This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/Nk9NJG4XHyIhiZpIwzCgJjHeHsY.roa File: Nk9NJG4XHyIhiZpIwzCgJjHeHsY.roa (raw, json) Hash identifier: 0Z49Wq613/GvbBC7FSL9+m5CbpRosA76LyzaQrQgJpM= Subject key identifier: 36:4F:4D:24:6E:17:1F:22:21:89:9A:48:C3:30:A0:26:31:DE:1E:C6 Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019B78A22DCB6AB7376E7642A660934D63BE Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/Nk9NJG4XHyIhiZpIwzCgJjHeHsY.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 194.104.188.0/24 maxlen: 24 194.104.189.0/24 maxlen: 24 194.104.190.0/24 maxlen: 24 194.104.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2d:cb:6a:b7:37:6e:76:42:a6:60:93:4d:63:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=364f4d246e171f2221899a48c330a02631de1ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c7:bf:8c:5f:8d:0c:04:1e:af:0b:a9:33:ad: 71:85:a6:ba:26:d2:81:a7:14:70:ea:ae:b5:a8:07: 36:49:76:e3:8a:4d:35:da:75:d0:5a:ac:b7:79:11: ce:d5:8d:2c:e5:bf:8b:7c:de:f8:09:ea:92:cc:5b: 9e:59:5e:7c:e9:de:78:41:28:d4:d0:a8:cc:ed:d3: 11:57:74:9b:3b:ea:93:c2:38:6a:39:0a:47:65:53: 57:c9:51:e1:cd:29:05:22:94:e1:c0:be:d8:20:be: 4b:2c:b5:bf:49:e2:6b:2d:30:36:91:20:fa:4f:8b: b1:88:51:05:23:58:06:a4:95:c4:bd:f6:8f:33:9d: a9:d0:90:f5:6b:9f:21:4b:46:cf:c1:38:3e:04:0f: 56:24:e2:4c:88:3a:bb:a0:f5:82:b3:a8:1a:a9:5a: 68:52:38:5c:bf:31:24:99:8a:5c:56:1e:09:7b:d8: 35:a7:66:92:7b:57:0f:e6:45:09:a2:46:1e:6e:f3: 16:c3:c7:7d:66:e3:df:f9:d3:a6:bc:82:3e:dc:79: 27:31:96:81:e3:73:c7:53:07:8c:ce:19:d1:79:d3: 2b:14:58:93:d8:8d:be:d7:86:a7:8c:03:48:2e:78: 2a:a4:b3:8c:27:3b:14:31:a9:7e:0d:44:c4:48:5d: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4F:4D:24:6E:17:1F:22:21:89:9A:48:C3:30:A0:26:31:DE:1E:C6 X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/Nk9NJG4XHyIhiZpIwzCgJjHeHsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.188.0/22 Signature Algorithm: sha256WithRSAEncryption 16:ea:e7:27:91:fb:a8:5c:03:90:10:76:ab:27:91:07:56:b6: a7:d7:5c:58:a6:31:47:e0:83:d7:5b:76:af:c5:4a:7a:c9:9f: 27:f2:55:c2:c4:e3:0c:ed:2f:f7:ac:e8:01:ba:fc:48:d4:0f: 60:c7:22:aa:1c:5b:38:dc:c0:e5:69:4a:a2:27:d2:69:32:6b: f9:16:1b:19:d8:10:82:32:e6:b8:a3:af:7d:72:74:d5:61:49: 3d:a9:00:85:d8:2a:67:17:3f:df:db:db:eb:45:6a:ba:40:6c: 83:2e:23:dd:c9:d8:f5:96:83:c3:62:17:e9:0c:71:c3:f0:22: 0a:13:4b:78:cf:17:3c:07:20:db:49:3a:25:69:44:59:9d:74: 94:3f:d3:32:10:a3:92:7a:e1:23:b0:d9:53:53:f3:2e:bf:f6: 05:24:2b:9c:8f:82:fa:67:3a:74:ad:2d:b7:54:b1:3f:79:cb: 61:ca:fd:f9:f5:5d:64:82:ce:a6:3f:43:8e:97:44:0a:46:79: e5:24:93:ed:c4:6d:9c:55:20:ad:ff:7d:31:a7:4e:e3:23:fb: ee:ee:fd:21:be:38:9f:e1:82:e7:50:7f:34:38:24:fc:af:83: cd:2b:0c:14:62:c4:2d:39:c1:fe:3b:c2:8a:72:ec:18:3b:36: 83:7c:06:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi3Larc3bnZCpmCTTWO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjRmNGQyNDZlMTcxZjIyMjE4OTlhNDhjMzMwYTAyNjMxZGUxZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98e/jF+NDAQerwupM61xhaa6JtKB pxRw6q61qAc2SXbjik012nXQWqy3eRHO1Y0s5b+LfN74CeqSzFueWV586d54QSjU 0KjM7dMRV3SbO+qTwjhqOQpHZVNXyVHhzSkFIpThwL7YIL5LLLW/SeJrLTA2kSD6 T4uxiFEFI1gGpJXEvfaPM52p0JD1a58hS0bPwTg+BA9WJOJMiDq7oPWCs6gaqVpo UjhcvzEkmYpcVh4Je9g1p2aSe1cP5kUJokYebvMWw8d9ZuPf+dOmvII+3HknMZaB 43PHUweMzhnRedMrFFiT2I2+14anjANILngqpLOMJzsUMal+DUTESF3OnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZPTSRuFx8iIYmaSMMwoCYx3h7GMB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvTms5TkpHNFhIeUloaVpwSXd6Q2dKakhlSHNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwmi8MA0G CSqGSIb3DQEBCwUAA4IBAQAW6ucnkfuoXAOQEHarJ5EHVran11xYpjFH4IPXW3av xUp6yZ8n8lXCxOMM7S/3rOgBuvxI1A9gxyKqHFs43MDlaUqiJ9JpMmv5FhsZ2BCC Mua4o699cnTVYUk9qQCF2CpnFz/f29vrRWq6QGyDLiPdydj1loPDYhfpDHHD8CIK E0t4zxc8ByDbSTolaURZnXSUP9MyEKOSeuEjsNlTU/Muv/YFJCucj4L6Zzp0rS23 VLE/ecthyv359V1kgs6mP0OOl0QKRnnlJJPtxG2cVSCt/30xp07jI/vu7v0hvjif 4YLnUH80OCT8r4PNKwwUYsQtOcH+O8KKcuwYOzaDfAYs -----END CERTIFICATE-----Generated at Tue Jan 20 02:59:32 2026 by rpki-client