This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa File: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (raw, json) Hash identifier: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4= Subject key identifier: 9D:7C:E8:24:1E:07:93:18:DE:7B:0D:0A:70:FA:99:29:04:5D:94:8E Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6 Certificate serial: 019B7FF253CC62E4094D2D150CED6B052936 Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa Signing time: Fri 02 Jan 2026 18:22:26 +0000 ROA not before: Fri 02 Jan 2026 18:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206734 IP address blocks: 185.36.96.0/24 maxlen: 24 185.36.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:53:cc:62:e4:09:4d:2d:15:0c:ed:6b:05:29:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6 Validity Not Before: Jan 2 18:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d7ce8241e079318de7b0d0a70fa9929045d948e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:a2:85:3b:c7:27:70:41:e2:07:a1:5f:90: 0c:82:1e:d2:79:19:54:04:93:ac:f5:ff:34:09:6d: 42:c6:d4:7e:db:98:76:0e:76:4d:90:9f:5c:fe:54: 7f:ff:e8:da:b2:20:59:3a:f5:ae:37:b4:33:96:e3: a4:95:8b:46:40:52:d9:d6:86:2b:70:18:cd:c2:45: 12:f7:4c:ab:ba:a6:28:97:a1:61:1e:95:2d:59:90: 70:cc:77:76:5d:53:4a:4f:f6:d0:01:75:7f:02:8b: d7:56:63:b9:7c:63:1e:07:3c:9d:f5:64:00:32:11: 7c:5c:0d:1a:50:d3:68:c0:ad:e1:35:19:9b:fd:11: 39:24:37:27:e4:87:36:b3:c2:7a:12:d2:7a:3d:d1: 28:fd:86:41:f7:3d:2a:2f:93:30:f1:4a:92:94:39: 2b:58:fd:d4:d5:e7:ef:66:37:46:15:3d:89:d4:9e: f1:92:5a:d9:08:5f:93:8b:dc:ae:ff:cd:a0:ce:e0: 73:a8:72:7c:83:f9:90:99:7c:a7:30:1b:1d:f2:e5: 5b:4f:cb:5b:2c:6c:a8:bd:eb:6c:ef:91:20:79:40: 35:21:db:b2:6f:45:d4:b0:b2:0c:50:6f:38:2e:20: e2:64:88:9e:30:cd:5c:7e:d9:d1:80:1c:38:7d:cf: 08:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7C:E8:24:1E:07:93:18:DE:7B:0D:0A:70:FA:99:29:04:5D:94:8E X509v3 Authority Key Identifier: keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.96.0/24 185.36.98.0/24 Signature Algorithm: sha256WithRSAEncryption b0:eb:8b:86:1d:13:e1:17:1c:d8:e0:99:1a:d3:df:36:a6:37: 4d:cd:af:65:2d:fb:17:dd:99:c0:ff:56:f5:fe:6f:82:ac:94: 12:16:9b:13:88:5b:70:5c:ce:2f:45:b0:f3:67:f6:4f:74:bd: 9b:eb:2a:52:71:4d:a5:44:fe:34:a1:67:a4:8d:eb:1a:67:8e: b3:aa:c5:58:94:ed:ff:a7:3b:f3:29:d7:8c:65:0e:6d:a4:28: 5a:89:85:c9:99:53:c8:65:74:3c:4f:da:a0:ef:2e:11:85:1a: 7b:27:9b:d8:e1:a0:3b:6f:87:b2:93:cf:79:49:2f:8f:87:b5: 36:c9:a5:b6:86:84:16:01:b1:b1:34:93:a8:85:d1:e2:d3:8e: dc:2c:1a:1a:19:34:5f:73:5f:43:f7:9f:a9:1a:36:3c:6c:d7: 81:94:3a:8c:ec:ce:b2:01:cd:24:eb:a4:aa:ad:07:83:66:b6: 49:c4:f5:23:48:e0:be:00:33:93:75:ee:55:74:41:fc:68:53: 3a:9c:dc:3d:18:59:79:fb:d0:ff:86:88:a4:19:55:18:80:fc: 70:e7:8a:89:00:5f:a9:cc:d4:8f:d4:c5:95:9f:12:ef:bf:7d: 13:ae:fd:32:98:3c:72:8d:2d:3b:90:0b:b4:d4:21:3f:30:3b: 65:8c:06:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8lPMYuQJTS0VDO1rBSk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzQzMTY1MmNkY2Y1MjFjNTViYzQwMDVjMGRhZTMyY2Ew YTNlYzYwHhcNMjYwMTAyMTgyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDdjZTgyNDFlMDc5MzE4ZGU3YjBkMGE3MGZhOTkyOTA0NWQ5NDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7WihTvHJ3BB4gehX5AMgh7SeRlU BJOs9f80CW1CxtR+25h2DnZNkJ9c/lR//+jasiBZOvWuN7QzluOklYtGQFLZ1oYr cBjNwkUS90yruqYol6FhHpUtWZBwzHd2XVNKT/bQAXV/AovXVmO5fGMeBzyd9WQA MhF8XA0aUNNowK3hNRmb/RE5JDcn5Ic2s8J6EtJ6PdEo/YZB9z0qL5Mw8UqSlDkr WP3U1efvZjdGFT2J1J7xklrZCF+Ti9yu/82gzuBzqHJ8g/mQmXynMBsd8uVbT8tb LGyovets75EgeUA1Iduyb0XUsLIMUG84LiDiZIieMM1cftnRgBw4fc8I8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ186CQeB5MY3nsNCnD6mSkEXZSOMB8GA1UdIwQY MBaAFKzEMWUs3PUhxVvEAFwNrjLKCj7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgt NjcxYmVlMmJjYzA0LzEvblh6b0pCNEhreGplZXcwS2NQcVpLUVJkbEk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgtNjcxYmVlMmJjYzA0 LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSRgAwQA uSRiMA0GCSqGSIb3DQEBCwUAA4IBAQCw64uGHRPhFxzY4Jka0982pjdNza9lLfsX 3ZnA/1b1/m+CrJQSFpsTiFtwXM4vRbDzZ/ZPdL2b6ypScU2lRP40oWekjesaZ46z qsVYlO3/pzvzKdeMZQ5tpChaiYXJmVPIZXQ8T9qg7y4RhRp7J5vY4aA7b4eyk895 SS+Ph7U2yaW2hoQWAbGxNJOohdHi047cLBoaGTRfc19D95+pGjY8bNeBlDqM7M6y Ac0k66SqrQeDZrZJxPUjSOC+ADOTde5VdEH8aFM6nNw9GFl5+9D/hoikGVUYgPxw 54qJAF+pzNSP1MWVnxLvv30Trv0ymDxyjS07kAu01CE/MDtljAYB -----END CERTIFICATE-----Generated at Tue Feb 10 02:26:14 2026 by rpki-client