This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/nn-g8Y9kxqQKUzRTa6imN-OeA08.roa File: nn-g8Y9kxqQKUzRTa6imN-OeA08.roa (raw, json) Hash identifier: jwuMNXmrVdDCW+s03h/KvzRrrZv0xRVmb6hoLkPXRKA= Subject key identifier: 9E:7F:A0:F1:8F:64:C6:A4:0A:53:34:53:6B:A8:A6:37:E3:9E:03:4F Certificate issuer: /CN=17272ec13da42f5b361f1074c6751cc354593e7f Certificate serial: 019B797F4397AB6C1F70ED26D370FA5B6273 Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/nn-g8Y9kxqQKUzRTa6imN-OeA08.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200434 IP address blocks: 59.153.36.0/22 maxlen: 24 185.107.104.0/22 maxlen: 24 2a06:44c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:43:97:ab:6c:1f:70:ed:26:d3:70:fa:5b:62:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e7fa0f18f64c6a40a5334536ba8a637e39e034f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:a2:e5:a4:75:cf:35:48:22:1a:d2:64:fb: 80:c0:35:27:4c:8c:c7:18:e2:98:32:ba:11:e9:95: e2:32:e8:fa:01:57:d3:0d:39:4f:f1:fc:0a:03:07: 4d:9d:c7:e5:05:60:0e:8c:62:20:41:4e:5f:4e:86: c2:e5:32:8a:7a:ca:47:fd:cf:8f:bc:b2:28:26:17: f8:28:0c:a5:95:6d:e9:ee:3d:cf:35:d6:87:ef:3c: bd:55:e7:b7:f6:3d:a9:b5:19:f3:41:7a:0b:f1:b5: 2d:70:02:90:0f:c9:e3:6a:49:73:0c:33:f5:d1:76: 9e:b5:b9:14:0d:9c:dd:e8:d8:13:d8:ea:68:b7:f2: bc:3f:92:f3:f4:e0:28:ee:14:78:86:de:31:d8:e5: 99:3c:8d:48:b3:c9:09:87:ff:bf:6a:e7:84:7e:43: b5:58:ed:00:63:73:66:c2:cf:ff:43:1a:f0:a0:06: 97:94:4c:35:58:a4:3e:b0:63:f2:e8:af:9a:f4:a0: 93:83:12:7b:39:24:22:53:ab:57:45:8d:42:58:09: 16:9b:b3:c5:57:1c:99:09:0c:2b:ca:1e:df:38:7e: a2:7c:be:9b:fc:c7:ae:68:b1:12:57:5a:62:a0:cc: 4f:e9:d7:da:7a:1d:83:95:80:9a:8e:ec:15:0a:43: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7F:A0:F1:8F:64:C6:A4:0A:53:34:53:6B:A8:A6:37:E3:9E:03:4F X509v3 Authority Key Identifier: keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/nn-g8Y9kxqQKUzRTa6imN-OeA08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.36.0/22 185.107.104.0/22 IPv6: 2a06:44c0::/29 Signature Algorithm: sha256WithRSAEncryption 02:f0:b4:03:82:cd:4e:a1:de:8c:49:c7:d1:5e:06:5a:27:c3: 6d:c2:38:dd:c4:8c:e8:98:41:e2:10:9c:17:2c:8f:38:53:2c: f8:98:e1:34:97:15:9c:94:54:c9:09:33:23:f9:17:4a:ce:27: a3:23:f6:7a:d5:7b:3c:b0:0f:3f:88:32:b1:82:c7:94:b8:86: df:cb:db:72:ad:38:8f:21:af:32:3d:c0:67:db:b9:28:89:e3: ae:59:58:21:f5:94:59:7e:96:85:6f:44:40:fe:d3:1d:d5:85: c0:23:d5:a4:c6:ef:67:f4:af:a0:38:33:91:d1:6e:ed:dd:4b: 19:f9:c5:01:3f:24:c0:2a:00:0f:da:cc:c5:c2:90:ae:f4:57: 02:b0:fd:20:2d:8c:3f:e8:f1:77:b5:91:43:92:49:07:c3:0c: 27:01:75:0b:48:ac:b7:c2:b4:0d:62:9d:0a:43:92:92:3f:96: cb:a3:ea:c8:c1:c0:3c:76:1b:7a:e6:63:0e:b2:2b:2f:96:67: 0f:54:38:79:e5:04:16:7f:c0:9b:77:a2:d8:91:40:50:76:94: 63:b8:76:b6:4b:f6:d8:0a:30:c2:07:d3:76:8d:79:d2:e0:d6: 9c:bb:4e:92:c7:0a:86:af:90:d4:80:3c:f5:17:bf:dc:56:82: 64:20:4c:7f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5f0OXq2wfcO0m03D6W2JzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjcyZWMxM2RhNDJmNWIzNjFmMTA3NGM2NzUxY2MzNTQ1 OTNlN2YwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTdmYTBmMThmNjRjNmE0MGE1MzM0NTM2YmE4YTYzN2UzOWUwMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjii5aR1zzVIIhrSZPuAwDUnTIzH GOKYMroR6ZXiMuj6AVfTDTlP8fwKAwdNncflBWAOjGIgQU5fTobC5TKKespH/c+P vLIoJhf4KAyllW3p7j3PNdaH7zy9Vee39j2ptRnzQXoL8bUtcAKQD8njaklzDDP1 0XaetbkUDZzd6NgT2Opot/K8P5Lz9OAo7hR4ht4x2OWZPI1Is8kJh/+/aueEfkO1 WO0AY3Nmws//QxrwoAaXlEw1WKQ+sGPy6K+a9KCTgxJ7OSQiU6tXRY1CWAkWm7PF VxyZCQwryh7fOH6ifL6b/MeuaLESV1pioMxP6dfaeh2DlYCajuwVCkMHGQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ5/oPGPZMakClM0U2uopjfjngNPMB8GA1UdIwQY MBaAFBcnLsE9pC9bNh8QdMZ1HMNUWT5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnljdXdUMmtMMXMySHhCMHhuVWN3MVJaUG44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YjVjMTYtYzExZS00NTJkLTk4YjIt ZWIxNWUzOGJiZDE1LzEvbm4tZzhZOWt4cVFLVXpSVGE2aW1OLU9lQTA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YjVjMTYtYzExZS00NTJkLTk4YjItZWIxNWUzOGJiZDE1 LzEvRnljdXdUMmtMMXMySHhCMHhuVWN3MVJaUG44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCO5kkAwQC uWtoMA0EAgACMAcDBQMqBkTAMA0GCSqGSIb3DQEBCwUAA4IBAQAC8LQDgs1Ood6M ScfRXgZaJ8NtwjjdxIzomEHiEJwXLI84Uyz4mOE0lxWclFTJCTMj+RdKziejI/Z6 1Xs8sA8/iDKxgseUuIbfy9tyrTiPIa8yPcBn27koieOuWVgh9ZRZfpaFb0RA/tMd 1YXAI9Wkxu9n9K+gODOR0W7t3UsZ+cUBPyTAKgAP2szFwpCu9FcCsP0gLYw/6PF3 tZFDkkkHwwwnAXULSKy3wrQNYp0KQ5KSP5bLo+rIwcA8dht65mMOsisvlmcPVDh5 5QQWf8Cbd6LYkUBQdpRjuHa2S/bYCjDCB9N2jXnS4Nacu06SxwqGr5DUgDz1F7/c VoJkIEx/ -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:12 2026 by rpki-client