This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa File: nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa (raw, json) Hash identifier: Curfm/lqD1xZHwiMDPx7ObFQjKY3PZ5mZYaISZH60CE= Subject key identifier: 9C:06:7D:19:8C:91:B4:3A:F2:45:43:2A:80:CD:A8:C6:6E:DB:9E:CC Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Certificate serial: 019B7834DCCF4017F03AD70AAB48EB32147B Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 5.157.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:cf:40:17:f0:3a:d7:0a:ab:48:eb:32:14:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c067d198c91b43af245432a80cda8c66edb9ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:cd:7d:c5:2c:ac:9f:14:c1:3e:e6:dc:d8: 8a:38:f3:7b:c9:b7:0b:e6:88:80:56:7f:f1:3e:44: f1:2a:8b:bd:7b:94:6f:22:7e:60:68:fa:25:cc:ff: 66:af:a8:b9:fa:d3:07:12:3c:48:0f:57:23:4d:fa: 6b:10:6e:3e:4d:44:95:1d:3a:07:da:e4:de:4f:ed: c5:80:3d:9b:2a:28:3b:89:59:48:13:fa:a9:38:58: 4e:d1:14:ef:2d:cb:56:c2:03:d4:1f:64:fd:8d:04: 1b:bc:0d:96:24:e9:1b:8a:24:01:f2:6f:6a:98:1e: 4d:f8:83:7d:ab:7d:fa:15:cc:9a:c5:27:29:92:27: b8:18:ea:4a:e2:2e:b8:12:aa:0a:64:a5:94:4c:e5: 18:b3:0a:07:b9:2d:41:02:a2:64:22:3a:81:64:83: c0:7b:ac:e9:28:38:9e:c0:54:dd:31:9c:1c:b6:f0: e6:03:34:0c:14:5d:c0:2e:da:1a:66:bd:18:47:25: 7b:22:69:f1:80:1e:22:f4:4e:b5:f5:a2:0c:77:8b: 7e:d4:df:97:54:ec:2f:d3:8d:f7:de:15:e4:ad:8a: d6:a8:d1:e2:7c:79:a1:c2:9e:0c:bf:fe:b2:9f:3a: 53:9f:ea:86:bf:4e:44:b6:e5:dc:05:c0:b4:dc:86: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:06:7D:19:8C:91:B4:3A:F2:45:43:2A:80:CD:A8:C6:6E:DB:9E:CC X509v3 Authority Key Identifier: keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.88.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2a:c9:b6:03:02:40:dd:28:51:4a:d9:ac:f5:d6:bc:b4:64: d1:8e:f0:9c:1f:4c:96:64:b4:8c:99:b4:84:e9:b9:22:0f:5a: 37:b7:e5:00:a0:d2:a6:e9:2e:b8:5a:93:8f:ee:66:b2:e4:c3: c5:ad:79:ef:13:13:53:8f:5f:2a:a1:39:91:5d:2c:8b:9f:c0: 67:a2:2f:e4:ae:3c:57:5e:be:da:2f:28:b2:d1:0f:1e:47:8e: 77:7e:1c:b6:b7:32:09:cf:c2:87:04:32:84:c8:e1:28:42:d0: 39:2b:e5:ff:b0:d6:9c:d4:42:ad:a6:37:cc:dd:fa:25:b9:2d: b2:1c:db:db:fc:a6:6d:1e:98:4c:ff:b0:74:ba:d5:cb:f0:8e: 05:64:e2:2f:01:df:3e:1a:bb:e1:f0:9e:1a:f7:04:5c:e8:cd: 3e:ee:22:5f:2d:a7:01:b7:3c:67:6b:23:77:f2:33:80:2e:71: 8c:7b:d0:fe:1d:da:7f:84:34:be:7e:e2:fc:0b:bd:30:c6:46: 2b:f4:15:f9:a2:06:75:eb:80:42:8c:50:1a:3e:79:45:aa:58: f9:22:e3:14:7e:a3:51:82:79:84:38:47:31:e8:6f:b0:fb:0f: 16:f7:d2:01:fb:ac:67:dc:5e:d0:ae:e2:6e:60:75:0e:f7:73: 32:e8:ba:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNzPQBfwOtcKq0jrMhR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1 NzUxMTMwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzA2N2QxOThjOTFiNDNhZjI0NTQzMmE4MGNkYThjNjZlZGI5ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hDNfcUsrJ8UwT7m3NiKOPN7ybcL 5oiAVn/xPkTxKou9e5RvIn5gaPolzP9mr6i5+tMHEjxID1cjTfprEG4+TUSVHToH 2uTeT+3FgD2bKig7iVlIE/qpOFhO0RTvLctWwgPUH2T9jQQbvA2WJOkbiiQB8m9q mB5N+IN9q336FcyaxScpkie4GOpK4i64EqoKZKWUTOUYswoHuS1BAqJkIjqBZIPA e6zpKDiewFTdMZwctvDmAzQMFF3ALtoaZr0YRyV7ImnxgB4i9E619aIMd4t+1N+X VOwv04333hXkrYrWqNHifHmhwp4Mv/6ynzpTn+qGv05EtuXcBcC03IbHlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJwGfRmMkbQ68kVDKoDNqMZu257MMB8GA1UdIwQY MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt Y2E1OTVlMzRkNWFjLzEvbkFaOUdZeVJ0RHJ5UlVNcWdNMm94bTdibnN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZ1YMA0G CSqGSIb3DQEBCwUAA4IBAQAmKsm2AwJA3ShRStms9da8tGTRjvCcH0yWZLSMmbSE 6bkiD1o3t+UAoNKm6S64WpOP7may5MPFrXnvExNTj18qoTmRXSyLn8Bnoi/krjxX Xr7aLyiy0Q8eR453fhy2tzIJz8KHBDKEyOEoQtA5K+X/sNac1EKtpjfM3foluS2y HNvb/KZtHphM/7B0utXL8I4FZOIvAd8+Grvh8J4a9wRc6M0+7iJfLacBtzxnayN3 8jOALnGMe9D+Hdp/hDS+fuL8C70wxkYr9BX5ogZ164BCjFAaPnlFqlj5IuMUfqNR gnmEOEcx6G+w+w8W99IB+6xn3F7QruJuYHUO93My6Lo1 -----END CERTIFICATE-----Generated at Tue Jan 20 02:58:13 2026 by rpki-client