This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa File: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (raw, json) Hash identifier: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8= Subject key identifier: 9C:5C:89:88:8D:90:12:65:EA:DF:97:EE:88:6F:C4:51:95:3E:D1:3C Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52 Certificate serial: 019B7C132E7CE1343EF5FC27E76CC6832E2C Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29608 IP address blocks: 194.146.204.0/24 maxlen: 24 2a14:5500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2e:7c:e1:34:3e:f5:fc:27:e7:6c:c6:83:2e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c5c89888d901265eadf97ee886fc451953ed13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:6c:5b:50:5b:0d:c4:cd:1e:f8:ee:fe:98: 02:af:14:99:2a:a4:59:1e:57:06:db:53:5f:6d:8b: 8f:6d:bd:a5:1a:5d:65:69:25:02:18:3b:92:aa:fd: 51:b5:58:41:e3:57:2b:99:e9:e6:7c:dc:77:f1:11: 59:d7:d0:60:dd:43:e9:9f:e5:bc:dd:4e:07:26:8b: 37:c8:5d:40:b3:53:1a:06:f1:47:4a:ca:85:a4:56: 70:ef:45:90:02:4c:6b:e8:e2:c4:e9:5c:a1:1b:ba: b3:4c:00:59:eb:a4:b4:dd:53:fd:04:2a:c7:a4:81: 47:c3:f5:e0:82:62:0a:e7:9e:e6:05:97:98:9e:72: 52:74:4c:94:94:a9:60:cb:ed:f2:ab:e1:70:4c:a3: d8:59:c4:c9:75:07:54:08:14:b4:22:ea:09:91:ef: 4a:50:29:16:fd:f4:b8:70:8c:c8:d8:9d:a4:70:61: e0:68:bb:c6:0d:28:5d:a4:ce:5a:8c:46:75:b1:55: a3:1c:25:47:c7:4e:e7:ea:2e:78:46:15:c5:b2:c9: 7b:4c:59:aa:ae:13:d5:a5:79:90:b7:1e:28:83:b4: 06:36:3e:c9:77:c7:38:7d:00:c5:d3:ef:4a:d9:5a: 5e:0e:d3:7b:44:af:9e:c4:a2:9f:ac:a0:b1:8c:95: 4d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:89:88:8D:90:12:65:EA:DF:97:EE:88:6F:C4:51:95:3E:D1:3C X509v3 Authority Key Identifier: keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.204.0/24 IPv6: 2a14:5500::/29 Signature Algorithm: sha256WithRSAEncryption 74:db:18:01:0c:41:3b:66:3a:6b:a3:8c:4c:97:60:7f:c8:9d: b0:5b:32:5f:f4:49:a1:fc:63:6f:3c:6c:76:96:71:57:95:5a: 15:f9:af:ea:c6:d2:80:61:14:a2:2a:0e:a1:37:5b:85:4b:4f: d1:d7:9c:db:9d:0f:fe:b5:a1:4f:e3:7a:aa:17:42:6b:57:f2: 02:03:50:a4:43:19:f4:e6:62:93:fd:57:b7:55:a0:d1:7f:da: 73:cd:75:ef:cc:85:63:91:08:ab:5f:ed:f4:6c:6b:85:da:9a: fd:3f:db:ad:a0:f0:a0:2e:1a:76:c2:14:46:20:d9:a0:2f:2b: 0e:d3:5d:61:95:d2:1b:07:c6:89:cf:63:3b:95:2d:37:22:a2: 8f:59:14:54:ca:3a:c6:f4:dd:d9:01:b7:88:b2:37:3b:af:af: c7:9f:d2:aa:79:d6:4f:4f:ae:8a:3e:ce:7d:86:6f:05:94:ce: cc:73:64:83:bc:54:0a:71:b9:f1:3a:f9:3a:83:ef:12:79:aa: 0f:f8:9d:48:72:32:36:d2:44:c3:67:f0:e5:dd:64:0e:c3:5e: f0:d8:8e:6f:45:be:d2:28:37:32:0e:a4:3b:6b:90:45:da:d1: f7:fa:40:59:21:09:1a:06:cd:54:de:d0:bd:bd:09:14:9b:a2: de:1b:7d:c5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Ey584TQ+9fwn52zGgy4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmUyNTY1NjVlMWMyN2M0YjI2NTYwMTkwZTk5NzgyODZh ODJiNTIwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzVjODk4ODhkOTAxMjY1ZWFkZjk3ZWU4ODZmYzQ1MTk1M2VkMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzJsW1BbDcTNHvju/pgCrxSZKqRZ HlcG21NfbYuPbb2lGl1laSUCGDuSqv1RtVhB41crmenmfNx38RFZ19Bg3UPpn+W8 3U4HJos3yF1As1MaBvFHSsqFpFZw70WQAkxr6OLE6VyhG7qzTABZ66S03VP9BCrH pIFHw/XggmIK557mBZeYnnJSdEyUlKlgy+3yq+FwTKPYWcTJdQdUCBS0IuoJke9K UCkW/fS4cIzI2J2kcGHgaLvGDShdpM5ajEZ1sVWjHCVHx07n6i54RhXFssl7TFmq rhPVpXmQtx4og7QGNj7Jd8c4fQDF0+9K2VpeDtN7RK+exKKfrKCxjJVN8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJxciYiNkBJl6t+X7ohvxFGVPtE8MB8GA1UdIwQY MBaAFP++JWVl4cJ8SyZWAZDpl4KGqCtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUt YjFmYzIwODNjOTA2LzEvbkZ5SmlJMlFFbVhxMzVmdWlHX0VVWlUtMFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUtYjFmYzIwODNjOTA2 LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwpLMMA0E AgACMAcDBQMqFFUAMA0GCSqGSIb3DQEBCwUAA4IBAQB02xgBDEE7Zjpro4xMl2B/ yJ2wWzJf9Emh/GNvPGx2lnFXlVoV+a/qxtKAYRSiKg6hN1uFS0/R15zbnQ/+taFP 43qqF0JrV/ICA1CkQxn05mKT/Ve3VaDRf9pzzXXvzIVjkQirX+30bGuF2pr9P9ut oPCgLhp2whRGINmgLysO011hldIbB8aJz2M7lS03IqKPWRRUyjrG9N3ZAbeIsjc7 r6/Hn9KqedZPT66KPs59hm8FlM7Mc2SDvFQKcbnxOvk6g+8SeaoP+J1IcjI20kTD Z/Dl3WQOw17w2I5vRb7SKDcyDqQ7a5BF2tH3+kBZIQkaBs1U3tC9vQkUm6LeG33F -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:33 2026 by rpki-client