This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa File: NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa (raw, json) Hash identifier: 08IB4CQ6qXGvHbqlm2iST8aQYIXZEjOYZuD8asm6wTA= Subject key identifier: 37:07:6F:C1:D8:14:40:36:1B:B6:9F:94:6E:FF:16:99:99:BA:34:0D Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94 Certificate serial: 019B76EB6F3213B475EFF8C37D2170618B99 Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41955 IP address blocks: 185.199.216.0/22 maxlen: 24 194.26.188.0/22 maxlen: 24 2a0a:a3c0::/32 maxlen: 32 2a0a:a3c0::/44 maxlen: 48 2a10:7080::/29 maxlen: 29 2a10:7080::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6f:32:13:b4:75:ef:f8:c3:7d:21:70:61:8b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37076fc1d81440361bb69f946eff169999ba340d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3e:3c:64:aa:13:07:c6:3a:10:bd:43:7b:a8: 9e:d6:e8:4d:a4:4f:2e:b7:55:45:6b:3f:e4:a7:6a: 53:d4:49:30:50:d9:e5:23:5d:37:f1:29:82:81:5c: 09:b2:99:14:bf:a0:a1:5f:c2:3e:8c:86:a9:f8:92: 2b:86:3b:62:dd:5b:29:69:b9:33:30:c4:e2:68:04: 70:cd:a6:24:b8:41:8c:54:bd:57:8d:2f:e3:68:af: 7b:89:32:b9:c6:bf:16:73:1a:ff:6b:4d:1a:2a:93: a6:bc:d2:18:7c:5b:d0:81:79:4e:97:36:68:68:35: fa:fb:74:41:0d:de:00:4c:41:94:c4:38:5f:14:6a: ef:5e:a8:38:5f:aa:5b:68:91:9e:82:b0:f4:1d:a3: b0:d2:06:27:d1:c7:1b:05:f3:fc:c2:74:44:b8:a0: 49:03:4d:ce:b9:87:75:aa:25:cc:da:4f:d1:08:e8: e1:78:86:cc:ca:aa:aa:57:eb:bf:f9:5f:78:3d:67: 98:8f:68:fa:43:08:f3:89:a3:44:aa:25:45:81:9a: dc:4f:bb:ba:15:cf:2e:33:9d:9a:ae:8b:bf:08:e6: ff:17:5f:87:88:39:25:7a:39:a5:13:86:19:ca:10: 1a:0c:a6:76:12:bb:68:da:42:d7:74:3f:69:89:e7: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:07:6F:C1:D8:14:40:36:1B:B6:9F:94:6E:FF:16:99:99:BA:34:0D X509v3 Authority Key Identifier: keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.216.0/22 194.26.188.0/22 IPv6: 2a0a:a3c0::/32 2a10:7080::/29 Signature Algorithm: sha256WithRSAEncryption 04:94:d2:54:2e:80:c0:08:e6:10:b8:7d:93:c1:7c:2d:ad:0e: ba:ba:a7:0b:33:62:51:d4:3f:7e:f4:05:32:4d:4f:09:ad:09: dd:a1:ec:13:02:e0:d0:ee:5c:f5:2e:a8:b1:e3:e7:1d:f4:73: 5d:93:c0:68:47:d9:6d:6d:d2:06:cc:65:be:11:23:55:07:3c: b6:a0:3a:86:be:2b:bf:fc:ab:89:5c:4a:33:d9:5e:88:27:25: 8f:f4:0e:57:27:11:39:ec:58:9b:93:df:df:db:2f:c5:a2:c0: 8a:51:64:b3:17:1c:78:48:21:b5:f8:98:cf:e5:ad:e0:fe:83: cf:0b:f9:40:08:c3:a1:eb:86:3b:3b:3b:90:99:34:1c:11:dc: 0e:51:73:a8:97:fa:49:a4:1a:a2:16:95:96:98:1b:8d:ab:10: 43:74:75:9e:15:4e:18:8b:7e:17:ba:f4:fc:78:2a:35:58:fb: 95:c0:e6:39:09:c9:5b:55:f2:47:98:4a:c4:d1:28:a3:0f:e6: 3b:9b:e4:32:09:ca:1f:ec:af:2e:b4:ae:70:c1:be:2d:8b:a9: 9b:88:6d:55:88:08:3f:38:fa:e2:ba:a7:85:3a:05:1b:45:7c: 7d:e9:8f:5c:67:6f:96:63:a4:de:91:ab:c9:1d:cf:6d:f5:79: f7:75:d3:86 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt2628yE7R17/jDfSFwYYuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy ZjRjOTQwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzA3NmZjMWQ4MTQ0MDM2MWJiNjlmOTQ2ZWZmMTY5OTk5YmEzNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D48ZKoTB8Y6EL1De6ie1uhNpE8u t1VFaz/kp2pT1EkwUNnlI1038SmCgVwJspkUv6ChX8I+jIap+JIrhjti3Vspabkz MMTiaARwzaYkuEGMVL1XjS/jaK97iTK5xr8Wcxr/a00aKpOmvNIYfFvQgXlOlzZo aDX6+3RBDd4ATEGUxDhfFGrvXqg4X6pbaJGegrD0HaOw0gYn0ccbBfP8wnREuKBJ A03OuYd1qiXM2k/RCOjheIbMyqqqV+u/+V94PWeYj2j6QwjziaNEqiVFgZrcT7u6 Fc8uM52arou/COb/F1+HiDklejmlE4YZyhAaDKZ2Erto2kLXdD9piecMIwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDcHb8HYFEA2G7aflG7/FpmZujQNMB8GA1UdIwQY MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct Mzk2MDVmOTA4MWI3LzEvTndkdndkZ1VRRFlidHAtVWJ2OFdtWm02TkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3 LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCucfYAwQC whq8MBQEAgACMA4DBQAqCqPAAwUDKhBwgDANBgkqhkiG9w0BAQsFAAOCAQEABJTS VC6AwAjmELh9k8F8La0OurqnCzNiUdQ/fvQFMk1PCa0J3aHsEwLg0O5c9S6osePn HfRzXZPAaEfZbW3SBsxlvhEjVQc8tqA6hr4rv/yriVxKM9leiCclj/QOVycROexY m5Pf39svxaLAilFksxcceEghtfiYz+Wt4P6Dzwv5QAjDoeuGOzs7kJk0HBHcDlFz qJf6SaQaohaVlpgbjasQQ3R1nhVOGIt+F7r0/HgqNVj7lcDmOQnJW1XyR5hKxNEo ow/mO5vkMgnKH+yvLrSucMG+LYupm4htVYgIPzj64rqnhToFG0V8femPXGdvlmOk 3pGryR3PbfV593XThg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:58 2026 by rpki-client