:4e:2b:3a:d9:2b:51: 3c:b5:8e:70:64:05:7b:80:5a:ca:52:43:0d:74:b7:b1:09:a1: e5:2e:17:56:e2:c8:80:6e:c6:ee:c9:13:d5:0f:43:b6:c3:5a: 4f:6f:c0:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WV8cwXKOkB9LhqxJ80h2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw YTFhNjYwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzZiNGUyN2JiZWVhYzBhNTBlNmZjNTgxNTU4NjZkMDM2NmQ5YmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOw8oq0cjpxpa56n4WBHEi/Fxek9 UhOzql3p+FCLgNAB7iGCDq0fRm76ayCw0rrdQ/YFN7Tt7R0SVzKDZJaIS20iwFCQ 2+w3EnfKX9MXZi4dUThKZnQx1fNuNemzyRTNkq84CIMHaHderwdv3xmgQPbA1UYS 6+57+3O3lksMMN8ryTUcrMME5RkJyi20c1IrabZjxCLZGi6P1STtZuK67rTNRCo9 sVPIG82rOKnlJnUwFVcvMWUe/0IFddopb8VBfvFBNpsaXJubuPpcEyZ6hXroU8p8 7gi2Db6wcV+3fnkJ8KUF/uGhzB4iU6nKUdA5Lk7NPchdzn1p7IhNVGI9DwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDdrTie77qwKUOb8WBVYZtA2bZvIMB8GA1UdIwQY MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct ZGU5YjJmOGY3ZTI5LzEvTjJ0T0o3dnVyQXBRNXZ4WUZWaG0wRFp0bThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5 LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYHQAwQC ucfEMA0GCSqGSIb3DQEBCwUAA4IBAQBY62b7jV59DhdnlZsp9lPr+TgX5lNXp7EL 6cc2jZO3Wu/DrqgFyfQ1eWrMKFSxMc8+l5B+kO/7685Vs2g10amjICZH5DXIY6IA H8AXupETSUuHOtrqCSP9p3EUgBwi10XhKTsjnPRxIU8FYsWD5E8XY4oOsTwcX+Ed he94s99ipaJY0H9VJrw7XgF2K3uH5T3wA1cNrF0cIOxBzLl6CKXGg7k7KIHiJSMp AqB4MTrHjThwltX/zv2H4kw2kuKCNAwt89ey7i4H7YlPA+jwh4Sj+FROKzrZK1E8 tY5wZAV7gFrKUkMNdLexCaHlLhdW4siAbsbuyRPVD0O2w1pPb8BR -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:34 2026 by rpki-client