This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/n0-cf3Dg2spIAuPmoZbixZNr9sE.roa File: n0-cf3Dg2spIAuPmoZbixZNr9sE.roa (raw, json) Hash identifier: Hy2Is4S24f0eH8Gst5lx1rcsWgfdB7OPveiSzVRnxRs= Subject key identifier: 9F:4F:9C:7F:70:E0:DA:CA:48:02:E3:E6:A1:96:E2:C5:93:6B:F6:C1 Certificate issuer: /CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838 Certificate serial: 019B7834FC7587BD332C567BE3FC733BC038 Authority key identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/n0-cf3Dg2spIAuPmoZbixZNr9sE.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196810 IP address blocks: 89.207.232.0/21 maxlen: 25 178.23.168.0/21 maxlen: 25 185.15.200.0/22 maxlen: 22 185.170.16.0/22 maxlen: 22 185.213.204.0/22 maxlen: 22 185.224.40.0/22 maxlen: 22 194.104.2.0/23 maxlen: 23 194.104.86.0/23 maxlen: 23 2a02:ab40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fc:75:87:bd:33:2c:56:7b:e3:fc:73:3b:c0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f4f9c7f70e0daca4802e3e6a196e2c5936bf6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:3a:fa:f1:b1:2a:ca:81:e8:36:6f:2a:d4: 72:07:8f:90:94:3a:c8:d0:c9:55:9d:d3:f6:24:d0: 84:d2:c0:a4:9b:a8:4f:ec:af:ee:c2:68:3e:23:4d: 09:a5:0d:21:0b:72:45:69:1a:05:44:ea:da:0f:f8: 38:21:04:07:80:64:c1:e0:4e:ed:4d:57:51:46:ac: 95:15:7c:bb:0b:74:e9:1b:ac:ac:41:59:8e:e8:4e: c7:34:2e:4a:6f:40:5f:a1:74:85:05:3f:21:9c:e7: 8d:44:fa:d9:49:a6:96:86:53:25:6c:51:98:18:7b: be:76:2f:ba:9a:4a:07:3c:07:80:f4:df:df:05:b1: e1:e1:10:a4:99:ad:08:23:4b:bf:40:7d:a9:13:02: d0:e1:70:b9:43:54:15:93:eb:c2:7d:ba:51:15:85: 95:d6:2a:ab:cb:fe:fa:39:7f:3a:3d:d2:ca:6e:40: e4:e9:5c:7b:3d:72:5b:c1:17:2f:cd:30:ae:1b:62: 8b:9b:ff:cc:83:56:80:48:34:1f:4c:ca:a9:8a:10: b7:2d:e4:96:55:97:76:d2:a5:9e:bd:db:a3:e4:6f: 24:bc:52:d6:20:2f:6a:b4:a6:cd:68:14:e0:fe:11: 04:f9:50:60:d6:d3:67:6f:df:2d:fd:fc:06:c9:6b: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4F:9C:7F:70:E0:DA:CA:48:02:E3:E6:A1:96:E2:C5:93:6B:F6:C1 X509v3 Authority Key Identifier: keyid:FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/n0-cf3Dg2spIAuPmoZbixZNr9sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.232.0/21 178.23.168.0/21 185.15.200.0/22 185.170.16.0/22 185.213.204.0/22 185.224.40.0/22 194.104.2.0/23 194.104.86.0/23 IPv6: 2a02:ab40::/29 Signature Algorithm: sha256WithRSAEncryption 4b:40:02:9e:2f:c3:4e:7f:e0:a1:9c:7a:99:45:b2:f1:8a:0f: 51:b3:55:e8:52:27:dd:8d:7f:93:a0:09:6f:fa:a6:13:f5:47: 