This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/n-bOcSHmtC_nyf0fWQmHe4QIQGo.roa File: n-bOcSHmtC_nyf0fWQmHe4QIQGo.roa (raw, json) Hash identifier: V5Hu79p7Ayu8FX/iMPLmaSwrgh/L9geYZT2Rk4bv1Y8= Subject key identifier: 9F:E6:CE:71:21:E6:B4:2F:E7:C9:FD:1F:59:09:87:7B:84:08:40:6A Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae Certificate serial: 019B7CEDE288282765506C2AFE3C29A7E596 Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/n-bOcSHmtC_nyf0fWQmHe4QIQGo.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60820 IP address blocks: 178.250.192.0/21 maxlen: 21 185.64.108.0/22 maxlen: 22 2a04:31c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e2:88:28:27:65:50:6c:2a:fe:3c:29:a7:e5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe6ce7121e6b42fe7c9fd1f5909877b8408406a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:f7:81:ce:90:97:c5:1f:83:46:67:83:98: e4:07:2a:3f:43:0b:f6:63:43:9f:5b:a6:8c:a9:a5: 1e:98:56:6d:16:d8:52:86:a0:be:a1:56:cb:ca:10: b5:08:1c:8d:ed:f8:e5:be:6f:dc:c4:09:a6:7c:0f: 06:32:c4:cc:a2:07:80:f1:52:6b:89:26:e6:70:88: 89:5d:9e:4b:7d:a9:00:bd:80:04:a8:b5:ca:13:7f: 82:84:66:a9:47:b8:d9:62:52:6f:8b:be:67:de:73: 4d:a2:a7:9c:cf:46:53:7c:38:de:e3:c9:3e:39:ad: 47:4d:60:c5:4a:61:1b:ad:d9:cd:3d:31:3f:f7:67: 6f:c4:7e:6b:22:ee:ec:d4:73:c8:fc:ab:78:28:bf: 2f:2e:1e:ab:8f:e8:2d:0f:32:a0:81:88:77:3c:30: d6:d7:51:0a:3d:a3:ba:6e:1c:8a:7f:2b:a4:00:bd: 02:18:9b:c9:ef:9a:76:dd:e4:cf:43:ba:94:3a:66: 48:15:ae:f3:4e:2c:80:9c:5b:60:ff:4a:be:34:17: 10:11:c2:63:42:1d:f8:7b:1f:21:2f:d3:bc:05:d7: 2e:0f:2a:9f:1a:fc:1f:09:c3:66:41:2b:3f:d7:dc: b1:d0:a7:0a:cf:44:79:3e:e0:9f:98:07:de:08:42: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:CE:71:21:E6:B4:2F:E7:C9:FD:1F:59:09:87:7B:84:08:40:6A X509v3 Authority Key Identifier: keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/n-bOcSHmtC_nyf0fWQmHe4QIQGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.192.0/21 185.64.108.0/22 IPv6: 2a04:31c0::/29 Signature Algorithm: sha256WithRSAEncryption aa:a3:7b:64:76:ce:c5:0f:32:15:7c:5c:b0:5e:56:0e:e9:a4: f4:65:f4:ca:06:34:d7:00:d6:5a:91:4d:5a:3c:f1:22:e4:60: 55:f3:28:c5:37:d6:86:b9:1c:36:ba:4a:80:d0:6a:a6:6c:ea: 6c:37:9b:cb:56:06:c9:0e:b2:7c:7a:82:6a:98:da:fe:8a:4a: d7:5e:47:06:1b:12:77:d6:4e:a7:8b:2b:47:66:0f:4d:07:fb: 81:6e:43:0b:5a:7e:7d:8b:a5:3f:6e:98:af:ed:fd:b7:1e:27: 0e:a1:0c:11:79:11:82:1a:26:ea:4c:46:47:66:c9:20:52:90: 1b:e5:b9:1d:a8:68:2c:b6:8b:44:b7:a2:8f:f3:b0:8a:89:74: 19:e3:e1:f9:95:57:60:79:9f:89:c9:a2:c7:fc:c0:2e:ce:93: 38:24:99:11:f2:98:d4:c0:bb:ef:65:d3:c7:c8:2e:14:ba:fb: e5:10:0e:2e:df:36:10:8e:9f:82:5c:f5:f5:89:80:98:ac:1d: d5:83:50:2c:aa:07:34:15:34:cf:a3:4f:88:45:90:d4:92:4b: f6:82:92:08:2d:75:6b:e7:03:43:0b:8f:18:50:ea:b1:87:c3: 79:92:d0:a0:64:14:98:d9:f7:04:74:1c:bb:df:d1:12:7e:56: ca:0d:83:fa -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87eKIKCdlUGwq/jwpp+WWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGU1MDQ0ZWQ4Mzg3NWM3ZTllZThlY2I4N2RkNmQzMWRk NWM0YWUwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU2Y2U3MTIxZTZiNDJmZTdjOWZkMWY1OTA5ODc3Yjg0MDg0MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxH3gc6Ql8Ufg0Zng5jkByo/Qwv2 Y0OfW6aMqaUemFZtFthShqC+oVbLyhC1CByN7fjlvm/cxAmmfA8GMsTMogeA8VJr iSbmcIiJXZ5LfakAvYAEqLXKE3+ChGapR7jZYlJvi75n3nNNoqecz0ZTfDje48k+ Oa1HTWDFSmEbrdnNPTE/92dvxH5rIu7s1HPI/Kt4KL8vLh6rj+gtDzKggYh3PDDW 11EKPaO6bhyKfyukAL0CGJvJ75p23eTPQ7qUOmZIFa7zTiyAnFtg/0q+NBcQEcJj Qh34ex8hL9O8BdcuDyqfGvwfCcNmQSs/19yx0KcKz0R5PuCfmAfeCEI/wQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ/mznEh5rQv58n9H1kJh3uECEBqMB8GA1UdIwQY MBaAFFjeUETtg4dcfp7o7Lh91tMd1cSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQt YWE5NTg3ODhlZWJmLzEvbi1iT2NTSG10Q19ueWYwZldRbUhlNFFJUUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQtYWE5NTg3ODhlZWJm LzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsvrAAwQC uUBsMA0EAgACMAcDBQMqBDHAMA0GCSqGSIb3DQEBCwUAA4IBAQCqo3tkds7FDzIV fFywXlYO6aT0ZfTKBjTXANZakU1aPPEi5GBV8yjFN9aGuRw2ukqA0GqmbOpsN5vL VgbJDrJ8eoJqmNr+ikrXXkcGGxJ31k6niytHZg9NB/uBbkMLWn59i6U/bpiv7f23 HicOoQwReRGCGibqTEZHZskgUpAb5bkdqGgstotEt6KP87CKiXQZ4+H5lVdgeZ+J yaLH/MAuzpM4JJkR8pjUwLvvZdPHyC4UuvvlEA4u3zYQjp+CXPX1iYCYrB3Vg1As qgc0FTTPo0+IRZDUkkv2gpIILXVr5wNDC48YUOqxh8N5ktCgZBSY2fcEdBy739ES flbKDYP6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:39 2026 by rpki-client