This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa File: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (raw, json) Hash identifier: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo= Subject key identifier: 37:99:0E:85:A5:ED:37:30:9E:05:C6:EB:32:1E:7A:84:34:38:A3:E5 Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Certificate serial: 019B7C118F083DAC35DB03AF4BD671DA3F6E Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa Signing time: Fri 02 Jan 2026 00:18:04 +0000 ROA not before: Fri 02 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41728 IP address blocks: 194.37.250.0/23 maxlen: 24 194.39.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:8f:08:3d:ac:35:db:03:af:4b:d6:71:da:3f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Validity Not Before: Jan 2 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37990e85a5ed37309e05c6eb321e7a843438a3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:7d:b5:bf:4e:a2:eb:95:54:8c:55:b8:f6: 33:9b:e2:28:fd:84:b8:ba:55:41:97:e5:a6:1e:f1: e1:52:9d:9c:ce:ac:a9:27:a7:2f:31:f3:72:38:ed: 21:53:74:36:4b:fe:4c:76:3c:51:a7:c9:5f:10:9a: 49:07:4e:51:2e:5e:ef:eb:1a:00:31:21:c3:e6:fc: 88:a9:42:84:00:8a:9e:69:01:07:5b:97:ba:3d:2e: 76:4a:24:b9:12:1d:b4:ef:11:9f:bf:d2:9e:1c:01: b8:73:de:54:22:a9:de:96:02:29:db:b3:f7:cd:81: 47:a1:a6:c3:61:9b:9a:d8:db:cf:b6:c6:76:b8:ff: e2:c7:da:16:11:dc:2e:d4:e0:94:34:c5:c1:70:9f: 95:f0:2d:d0:c0:4e:b0:d7:d5:a9:fe:ba:3c:80:7b: 65:44:51:57:54:46:f4:5b:72:0c:a6:13:21:e0:70: cc:9c:26:1f:7d:ba:96:dd:53:17:30:33:85:8f:13: ee:10:ff:e9:1a:f3:e5:c9:ed:4c:f7:4a:fc:ba:11: 6e:aa:d6:91:ed:3b:03:b5:84:35:0d:d1:6c:19:c4: 28:31:ad:af:21:e9:b1:a9:21:cb:9d:2b:20:ab:50: 0c:ae:55:35:5f:62:1e:92:7c:ac:37:d6:d9:34:bd: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:0E:85:A5:ED:37:30:9E:05:C6:EB:32:1E:7A:84:34:38:A3:E5 X509v3 Authority Key Identifier: keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.37.250.0/23 194.39.78.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:b8:5e:ab:98:8c:36:9c:90:81:c3:0d:13:e9:bb:84:53:f0: 08:eb:ab:18:9a:d8:5b:bf:a1:f1:51:7f:e1:89:78:0b:3d:ce: 9d:79:c4:a9:5e:11:aa:52:da:b9:0b:e1:ba:ca:ef:46:10:d3: de:44:19:58:35:d8:ee:27:95:f3:ae:3f:22:4d:c2:ea:de:17: 3f:68:96:c1:18:75:49:84:3b:36:f7:fc:8e:a4:f1:80:47:81: 17:ff:cb:77:3d:65:8d:ce:c2:79:06:c2:9d:9b:69:0e:eb:b2: f0:d7:b3:96:af:fd:da:49:a9:fa:6f:7f:09:c5:5f:f9:5b:ba: ea:13:2b:16:6b:c0:a2:d6:85:e4:51:4c:5e:b0:87:54:62:45: e5:22:da:48:ef:c9:93:78:a3:3b:ea:22:4b:96:65:ac:44:4f: 15:db:93:d6:e6:7a:53:df:c7:e5:cb:67:7a:09:7b:aa:84:c0: 48:2b:0d:f4:c1:0c:5b:46:89:4f:79:bd:a6:74:df:ca:0c:89: 80:f3:1d:1e:60:ad:30:a3:ec:8c:65:fa:a7:c2:bf:ba:ed:b4: 51:cf:e9:f1:8c:3f:34:4d:65:c7:05:4f:d0:2e:6d:ea:36:3f: 01:fa:91:86:8a:74:4a:7d:b8:a8:d1:09:62:1b:9b:f6:55:94: 0c:44:13:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EY8IPaw12wOvS9Zx2j9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw MDg3ZDQwHhcNMjYwMTAyMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzk5MGU4NWE1ZWQzNzMwOWUwNWM2ZWIzMjFlN2E4NDM0MzhhM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23p9tb9OouuVVIxVuPYzm+Io/YS4 ulVBl+WmHvHhUp2czqypJ6cvMfNyOO0hU3Q2S/5MdjxRp8lfEJpJB05RLl7v6xoA MSHD5vyIqUKEAIqeaQEHW5e6PS52SiS5Eh207xGfv9KeHAG4c95UIqnelgIp27P3 zYFHoabDYZua2NvPtsZ2uP/ix9oWEdwu1OCUNMXBcJ+V8C3QwE6w19Wp/ro8gHtl RFFXVEb0W3IMphMh4HDMnCYffbqW3VMXMDOFjxPuEP/pGvPlye1M90r8uhFuqtaR 7TsDtYQ1DdFsGcQoMa2vIemxqSHLnSsgq1AMrlU1X2IeknysN9bZNL1BUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDeZDoWl7TcwngXG6zIeeoQ0OKPlMB8GA1UdIwQY MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt ZTVmY2ViZGFhN2YyLzEvTjVrT2hhWHROekNlQmNick1oNTZoRFE0by1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwiX6AwQB widOMA0GCSqGSIb3DQEBCwUAA4IBAQANuF6rmIw2nJCBww0T6buEU/AI66sYmthb v6HxUX/hiXgLPc6decSpXhGqUtq5C+G6yu9GENPeRBlYNdjuJ5Xzrj8iTcLq3hc/ aJbBGHVJhDs29/yOpPGAR4EX/8t3PWWNzsJ5BsKdm2kO67Lw17OWr/3aSan6b38J xV/5W7rqEysWa8Ci1oXkUUxesIdUYkXlItpI78mTeKM76iJLlmWsRE8V25PW5npT 38fly2d6CXuqhMBIKw30wQxbRolPeb2mdN/KDImA8x0eYK0wo+yMZfqnwr+67bRR z+nxjD80TWXHBU/QLm3qNj8B+pGGinRKfbio0QliG5v2VZQMRBMT -----END CERTIFICATE-----Generated at Tue Jan 20 17:06:33 2026 by rpki-client