This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa File: Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa (raw, json) Hash identifier: zmUzBEXw7msOBYr3VGkxq3D1/a+XrxaT8Frd+PDSbhs= Subject key identifier: 35:DD:17:A9:69:2C:17:88:3F:43:6A:AC:70:F4:30:5F:54:97:ED:FF Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Certificate serial: 019B7834A64FDAEA27108A03B9A6285E9B70 Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 89.147.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a6:4f:da:ea:27:10:8a:03:b9:a6:28:5e:9b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35dd17a9692c17883f436aac70f4305f5497edff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:fc:7a:29:91:8a:f6:a3:88:2a:8b:92:1d: 31:bc:33:c4:3e:92:73:71:d1:76:b8:8f:6d:66:1f: 6e:f2:4c:24:f8:91:47:ed:18:39:d7:bd:5c:e7:7c: 17:76:c0:0e:ec:4b:42:42:60:50:ce:90:0b:3a:57: ab:3f:85:a0:60:e7:2d:cd:bf:4e:32:56:44:50:25: f5:3f:1e:6b:1e:e4:73:c0:c9:e3:0d:4e:2f:a0:a4: a8:e7:ee:27:fd:c4:49:eb:6c:92:01:e1:59:3c:fe: 89:4d:15:cf:65:a7:8f:69:4f:c6:2e:fc:a4:05:54: e8:b8:73:f6:57:db:45:d7:92:b4:67:20:fd:c4:c7: ee:9f:ee:87:8b:aa:43:b9:65:8d:ce:4e:e4:37:45: 83:5f:93:ea:70:5e:5c:91:05:31:01:b6:a1:86:60: bc:b3:62:e5:75:1b:14:9e:29:6e:30:6e:5e:4b:4b: a0:7d:34:a1:51:28:b9:07:b6:b5:6d:b8:3d:4e:c8: e2:16:40:fe:a7:f9:27:d3:99:00:57:d1:e5:d9:9f: ad:14:5f:bf:5f:aa:08:e9:c0:d5:5a:6c:23:a8:08: d2:23:60:d3:77:b7:6e:e6:ca:25:6f:9a:ee:46:a2: c0:cf:e7:66:54:14:a1:a7:43:db:e1:3c:24:52:81: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DD:17:A9:69:2C:17:88:3F:43:6A:AC:70:F4:30:5F:54:97:ED:FF X509v3 Authority Key Identifier: keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.147.32.0/23 Signature Algorithm: sha256WithRSAEncryption a9:b9:d6:45:b8:f9:fb:ee:18:fa:e5:33:07:04:05:90:a0:ce: 56:a6:11:16:d5:24:03:c1:d0:30:c1:0a:af:93:5f:a4:00:8b: ce:5c:ed:56:20:20:32:97:08:96:a2:ff:8a:91:75:14:f6:90: ed:4f:d1:1c:5f:e5:20:37:ff:b1:7b:73:d9:f6:54:fd:3a:f3: 45:6e:47:d1:07:72:4f:2b:c7:a2:ad:d5:51:88:46:33:06:90: d8:7a:1e:16:30:ce:97:b0:22:f1:e1:f8:0c:64:64:c6:6a:dc: c5:ad:f3:3b:d3:02:c0:07:fb:8e:f8:cd:61:89:82:b0:20:7b: ae:5d:5b:33:ad:fc:56:66:bd:46:80:ab:14:dd:c1:8b:d2:6c: 3c:52:10:53:31:d0:48:c2:fe:de:e4:52:a3:48:5b:07:99:d0: 8b:49:48:ce:ee:92:3b:9e:59:36:e5:68:fe:9a:26:ea:c5:6c: 13:b0:9b:03:76:48:cb:4b:75:f7:55:6a:de:bc:bb:b1:c9:f0: 54:eb:9e:f2:8e:f8:2d:db:8e:d0:8d:3f:94:f3:55:a8:40:21: f3:ad:d8:3b:00:64:da:63:cc:81:ae:96:8f:b7:bf:3f:1c:07: ef:3e:d4:59:ef:11:b8:5d:88:65:62:78:e4:49:09:50:e0:fe: 6f:a0:39:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKZP2uonEIoDuaYoXptwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm NmMwYWYwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWRkMTdhOTY5MmMxNzg4M2Y0MzZhYWM3MGY0MzA1ZjU0OTdlZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplH8eimRivajiCqLkh0xvDPEPpJz cdF2uI9tZh9u8kwk+JFH7Rg5171c53wXdsAO7EtCQmBQzpALOlerP4WgYOctzb9O MlZEUCX1Px5rHuRzwMnjDU4voKSo5+4n/cRJ62ySAeFZPP6JTRXPZaePaU/GLvyk BVTouHP2V9tF15K0ZyD9xMfun+6Hi6pDuWWNzk7kN0WDX5PqcF5ckQUxAbahhmC8 s2LldRsUniluMG5eS0ugfTShUSi5B7a1bbg9TsjiFkD+p/kn05kAV9Hl2Z+tFF+/ X6oI6cDVWmwjqAjSI2DTd7du5solb5ruRqLAz+dmVBShp0Pb4TwkUoHCJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXdF6lpLBeIP0NqrHD0MF9Ul+3/MB8GA1UdIwQY MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It ODIzMmZhM2U2MjlkLzEvTmQwWHFXa3NGNGdfUTJxc2NQUXdYMVNYN2Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWZMgMA0G CSqGSIb3DQEBCwUAA4IBAQCpudZFuPn77hj65TMHBAWQoM5WphEW1SQDwdAwwQqv k1+kAIvOXO1WICAylwiWov+KkXUU9pDtT9EcX+UgN/+xe3PZ9lT9OvNFbkfRB3JP K8eirdVRiEYzBpDYeh4WMM6XsCLx4fgMZGTGatzFrfM70wLAB/uO+M1hiYKwIHuu XVszrfxWZr1GgKsU3cGL0mw8UhBTMdBIwv7e5FKjSFsHmdCLSUjO7pI7nlk25Wj+ mibqxWwTsJsDdkjLS3X3VWrevLuxyfBU657yjvgt247QjT+U81WoQCHzrdg7AGTa Y8yBrpaPt78/HAfvPtRZ7xG4XYhlYnjkSQlQ4P5voDkt -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:31 2026 by rpki-client