2a:58:93:e1:64:f4:fd:d2:e8:a9:95:ae:ac:e8:4e:89:1c:3f: c8:59:e8:94:15:4b:cc:48:53:4c:53:7d:86:f4:d9:d7:40:c2: 08:48:db:98:85:7c:b7:85:46:41:aa:d8:a0:64:45:52:0f:b8: 68:3c:00:16:9f:bf:ef:8c:e8:b9:4d:c8:ca:69:c8:31:46:af: 48:46:c4:92:0d:e3:15:65:d5:24:3a:a5:b6:c9:e4:34:46:45: 24:7f:41:ac:09:99:35:7d:ec:e4:14:e0:7b:91:37:99:ef:58: b0:8d:f2:3e:a2:42:b8:4d:b7:7c:9e:13:74:93:39:ab:27:08: 7a:94:77:36:bb:5f:21:27:30:2d:f7:44:df:6e:5b:04:66:94: f1:c1:56:6a:6f:0b:42:19:c1:d4:a0:9b:4f:e3:71:46:27:b3: 50:0e:99:a5:80:3e:e4:00:6e:c0:2b:b1:7d:f1:fc:c2:56:cf: 5d:67:43:81:3e:c4:2a:d1:7f:fc:78:97:b2:6a:bf:45:dc:ff: 3d:30:fa:e4:58:23:29:ef:72:24:6d:6b:6f:90:6d:a7:0b:a1: 57:91:f8:c6 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt4NPx1h70zLFZ74/xzO8A4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNTNjM2FmZjMxZTI3ZDJhMWJjNGQ5YjNlZTc1YmI4YTli NTc4MzgwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjRmOWM3ZjcwZTBkYWNhNDgwMmUzZTZhMTk2ZTJjNTkzNmJmNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOQ6+vGxKsqB6DZvKtRyB4+QlDrI 0MlVndP2JNCE0sCkm6hP7K/uwmg+I00JpQ0hC3JFaRoFROraD/g4IQQHgGTB4E7t TVdRRqyVFXy7C3TpG6ysQVmO6E7HNC5Kb0BfoXSFBT8hnOeNRPrZSaaWhlMlbFGY GHu+di+6mkoHPAeA9N/fBbHh4RCkma0II0u/QH2pEwLQ4XC5Q1QVk+vCfbpRFYWV 1iqry/76OX86PdLKbkDk6Vx7PXJbwRcvzTCuG2KLm//Mg1aASDQfTMqpihC3LeSW VZd20qWevduj5G8kvFLWIC9qtKbNaBTg/hEE+VBg1tNnb98t/fwGyWsoIQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJ9PnH9w4NrKSALj5qGW4sWTa/bBMB8GA1UdIwQY MBaAFP1Tw6/zHifSobxNmz7nW7iptXg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1ZQRHJfTWVKOUtodkUyYlB1ZGJ1S20xZURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMWU2OGEtMWM4Ny00ODNkLWE4OWQt NTZkYmZmMTRlZTA1LzEvbjAtY2YzRGcyc3BJQXVQbW9aYml4Wk5yOXNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kMWU2OGEtMWM4Ny00ODNkLWE4OWQtNTZkYmZmMTRlZTA1 LzEvX1ZQRHJfTWVKOUtodkUyYlB1ZGJ1S20xZURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDWc/oAwQD sheoAwQCuQ/IAwQCuaoQAwQCudXMAwQCueAoAwQBwmgCAwQBwmhWMA0EAgACMAcD BQMqAqtAMA0GCSqGSIb3DQEBCwUAA4IBAQBLQAKeL8NOf+ChnHqZRbLxig9Rs1Xo UifdjX+ToAlv+qYT9UcqWJPhZPT90uipla6s6E6JHD/IWeiUFUvMSFNMU32G9NnX QMIISNuYhXy3hUZBqtigZEVSD7hoPAAWn7/vjOi5TcjKacgxRq9IRsSSDeMVZdUk OqW2yeQ0RkUkf0GsCZk1fezkFOB7kTeZ71iwjfI+okK4Tbd8nhN0kzmrJwh6lHc2 u18hJzAt90TfblsEZpTxwVZqbwtCGcHUoJtP43FGJ7NQDpmlgD7kAG7AK7F98fzC Vs9dZ0OBPsQq0X/8eJeyar9F3P89MPrkWCMp73IkbWtvkG2nC6FXkfjG -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:28 2026 by rpki-client