This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/NFAuHU7LF_HyqchSKTj8EafONIY.roa File: NFAuHU7LF_HyqchSKTj8EafONIY.roa (raw, json) Hash identifier: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4= Subject key identifier: 34:50:2E:1D:4E:CB:17:F1:F2:A9:C8:52:29:38:FC:11:A7:CE:34:86 Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B7E38DB179A2D54876F4AF89039CCD642 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/NFAuHU7LF_HyqchSKTj8EafONIY.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210107 IP address blocks: 193.36.60.0/24 maxlen: 24 193.36.60.60/32 maxlen: 32 193.36.60.80/32 maxlen: 32 193.36.60.97/32 maxlen: 32 193.36.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:db:17:9a:2d:54:87:6f:4a:f8:90:39:cc:d6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34502e1d4ecb17f1f2a9c8522938fc11a7ce3486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:ab:a7:7c:2f:63:70:ca:7c:d8:88:cf:6c: 67:f2:83:ac:42:29:24:24:75:30:12:7a:1b:df:18: a3:da:1e:0c:89:b5:ef:ea:6c:d6:a4:43:a6:bc:b5: 61:42:a3:d9:9d:dd:2d:e3:bf:6d:80:fe:80:0f:08: 89:71:24:c5:04:45:7c:7b:8c:92:6c:de:35:b7:96: 82:8e:4e:ec:87:c6:27:ad:37:bb:36:84:10:06:62: 65:17:4b:c6:22:9e:fc:64:a4:b4:fa:62:5e:f8:fa: 8d:f0:60:b3:45:b4:f2:d4:32:04:80:ef:79:14:d8: 61:82:12:dc:fd:ca:e2:8c:86:d7:f6:db:88:9a:b7: 57:2f:c6:77:72:fa:9f:24:47:83:d3:c8:6c:0b:b4: ce:f7:62:13:db:40:94:f9:cf:d1:80:89:89:14:a6: 3f:7d:b7:69:34:48:7b:85:d7:84:07:3f:09:92:49: e7:d4:49:69:95:97:ba:26:50:ef:c0:fb:09:bf:eb: 47:c0:eb:95:41:f9:5d:a6:cf:06:a1:54:bc:e0:eb: 0b:b9:b5:5c:48:a2:45:01:bf:3f:80:77:4b:47:de: d3:50:39:9d:5b:3e:9b:79:1a:25:a5:c2:b9:62:fc: 79:b3:09:78:aa:9e:46:72:69:b7:f1:6c:7c:d7:2e: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:50:2E:1D:4E:CB:17:F1:F2:A9:C8:52:29:38:FC:11:A7:CE:34:86 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/NFAuHU7LF_HyqchSKTj8EafONIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.60.0/23 Signature Algorithm: sha256WithRSAEncryption 81:69:5b:44:12:90:69:9d:03:7c:83:46:94:ea:be:55:ee:ba: 99:0a:dc:8b:cf:7d:ea:2d:85:93:94:c2:c0:11:2d:5e:5d:19: fd:1b:d7:59:29:96:69:a5:8c:d0:61:63:4a:46:32:57:5c:0e: ea:45:21:d3:89:94:8f:c9:bf:4d:68:fd:86:fc:c2:9b:35:52: 4f:5a:6c:8c:12:05:d8:ad:a5:06:72:dc:44:fc:69:22:f1:06: 0a:1c:9d:7f:2d:56:9c:60:6d:37:5b:3b:09:f8:dd:f7:56:b2: 12:9b:af:c1:26:15:7b:65:61:c4:81:ea:8f:16:2a:c5:69:52: 2e:91:a0:06:e6:ba:c0:ec:84:fa:81:0b:96:b7:f5:8a:83:ae: 77:d1:f9:10:e3:58:ef:44:bf:c0:81:c7:33:46:6b:4c:87:af: d4:26:e9:54:5d:fd:c4:b7:a1:9e:4e:d1:b3:0b:71:b0:be:0c: a3:61:67:8e:33:c5:24:94:0c:85:bf:01:97:c4:25:2f:32:e9: 39:ed:e3:ba:a4:9f:76:6c:d3:ad:20:16:30:0c:49:54:ea:c5: 4e:1f:d3:d2:59:06:34:71:f0:ab:f2:bc:7c:d2:c8:0c:07:f6: 3c:c7:ec:c0:cd:fb:08:f3:45:45:2c:b9:75:60:44:22:ad:15: 96:75:c7:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONsXmi1Uh29K+JA5zNZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDUwMmUxZDRlY2IxN2YxZjJhOWM4NTIyOTM4ZmMxMWE3Y2UzNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMGrp3wvY3DKfNiIz2xn8oOsQikk JHUwEnob3xij2h4MibXv6mzWpEOmvLVhQqPZnd0t479tgP6ADwiJcSTFBEV8e4yS bN41t5aCjk7sh8YnrTe7NoQQBmJlF0vGIp78ZKS0+mJe+PqN8GCzRbTy1DIEgO95 FNhhghLc/crijIbX9tuImrdXL8Z3cvqfJEeD08hsC7TO92IT20CU+c/RgImJFKY/ fbdpNEh7hdeEBz8Jkknn1ElplZe6JlDvwPsJv+tHwOuVQfldps8GoVS84OsLubVc SKJFAb8/gHdLR97TUDmdWz6beRolpcK5Yvx5swl4qp5Gcmm38Wx81y49CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRQLh1Oyxfx8qnIUik4/BGnzjSGMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvTkZBdUhVN0xGX0h5cWNoU0tUajhFYWZPTklZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSQ8MA0G CSqGSIb3DQEBCwUAA4IBAQCBaVtEEpBpnQN8g0aU6r5V7rqZCtyLz33qLYWTlMLA ES1eXRn9G9dZKZZppYzQYWNKRjJXXA7qRSHTiZSPyb9NaP2G/MKbNVJPWmyMEgXY raUGctxE/Gki8QYKHJ1/LVacYG03WzsJ+N33VrISm6/BJhV7ZWHEgeqPFirFaVIu kaAG5rrA7IT6gQuWt/WKg6530fkQ41jvRL/AgcczRmtMh6/UJulUXf3Et6GeTtGz C3GwvgyjYWeOM8UklAyFvwGXxCUvMuk57eO6pJ92bNOtIBYwDElU6sVOH9PSWQY0 cfCr8rx80sgMB/Y8x+zAzfsI80VFLLl1YEQirRWWdcef -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:53 2026 by rpki-client